Am 25.11.2015 um 09:28 schrieb Torsten Harenberg:
Dear all, just wanna ask if anyone has successfully managed to get the freeipa client to work on a recent Linux Mint. While Mint should be more or less compatible to Ubuntu 14.04, and I had no problems getting it to run on Ubuntu, I failed to get it working on Mint. The installation process went smoothly and not different to those on Ubuntu. I just found libpam-sss not being installed as dependency. Kerberos seems to work okay as well, I can get a Kerberos token. But the user names are not resolved, all IPA users are unknown. I already checked /etc/nsswitch.conf and /etc/pam.d/*, but could not found a real difference which could explain that.
For me it sounds like NSS can't resolve IPA users, which is done by libnss_sss package (on Debian, but should be the same for Ubuntu/Mint). If I remember correctly libnss_sss is no hard dependency on SSSD, so maybe it didn't get installed along with SSSD.
What I found is a possibility https://sites.google.com/site/fossvi/home/howto-freeipa-client-install-linux-mint-ubuntu which seem to work, BUT this is getting the users through LDAP not sssd. That was not needed for Ubuntu. I tried to use both the provided packages as well as the ppa repositories for both sssd and freeipa-client. I raised the log level for sssd but even with a high log level I couldn't identify an error. Best regards, Torsten
-- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project
