I'm stuck with Kerberos - sssd - AD. I've tried a lot of things, with lot of googling, in LinuxMint, Ubuntu 16.04 and Debian 9. I have always the same result :
kinit usernameworks fine
msktutil -u --computer-name $(hostname) --server ad-server.univ-frlooks good
ldapsearch -Y GSSAPIworks fine
getent passwd -s sss username does nothing nor
I tried with a very minimalistic Debian 9 distribution with
sssd and configuration files
/etc/krb5.conf. I did not change
/etc/nsswitch as it seems to be right configuring with
compact sss on passwd, group, shadow and gshadow.
It looks like that sss is never called. So I did not find any log that could help me to track the bug. I don't know if I miss a package or something else.
My question : How could I find out how
nsswitch works and when it ask
sssd to find a AD username?