56.7.
Copy to Clipboard Copied! Toggle word wrap Toggle overflow [domain/<domain_name>] pam_gssapi_services = sudo, sudo-i
[domain/<domain_name>] pam_gssapi_services = sudo, sudo-i
Copy to Clipboard Copied! Toggle word wrap Toggle overflow systemctl restart sssd
[root@idmclient ~]# systemctl restart sssd
Copy to Clipboard Copied! Toggle word wrap Toggle overflow authselect current
# authselect current Profile ID: sssd
Copy to Clipboard Copied! Toggle word wrap Toggle overflow authselect enable-feature with-gssapi
# authselect enable-feature with-gssapi
Copy to Clipboard Copied! Toggle word wrap Toggle overflow authselect select sssd with-gssapi
# authselect select sssd with-gssapi
Copy to Clipboard Copied! Toggle word wrap Toggle overflow #%PAM-1.0 auth sufficient pam_sss_gss.so auth include system-auth account include system-auth password include system-auth session include system-auth
#%PAM-1.0 auth sufficient pam_sss_gss.so auth include system-auth account include system-auth password include system-auth session include system-auth
Copy to Clipboard Copied! Toggle word wrap Toggle overflow ssh -l idm_user@idm.example.com localhost
[root@idm-client ~]# ssh -l idm_user@idm.example.com localhost idm_user@idm.example.com's password:
Copy to Clipboard Copied! Toggle word wrap Toggle overflow klist
[idmuser@idmclient ~]$ klist Ticket cache: KCM:1366201107 Default principal: idm_user@IDM.EXAMPLE.COM Valid starting Expires Service principal 01/08/2021 09:11:48 01/08/2021 19:11:48 krbtgt/IDM.EXAMPLE.COM@IDM.EXAMPLE.COM renew until 01/15/2021 09:11:44
Copy to Clipboard Copied! Toggle word wrap Toggle overflow kdestroy -A kinit idm_user@IDM.EXAMPLE.COM
[idm_user@idmclient ~]$ kdestroy -A [idm_user@idmclient ~]$ kinit idm_user@IDM.EXAMPLE.COM Password for idm_user@idm.example.com:
Copy to Clipboard Copied! Toggle word wrap Toggle overflow sudo /usr/sbin/reboot
[idm_user@idmclient ~]$ sudo /usr/sbin/reboot