On Wed, Aug 02, 2017 at 09:46:43AM +0200, Lukas Slebodnik wrote:
On (02/08/17 09:43), Jakub Hrozek wrote:
>On Tue, Aug 01, 2017 at 04:46:32PM -0400, Louis Garcia wrote:
>> In fedora 26 where should sssd.conf live? /etc/sssd/ or /etc/sssd/conf.d/
>> ??
>
>Ah, in fedora-26, this setup might be a bit more problematic because
>sssd by default serves files already. Can you try something like this
>please (untested):
>
IMHO it is not more problematic it's simpler :-)
Yeah, but users who upgrade (or follow my old blog post) get stuck. I
can update the blog post, not sure what else can we do about the
existing configurations except for hardcoding id_provider=proxy and
proxy_lib_name=files.
>
> >[sssd]
> >services = nss, pam
> ># this was missing in your original config
> >domains = kerberos
> >
> >[nss]
> >filter_groups = root
> >filter_users = root
> >
> >[pam]
> >offline_credentials_expiration = 2
> >offline_failed_login_attempts = 3
> >offline_failed_login_delay = 5
> >
> >[domain/kerberos]
> ># files provider instead of proxy
> >id_provider = files
> >
> >auth_provider = krb5
> >chpass_provider = krb5
> >krb5_realm = MONTCLAIRE.LOCAL
> >krb5_server = panther.montclaire.local
> >
> >cache_credentials = True
> >krb5_store_password_if_offline = True
>
> If that configuration does not help then please follow our troubleshooting wiki
>
https://docs.pagure.org/SSSD.sssd/users/troubleshooting.html#troubleshoot...
>
> LS
> _______________________________________________
> sssd-users mailing list -- sssd-users(a)lists.fedorahosted.org
> To unsubscribe send an email to sssd-users-leave(a)lists.fedorahosted.org