<html><body><div style="color:#000; background-color:#fff; font-family:times new roman, new york, times, serif;font-size:14px"><div style="" class=""><span style="" class="">well I'll try them now, my sssd config only consists of these lines added to the sudo area </span></div><div class="" style="color: rgb(0, 0, 0); font-size: 14px; font-family: times new roman,new york,times,serif; background-color: transparent; font-style: normal;"><br style="" class=""><span style="" class=""></span></div><div class="" style="color: rgb(0, 0, 0); font-size: 14px; font-family: times new roman,new york,times,serif; background-color: transparent; font-style: normal;"><span style="" class="">sudo_provider = ldap<br style="" class="">ldap_uri = ldap://myipaserver.example.com<br style="" class="">ldap_sudo_search_base = ou=sudoers,dc=example,dc=com<br style="" class="">ldap_sasl_mech = GSSAPI<br style="" class="">ldap_sasl_authid = host/myipaserver.example.com<br
style="" class="">ldap_sasl_realm = EXAMPLE.COM<br style="" class="">krb_server = myipaserver.example.com</span></div><div class="" style="color: rgb(0, 0, 0); font-size: 14px; font-family: times new roman,new york,times,serif; background-color: transparent; font-style: normal;"><br><span style="" class=""></span></div><div class="" style="color: rgb(0, 0, 0); font-size: 14px; font-family: times new roman,new york,times,serif; background-color: transparent; font-style: normal;"><span style="" class="">plus another question why is it that when I invoke the kinit admin command for the kerberos I couldnt access the web UI and keeps asking me to configure my web browser ( firefox) though I've already configured it many times.. <br></span></div><div class="" style="color: rgb(0, 0, 0); font-size: 14px; font-family: times new roman,new york,times,serif; background-color: transparent; font-style: normal;"><br><span style="" class=""></span></div><div class=""
style="color: rgb(0, 0, 0); font-size: 14px; font-family: times new roman,new york,times,serif; background-color: transparent; font-style: normal;"><span style="" class="">TIA <br style="" class=""></span></div> <div class="qtdSeparateBR"><br><br></div><div style="display: block;" class="yahoo_quoted"> <div class="" style="font-family: times new roman, new york, times, serif; font-size: 14px;"> <div class="" style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 16px;"> <div style="" class="" dir="ltr"> <font style="" class="" face="Arial" size="2"> On Monday, November 10, 2014 8:41 PM, Jakub Hrozek <jhrozek@redhat.com> wrote:<br style="" class=""> </font> </div> <br style="" class=""><br style="" class=""> <div style="" class="">On Mon, Nov 10, 2014 at 12:56:00PM +0100, Martin Kosek wrote:<div style="" class="" id="yqtfd52129"><br style="" class="" clear="none">> On 11/10/2014 02:05 AM, Rolf
Nufable wrote:<br style="" class="" clear="none">> > Hello <br style="" class="" clear="none">> > <br style="" class="" clear="none">> > I have tons of questions on why free ipa wont't work on my network , I've been using fedora 20 as the os for the server and client free ipa .<br style="" class="" clear="none">> > <br style="" class="" clear="none">> > I deployed freeipa 4.0.3 at the server side and freeipa 4.1.0 for the client side using 2 VM's at first it was okay, got it connected and used ldap to pass sudo for the client side, but when I finally deployed it in our real network consisting of an esxi server and one work station having the same versions of free ipa for server and client, the error that I'm getting is that " the user does not exist " when I invoked the " su - ( user ) " command, so My question is how can I solve this problem?? I've been at it for 3 weeks now ..<br style="" class="" clear="none">> <br
style="" class="" clear="none">> I assume this is on Fedora 20, running from the mkosek/freeipa Copr repo. I<br style="" class="" clear="none">> assume this is a problem in SSSD client part, if the user cannot be found.<br style="" class="" clear="none">> CCing Lukas and Jakub to advise.</div><br style="" class="" clear="none"><br style="" class="" clear="none">Sorry, I skipped this thread b/c the subject didn't look like it was<br style="" class="" clear="none">SSSD-related.<br style="" class="" clear="none"><br style="" class="" clear="none">I think we need to examine SSSD logs...<div style="" class="" id="yqtfd15615"><br style="" class="" clear="none"></div><br style="" class=""><br style="" class=""></div> </div> </div> </div> </div></body></html>