Cannot join AD domain in 7.6.810

Issues related to configuring your network
Post Reply
tlee
Posts: 5
Joined: 2017/10/03 20:23:54

Cannot join AD domain in 7.6.810

Post by tlee » 2018/12/04 23:05:09

I was able to join an AD domain just fine in 7.5.1804. Did an yum update to 7.6.1810 and it does not work anymore.

If I update after joining the domain, then cannot authenticate domain users after the update.

I get the following message when the domain join fails: (realm -v join -U myuser mydc.mydomain.com)

realmd: adcli: couldn't connect to mydomain.com domain: Couldn't authenticate to active directory: SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (Cannot allocate memory)

Note ... the user appears to authenticate ok but the join fails.

tlee
Posts: 5
Joined: 2017/10/03 20:23:54

Re: Cannot join AD domain in 7.6.810

Post by tlee » 2018/12/06 21:36:14

Experimentation shows running "yum update -x krb5-libs", to retain the current krb5-libs package, seems to deliver a system that works with sssd but I cant say what other problems that might cause.

krb5-libs.x86_64 1.15.1-19.el7 works for me with 7.6.810

krb5-libs.i686 1.15.1-34.el7 does not work for me with 7.6.810

At this writing, release 7.6.1810 is 4 days into the public release.

If there is a place to report bugs, I should probably do that. Does anyone know where that might be?

User avatar
TrevorH
Site Admin
Posts: 33202
Joined: 2009/09/24 10:40:56
Location: Brighton, UK

Re: Cannot join AD domain in 7.6.810

Post by TrevorH » 2018/12/06 22:11:01

bugs.centos.org and/or bugzilla.redhat.com depending on whether you think this is a CentOS specific problem or one inherited from RHEL.
The future appears to be RHEL or Debian. I think I'm going Debian.
Info for USB installs on http://wiki.centos.org/HowTos/InstallFromUSBkey
CentOS 5 and 6 are deadest, do not use them.
Use the FAQ Luke

mashiro2004
Posts: 68
Joined: 2018/12/08 21:46:22
Location: Italy

Re: Cannot join AD domain in 7.6.810

Post by mashiro2004 » 2018/12/15 12:55:59

hi,
i've this version of krb5-libs: krb5-libs-1.15.1-34.el7.x86_64

my notebook is on MS AD 2012 without problems.
The difference with you is that my notebook have a clean install of Centos 7.6.

Regards
Simone

Post Reply