Hide Forgot
+++ This bug was initially created as a clone of Bug #1217559 +++ This bug is created as a clone of upstream ticket: https://fedorahosted.org/sssd/ticket/2645 We decided to deny access to fix crash in ticket #2629. It was short time solution for GPOs from different domain controller. @see details in thread https://lists.fedorahosted.org/pipermail/sssd-devel/2015-April/023279.html
master: c9db9d3e3d1a51117a64b366ec866bbeb009c57f 31bafc0d6384a30859aa18f3bd22275aec6ee2ed
Created attachment 1132144 [details] Verification Logs
Manually verified against sssd-1.13.3-15.el6.x86_64, full logs attached. #### output ssh denied@sub.domain.com@192.168.76.3 denied@sub.domain.com@192.168.76.3's password: Connection closed by 192.168.76.3 ssh allowed@sub.domain.com@192.168.76.3 allowed@sub.domain.com@192.168.76.3's password: Last login: Tue Mar 1 23:41:15 2016 from 192.168.71.16 [allowed@sub.domain.com@sssdqe1 ~]$ hostname sssdqe1.domain.com #### config file [sssd] config_file_version = 2 services = nss, pam domains = domain.com [nss] default_shell = /bin/bash [domain/domain.com] debug_level = 0xFFF0 id_provider = ad ad_domain = domain.com cache_credentials = True krb5_store_password_if_offline = True use_fully_qualified_names = True fallback_homedir = /home/%d/%u ad_gpo_access_control = enforcing access_provider = ad
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://rhn.redhat.com/errata/RHBA-2016-0782.html