<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal">I have three IPA servers set up (master and two replicas) and they’re all behaving normally. AD users can log in, AD group restrictions are honored, etc. Now I’m trying to set up clients, and running into problems. I have three clients
set up, and all three behave differently.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">On one of the clients, users can log in like they can on the servers. On the other two, users can’t log in, but these two behave differently from each other.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Client 1 and servers (this is correct):<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"># id 'MIDD\juser'<o:p></o:p></p>
<p class="MsoNormal">uid=435021613(juser@middlebury.edu) gid=435021613(juser@middlebury.edu) groups=435021613(juser@middlebury.edu),435330225(computer science lab login@middlebury.edu),435231589(fmp_ms_eventschedule_users@middlebury.edu),435208664(miis labfiles
everyone@middlebury.edu),435032463(mcms no rights@middlebury.edu),435000513(domain users@middlebury.edu),435286826(netoperators@middlebury.edu),435461517(ipa
<a href="mailto:users@middlebury.edu">users@middlebury.edu</a>)<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Client 2 (AD groups are not listed):<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"># id 'MIDD\juser'<o:p></o:p></p>
<p class="MsoNormal">uid=435021613(juser@middlebury.edu) gid=435021613(juser@middlebury.edu) groups=435021613(<a href="mailto:juser@middlebury.edu">juser@middlebury.edu</a>)<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Client 3 (user not found):<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"># id 'MIDD\juser'<o:p></o:p></p>
<p class="MsoNormal">id: MIDD\juser: No such user<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">On each client I have cleared the sssd cache (rm –f /var/lib/sss/db/*) and restarted sssd, with no effect. I have also uninstalled and re-installed the client, also with no effect.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">What else can I try?<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">David Guertin<o:p></o:p></p>
</div>
</body>
</html>