On Fri, 05 Jun 2015, Alexander Frolushkin wrote:
Hello! We have 17 IPA servers and AD trusts with user accounts from AD used to ssh linux servers, with IPA's HBAC and SUDO. Today on 4 of IPA servers we got "wbinfo --online-status" showing AD domain "offline" and AD users missing some groups membership. Is there some way to debug this issue?
Yes: 1. Don't use wbinfo if you are running on RHEL7/Fedora 21+, it is not useful at all.
2. if you have issues with memberships, follow https://fedorahosted.org/sssd/wiki/Troubleshooting to generate meaningful logs. Without logs it is impossible to grasp what you are experiencing. -- / Alexander Bokovoy -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project
