On Wed, Dec 16, 2020 at 10:40:05PM -0000, prasad kumar via FreeIPA-users wrote: > Hi, > > We are using IPA as host authentication for application service account > sometime those logins are failing and don't see any errors in the ipa logs > but server throwing PAM authentication failed. I am new to freeipa and clue > less how this process works and where to troubleshoot. Could someone please > guide me.
Hi, looking at the PAM related messages in the journal or /var/log/secure is the first step. If the authentication error is logged by the pam_sss module you should check the SSSD logs files. The default log level is most probably not sufficient to track the issue down. Please add 'debug_level=9' to the [pam] and [domain/...] sections in sssd.conf, restart SSSD and try to reproduce the authentication error. If you cannot find a hint in the logs feel free to send the part of the logs covering the authentication attempt. bye, Sumit > _______________________________________________ > FreeIPA-users mailing list -- [email protected] > To unsubscribe send an email to [email protected] > Fedora Code of Conduct: > https://docs.fedoraproject.org/en-US/project/code-of-conduct/ > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > List Archives: > https://lists.fedorahosted.org/archives/list/[email protected] _______________________________________________ FreeIPA-users mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/[email protected]
