[Freeipa-users] krb5_server in sssd.conf after ipa-server-install

[lejeczek]

IPA install process configured in sssd.conf:


[domain/new.Domain]
cache_credentials = True
krb5_store_password_if_offline = True
ipa_domain = newDomain
id_provider = ipa
...
...
[domain/default]  # < this is ldap that existed before, kbr5 
related options are new additions
autofs_provider = ldap
cache_credentials = True
krb5_realm = new.Domain
ldap_search_base = dc=old,dc=domain
id_provider = ldap
krb5_server = a.host

[sssd]
services = nss, sudo, pam, autofs, ssh
config_file_version = 2
domains =new.Domain

so here I wonder, what's the meaning of kbr5 related options 
and why install process put it into default domain which it 
did not include later in sssd section.

thanks

On 13/03/16 11:05, Alexander Bokovoy wrote:
> On Sun, 13 Mar 2016, lejeczek wrote:
>> hi everybody
>>
>> I've newly installed IPA and install process configured 
>> krb5_server, put it in already existing domain which was 
>> ldap backend.
>> But that domain (default) is not included in [sssd] 
>> domains, install process it, and I wonder what's the 
>> impact of it and what's the meaning of krb5_server. I did 
>> not find anything in man pages.
> Can you show your config files to explain what you tried 
> to say?
> Frankly, I didn't understand a word.