[Freeipa-users] Re: Kerberos logs / TGS

2023-09-18 Thread Ole Froslie via FreeIPA-users
Hi and thank you for good clarification of my misunderstanding. I will rely on logging on the clients to see the complete picture. Regards, Ole Frøslie Com4 ___ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an emai

[Freeipa-users] Re: Kerberos logs / TGS

2023-09-18 Thread Alexander Bokovoy via FreeIPA-users
On Пан, 18 вер 2023, Ole Froslie via FreeIPA-users wrote: Hi, I am working on getting the logging for FreeIPA set-up properly. I have a test server (testy) running. This server/host is under control of FreeIPA. I have a user group defined for test users, and a host group for test servers. There i

[Freeipa-users] Re: Kerberos logs / TGS

2023-09-18 Thread Sam Morris via FreeIPA-users
On 18/09/2023 14:19, Ole Froslie via FreeIPA-users wrote: Scenario 2: User : test2 is not a member of testusergroup anymore and should not be granted access to the test server. This also works as expected, when logging in with correct password, test2 is denied service with message "Connection c