Comment 15 for bug 1892145

Revision history for this message
Kees Bakker (keestux) wrote : Re: smbclient cannot connect anonymously in Kerberos context (freeipa)

In /etc/krb5.conf.d/freeipa there is

[libdefaults]
    spake_preauth_groups = edwards25519

And in /var/lib/sss/pubconf/krb5.include.d there is the following

$ more /var/lib/sss/pubconf/krb5.include.d/*|cat
::::::::::::::
/var/lib/sss/pubconf/krb5.include.d/domain_realm_ghs_nl
::::::::::::::
[domain_realm]
::::::::::::::
/var/lib/sss/pubconf/krb5.include.d/krb5_libdefaults
::::::::::::::
[libdefaults]
 canonicalize = true
::::::::::::::
/var/lib/sss/pubconf/krb5.include.d/localauth_plugin
::::::::::::::
[plugins]
 localauth = {
  module = sssd:/usr/lib/x86_64-linux-gnu/sssd/modules/sssd_krb5_localauth_plugin.so
 }