<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
I correct that line.<br>
But still same:<br>
tevfik@Darktower ~ $ ssh <a class="moz-txt-link-abbreviated" href="mailto:user1@10.1.1.174">user1@10.1.1.174</a><br>
<a class="moz-txt-link-abbreviated" href="mailto:user1@10.1.1.174">user1@10.1.1.174</a>'s password: <br>
Permission denied, please try again.<br>
<a class="moz-txt-link-abbreviated" href="mailto:user1@10.1.1.174">user1@10.1.1.174</a>'s password: <br>
Welcome to Ubuntu 14.04.1 LTS (GNU/Linux 3.13.0-24-generic x86_64)<br>
<br>
* Documentation: <a class="moz-txt-link-freetext" href="https://help.ubuntu.com/">https://help.ubuntu.com/</a><br>
<br>
Last login: Mon Sep 1 13:47:08 2014 from 10.65.8.100<br>
user1@clnt:~$ su - user1 apt-get install<br>
Password: <br>
/usr/bin/apt-get: /usr/bin/apt-get: cannot execute binary file<br>
<br>
Does anyone have an article about ubuntu+ipa entegration?<br>
<br>
<div class="moz-cite-prefix">On 01-09-2014 14:18, Alexander Bokovoy
wrote:<br>
</div>
<blockquote cite="mid:20140901111858.GE3593@redhat.com" type="cite">On
Mon, 01 Sep 2014, Tevfik Ceydeliler wrote:
<br>
<blockquote type="cite">
<br>
I moved those lines. But still same.
<br>
</blockquote>
As Jakub pointed out, following option also is wrong:
<br>
<br>
ldap=sasl_authid = host/cnlt2.ipa.grp
<br>
<br>
it should be
<br>
<br>
ldap_sasl_authid = host/cnlt2.ipa.grp
<br>
<br>
note _ instead of = between ldap and sasl.
<br>
<br>
<blockquote type="cite">On 01-09-2014 12:20, Alexander Bokovoy
wrote:
<br>
<blockquote type="cite">On Mon, 01 Sep 2014, Tevfik Ceydeliler
wrote:
<br>
<blockquote type="cite">
<br>
libsss-sudo already installed.
<br>
Here is my sssd.conf:
<br>
[domain/ipa.grp]
<br>
krb5_realm = IPA.GRP
<br>
cache_credentials = True
<br>
krb5_store_password_if_offline = True
<br>
ipa_domain = ipa.grp
<br>
id_provider = ipa
<br>
auth_provider = ipa
<br>
access_provider = ipa
<br>
ipa_hostname = clnt.ipa.grp
<br>
chpass_provider = ipa
<br>
ipa_dyndns_update = True
<br>
ipa_server = _srv_, srv.ipa.grp
<br>
ldap_tls_cacert = /etc/ipa/ca.crt
<br>
[sssd]
<br>
services = nss, pam, ssh, sudo
<br>
config_file_version = 2
<br>
domains = ipa.grp
<br>
</blockquote>
<br>
The options below have to be in [domain/...] section:
<br>
<blockquote type="cite">ldap_sudo_search_base =
ou=sudoers,ou=ipa,dc=grp
<br>
ldap_sasl_mech = GSSAPI
<br>
ldap=sasl_authid = host/cnlt2.ipa.grp
<br>
ldap_sasl_realm = IPA.GRP
<br>
ldap_netgroup_search_base = ou=SUDOers,dc=ipa,dc=grp
<br>
sudo_provider = ldap
<br>
ldap_uri = <a class="moz-txt-link-freetext" href="ldap://srv.ipa.grp">ldap://srv.ipa.grp</a>
<br>
krb5_server = srv.ipa.grp
<br>
</blockquote>
<br>
</blockquote>
<br>
-- <br>
<br>
<br>
<br>
<br>
<img src=<a class="moz-txt-link-rfc2396E" href="http://www.yasar.com.tr/banner/yhbanner.jpg">"http://www.yasar.com.tr/banner/yhbanner.jpg"</a>>
</img>
<br>
<br><br>
<br>
Bu elektronik postada bulunan tum fikir ve gorusler ve ekindeki
dosyalar sadece adres sahip/sahiplerine ait olup, Yasar
Toplulugu Sirketleri bu mesajin icerigi ile ilgili olarak hic
bir hukuksal sorumlulugu kabul etmez. Eger gonderilmesi
dusunulen kisi veya kurulus degilseniz, lutfen gonderen kisiyi
derhal haberdar ediniz ve mesaji sisteminizden siliniz.The
information contained in this e-mail and any files transmitted
with it are intended solely for the use of the individual or
entity to whom they are addressed and Yasar Group Companies do
not accept legal responsibility for the contents. If you are not
the intended recipient, please immediately notify the sender and
delete it from your system.
<br>
</blockquote>
<br>
</blockquote>
<br>
<div class="moz-signature">-- <br>
<img src="cid:part1.02080005.01070104@astron.yasar.com.tr"
border="0"></div>
</body>
</html>
<table><tr><td bgcolor=#ffffff><font color=#000000><br><br>
<img src="http://www.yasar.com.tr/banner/yhbanner.jpg"> </img><br>
<br><br><br>
Bu elektronik postada bulunan tum fikir ve gorusler ve ekindeki dosyalar sadece adres sahip/sahiplerine ait olup, Yasar Toplulugu Sirketleri bu mesajin icerigi ile ilgili olarak hic bir hukuksal sorumlulugu kabul etmez. Eger gonderilmesi dusunulen kisi veya kurulus degilseniz, lutfen gonderen kisiyi derhal haberdar ediniz ve mesaji sisteminizden siliniz.The information contained in this e-mail and any files transmitted with it are intended solely for the use of the individual or entity to whom they are addressed and Yasar Group Companies do not accept legal responsibility for the contents. If you are not the intended recipient, please immediately notify the sender and delete it from your system.<br>
</font></td></tr></table>