[Freeipa-users] AD trust problem

[Alexander Bokovoy]

On Fri, 05 Jun 2015, Alexander Frolushkin wrote:
>Hello!
>We have 17 IPA servers and AD trusts with user accounts from AD used to ssh linux servers, with IPA's HBAC and SUDO.
>Today on 4 of IPA servers we got
>"wbinfo --online-status"
>showing AD domain "offline"
>and AD users missing some groups membership.
>Is there some way to debug this issue?
Yes:
 1. Don't use wbinfo if you are running on RHEL7/Fedora 21+, it is not
    useful at all.

 2. if you have issues with memberships, follow
    https://fedorahosted.org/sssd/wiki/Troubleshooting
    to generate meaningful logs.

Without logs it is impossible to grasp what you are experiencing.
-- 
/ Alexander Bokovoy