Ok here is the list of issues I discovered while configuring sssd against Win2008 AD & rfc2307bis schema:
1. If I specify both dns_discovery_domain and ldap_uri parameters then what happens is that dns srv discovery returns a list of ldap servers. Now if the first one found is not working, others are not tried. I have to comment out the 'ldap_uri' parameter to make it working correctly.
2. SSSD is unable to detect default Kerberos realm as per /etc/krb5.conf - I have to configure it manually
3. Why do we actually need to specify Kerberos realm and KDC? Isn't /etc/krb5.conf supposed to record these kind of parameters?
4. authconfig is unable to configure sssd to use IPA backend provider
The information contained in this e-mail and in any attachments is confidential and is designated solely for the attention of the intended recipient(s). If you are not an intended recipient, you must not use, disclose, copy, distribute or retain this e-mail or any part thereof. If you have received this e-mail in error, please notify the sender by return e-mail and delete all copies of this e-mail from your computer system(s). Please direct any additional queries to: communications s3group com Thank You. Silicon and Software Systems Limited (S3 Group). Registered in Ireland no. 378073. Registered Office: South County Business Park, Leopardstown, Dublin 18