[Freeipa-users] No result when trying to integrate a FreeBSD client with the FreeIPA server
Lukas Slebodnik
lslebodn at redhat.com
Sat Oct 18 21:35:45 UTC 2014
On (17/10/14 16:46), Orkhan Gasimov wrote:
>1. I use FreeBSD 10.0 64-bit.
>(For some files bits are also important - for example, on a 32-bit machine
>the same configuration of
>/usr/local/etc/sssd/sssd.conf file introduces problems because of the line
>"enumerate = True" in the [domain] section; only after that line is commented
Firstly, We do not recommend to have enabled enumeration.
Secondly, You did not have "enumerate = True" in your domain section.
You have "enumerate = True #to enumerate users and groups"
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
I wrote you in another email that comments should be on different line
>out, sssd starts.)
>
>2. The files you requested are at
>https://cloud.mail.ru/public/afa7e1fad817/pam.d
>
>17-Oct-14 16:30, Lukas Slebodnik пишет:
>>On (17/10/14 15:44), Orkhan Gasimov wrote:
>>>Unfortunately, putting that line in /etc/pam.d/system prevents me from being
I checked your apm configuration and you had wrong line in /etc/pam.d/system
Currently, it is is commented out.
"#acconut required /usr/local/lib/pam_sss.so"
and the correct one is in /etc/pam.d/login
"account required /usr/local/lib/pam_sss.so ignore_unknown_user ignore_authinfo_unavail"
You were wrong in comment https://forums.freebsd.org/threads/freebsd-freeipa-via-sssd.46526/
Plese move line from login -> system
>>>able to locally login to the BSD client.
>>>At the same time, the same line in /etc/pam.d/sshd or /etc/pam.d/login
>>>doesn't give unexpected behaviours.
>>>Bug, bug, bug...
no, no, no,
The problem was between chair and keybord.
Sorry, I could not resist :-)
>>>
>>It works for me with FreeBSD 9.3. It is possible that your pam stack is
>>misconfigured.
>>
BTW
After fixing problems with my freeipa 4.0.3, I was able to connect with ssh
to FreeBSD 10 as freeipa_user and local_user.
If I have time in next weeks I will try with clean FreeBSD 10 and will write
some notes.
LS
More information about the Freeipa-users
mailing list