On Thu, Dec 15, 2016 at 04:22:01AM +0000, Thomas Beaudry wrote:
> Hi,
> 
> Sorry i have a hard time explaining exactly what the problem is in technical 
> terms since I'm not sure what they are called.
> 
> Essentially, when I power on a machine there is the initial login screen that 
> you are prompted with in ubuntu.  If a user has never logged onto a 
> particular machine it doesn't allow them.   However, if i have already ssh'd 
> to that machine (via another machine) with the user account, then if i try 
> and do the initial login then it works.  Once the user logs in once, i can 
> always login afterwards.
> 
> Does that make sense?

Yes, I just have a hard time imagining why this would be the case. The
only scenario I can think of is that the Ubuntu login manager's PAM
stack is not configured to create the home directory on that machine
with pam_mkhomedir or similar while ssh's PAM stack is, the ssh login
creates the homedir and then you can log in via GUI as well.

So I would recommend to look into the system's logs (auth.log in Ubuntu
IIRC? Or does Ubuntu have journald already?), or enable debug_level in sssd
logs and check if sssd is indeed failing.
_______________________________________________
sssd-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to