Re: how to debug sssd

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Wed, Nov 25, 2009 at 06:03:48PM +0100, Eric Doutreleau wrote:
> i m trying to setup sssd on a fedora 12 machine
> 
> i m carefully following the instructions of this page
> 
> https://fedorahosted.org/sssd/wiki/HOWTO_Configure
> 
> then i m trying to configure the LOCAL provider.
[snip]
> i look in the /var/log/secure file
> i have
> Nov 25 18:00:16 localhost unix_chkpwd[26069]: check pass; user unknown
> Nov 25 18:00:16 localhost unix_chkpwd[26069]: password check failed
> for user (glupglup)
> Nov 25 18:00:16 localhost sshd[26067]: pam_unix(sshd:auth):
> authentication failure; logname= uid=0 euid=0 tty=ssh ruser=
> rhost=157.159.21.158  user=glupglup
> Nov 25 18:00:16 localhost sshd[26067]: pam_sss(sshd:auth):
> authentication success; logname= uid=0 euid=0 tty=ssh ruser=
> rhost=157.159.21.158 user=glupglup
> Nov 25 18:00:16 localhost unix_chkpwd[26070]: could not obtain user
> info (glupglup)
> Nov 25 18:00:16 localhost sshd[26067]: pam_sss(sshd:account):
> authentication success; logname= uid=0 euid=0 tty=ssh ruser=
> rhost=157.159.21.158 user=glupglup
> Nov 25 18:00:16 localhost sshd[26067]: Failed password for glupglup
> from 157.159.21.158 port 35169 ssh2
> Nov 25 18:00:16 localhost sshd[26068]: fatal: Access denied for user
> glupglup by PAM account configuration
> 
> Has someone already succed in configuring sssd?

A problem looking up user information points to not having 'sss' listed
as a source of information in /etc/nsswitch.conf.  If you don't have
'sss' listed on the 'passwd:', 'group:', and 'shadow:' lines in that
file, it's probably worth adding it, restarting sshd so that it'll
re-read that configuration file, and trying again.

This is just my guess going from the error log.  If that doesn't solve
it, you'll probably get better help on the sssd-devel mailing list on
fedorahosted.org (https://fedorahosted.org/mailman/listinfo/sssd-devel).

HTH,

Nalin

-- 
fedora-list mailing list
[email protected]
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines

[Index of Archives]     [Current Fedora Users]     [Fedora Desktop]     [Fedora SELinux]     [Yosemite News]     [Yosemite Photos]     [KDE Users]     [Fedora Tools]     [Fedora Docs]

  Powered by Linux