[Freeipa-users] Users can't login on some systems.

[Jakub Hrozek]

On Fri, May 05, 2017 at 11:58:42AM +0000, Lakshan Jayasekara wrote:
> Ipa user authentication failure on centos client. Login using a valid account and login success for other ipa client servers. It would be great if you can provide any hind or any modification to overcome the situation.

Things I'd try are:
- make sure the user resolves on the target system
- run ipa hbactest to see if the user should be permitted access
- check /var/log/secure and see what does pam_sss return
- increase debug_level in sssd.conf on the client and see what the sssd debug logs yield