On 08/10/2017 10:25 AM, Ondrej Valousek wrote:

Hi List,

Question, we have joined machine into AD domain B. This domain has one way trust to domain A. No direct connection from domain B network to DCs in domain A is possible.

Can we use SSSD to authenticate members in domain A.

In windows, this works – but can’t get it working in Linux via SSSD (Fedora 25, used realmd for AD join).

This should work with SSSD as well, can you please provide sssd domain and sssd_pam logs with debug_level=9?

Ideally stop SSSD before reproducing the issue, delete all logs, start SSSD reproduce the issue and send the new logs. This way the logs are more compact.

Thanks, Michal

Thanks,

Ondrej

---

The information contained in this e-mail and in any attachments is confidential and is designated solely for the attention of the intended recipient(s). If you are not an intended recipient, you must not use, disclose, copy, distribute or retain this e-mail or any part thereof. If you have received this e-mail in error, please notify the sender by return e-mail and delete all copies of this e-mail from your computer system(s). Please direct any additional queries to: communications@s3group.com. Thank You. Silicon and Software Systems Limited (S3 Group). Registered in Ireland no. 378073. Registered Office: South County Business Park, Leopardstown, Dublin 18.

---

sssd-users mailing list -- sssd-users@lists.fedorahosted.org To unsubscribe send an email to sssd-users-leave@lists.fedorahosted.org