On Tue, Jan 19, 2021 at 11:40:40AM +0100, Ronald Wimmer via FreeIPA-users wrote: > On some systems I cannot login using the password-based method. I see a > pam_sss authentication failure (Permission denied). Using a valid kerberos > ticket for login works. (The same user works password-based on other > systems.) > > What could possibly be the problem?
Hi, during authentication (not access control) 'Permission denied' should only be returned in the case where the user is locked on the server side, but it looks like this is not the case here. To debug this logs with 'debug_level = 9' in the [pam] and [domain/...] section are needed covering the authentication attempt. bye, Sumit > > Cheers, > Ronald > _______________________________________________ > FreeIPA-users mailing list -- [email protected] > To unsubscribe send an email to [email protected] > Fedora Code of Conduct: > https://docs.fedoraproject.org/en-US/project/code-of-conduct/ > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > List Archives: > https://lists.fedorahosted.org/archives/list/[email protected] _______________________________________________ FreeIPA-users mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/[email protected]
