Re: Time sync not working
, I'm happy that this worked for you. In the future, here's a tip. There's a way to know the "in memory" parameters of CentrifyDC (documented in the cheat sheet). $ (sudo or dzdo) adinfo --sysinfo...
View ArticleLogin fails with "dual-persona" enabled DoD CAC - XEROX (FOR DOD) using...
Hi, Login fails with "dual-persona" enabled DoD CAC - XEROX (FOR DOD) using kerberos cac authenticationConfigure the printer for CAC Authentication.Login Name for the CAC User in Active Directory =...
View ArticleRe: Seeing Printers from a Windows Print Server
Welcome to the Centrify Community . Try adding the MAC user to be part of the LPOperator of the LPAdmin group. The KB below will step you through the process. This process is for a GPO to allow...
View ArticleCentrify disconnected in MAC e Linux
Hi all, I use a Centrify in Express Mode in my company, for MAC and Linux too. But I noticed that, sometimes when I login to my machine just open a terminal, type "adinfo" and I see "Centrify:...
View ArticleCentrify Crash Dumps
We use Centrify Express on several production servers that are a bit dated. On our file server (CentOS 6.3, Centrify DC 5.0.4), Centrify has been working great for years. Yesterday, we rebooted the...
View ArticleRe: Centrify disconnected in MAC e Linux
, Welcome to the Centrify forums.Centrify adclient may go in disconnected mode if:A local event prevents the client from reaching a Microsoft Active Directory Domain Controller (DC)e.g. A OS X system...
View ArticleRe: Centrify Crash Dumps
, Welcome to the Centrify community. I will give you some rapid-fire comments. Bottomline, due to the poor lifecycle management of the software, there are "many things going on" : On our file server...
View ArticleRe: Centrify Crash Dumps
, Thank you for the comments - they've been very helpful! I realize we made a rookie mistake with the updates, and we got started with the adbindproxy documentation last night. We believe we're very...
View ArticleRe: Centrify Crash Dumps
, Impressive. I'm sorry you had to go through this.However, it looks like you're close. I would disable (or remove) samba and just focus on CDC Is the client connected (adinfo should display)What's the...
View ArticleRe: Centrify Crash Dumps
Great tips! A lot of these give good output - the connection with the domain seems to be fine. My guess is it's related to NSS or PAM like you mentioned (those have come up a lot in our research), we...
View ArticleRe: Centrify Crash Dumps
, My bad! It was adinfo -A -u usernameSorry. Do me a favor, as root, switch user (su) to an ad user (you'll be able to do it), then try to su to another known user (type the correct password). If...
View ArticleRe: Centrify Crash Dumps
Thanks for all of your support! You've been super helpful. I ran the command adinfo -A -u [username] with my domain credentials, and it DID prompt for a password and said the password is correct. So...
View ArticleRe: Centrify Crash Dumps
Do an adquery user for that user and note the UID/GID.Now do an ls -ln on that home directory . If the numbers are different, you have an identity mismatch. This could be due to something changing in...
View ArticleRe: Centrify Crash Dumps
thanks again for pointing us in that direction! We found that the adquery and the permissions showed the same UID, but the logs I posted above don't - they look like they're showing that the uid=0?...
View ArticleRe: Centrify Crash Dumps
So we conducted another test and we found that the UID=0 is what's actually occurring here, but we're not sure why or how to change that. Here's what we did to find this out:We changed permissions to...
View ArticleRe: Centrify Crash Dumps
, No thoughts on my end. I'm afraid not familiar enough with the history of your system to be useful.Some tips and a shameless plug:- Remember that Express only provides 10% of what Centrify does-...
View ArticleRe: Centrify Crash Dumps
Thanks for the info and for all of the help today. One last question, regarding my double post: Have you seen this incident where UIDs are mapped to 0 automatically? Please see my last post on the...
View ArticleRe: Centrify Crash Dumps
We made some really good progress on this today - we were actually correct with the UID=0 issue. We tweaked some permissions, and that helped, but it didn't solve a thing. So I added the following code...
View ArticleRe: Centrify Crash Dumps
OH! I forgot to note:Permissions settings did solve our issues with Home Directories, but ONLY once we figured out the above UID problem.
View Articleopenscap failed results on owners of files on AD users.
Hi, Glad that I can get any advise from here. I am right now hardening Red Hat 7.4 with the STIG complianced as requested from the US government. I wonder how I can solve this problems as Active...
View Article