Re: [Freeipa-users] access denied ssh

2013-09-29 Thread Jakub Hrozek
On Tue, Sep 24, 2013 at 09:38:49PM +0400, Михаил А wrote: ok, all sssd logs 2013/9/24 Jakub Hrozek jhro...@redhat.com On Tue, Sep 24, 2013 at 03:00:22PM +0400, Михаил А wrote: [sssd] services = nss, pam, ssh config_file_version = 2 debug_level = 5 domains = ipa.sys.local

[Freeipa-users] access denied ssh

2013-09-24 Thread Михаил А
Hello. freeipa-server-3.3fedora19 ipa-replica1-fedora19 ipa-replica2 ferdora19 ssh auth with windows accounts on ipa-replica1-fedora19 is OK ssh auth with windows accounts on ipa-replica1-fedora19 is acces denied id winuser@windomain OK var/log/secure selinux disabled firewaldd

Re: [Freeipa-users] access denied ssh

2013-09-24 Thread Sumit Bose
On Tue, Sep 24, 2013 at 01:39:28PM +0400, Михаил А wrote: Hello. freeipa-server-3.3fedora19 ipa-replica1-fedora19 ipa-replica2 ferdora19 ssh auth with windows accounts on ipa-replica1-fedora19 is OK ssh auth with windows accounts on ipa-replica1-fedora19 is acces denied id

Re: [Freeipa-users] access denied ssh

2013-09-24 Thread Михаил А
[sssd] services = nss, pam, ssh config_file_version = 2 debug_level = 5 domains = ipa.sys.local 2013/9/24 Sumit Bose sb...@redhat.com On Tue, Sep 24, 2013 at 01:39:28PM +0400, Михаил А wrote: Hello. freeipa-server-3.3fedora19 ipa-replica1-fedora19 ipa-replica2 ferdora19 ssh auth

Re: [Freeipa-users] access denied ssh

2013-09-24 Thread Jakub Hrozek
On Tue, Sep 24, 2013 at 03:00:22PM +0400, Михаил А wrote: [sssd] services = nss, pam, ssh config_file_version = 2 debug_level = 5 domains = ipa.sys.local Please put the debug_level directive to the [domain] section and then attach /var/log/sssd/sssd_$domain.log