On Sat, 2014-05-31 at 16:53 +0200, Lukas Slebodnik wrote:
On (31/05/14 16:42), steve wrote:
(Sat May 31 16:25:29 2014) [sssd[be[hh3.site]]] [ad_gpo_access_done] (0x0040): GPO-based access control failed.
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
You can change value of option ad_gpo_access_control to disable. Default value is permissive. I would say it is a bug that we fail in permissive mode. Details are in manual page sssd-ad.
OK it's: ad_gpo_access_control = disabled
One other thing, it doesn't install the autofs libs: automount -m lookup_init:97: lookup(sss): failed to open /usr/lib/sssd/modules/libsss_autofs.so: /usr/lib/sssd/modules/libsss_autofs.so: cannot open shared object file: No such file or directory
It stays in /usr/local/lib/sssd/modules
Maybe it's us? autoreconf -i -f && ./configure --enable-nsslibdir=/lib --enable-pammoddir=/lib/security && make
Should it be: --enable-nsslibdir=/usr/lib
Cheers, Steve