On Wed, Nov 25, 2009 at 06:03:48PM +0100, Eric Doutreleau wrote: > i m trying to setup sssd on a fedora 12 machine > > i m carefully following the instructions of this page > > https://fedorahosted.org/sssd/wiki/HOWTO_Configure > > then i m trying to configure the LOCAL provider. [snip] > i look in the /var/log/secure file > i have > Nov 25 18:00:16 localhost unix_chkpwd[26069]: check pass; user unknown > Nov 25 18:00:16 localhost unix_chkpwd[26069]: password check failed > for user (glupglup) > Nov 25 18:00:16 localhost sshd[26067]: pam_unix(sshd:auth): > authentication failure; logname= uid=0 euid=0 tty=ssh ruser= > rhost=157.159.21.158 user=glupglup > Nov 25 18:00:16 localhost sshd[26067]: pam_sss(sshd:auth): > authentication success; logname= uid=0 euid=0 tty=ssh ruser= > rhost=157.159.21.158 user=glupglup > Nov 25 18:00:16 localhost unix_chkpwd[26070]: could not obtain user > info (glupglup) > Nov 25 18:00:16 localhost sshd[26067]: pam_sss(sshd:account): > authentication success; logname= uid=0 euid=0 tty=ssh ruser= > rhost=157.159.21.158 user=glupglup > Nov 25 18:00:16 localhost sshd[26067]: Failed password for glupglup > from 157.159.21.158 port 35169 ssh2 > Nov 25 18:00:16 localhost sshd[26068]: fatal: Access denied for user > glupglup by PAM account configuration > > Has someone already succed in configuring sssd? A problem looking up user information points to not having 'sss' listed as a source of information in /etc/nsswitch.conf. If you don't have 'sss' listed on the 'passwd:', 'group:', and 'shadow:' lines in that file, it's probably worth adding it, restarting sshd so that it'll re-read that configuration file, and trying again. This is just my guess going from the error log. If that doesn't solve it, you'll probably get better help on the sssd-devel mailing list on fedorahosted.org (https://fedorahosted.org/mailman/listinfo/sssd-devel). HTH, Nalin -- fedora-list mailing list fedora-list@xxxxxxxxxx To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
