On Sat, 2014-05-31 at 16:53 +0200, Lukas Slebodnik wrote:
On (31/05/14 16:42), steve wrote:
>(Sat May 31 16:25:29 2014) [sssd[be[hh3.site]]]
[ad_gpo_access_done]
>(0x0040): GPO-based access control failed.
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
You can change value of option ad_gpo_access_control to disable.
Default value is permissive. I would say it is a bug that we fail in permissive
mode. Details are in manual page sssd-ad.
OK
it's:
ad_gpo_access_control = disabled
One other thing, it doesn't install the autofs libs:
automount -m
lookup_init:97: lookup(sss): failed to
open /usr/lib/sssd/modules/libsss_autofs.so: /usr/lib/sssd/modules/libsss_autofs.so:
cannot open shared object file: No such file or directory
It stays in /usr/local/lib/sssd/modules
Maybe it's us?
autoreconf -i -f && ./configure --enable-nsslibdir=/lib
--enable-pammoddir=/lib/security && make
Should it be:
--enable-nsslibdir=/usr/lib
Cheers,
Steve