Re: [Freeipa-users] SSH remote host disconnecting

2016-04-19 Thread Marc Boorshtein
> I'd also take a look at HBAC. Was the allow_all rule recently disabled?
>

winner winner chicken dinner!  I must have deleted it while trying something.

Thanks
Marc

-- 
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project


Re: [Freeipa-users] SSH remote host disconnecting

2016-04-19 Thread Rob Crittenden

Marc Boorshtein wrote:

I have FreeIPA client and server both running on CentOS 7, latest
patches.  Whats odd is that everything was working great until I added
a new user and now none of my FreeIPA users can login via SSH.  After
authenticating they get "Connection closed by IP". This happens
regardless of if its the ipa client or server.  Login to the console
with ipa users fails as well.  Local root works fine though.  I don't
see anything in messages or sssd.log.  Any thoughts as to where to
look?


If you crank up the SSSD logging it may tell you what is going on.

I'd also take a look at HBAC. Was the allow_all rule recently disabled?

rob

--
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project