I am newbie in this world and I need help.
For the past weeks I have been trying to find the answer to my problem, but withour success.
I am trying to authenticate my CentOS machine against Active Directory (on my Windows Server 2012 machine) via LDAP and Kerberos. I used authconfig-tui and select: User information-Use LDAP and Authentication: Use Kerberos.
Server: ldap://10.0.2.15 (my server IP) Base DN: dc=example,dc=local
Realm: EXAMPLE.LOCAL KDC: 10.0.2.15 Admin Server: SERVER.EXAMPLE.LOCAL
As I learned, this configuration is not enough so I edited my sssd.conf file:
*autofs_provider = ldap cache_credentials = True krb5_kpasswd = SERVER.EXAMPLE.LOCAL ldap_search_base = dc=example,dc=local krb5_server = 10.0.2.15 id_provider = ldap auth_provider = krb5 chpass_provider = krb5 krb5_store_password_if_offline = True ldap_uri = ldap://10.0.2.15 krb5_realm = EXAMPLE.LOCAL ldap_id_use_start_tls = False ldap_tls_cacertdir = /etc/openldap/cacerts [sssd] domains = default, example.local config_file_version = 2 services = nss, pam, autofs [domain/example.local] ad_domain = example.local id_provider = ad autofs_provider = ldap cache_credentials = True krb5_kpasswd = SERVER.EXMAPLE.LOCAL ldap_search_base = dc=example,dc=local krb5_server = 10.0.2.15 id_provider = ldap auth_provider = krb5 chpass_provider = krb5 krb5_store_password_if_offline = True ldap_uri = ldap://10.0.2.15 krb5_realm = EXMAPLE.LOCAL ldap_id_use_start_tls = False ldap_tls_cacertdir = /etc/openldap/cacerts
I restated the service. Then I tried to
su - firstname.lastname@example.org
And it worked. But it I try to
klist I receive this error:
kinit: Cannot contact any KDC for realm 'EXAMPLE.LOCAL' while getting initial credentials
I also have another error when trying to http://localhost via Apache. My error_log file says:
LDAP: ldap_simple_bind() failed. Can´t contact LDAP server
Am I doing something wrong?
Any help would be useful.
Thanks in advance.
If you need more information just tell me.