[Freeipa-users] ipa-client-install generates bad sssd.conf

Harald Dunkel harald.dunkel at aixigo.de
Fri Mar 3 07:45:10 UTC 2017


Hi folks,

running freeipa client 4.3.2-5 and sssd 1.15.0-3 on Debian
Stretch ipa-client-install creates a bad sssd.conf file, e.g.

	[domain/example.com]

	cache_credentials = True
	krb5_store_password_if_offline = True
	ipa_domain = example.com
	id_provider = ipa
	auth_provider = ipa
	access_provider = ipa
	ldap_tls_cacert = /etc/ipa/ca.crt
	ipa_hostname = stretch1.vs.example.com
	chpass_provider = ipa
	ipa_server = _srv_, ipa1.example.com
	dns_discovery_domain = example.com
	[sssd]
	domains = example.com
	services = sudo
	[sudo]


Esp. the services for nss, pam and ssh are not setup. Is this
as expected?


Every helpful comment is highly appreciated.
Harri




More information about the Freeipa-users mailing list