Could you provide updated sssd_<domain> and krb5_child logs from the
reproduced login failure after making that change?
It would be great if you can remove any existing logs first.
Kind regards,
Justin Stephenson
On 01/27/2017 03:30 PM, sonia.gilbert(a)hawaiianair.com wrote:
> Thank you Justin for responding. I checked the krb5.conf and it was not configured
for 'dns_lookup_kdc = true'. I added it in. I restarted sssd service but still
no change. Also along the way during this troubleshooting I have no broken the
authentication to the parent domain and am now getting the following error in the
krb5_child.log.
>
> Received error from KDC: -1765328360/Preauthentication failed
> _______________________________________________
> sssd-users mailing list -- sssd-users(a)lists.fedorahosted.org
> To unsubscribe send an email to sssd-users-leave(a)lists.fedorahosted.org
>