hi
Where would be a good place to look in either sssd or somewhere in the
system if we are seeing a mixture of UserID lookups in this format:
username(a)domain.example.com <--- this makes sense
BUT - also seeing:
username@domain.example.com(a)domain.eexample.com <--- This does not??
I am very confused as to how this might be getting sent to PAM for the
lookups and because of it we see random PAM "System Error"s
I do have in krb5.conf
[domain_realm]
.domain.example.com =
DOMAIN.EXAMPLE.COM
domain.example.com =
DOMAIN.EXAMPLE.COM
prodhost1.domain.example.com =
DOMAIN.EXAMPLE.COM
But this seems to have been set after the ipa-client-install - so I am a
little confused?
Any suggestions?
Kat