Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange
2 Updated formatting and corrected some typos for easier reading.
source | link

How nsswitch call sssd for credential?

I'm stuck with kerberosKerberos - sssd - AD. I've tried a lot of things, with lot of googling, in LinuxMint, ubuntu16Ubuntu 16.04 and debian9Debian 9. I have always the same result :

  • kinit usernamekinit username works fine
  • msktutil -u --computer-name $(hostname) --server ad-server.univ-frmsktutil -u --computer-name $(hostname) --server ad-server.univ-fr looks good
  • ldapsearch -Y GSSAPIldapsearch -Y GSSAPI works fine

but getent passwd -s sss usernamegetent passwd -s sss username does nothing nor id username id username!

I tried with a very minimalistic distrib debianDebian 9 distribution with openssh-serveropenssh-server, krb-5-userkrb-5-user, msktutilmsktutil, sssdsssd and configuration files /etc/sssd/sssd.conf/etc/sssd/sssd.conf and /etc/krb5.conf/etc/krb5.conf. I ditdid not change /etc/nsswitch/etc/nsswitch as it seems to be right configuring with compact ssscompact sss on passwd, group, shadow and gshadow.

It looks like ifthat sss is never callcalled. So I did not find any log that could help me to track the bug. I don't know if I miss a packgepackage or something else.

My question : howHow could I find out how work nsswitchnsswitch works and when it ask sssdsssd to find a ad-username AD username?  

How nsswitch call sssd for credential

I'm stuck with kerberos - sssd - AD. I've tried a lot of things, with lot of googling, in LinuxMint, ubuntu16.04 and debian9. I have always the same result :

  • kinit username works fine
  • msktutil -u --computer-name $(hostname) --server ad-server.univ-fr looks good
  • ldapsearch -Y GSSAPI works fine

but getent passwd -s sss username does nothing nor id username !

I tried with a very minimalistic distrib debian 9 with openssh-server, krb-5-user, msktutil, sssd and configuration files /etc/sssd/sssd.conf and /etc/krb5.conf. I dit not change /etc/nsswitch as it seems to be right configuring with compact sss on passwd, group, shadow and gshadow.

It looks like if sss is never call. So I did not find any log that could help me to track the bug. I don't know if I miss a packge or something else.

My question : how could I find out how work nsswitch and when it ask sssd to find a ad-username ?  

How nsswitch call sssd for credential?

I'm stuck with Kerberos - sssd - AD. I've tried a lot of things, with lot of googling, in LinuxMint, Ubuntu 16.04 and Debian 9. I have always the same result :

  • kinit username works fine
  • msktutil -u --computer-name $(hostname) --server ad-server.univ-fr looks good
  • ldapsearch -Y GSSAPI works fine

but getent passwd -s sss username does nothing nor id username!

I tried with a very minimalistic Debian 9 distribution with openssh-server, krb-5-user, msktutil, sssd and configuration files /etc/sssd/sssd.conf and /etc/krb5.conf. I did not change /etc/nsswitch as it seems to be right configuring with compact sss on passwd, group, shadow and gshadow.

It looks like that sss is never called. So I did not find any log that could help me to track the bug. I don't know if I miss a package or something else.

My question : How could I find out how nsswitch works and when it ask sssd to find a AD username?

1
source | link

How nsswitch call sssd for credential

I'm stuck with kerberos - sssd - AD. I've tried a lot of things, with lot of googling, in LinuxMint, ubuntu16.04 and debian9. I have always the same result :

  • kinit username works fine
  • msktutil -u --computer-name $(hostname) --server ad-server.univ-fr looks good
  • ldapsearch -Y GSSAPI works fine

but getent passwd -s sss username does nothing nor id username !

I tried with a very minimalistic distrib debian 9 with openssh-server, krb-5-user, msktutil, sssd and configuration files /etc/sssd/sssd.conf and /etc/krb5.conf. I dit not change /etc/nsswitch as it seems to be right configuring with compact sss on passwd, group, shadow and gshadow.

It looks like if sss is never call. So I did not find any log that could help me to track the bug. I don't know if I miss a packge or something else.

My question : how could I find out how work nsswitch and when it ask sssd to find a ad-username ?