When I try to do a
su user1@ADREALM.COM I get a "user does not exist" message.
user1@ADREALM.COM exists in Active Directory. I can do
kinit user1@ADREALM.COM successfully and get a ticket. Here are the steps I did:
- I have MIT KDC on CentOS 7 CENTOSREALM.COM and Active Directory realm ADREALM.COM
- On CentOS I did
realm join ADREALM.COMwhich gave "* Successfully enrolled machine in realm". I can see the centos hostname in Active Directory Computers container.
- But I cannot login to the CentOS server with user1@ADREALM.COM this user exists in AD.
Where do I look for errors or steps to debug this issue?
The sssd.conf content:
[sssd] domains = adrealm.com config_file_version = 2 services = nss, pam [domain/adrealm.com] ad_server = adrealm.com ad_domain = adrealm.com krb5_realm = ADREALM.COM realmd_tags = manages-system joined-with-adcli cache_credentials = True id_provider = ad krb5_store_password_if_offline = True default_shell = /bin/bash ldap_id_mapping = True use_fully_qualified_names = True fallback_homedir = /home/%u@%d access_provider = ad debug_level = 3