Looking for some troubleshooting help here.
I am trying to be able to authenticate AD users on a Centos7 cluster. For testing this, I am setting up a Windows Server 2012 R2 and the cluster in Azure.
I have carefully followed the instructions here (Active_Directory_trust_setup) with one modification:
- I believe the dnscmd command as listed does not set up conditional forwarding correctly. I use the Windows GUI and get the correct result. (At least the nslookup and dig commands give the right answers.)
The behavior I have now is:
- ipa trust-show shows the trust
- ipa trustdomain-find finds the one entry
- getent passwd mrtest@ddaddad.internal works and shows correct information
- su mrtest@ddaddad.internal requests a password and returns "Authentication failure"
- ssh of mrtest to the Linux box also fails authentication
I don't know where to look to figure out what I have done wrong.