Bristol Digest, Vol 656, Issue 1

Send Bristol mailing list submissions to
bristol@mailman.lug.org.uk

To subscribe or unsubscribe via the World Wide Web, visit
https://mailman.lug.org.uk/mailman/listinfo/bristol
or, via email, send a message with subject or body 'help' to
bristol-request@mailman.lug.org.uk

You can reach the person managing the list at
bristol-owner@mailman.lug.org.uk

When replying, please edit your Subject line so it is more specific
than "Re: Contents of Bristol digest..."

Today's Topics:

1. SSSD Problem (Dave Addison)

----------------------------------------------------------------------

Message: 1
Date: Tue, 09 Aug 2016 00:13:55 +0100
From: Dave Addison <dave@redmoor.org.uk>
To: Bristol and Bath Linux User Group <bristol@mailman.lug.org.uk>
Subject: [bristol] SSSD Problem
Message-ID: <11171678.grkXsdhQC8@phaedra>
Content-Type: text/plain; charset="us-ascii"

Hi All

Would anyone be up for providing some assistance with an sssd problem I'm
having?

I have three machines all using sssd with an ldap backend for authentication
and, on one of them, I can't login as root either via ssh or su. ssh just
fails after three attempts but su returns an error "User unknown to underlying
authentication module"

replacing pam_sss.so with pam_ldap.so in the common-auth file in pam.d makes
the problem go away

replacing pam_sss.so with pam_unix.so also makes the problem go away. Ithink
this means there isn't a problem with the passwd and shadow files. I have
another non-root user in passwd and this user can also login with pam_sss.so
configured

nsswitch.conf can be either "files sss" or "compat sss" on all machines for
passwd and group without affecting behaviour. None of the machines have an
nsswitch.conf entry for shadow.

All three machines have "filter_user = root" and "filter_group = root" in
sssd.conf. Removing these filters on the failing machine makes no difference to
behaviour.

Any ideas?
Regards
Dave

------------------------------

Subject: Digest Footer

_______________________________________________
Bristol mailing list
Bristol@mailman.lug.org.uk
https://mailman.lug.org.uk/mailman/listinfo/bristol

------------------------------

End of Bristol Digest, Vol 656, Issue 1
***************************************