[SSSD-users] Re: Server not found in Kerberos database and debug level 11

2018-06-01 Thread Sumit Bose
On Thu, May 03, 2018 at 10:08:34AM +0200, John Hearns wrote: > To explain, I just sent a reply from my personal Googlemail. > > I am now getting this logged: > May 03 10:05:02 client1 [sssd[ldap_child[2481]: Failed to initialize > credentials using keytab [MEMORY:/etc/krb5.keytab]: Client >

[SSSD-users] Re: Server not found in Kerberos database and debug level 11

2018-06-01 Thread John Hearns
To explain, I just sent a reply from my personal Googlemail. I am now getting this logged: May 03 10:05:02 client1 [sssd[ldap_child[2481]: Failed to initialize credentials using keytab [MEMORY:/etc/krb5.keytab]: Client 'host/client1@ADTEST.PRIVATE' not May 03 10:05:02 client1

[SSSD-users] Re: Server not found in Kerberos database and debug level 11

2018-06-01 Thread John Hearns
Jakub, thankyou for your reply. Client OS is Ubuntu Xenial. Yes, I know... pats favourite labrador goodbye. Sound of drawer opening and service revolver being loaded... I did realise that the option p_auth_disable_tls_never_use_in_production = true the problem I have is that there is a CA

[SSSD-users] Re: Server not found in Kerberos database and debug level 11

2018-05-03 Thread JOHE (John Hearns)
Jakub, thankyou for your reply. I have (almost!) got things working now. I have removed the ldap parameters in the sssd.conf I had a mixup with the AD controller hostname - it is ad.adtest.private and I think this was significant. Now I am retrieving the user information from AD. Still

[SSSD-users] Re: Server not found in Kerberos database and debug level 11

2018-05-03 Thread JOHE (John Hearns)
>> By the way, why does the debug level not go up to 11? > Because 9 is the highest? http://knowyourmeme.com/memes/these-go-to-11-spinal-tap [http://i0.kym-cdn.com/entries/icons/facebook/000/003/182/Spinal_Tap_05.jpg] These go to 11 /

[SSSD-users] Re: Server not found in Kerberos database and debug level 11

2018-05-03 Thread JOHE (John Hearns)
Jakub, thankyou for your reply. Client OS is Ubuntu Xenial. Yes, I know... pats favourite labrador goodbye. Sound of drawer opening and service revolver being loaded... I did realise that the option p_auth_disable_tls_never_use_in_production = true the problem I have is that there is a CA

[SSSD-users] Re: Server not found in Kerberos database and debug level 11

2018-05-03 Thread Jakub Hrozek
> On 2 May 2018, at 17:54, JOHE (John Hearns) wrote: > > I would appreciate some pointers. > I have a sandbox setup running on VMs. There is an AD controller using the > VM image which Microsoft has available for testing. > I have created a domain called ad.test > > On