On Tue, May 01, 2012 at 10:12:48PM +0000, Steven Jones wrote:
> Steven Jones
> Technical Specialist - Linux RHCE
> Victoria University, Wellington, NZ
> 0064 4 463 6272
The logs only say "[ipa_hbac_evaluate_rules] (3): Access granted by HBAC rule
[desktop-admins-test]". The error must be elsewhere, can you also attach
or paste what does the /var/log/secure and /var/log/sssd/sssd_pam.log
files have to say when the System Error occurs?
Does the System Error occur with both 6.2 and 6.3 packages?
> Does by any chance your sssd.conf include a debug_level directive in the
> [sssd] section and not in the others?
> I think that was a case that only worked by accident and we removed it
> in 1.7
> The "fix" is to specify debug_level in all the sections you'd like to
> print debug information from. In your case, that would be the [domain/*]
> section and perhaps the [pam] section.
Did you have a chance to take a look at the debug logging?
Freeipa-users mailing list