On Thu, Nov 05, 2015 at 10:05:19AM +0100, Natxo Asenjo wrote:
> On Thu, Nov 5, 2015 at 10:03 AM, Natxo Asenjo <natxo.ase...@gmail.com>
> > hi,
> > since yesterday I have a strange situation in one of our joined hosts.
> > i can login using a kerberos ticket, but not using name/password.
> > In /var/log/secure I see this:
> > sshd: pam_sss(sshd:auth): received for user username: 4 (System
> > error)
> sorry, sent too early.
> how can I troubleshoot this issue?
You should check the SSSD debug logs, see
https://fedorahosted.org/sssd/wiki/Troubleshooting for details about how
to enable debug logging and where to find the logs.
My guess is that SSSD has issues reaching a server so the domain log and
the krb5_child log would be the files I'd check first.
If the logs don't help you feel free to send them directly to me, if
possible with debug level 10.
> Manage your subscription for the Freeipa-users mailing list:
> Go to http://freeipa.org for more info on the project
Manage your subscription for the Freeipa-users mailing list:
Go to http://freeipa.org for more info on the project