I'm not sure what to make of it. I've not seen the change log for all of the minor releases and am going on what Canonical Support provided. I just know that SSSD was upgraded as logged above this AM and that's when sssd-ad stopped working until the permissions were changed.
Worth noting that we use adcli to join to the domain which passes off keytab creation to the MIT Kerberos keytab management library, which will seemingly always create the keytab as root:root 0600. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2155002 Title: Update to SSSD 2.12.0-1ubuntu5 breaks AD join due to SSSD inability to read keytab To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/sssd/+bug/2155002/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
