Displaying 1 result from an estimated 1 matches for "kxmjd01".
2014 Jul 21
1
Domain member (2k8R2) server, problem mapping Kerberos/NSS users
...os/NSS ? SSSD without using Winbind.
I have SSSD up and running and things like
getent passwd some-domain-user
getent group some-domain-group
chown some-domain-user:some-domain-group /tmp/foobar
work just fine and show the expected results.
When trying to connect to a share (using MY-DOMAIN\kxmjd01 on a Win7
client), my log (full log attached) shows some hints:
> Found account name from PAC: kxmjd01 [Doe, John]
which looks good? but then
> Username MY-DOMAIN\kxmjd01 is invalid on this system
> Failed to map kerberos principal to system user (NT_STATUS_LOGON_FAILURE)
> Server exit...