Cannot join AD domain in 7.6.810

Issues related to configuring your network
Post Reply
tlee
Posts: 5
Joined: 2017/10/03 20:23:54

Cannot join AD domain in 7.6.810

Post by tlee » 2018/12/04 23:05:09

I was able to join an AD domain just fine in 7.5.1804. Did an yum update to 7.6.1810 and it does not work anymore.

If I update after joining the domain, then cannot authenticate domain users after the update.

I get the following message when the domain join fails: (realm -v join -U myuser mydc.mydomain.com)

realmd: adcli: couldn't connect to mydomain.com domain: Couldn't authenticate to active directory: SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (Cannot allocate memory)

Note ... the user appears to authenticate ok but the join fails.

tlee
Posts: 5
Joined: 2017/10/03 20:23:54

Re: Cannot join AD domain in 7.6.810

Post by tlee » 2018/12/06 21:36:14

Experimentation shows running "yum update -x krb5-libs", to retain the current krb5-libs package, seems to deliver a system that works with sssd but I cant say what other problems that might cause.

krb5-libs.x86_64 1.15.1-19.el7 works for me with 7.6.810

krb5-libs.i686 1.15.1-34.el7 does not work for me with 7.6.810

At this writing, release 7.6.1810 is 4 days into the public release.

If there is a place to report bugs, I should probably do that. Does anyone know where that might be?

User avatar
TrevorH
Forum Moderator
Posts: 24052
Joined: 2009/09/24 10:40:56
Location: Brighton, UK

Re: Cannot join AD domain in 7.6.810

Post by TrevorH » 2018/12/06 22:11:01

bugs.centos.org and/or bugzilla.redhat.com depending on whether you think this is a CentOS specific problem or one inherited from RHEL.
CentOS 5 died in March 2017 - migrate NOW!
Full time Geek, part time moderator. Use the FAQ Luke

Post Reply