[SSSD-users] Re: How to authenticate machine with Kerberos to Active Directory?

On Wed, Jul 29, 2020 at 8:24 PM Wesley Taylor wrote: > I have a program I am trying to set up which tries to authenticate > with the principal host\machine-FQDN@REALM using Kerberos. > > However, when I run kinit -k, the machine isn't found in the Kerberos > database. "kinit -k" (with no

[SSSD-users] How to authenticate machine with Kerberos to Active Directory?

Hello, I have a program I am trying to set up which tries to authenticate with the principal host\machine-FQDN@REALM using Kerberos. However, when I run kinit -k, the machine isn't found in the Kerberos database. The reason I think this question belongs here is I used realm join to configure

[SSSD-users] Re: Does sssd use initgroups?

Thank you for thorough explanation. Spike On Tue, Jul 28, 2020 at 9:08 AM Pavel Březina wrote: > On 7/27/20 11:07 AM, Lukas Slebodnik wrote: > > On (26/07/20 12:08), Spike White wrote: > >> All, > >> > >> sssd front-end, AD back-end.Does sssd use initgroups to use initial > >> group

[SSSD-users] offline auth and system upgrades

I've been using sssd + AD to do auth for a few years now. Offline authentication is enabled and works normally. In that time I've upgraded my Ubuntu laptop several times, and each time I noticed that after the update, I cannot log in unless I'm on the corp network with direct access to AD. That