On Sun, Nov 13, 2016 at 04:03:06PM -0000, [email protected] wrote: > I found out, that /var/run/sss needed mode 0755. > > But I still cannot use passwords. > My /etc/pam.d/system looks like the following: > > # auth > auth sufficient pam_opie.so no_warn > no_fake_prompts > auth requisite pam_opieaccess.so no_warn allow_local > #auth sufficient pam_krb5.so no_warn try_first_pass > #auth sufficient pam_ssh.so no_warn try_first_pass > auth sufficient /usr/local/lib/pam_sss.so > auth required pam_unix.so no_warn > try_first_pass nullok > > # account > #account required pam_krb5.so > account required pam_login_access.so > account required pam_unix.so > account required /usr/local/lib/pam_sss.so > ignore_unknown_user > > # session > #session optional pam_ssh.so want_agent > session required pam_lastlog.so no_fail > session optional /usr/local/lib/pam_sss.so > > # password > #password sufficient pam_krb5.so no_warn try_first_pass > password sufficient /usr/local/lib/pam_sss.so use_authtok > password required pam_unix.so no_warn try_first_pass > > What am I doing wrong?
Please enable debugging (see https://fedorahosted.org/sssd/wiki/Troubleshooting for details) and check the logs files, especially sssd_pam.log, the domain log and krb5_child.log. HTH bye, Sumit > > Best regards, > Ronny > _______________________________________________ > sssd-users mailing list -- [email protected] > To unsubscribe send an email to [email protected] _______________________________________________ sssd-users mailing list -- [email protected] To unsubscribe send an email to [email protected]
