Re: [Freeipa-users] gssapi ssh works, pam user/password does not work

2015-11-05 Thread Natxo Asenjo
hi Sumit, On Thu, Nov 5, 2015 at 10:14 AM, Sumit Bose wrote: > > how can I troubleshoot this issue? > > You should check the SSSD debug logs, see > https://fedorahosted.org/sssd/wiki/Troubleshooting for details about how > to enable debug logging and where to find the logs. > > My guess is that

Re: [Freeipa-users] gssapi ssh works, pam user/password does not work

2015-11-05 Thread Natxo Asenjo
hi, Fixed, /tmp had the wrong permissions, was not owned by root:root. Thanks for the debugging tips! -- -- Groeten, natxo -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the proje

Re: [Freeipa-users] gssapi ssh works, pam user/password does not work

2015-11-05 Thread Sumit Bose
On Thu, Nov 05, 2015 at 10:05:19AM +0100, Natxo Asenjo wrote: > On Thu, Nov 5, 2015 at 10:03 AM, Natxo Asenjo > wrote: > > > hi, > > > > since yesterday I have a strange situation in one of our joined hosts. > > > > i can login using a kerberos ticket, but not using name/password. > > > > In /var

Re: [Freeipa-users] gssapi ssh works, pam user/password does not work

2015-11-05 Thread Natxo Asenjo
hi, this is in a centos host running 6.7, by the way. -- Groeten, natxo -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project

Re: [Freeipa-users] gssapi ssh works, pam user/password does not work

2015-11-05 Thread Natxo Asenjo
On Thu, Nov 5, 2015 at 10:03 AM, Natxo Asenjo wrote: > hi, > > since yesterday I have a strange situation in one of our joined hosts. > > i can login using a kerberos ticket, but not using name/password. > > In /var/log/secure I see this: > > sshd[29607]: pam_sss(sshd:auth): received for user use

[Freeipa-users] gssapi ssh works, pam user/password does not work

2015-11-05 Thread Natxo Asenjo
hi, since yesterday I have a strange situation in one of our joined hosts. i can login using a kerberos ticket, but not using name/password. In /var/log/secure I see this: sshd[29607]: pam_sss(sshd:auth): received for user username: 4 (System error) -- -- Groeten, natxo -- Manage your subscr