[SSSD-users] Re: sssd fails to start when I enable [ifp]

2018-10-09 Thread Pavel Březina
On 10/9/18 11:06 AM, Ondrej Valousek wrote: Ok I know what is going on. Sssd-dbus package is necessary accessory for the InfoPipe. So if you need InfoPipe, you need to install sssd-dbus (not installed by default). Fine, but nobody told me that once you install this package, you are also

[SSSD-users] Re: Active Domain Controller server lists (part of SSSD-AD)?

2018-10-09 Thread Conwell, Nik
Thanks Spike. I hadn't thought about the load-balanced pool for apps that are not site-aware. That's a good idea. Take care. -nik From: Spike White Reply-To: End-user discussions about the System Security Services Daemon Date: Monday, October 8, 2018 at 10:13 AM To: End-user discussions

[SSSD-users] Re: sssd fails to start when I enable [ifp]

2018-10-09 Thread Ondrej Valousek
Ok I know what is going on. Sssd-dbus package is necessary accessory for the InfoPipe. So if you need InfoPipe, you need to install sssd-dbus (not installed by default). Fine, but nobody told me that once you install this package, you are also expected to restart dbus service. I guess this needs

[SSSD-users] Re: sssd fails to start when I enable [ifp]

2018-10-09 Thread Ondrej Valousek
The same error I receive when I try to start the ifp service manually: # /usr/libexec/sssd/sssd_ifp --uid 0 --gid 0 --dbus-activated --logger=stderr ... (Tue Oct 9 09:53:40 2018) [sssd[ifp]] [parse_attr_list_ex] (0x2000): Added allowed attr sn to whitelist (Tue Oct 9 09:53:40 2018) [sssd[ifp]]

[SSSD-users] Re: realm re-join....

2018-10-09 Thread John Hearns
Spike, the machine will always have an account in the AD Realm. So no, you do not have to leave and re-join. What DOES time out is the password. sssd should renew the password periodcially (*) when it is running. As you say you have had > 30 days of downtime You can use the msktutil to reset a

[SSSD-users] Re: sssd fails to start when I enable [ifp]

2018-10-09 Thread Jakub Hrozek
Interesting..Pavel, do you have some idea? > On 9 Oct 2018, at 10:27, Ondrej Valousek wrote: > > Ok, obviously this error message does not appear when using SystemD, > therefore I try to start it as root interactively, i.e. > # /usr/sbin/sssd -i > > -Original Message- > From: Ondrej

[SSSD-users] Re: realm re-join....

2018-10-09 Thread Jakub Hrozek
> On 8 Oct 2018, at 16:16, Spike White wrote: > > All, > > I had a VM down for a great number of days. Apparently, it was not 30 days. > Because even though it initially didn't correct do AD authentication, I fixed > one misconfiguration in /etc/krb5.conf, restarted SSSD and it did. > >

[SSSD-users] Re: sssd fails to start when I enable [ifp]

2018-10-09 Thread Ondrej Valousek
Ok, obviously this error message does not appear when using SystemD, therefore I try to start it as root interactively, i.e. # /usr/sbin/sssd -i -Original Message- From: Ondrej Valousek [mailto:ondrej.valou...@s3group.com] Sent: Tuesday, October 09, 2018 10:25 AM To: End-user

[SSSD-users] Re: sssd fails to start when I enable [ifp]

2018-10-09 Thread Ondrej Valousek
Hi, As root, i.e. "systemctl start sssd" Ondrej -Original Message- From: Jakub Hrozek [mailto:jhro...@redhat.com] Sent: Tuesday, October 09, 2018 10:24 AM To: End-user discussions about the System Security Services Daemon Subject: [SSSD-users] Re: sssd fails to start when I enable

[SSSD-users] Re: sssd fails to start when I enable [ifp]

2018-10-09 Thread Jakub Hrozek
Do you run sssd as root or the unprivileged sssd user? > On 8 Oct 2018, at 15:29, Ondrej Valousek wrote: > > Hi List, > Seems like sssd fails to start when I enable infopipe (i.e. add “ifp” to the > services list). > Log says: > (Mon Oct 8 14:18:08 2018) [sssd[ifp]] [sysbus_init] (0x0020):