David Mulder

I've added `NSS_AAD_DEBUG=1` to `/etc/bash.bashrc` (openSUSE doesn't have the file `/etc/environment`), but I'm not getting any any debug from NSS. The debug I am getting: ``` May 16 01:12:52 localhost.localdomain...

FYI, I added extra debug to dbus to help track down the issue.

Recall that getent passwd is working (though only as non-aad users). I'm not at my machine, but will double check nss config later.

Can you provide more details about your setup? Are you using Certificate Auto Enrollment (via Samba Winbind), or are you using cepces stand-alone? Could you share your cepces.conf?

This is because there is no recent release of x11docker. This is fixed in master, but the README tells you to install like so: `curl -fsSL https://raw.githubusercontent.com/mviereck/x11docker/master/x11docker | sudo bash...

I believe you can support this by making an api request to https://odc.officeapps.live.com/odc/v2.1/federationProvider and specifying the domain as a parameter. You can see how I've done it in [himmelblau](https://github.com/himmelblau-idm/himmelblau/blob/main/src/graph/src/misc.rs#L14) in...

@MrDaGree or @jibel could you confirm this is correct using this simple python script? ```python #!/usr/bin/python3 import requests import json url = 'https://odc.officeapps.live.com/odc/v2.1/federationProvider?domain=%s' % 'XXXXX.onmicrosoft.com' resp = requests.get(url) parsed =...

Check out Himmelblau: https://youtu.be/rSeHxs0JX58 This should already be working in Himmelblau.

And catch my SambaXP talk (for free) about it tomorrow: https://sambaxp.org/sxp-2024-faq

You could implement the device code flow to provide some simple MFA capabilities.