[Freeipa-users] reboot required after ipa-client-install?

[Jakub Hrozek]

On Thu, Nov 07, 2013 at 09:44:21AM +0200, Alexander Bokovoy wrote:
> On Wed, 06 Nov 2013, Dean Hunter wrote:
> 
> >After building a new VM and configuring the IPA 3.3.2 client, Gnome
> >seems to only perform a local log-in until the system is rebooted. SSH
> >works with IPA, but not Gnome. Is this correct? Is there anything less
> >disruptive than a reboot that I can do?
> Restart gdm.service?
> I'm not sure how gdm handles PAM auth.

I think the reason is actually nsswitch.conf, not PAM. Usually
applications need to be restarted in order to notice changes to
nsswitch.conf. That's also the reason why recent Fedora releases put
"sss" to nsswitch.conf by default.