[SSSD-users] Re: SSSD user mailing list: Unable to login to my kerberos realm

2017-08-18 Thread Louis Garcia
On Fri, Aug 18, 2017 at 5:03 PM, Lukas Slebodnik wrote: > On (18/08/17 15:37), Louis Garcia wrote: > >On Fri, Aug 18, 2017 at 12:54 PM, Louis Garcia > wrote: > > > >> On Fri, Aug 18, 2017 at 12:24 PM, Louis Garcia > >> wrote: > >> > >>> On Fri, Aug 18, 2017 at 11:58 AM, Louis Garcia > >>> wrot

[SSSD-users] Re: SSSD user mailing list: Unable to login to my kerberos realm

2017-08-18 Thread Lukas Slebodnik
On (18/08/17 15:37), Louis Garcia wrote: >On Fri, Aug 18, 2017 at 12:54 PM, Louis Garcia wrote: > >> On Fri, Aug 18, 2017 at 12:24 PM, Louis Garcia >> wrote: >> >>> On Fri, Aug 18, 2017 at 11:58 AM, Louis Garcia >>> wrote: >>> On Fri, Aug 18, 2017 at 4:08 AM, Jakub Hrozek wrote:

[SSSD-users] Re: SSSD user mailing list: Unable to login to my kerberos realm

2017-08-18 Thread Louis Garcia
On Fri, Aug 18, 2017 at 12:54 PM, Louis Garcia wrote: > On Fri, Aug 18, 2017 at 12:24 PM, Louis Garcia > wrote: > >> On Fri, Aug 18, 2017 at 11:58 AM, Louis Garcia >> wrote: >> >>> On Fri, Aug 18, 2017 at 4:08 AM, Jakub Hrozek >>> wrote: >>> On Fri, Aug 18, 2017 at 08:42:34AM +0200, Lukas

[SSSD-users] Re: Need help with debugging curious SSSD/LDAP problem that only affects certain users.

2017-08-18 Thread Mark London
Hi - The old server is gone, so I can't test it. Yes, the DN contains a space and comma for everybody, i.e. last name, first name. I might consider building SSSD from the source, to have it print out the password. Strangely, the problem has at least temporarily abated. That could be simp

[SSSD-users] Re: SSSD user mailing list: Unable to login to my kerberos realm

2017-08-18 Thread Louis Garcia
On Fri, Aug 18, 2017 at 12:24 PM, Louis Garcia wrote: > On Fri, Aug 18, 2017 at 11:58 AM, Louis Garcia > wrote: > >> On Fri, Aug 18, 2017 at 4:08 AM, Jakub Hrozek wrote: >> >>> On Fri, Aug 18, 2017 at 08:42:34AM +0200, Lukas Slebodnik wrote: >>> > On (17/08/17 12:38), Louis Garcia wrote: >>> >

[SSSD-users] Re: SSSD user mailing list: Unable to login to my kerberos realm

2017-08-18 Thread Louis Garcia
On Fri, Aug 18, 2017 at 11:58 AM, Louis Garcia wrote: > On Fri, Aug 18, 2017 at 4:08 AM, Jakub Hrozek wrote: > >> On Fri, Aug 18, 2017 at 08:42:34AM +0200, Lukas Slebodnik wrote: >> > On (17/08/17 12:38), Louis Garcia wrote: >> > >Sorry to mail you directly but I think the sssd user mailing list

[SSSD-users] Re: Need help with debugging curious SSSD/LDAP problem that only affects certain users.

2017-08-18 Thread Jakub Hrozek
Hmm, but I'm really not sure how to debug this. You said you only see this with a new server. When you look at the logs from the working and the non-working server, are there any differences? For example, I see that the user's DN contains a space and a comma. Does the issue only happen with these

[SSSD-users] Re: Need help with debugging curious SSSD/LDAP problem that only affects certain users.

2017-08-18 Thread Mark London
No, sorry. Can't be incorrect passwords. The people aren't even typing in their passwords. These are connections being made by email clients constantly running. Different platforms and email clients. 🙁 Sent from my iPhone > On Aug 18, 2017, at 4:05 AM, Jakub Hrozek wrote: > >> On Thu, Aug

[SSSD-users] Re: SSSD user mailing list: Unable to login to my kerberos realm

2017-08-18 Thread Jakub Hrozek
On Fri, Aug 18, 2017 at 08:42:34AM +0200, Lukas Slebodnik wrote: > On (17/08/17 12:38), Louis Garcia wrote: > >Sorry to mail you directly but I think the sssd user mailing list is not > >accepting my emails. I replied twice to this thread yesterday and both > >bounced. > > > > I have no idea why

[SSSD-users] Re: Unable to login to my kerberos realm

2017-08-18 Thread Louis Garcia
On Wed, Aug 16, 2017 at 9:11 AM, Lukas Slebodnik wrote: > On (15/08/17 22:16), Louis Garcia wrote: > >On Wed, Aug 2, 2017 at 2:43 PM, Louis Garcia wrote: > > > >> On Wed, Aug 2, 2017 at 11:42 AM, Jakub Hrozek > wrote: > >> > >>> On Wed, Aug 02, 2017 at 11:07:08AM -0400, Louis Garcia wrote: > >>

[SSSD-users] Re: Need help with debugging curious SSSD/LDAP problem that only affects certain users.

2017-08-18 Thread Jakub Hrozek
On Thu, Aug 17, 2017 at 10:04:08PM -0400, Mark London wrote: > Hi all - Sorry to bother you with this problem that I've been working all > day to fix.I've been using SSSD on Redhat for many years, using LDAP to > authenticate a Windows domain. With a new server with Redhat 7, I'm seeing > int

[SSSD-users] Re: How often does ldap cache clear?

2017-08-18 Thread Jakub Hrozek
On Thu, Aug 17, 2017 at 03:36:20PM +1000, Lachlan Musicman wrote: > We use FreeIPA/SSSD to authenticate our RStudio Server, which we control > via HBAC membership of an AD group. > > Our users are having their sessions ended frequently - once a day or more - > with the logged message > > 17 Aug 2