VM vs CT realmd sssd both used to work now only VMs

typecookie

New Member
Dec 9, 2021
1
0
1
38
I am working with Proxmox Containers and VMs. The problem is with Realmd and SSSD, VMs still connect to the windows ad just fine, Containers will connect but will not allow login, it seems to be a problem with the configuration DB and file permissions. the configurations are the same and are pushed by ansible. the VMs and containers are Ubuntu 20.04. I have the problem connecting to server 2019 and 2016. the CTS older then about 4 months ago worked

/var/log/sssd/sssd.log
Code:
[confdb_init_db] (0x0020): Cannot convert INI to LDIF [1432158317]: [File ownership and permissions check failed]
[sssd] [confdb_setup] (0x0010): ConfDB initialization has failed [1432158317]: File ownership and permissions check failed
[sssd] [load_configuration] (0x0010): Unable to setup ConfDB [1432158317]: File ownership and permissions check failed
[sssd] [main] (0x0020): SSSD couldn't load the configuration database.
[sssd] [main] (0x0010): pidfile exists at /var/run/sssd.pid

sssd conf same on vms and cts

Code:
sssd]
domains = example.com
config_file_version = 2
services = nss, pam

[domain/example.com]
default_shell = /bin/bash
krb5_store_password_if_offline = True
cache_credentials = True
krb5_realm = EXAMPLE.COM
realmd_tags = manages-system joined-with-adcli
id_provider = ad
fallback_homedir = /home/%u
ad_domain = example.com
use_fully_qualified_names = False
ldap_id_mapping = True
access_provider = simple
simple_allow_users = user1


thank you much for time and help
 

About

The Proxmox community has been around for many years and offers help and support for Proxmox VE, Proxmox Backup Server, and Proxmox Mail Gateway.
We think our community is one of the best thanks to people like you!

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get yours easily in our online shop.

Buy now!