Re: [Freeipa-users] SSH remote host disconnecting
> I'd also take a look at HBAC. Was the allow_all rule recently disabled? > winner winner chicken dinner! I must have deleted it while trying something. Thanks Marc -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project
Re: [Freeipa-users] SSH remote host disconnecting
Marc Boorshtein wrote: I have FreeIPA client and server both running on CentOS 7, latest patches. Whats odd is that everything was working great until I added a new user and now none of my FreeIPA users can login via SSH. After authenticating they get "Connection closed by IP". This happens regardless of if its the ipa client or server. Login to the console with ipa users fails as well. Local root works fine though. I don't see anything in messages or sssd.log. Any thoughts as to where to look? If you crank up the SSSD logging it may tell you what is going on. I'd also take a look at HBAC. Was the allow_all rule recently disabled? rob -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project
[Freeipa-users] SSH remote host disconnecting
I have FreeIPA client and server both running on CentOS 7, latest patches. Whats odd is that everything was working great until I added a new user and now none of my FreeIPA users can login via SSH. After authenticating they get "Connection closed by IP". This happens regardless of if its the ipa client or server. Login to the console with ipa users fails as well. Local root works fine though. I don't see anything in messages or sssd.log. Any thoughts as to where to look? Thanks Marc Boorshtein CTO Tremolo Security marc.boorsht...@tremolosecurity.com Twitter - @mlbiam / @tremolosecurity -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project