On Thu, Apr 04, 2013 at 09:35:00PM -0400, Sutton, Harry (GSSE) wrote: > On 04/04/2013 01:07 PM, Dmitri Pal wrote: > > > >How SSH is configured on the RHEL box? > >Does it use GSSAPI Authentication? > > > >The version in F18 should be very close to version in RHEL 6.4. > >Are your sssd.conf files in any way different? > >It seems that your RHEL box is misconfigured in some way. > > > >Things to look at is your pam.conf for the desktop login, > >nsswitch.conf, sssd.conf and ssh configuration files. > >Looking at those would most likely provide the answers. > > Thanks, the GDM login problem turned out to be missing pam_krb5.so > lines in /etc/pam.d/system-auth and password-auth. The other > configuration files are identical between the working Fedora laptop > and the (now working) RHEL 6.4 workstation. > > SSH is configured to use GSSAPI, as I suspected and your suggestion > that I check confirmed. > > /Harry
Hi, are you using pam_krb5 along with SSSD authentication? Is there a reason not to use pam_sss.so ? In general I would not recommend configuring the PAM stack yourself but rather let authconfig do the job. This call would let authconfig generate /etc/nsswitch.conf /etc/pam.d/system-auth and /etc/pam.d/password-auth but would let you keep using the sssd.conf: authconfig --enablesssdauth --enablesssd --update _______________________________________________ sssd-users mailing list [email protected] https://lists.fedorahosted.org/mailman/listinfo/sssd-users
