[SSSD-users] Re: Cross domain trust and SSO/NFS ?

2016-07-27 Thread Joakim Tjernlund
On Wed, 2016-07-27 at 16:16 +0200, Petr Spacek wrote: > On 27.7.2016 15:55, Joakim Tjernlund wrote: > > > > We are migrating to a new domain AD domain and I got cross domain trust > > problems(there is a bidirectional > > cross trust between the two ADs, how can I test this works from Linux?). >

[SSSD-users] Re: Cross domain trust and SSO/NFS ?

2016-07-27 Thread Petr Spacek
On 27.7.2016 15:55, Joakim Tjernlund wrote: > We are migrating to a new domain AD domain and I got cross domain trust > problems(there is a bidirectional > cross trust between the two ADs, how can I test this works from Linux?). All > users in domain A > has been copied to domain B(using the same

[SSSD-users] Re: dyndns updates in sssd-13.4

2016-07-27 Thread Petr Spacek
On 27.7.2016 14:54, Longina Przybyszewska wrote: > Hi , > After upgrade to sssd-13.4, dyndns updates don't work in AD cross realm > environment > > Our DNS server is : > -not on the identity server (exactly, not on the default DC for the domain) > -DNS server and reverse DNS server are different

[SSSD-users] Cross domain trust and SSO/NFS ?

2016-07-27 Thread Joakim Tjernlund
We are migrating to a new domain AD domain and I got cross domain trust problems(there is a bidirectional cross trust between the two ADs, how can I test this works from Linux?). All users in domain A has been copied to domain B(using the same UID/GID as in domain A). I have managed to configure

[SSSD-users] Re: keyring: disk quota exceeded

2016-07-27 Thread Stephen Gallagher
On 07/27/2016 09:25 AM, Ondrej Valousek wrote: > Affected user was root actually :-/ > If that's the case, the problem can't be an SSSD problem, because we don't handle the root account... signature.asc Description: OpenPGP digital signature ___ sss

[SSSD-users] nfsidmap with 'sss'method

2016-07-27 Thread Longina Przybyszewska
Hi, I upgraded to sssd-13.4 (kernel 4.4.0-31-generic #50-Ubuntu) -. After upgrade I have problems with nfs4+Kerberos idmaping, using krb localauth snippet and choosing 'sss' method in /etc/idmap.conf; I get (igen!) famous nobody mapping for cross realm users; Mapping of groups is correct, as

[SSSD-users] Re: keyring: disk quota exceeded

2016-07-27 Thread Ondrej Valousek
Ok, next time I will file support case to SEG - see if it helps... O. -Original Message- From: Stephen Gallagher [mailto:sgall...@redhat.com] Sent: Wednesday, July 27, 2016 3:42 PM To: sssd-users@lists.fedorahosted.org Subject: [SSSD-users] Re: keyring: disk quota exceeded On 07/27/2016

[SSSD-users] Re: keyring: disk quota exceeded

2016-07-27 Thread Ondrej Valousek
Affected user was root actually :-/ -Original Message- From: Stephen Gallagher [mailto:sgall...@redhat.com] Sent: Wednesday, July 27, 2016 3:22 PM To: sssd-users@lists.fedorahosted.org Subject: [SSSD-users] Re: keyring: disk quota exceeded On 07/27/2016 08:42 AM, Ondrej Valousek wrote: >

[SSSD-users] Re: keyring: disk quota exceeded

2016-07-27 Thread Stephen Gallagher
On 07/27/2016 08:42 AM, Ondrej Valousek wrote: > It has Gnome installed, but none is using it. If GNOME is not in use, then this can't be the same problem, sorry. This only happens if an active user is signed in to GNOME. And it only affects the current user. > I do not know what triggers it unf

[SSSD-users] Re: keyring: disk quota exceeded

2016-07-27 Thread Stephen Gallagher
On 07/27/2016 08:38 AM, John Hodrien wrote: > On Wed, 27 Jul 2016, Stephen Gallagher wrote: > >> Is this on a GNOME workstation? We recently discovered a bug in GNOME Online >> Accounts that can (in rare circumstances) cause the keyring to fill up with >> garbage which ends up preventing the legit

[SSSD-users] dyndns updates in sssd-13.4

2016-07-27 Thread Longina Przybyszewska
Hi , After upgrade to sssd-13.4, dyndns updates don't work in AD cross realm environment Our DNS server is : -not on the identity server (exactly, not on the default DC for the domain) -DNS server and reverse DNS server are different machines It worked in previous release (also, DNS updates only

[SSSD-users] Re: keyring: disk quota exceeded

2016-07-27 Thread Ondrej Valousek
It has Gnome installed, but none is using it. I do not know what triggers it unfortunately. I just upgraded the kernel and rebooted the machine hoping it won't come back. I doubt Online Accounts might have caused that. How do I found out which keyring is causing troubles? Tried 'keyctl show' but

[SSSD-users] Re: keyring: disk quota exceeded

2016-07-27 Thread John Hodrien
On Wed, 27 Jul 2016, Stephen Gallagher wrote: Is this on a GNOME workstation? We recently discovered a bug in GNOME Online Accounts that can (in rare circumstances) cause the keyring to fill up with garbage which ends up preventing the legitimate values from being updated). Have you got a BZ f

[SSSD-users] Re: keyring: disk quota exceeded

2016-07-27 Thread Stephen Gallagher
On 07/27/2016 06:12 AM, Ondrej Valousek wrote: > Hi List, > > > > Or RH-7 box I am getting message like this: > > > > [root@spartacus bin]# kinit > > kinit: Disk quota exceeded while getting default ccache > > > > Google gave this: https://bugzilla.redhat.com/show_bug.cgi?id=1017683 >

[SSSD-users] Re: keyring: disk quota exceeded

2016-07-27 Thread John Hodrien
On Wed, 27 Jul 2016, Ondrej Valousek wrote: Hi List, Or RH-7 box I am getting message like this: [root@spartacus bin]# kinit kinit: Disk quota exceeded while getting default ccache Google gave this: https://bugzilla.redhat.com/show_bug.cgi?id=1017683 Which suggests big keys needs to be enabl

[SSSD-users] keyring: disk quota exceeded

2016-07-27 Thread Ondrej Valousek
Hi List, Or RH-7 box I am getting message like this: [root@spartacus bin]# kinit kinit: Disk quota exceeded while getting default ccache Google gave this: https://bugzilla.redhat.com/show_bug.cgi?id=1017683 Which suggests big keys needs to be enabled for kernel and suggests kernel 3.11 However,