FreeIPA-users September 2019

freeipa-users@lists.fedorahosted.org

41 participants
62 discussions

NFS Errors
by Tobi Berninger 02 Sep '19

02 Sep '19

Hello, sadly we had a power shortage (a transformer exploded in the building next to us....) and all server shutted down immediately - i started them again. now we have some strange errors: First only two clients werent able to access their nfs home - two days latter all clients cant access them... I first check the date but it is synced all over the system and not the problem. then i discovered an error in the logs that the callback ip wasnt right, fixed that too... still cant get access to the nfs server - only the one share that is accessiable for all users is mounted. Keytabes was renewed on NFSserver as on the clients. the krb5 logs dont show any real clue... I use virtualized Centos Based Server (Up to Date): IpaServer NFSServer BackupNFSServer Any ideas? Thanks

2 1

Can login with non-existing user
by Ronald Wimmer 02 Sep '19

02 Sep '19

I have managed to login to an IPA client with a non-existing user. My AD user is z123456(a)addomain.mydomain.at and I have created a similar user called i123456(a)ipadomain.mydomain.at. What happened now is that I could log in with the i-User and what I get to see after logging in is this: [i123456@addomain.mydomain.at@as12314 ~]$ id uid=1246600007(i123456(a)addomain.mydomain.at) gid=1246600007(i123456(a)addomain.mydomain.at) groups=1246600007(i123456@addomain.mydomain.at),1246600016(my-ad-group@ipadomain.mydomain.at) context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 [i123456@addomain.mydomain.at@as12314 ~]$ whoami i123456(a)addomain.mydomain.at The user i123456(a)addomain.mydomain.at does NOT exist. addomain is set as default domain in the client's sssd.conf. What is wrong here? Are things just displayed wrong or could it be more? Which files do you need in order to analyze this issue? Cheers, Ronald

2 9

2024

2023

2022

2021

2020

2019

2018

2017

FreeIPA-users September 2019