[SSSD-users] Active Domain Controller server lists (part of SSSD-AD)?

2018-10-05 Thread Conwell, Nik
Hi all, just curious what do you all do for Active Directory domain controllers in the krb5.conf? Seems like "realm join" by default populates the krb5.conf with the hostnames of all the AD KDCs discovered for the domain. All good until we decided we are going to rename the KDCs to all new

[SSSD-users] Re: ad_access_filter and splitting group listing with backslash

2018-10-05 Thread Jakub Hrozek
On Fri, Oct 05, 2018 at 12:25:08PM +0200, Michal Židek wrote: > On 09/27/2018 10:55 PM, Tom wrote: > > FYI tested this and though it doesn’t work for ad_access_filter it does for > > the ldap_access_filter . Any reason why one works but not the other? > > Hi, > > I would like to see logs in

[SSSD-users] Re: ad_access_filter and splitting group listing with backslash

2018-10-05 Thread Michal Židek
On 09/27/2018 10:55 PM, Tom wrote: FYI tested this and though it doesn’t work for ad_access_filter it does for the ldap_access_filter . Any reason why one works but not the other? Hi, I would like to see logs in this case in order to undrestand where the issue may be. If the sssd does not