Comment 3 for bug 1928954

Revision history for this message
Walter Kovacs (w-kovacs) wrote (last edit ):

Hello,

today I installed 7 laptops with Ubuntu 20.04 LTS directly from ubuntu repo. Afterwards I set up our domain and all of these laptops have above problem.

As far as I can tell the sssd demon does not enter offline state even when the LAN cable is disconnected.

We have a "normal" Windows Server as domain controller I am not sure which informations will help you there.

Here is our sssd.conf

[sssd]
services = nss, pam, ssh
config_file_version = 2
domains = REALM.LO
debug_level = 1

[domain/REALM.LO]
debug_level = 1
id_provider = ad
access_provider = ad
auth_provider = ad
krb5_store_password_if_offline = True
enumerate = False
ignore_group_members = True
use_fully_qualified_names = False

auto_private_groups = True
cache_credentials = True

ad_gpo_access_control = permissive

krb5_server = realm.lo
krb5_realm = realm.lo

# SSH Key Login
ldap_user_extra_attrs = altSecurityIdentities:altSecurityIdentities
ldap_user_ssh_public_key = altSecurityIdentities
ldap_use_tokengroups = True

# home directory
override_homedir = /home/%d/%u
default_shell = /bin/bash

-------------------------------------------------
and our krb5.conf

[libdefaults]
    default_realm = REALM.LO
    ticket_lifetime = 24h
    renew_lifetime = 7d
    forwardable = true
    dns_lookup_realm = true
    dns_lookup_kdc = true
    rdn = true

[realms]
    REALM.LO = {
        kdc = realm.lo
        admin_server = realm.lo
    }

[domain_realms]
    .realm.lo = REALM.LO

------------------------------------------------

I would gladly provide more informations if needed