search for: organizatonal

On 10/06/2019 16:04, vincent at cojot.name wrote: > > There is probably some amount of redtape on this but AFAIK it works > fine for me: My RHEL7.6 hypervisors are joined to my AD DC 4.10.4 VMs > through use of realm '(and thus sssd): > > Here's a RHEL7.6 client: > # realm list > ad.lasthome.solace.krynn > ? type: kerberos > ? realm-name:

...er found to turn off this misfeature. Hilarity ensues if if your LDAP server, whether Samba or AD, are not close enough to the clien thost. And if your LDAP is big, that local cache gets *bulky*, even if the "onelevel" published objects only contain one element Now, some of that may be an organizatonal issue, but it surprised the heck out of me. The result is that sssd daemons start up, you can log in with the credentials for the first few minutes, but then they fail and take down *all* the sssd subdaemons, and you LDAP based access. While they may be easy to initially activate and configure, re...