Marc Boorshtein wrote:
I have FreeIPA client and server both running on CentOS 7, latest patches. Whats odd is that everything was working great until I added a new user and now none of my FreeIPA users can login via SSH. After authenticating they get "Connection closed by IP". This happens regardless of if its the ipa client or server. Login to the console with ipa users fails as well. Local root works fine though. I don't see anything in messages or sssd.log. Any thoughts as to where to look?
If you crank up the SSSD logging it may tell you what is going on. I'd also take a look at HBAC. Was the allow_all rule recently disabled? rob -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project