Ok here is the list of issues I discovered while configuring sssd
against Win2008 AD & rfc2307bis schema:
1. If I specify both dns_discovery_domain and ldap_uri parameters
then what happens is that dns srv discovery returns a list of ldap
servers. Now if the first one found is not working, others are not
tried. I have to comment out the 'ldap_uri' parameter to make it
2. SSSD is unable to detect default Kerberos realm as per
/etc/krb5.conf - I have to configure it manually
3. Why do we actually need to specify Kerberos realm and KDC? Isn't
/etc/krb5.conf supposed to record these kind of parameters?
4. authconfig is unable to configure sssd to use IPA backend
The information contained in this e-mail and in any attachments is confidential and is designated solely for the attention of the intended recipient(s). If you are not an intended recipient, you must not use, disclose, copy, distribute or retain this e-mail or any part thereof. If you have received this e-mail in error, please notify the sender by return e-mail and delete all copies of this e-mail from your computer system(s).
Please direct any additional queries to: email@example.com.
Silicon and Software Systems Limited (S3 Group). Registered in Ireland no. 378073.
Registered Office: South County Business Park, Leopardstown, Dublin 18