Public bug reported:

I wasn't able to log in since last update.

Jan 11 12:20:41 hostname sshd[18546]: Authorized to user, krb5 principal 
user@domain (krb5_kuserok)
Jan 11 12:20:41 hostname sshd[18546]: pam_sss(sshd:account): Access denied for 
user user: 4 (System error)
Jan 11 12:20:41 hostname sshd[18546]: fatal: Access denied for user user by PAM 
account configuration [preauth]

I found a solution on a mailing list:
https://lists.fedorahosted.org/archives/list/[email protected]/thread/4PW5RPBHETX3KQXJXFQFB6B33A2HMWWB/

I didn't have "ad_gpo_access_control = enforcing" but setting
"ad_gpo_access_control = permissive" worked.

ProblemType: Bug
DistroRelease: Ubuntu 16.04
Package: sssd 1.13.4-1ubuntu1.10
ProcVersionSignature: Ubuntu 4.4.0-109.132-generic 4.4.98
Uname: Linux 4.4.0-109-generic x86_64
ApportVersion: 2.20.1-0ubuntu2.15
Architecture: amd64
Date: Thu Jan 11 12:32:56 2018
InstallationDate: Installed on 2017-02-02 (342 days ago)
InstallationMedia: Ubuntu-Server 16.04.1 LTS "Xenial Xerus" - Release amd64 
(20160719)
SourcePackage: sssd
UpgradeStatus: No upgrade log present (probably fresh install)

** Affects: sssd (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: amd64 apport-bug xenial

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1742752

Title:
  system error(4) since latest update on xenial

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/sssd/+bug/1742752/+subscriptions

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to