Marc Boorshtein wrote:
I have FreeIPA client and server both running on CentOS 7, latest
patches.  Whats odd is that everything was working great until I added
a new user and now none of my FreeIPA users can login via SSH.  After
authenticating they get "Connection closed by IP". This happens
regardless of if its the ipa client or server.  Login to the console
with ipa users fails as well.  Local root works fine though.  I don't
see anything in messages or sssd.log.  Any thoughts as to where to
look?

If you crank up the SSSD logging it may tell you what is going on.

I'd also take a look at HBAC. Was the allow_all rule recently disabled?

rob

--
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project

Reply via email to