[Authentication] Issues with realmd and Fedora 24

[Stef Walter]

On 04.08.2016 21:39, Scott Dowdle wrote:
> Greetings,
> 
> I am having issues with getting Active Directory authentication
> working on Fedora 24.  I have a computer science lab of computers and
> I've used the realm command to join the computers successfully to the
> domain.  I can pull information about AD users using the id command
> but I can't login to the computer with AD creditials.  I just get a
> "System error" error message.
> 
> Here's how I did it as the root user:
> 
> realm join --user={domainadminaccount} {domain}
> 
> It prompts me for a password and I put in my domain admin password
> and it succeeds.  This is verified by looking up an AD user with the
> id command:
> 
> id {adaccountname}
> 
> And it returns all of the AD information on the user.
> 
> While I believe AD login for all users is enabled by default, just to
> be sure I also ran:
> 
> realm permit --realm {addomainname} --all
> 
> When I try to login from a graphical login manager (lightdm), it just
> fails to authenticate.  If I try to login from the text console I
> get, "System error".  Checking the logs, I don't really see any
> related log entries.  

The 'sssd' component is what is usually what realmd configures after
joining the domain. It is the component that handles domain
authentication and users. Here's how to troubleshoot it, and get its logs:

https://fedorahosted.org/sssd/wiki/Troubleshooting

https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Deployment_Guide/SSSD-Troubleshooting.html

Cheers,

Stef