SSSD / sssd

#3103 GSSAPI error causes failures for child domain user logins across IPA - AD trust
Closed: Fixed Opened by sbose.

Closed: Fixed
Reopen Issue

Ticket was cloned from Red Hat Bugzilla (product Red Hat Enterprise Linux 7): Bug 1344940

Please note that this Bug is private and may not be accessible as it contains confidential Red Hat customer information.

Created attachment 1167198
logs from trying to determine AD domain information
Description of problem:
When an IPA is joined to an AD domain, the fetch command will not return data.
Users cannot authenticate.
We have created the two-way trust successfully, but the AD users cannot
authenticate.
We get conflicting responses when trying to fetch information and authenticate
users to the domain: See attached file.
Also need way to determine the health of the trust and accessibility of the
domain.

Fields changed

blockedby: =>
blocking: =>
changelog: =>
coverity: =>
design: =>
design_review: => 0
feature_milestone: =>
fedora_test_page: =>
mark: no => 0
owner: somebody => sbose
patch: 0 => 1
review: True => 0
selected: =>
status: new => assigned
testsupdated: => 0

master:

  • 66588a6241df42a04cb9ead75cf3afb38495d74a
  • 2efebde7ddd5f1729a70ef4ec9de607cc393214c
  • 5e40ba3168e21dbd5fa1812d6f2fc95f508a9e6e

Fields changed

resolution: => fixed
status: assigned => closed

sssd-1-13:

  • 1a1f1722f11ccf3da51881a802e5b21b958f24c3
  • 8c4fa324d2949225a317eab5372b63c5b68a67b6
  • f44d70479c2e721246369b8aaa12d1594e63f360

Fields changed

milestone: NEEDS_TRIAGE => SSSD 1.13.5

Metadata Update from @sbose:
- Issue assigned to sbose
- Issue set to the milestone: SSSD 1.13.5

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/4136

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.
Metadata
None
None
None
Normal
defect
SSSD
None
0
0
1
https://bugzilla.redhat.com/show_bug.cgi?id=1344940
0
None
0
0
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.