<div dir="ltr"><div class="gmail_extra"> <div class="gmail_quote">On Mon, Jul 14, 2014 at 5:57 AM, Jakub Hrozek <<a href="mailto:jhrozek@redhat.com" target="_blank">jhrozek@redhat.com</a>> wrote: <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div>On Fri, Jul 11, 2014 at 05:22:59PM -0300, tizo wrote: > On Fri, Jul 11, 2014 at 4:54 PM, Dmitri Pal <<a href="mailto:dpal@redhat.com" target="_blank">dpal@redhat.com</a>> wrote: > > > On 07/11/2014 03:27 PM, tizo wrote: > > > > > > On Fri, Jul 4, 2014 at 5:09 PM, tizo <<a href="mailto:tizone@gmail.com" target="_blank">tizone@gmail.com</a>> wrote: > > > >> I have seen in > >> <a href="http://www.freeipa.org/page/Howto/IPAv3_AD_trust_setup#Trusts_and_Windows_Server_2003_R2" target="_blank">http://www.freeipa.org/page/Howto/IPAv3_AD_trust_setup#Trusts_and_Windows_Server_2003_R2</a> > >> that trusts can be configured with Windows Server 2003 R2. > >> > >> We have a Windows Server 2003 (not R2). Before starting to make some > >> tests, does anyone know if trusts can be configured with this version of > >> Windows Server 2003?. > >> > >> Thanks very much. > >> > >> > > As I have not received any answer, I decided to give it a try. I follow > > the document step by step with our Windows 2003, and everything looks good, > > except when I try to login to the FreeIPA server with an AD user (ssh or > > tty). > > > > Does anyone know how could I debug this problem?. > > > > > > Sorry that you did not get a response. It is a hot time, a lot of people > > on vacation and we also got 4.0 just out of the door. > > > > Set debug_level to 10 in the sssd.conf. It will create a lot of output and > > this might give you a hint of what is going on. From there you will see > > whether the user is processed by SSSD or SSH is not configured and user do > > not hit SSSD at all (unlikely), and if user is processed what the problem > > is. > > > > > Thanks Dmitri. I set the debug_level to 10, and the file > sssd_my.domain.com.log is telling something about the AD user trying to > connect with SSH. I am sending it to you privately, because it contains > some sensitive information. </div></div>Hi, I realize you were following our own documentation, which originated from this thread: <a href="https://www.redhat.com/archives/freeipa-users/2013-June/msg00119.html" target="_blank">https://www.redhat.com/archives/freeipa-users/2013-June/msg00119.html</a> Maybe it would be helpful to read it, too, at least to see how some other users were setting up the trust and what their problems were. -- Manage your subscription for the Freeipa-users mailing list: <a href="https://www.redhat.com/mailman/listinfo/freeipa-users" target="_blank">https://www.redhat.com/mailman/listinfo/freeipa-users</a> Go To <a href="http://freeipa.org" target="_blank">http://freeipa.org</a> for more info on the project </blockquote></div> </div><div class="gmail_extra">Dmitri and Jakub, thanks very much for your help. Jakub, I took a look in the thread, but I couldn't find anything that could help us with our problem. </div><div class="gmail_extra">I am attaching the logs from sssd with the sensitive information removed. Any help is really appreciated; I don't really know where should I continue searching for the problem. </div> </div>