I removed the host on ipa server (ipa host-del, which works for this client but
not another one), reinstalled the system, and configured the client, it worked.
Thanks,
George
>
> From: Jakub Hrozek
>To: freeipa-users@redhat.com
>Sent: Tuesday, September 4, 2012 3:05 PM
>Subject: Re: [Freeipa-users] cannot logon: system error?
>
>On Tue, Sep 04, 2012 at 11:02:36AM -0700, george he wrote:
>> Hi all,
>>
>> This is another issue I'm having with another ipa client.
>> Both the sever and the client are centos 6.3
>> The client was configured all right. I was able to log on at a point.
>> but then after the screen was auto-locked over the night, I cannot log on
>> any more.
>> If I try on the console, it says "system error" and return to the locked
>> screen.
>> If I try ssh myclient, it says "Connection closed by myclient".
>>
>> This is what in /var/log/secure
>> Sep 4 13:57:52 localhost sshd[4208]: Authorized to jhe, krb5 principal
>> j...@psych.yale.edu (krb5_kuserok)
>> Sep 4 13:57:52 localhost sshd[4208]: pam_sss(sshd:account): Access denied
>> for user jhe: 4 (System error)
>> Sep 4 13:57:52 localhost sshd[4209]: fatal: Access denied for user jhe by
>> PAM account configuration
>>
>
>System Error usually means an internal error in the SSSD.
>
>Please put debug_level = 8 into the [pam] and [domain] sections, restart
>the SSSD, re-run the login attempt and attach or copy the relevant
>sections of /var/log/sssd/sssd_pam.log and
>/var/log/sssd/sssd_$domain.log
>
>___
>Freeipa-users mailing list
>Freeipa-users@redhat.com
>https://www.redhat.com/mailman/listinfo/freeipa-users
>
>
>___
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users