73 reputation
9
bio website
location Massachusetts
age 52
visits member for 5 years, 2 months
seen Dec 15 at 22:55
Linux, BSD and Solaris sysadmin since 1999.

Oct
24
asked How do I export/download a VM from vcenter to vmware workstation?
Sep
24
awarded  Autobiographer
Aug
26
answered FreeIPA krb5.conf has example.com entries
Aug
26
comment FreeIPA krb5.conf has example.com entries
The example.com was being sucked in from /etc/sssd/sssd.conf, which was configured for a different (old) auth scheme.
Aug
26
comment FreeIPA krb5.conf has example.com entries
Are you saying the example.com is expected?
Aug
26
asked FreeIPA krb5.conf has example.com entries
Aug
13
asked Why does ldapsearch not show user's supplemental groups?
Aug
7
comment How do I change pwdMaxAge on a “specialized password policy?”
ldapmodify -v -a -f ServicePasswdPolicy.ldif -D 'cn=Directory Manager' replace pwdMaxAge: 0 !modifying entry "cn=SrvcsPasswdPolicy,cn=config" Thanks for the answer!
Aug
7
accepted How do I change pwdMaxAge on a “specialized password policy?”
Aug
7
comment How do I change pwdMaxAge on a “specialized password policy?”
using ldapmodify? Using an ldif file?
Aug
7
revised How do I change pwdMaxAge on a “specialized password policy?”
added 570 characters in body
Aug
7
asked How do I change pwdMaxAge on a “specialized password policy?”
Jul
25
asked Is it possible to have one group or account authenticate locally, bypassing LDAP auth?
Jul
18
awarded  Curious
Jul
17
comment Is anyone using access.conf and netgroup authentication with sssd?
16:24:35 node00 sshd[55306]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.65.4.38 user=eeederp 16:24:36 node00 sshd[55306]: pam_sss(sshd:auth): authentication success; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.65.4.38 user=eeederp 16:24:36 node00 sshd[55306]: pam_access(sshd:account): access denied for user eeederp' from '10.65.4.38'` 16:24:36 node00 sshd[55307]: fatal: Access denied for user eeederp by PAM account configuration 16:24:36 node00 sshd[55306]: Failed password for eeederp from 10.65.4.38 port 56330 ssh2
Jul
17
comment Is anyone using access.conf and netgroup authentication with sssd?
I just realized I could add "debug" to any line in /etc/pam.d/system-auth. Perhaps I'll get some answers there.
Jul
17
asked Is anyone using access.conf and netgroup authentication with sssd?
Jun
25
comment restrict ssh access to host using sssd and LDAP
Oh sorry. I've been changing it a lot.
Jun
25
comment restrict ssh access to host using sssd and LDAP
@84104 I do have a line "id_provider = ldap" in my sssd.conf
Jun
25
comment restrict ssh access to host using sssd and LDAP
Do I need to run an IPA server to use HBAC rules? Seems like I do. Just checking.