On 04/17/2012 01:59 AM, Jakub Hrozek wrote: > On Mon, Apr 16, 2012 at 10:35:57PM -0400, Braden McDaniel wrote: >> Is it the case that local authentication, if available, is simply >> preferred to Kerberos? There exists a local user account for "braden" >> on the Fedora 16 box, but not the Fedora 17 one. > Yes, that's almost certainly the case. Can you try logging in as > "braden@default" ? That should reach the SSSD and you should get a > ticket. > _______________________________________________ > sssd-devel mailing list > sssd-devel@lists.fedorahosted.org > https://fedorahosted.org/mailman/listinfo/sssd-devel
If the files in the pam stack precede sss (which is the correct configuration BTW) and you have dup accounts the local account is used. -- Thank you, Dmitri Pal Sr. Engineering Manager IPA project, Red Hat Inc. ------------------------------- Looking to carve out IT costs? www.redhat.com/carveoutcosts/ _______________________________________________ sssd-devel mailing list sssd-devel@lists.fedorahosted.org https://fedorahosted.org/mailman/listinfo/sssd-devel
