On Mon, Mar 08, 2021 at 07:25:13PM +0200, Rudi Dayan wrote: > Hello, > > > > I am sending you a mail again with more details and all the logs you asked, I > hope now it will be clearer. > > > > I would like to implement smartcard authentication to Microsoft AD with sssd > on > Ubuntu 20.04 LTS. > > I succeed login to AD with a password but when I tried to use a smartcard the > action failed as the description above: > > After a minute of timeout the password window pop up (instead of PIN code pop > up) and even when I put the correct password, I got the following error : > "Authentication failure". > > When I used kinit using a smartcard with the same user the action succeed and > I > got the TGT. > > > > I have attached the configuration files : krb5.conf ,sssd.conf and all the > logs > files that you asked: krb5_child.log, > p11_child.log,sssd_pam.log,sssd_domain.log and sssd.log.
Hi, according to the p11_child.log no Smartcard can be found. It looks like you are using a 3rd party PKCS#11 module libsadaptor.so. Can you access the Smartcard with other tools on your Ubuntu system? If yes, can you tell me which tool this is and send some sample output. If not, can you check if pcscd is installed and running? bye, Sumit > > You can see all those logs in two cases: > > 1. Password login > 2. Smartcard login > > > > I would appreciate your help on this issue because you are my last resource. > > Thank you again, > > Rudi > > _______________________________________________ > sssd-users mailing list -- sssd-users@lists.fedorahosted.org > To unsubscribe send an email to sssd-users-le...@lists.fedorahosted.org > Fedora Code of Conduct: > https://docs.fedoraproject.org/en-US/project/code-of-conduct/ > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > List Archives: > https://lists.fedorahosted.org/archives/list/sssd-users@lists.fedorahosted.org > Do not reply to spam on the list, report it: > https://pagure.io/fedora-infrastructure _______________________________________________ sssd-users mailing list -- sssd-users@lists.fedorahosted.org To unsubscribe send an email to sssd-users-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-users@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
