[SSSD-users] Re: sssd.conf sections only work if they reflect existing AD domain, why?

[D R]

An user belonging to the Simple Users group is resolved correctly via either one of these commands:

id simpleuser@FOOBAR_NOLOGIN.GLOBAL
id [e-mail]

Similarly, an user belonging to the Administrators group can be seen via either one of these commands:

id adminuser@FOOBAR_ADMINS.GLOBAL
id [e-mail]

However, no user is able to log in.  I've tried all these commands:

ssh simpleuser@FOOBAR_NOLOGIN.GLOBAL@<server>
ssh [e-mail]@<server>
ssh adminuser@FOOBAR_ADMINS.GLOBAL@<server>
ssh [e-mail]@<server>

Here's the ssh -vvv output after that <server> requests the password:

debug3: send packet: type 50
debug2: we sent a password packet, wait for reply
Authentication failed.