<html dir="ltr">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
<style>
<!--
@font-face
{font-family:"Cambria Math"}
@font-face
{font-family:Calibri}
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif"}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline}
span.EmailStyle17
{font-family:"Calibri","sans-serif";
color:windowtext}
@page WordSection1
{margin:1.0in 1.0in 1.0in 1.0in}
-->
</style><style id="owaParaStyle" type="text/css">P {margin-top:0;margin-bottom:0;}</style>
</head>
<body ocsi="0" fpstyle="1" lang="EN-US" link="blue" vlink="purple">
<div style="direction: ltr;font-family: Tahoma;color: #000000;font-size: 10pt;">Hi,<br>
<br>
In the gui you can do a hbac test of the rule.<br>
<br>
Also what are the UIDS? IPA provided 32bit ones? or your own? <br>
<br>
I'd suggest re-setting that user's password and get them to login and reset the password, that works for me, it was a sign of bad/failed replication in my system I think (now fixed).<br>
<br>
<div>regards
<div style="font-family: Tahoma; font-size: 13px;">
<p>Steven Jones</p>
<p>Technical Specialist - Linux RHCE</p>
<p>Victoria University, Wellington, NZ</p>
<p>0064 4 463 6272<br>
</p>
</div>
</div>
<div style="font-family: Times New Roman; color: rgb(0, 0, 0); font-size: 16px;">
<hr tabindex="-1">
<div style="direction: ltr;" id="divRpF215275"><font color="#000000" face="Tahoma" size="2"><b>From:</b> freeipa-users-bounces@redhat.com [freeipa-users-bounces@redhat.com] on behalf of Joe Linoff [jlinoff@tabula.com]<br>
<b>Sent:</b> Tuesday, 24 July 2012 8:50 a.m.<br>
<b>To:</b> sgallagh@redhat.com; dpal@redhat.com<br>
<b>Cc:</b> Joe Linoff; freeipa-users@redhat.com<br>
<b>Subject:</b> Re: [Freeipa-users] User can't login via ssh from external<br>
</font><br>
</div>
<div></div>
<div>
<div class="WordSection1">
<p class="MsoNormal">Hi Stephen and Dmitri:</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">Thank you for the sshd GSSAPI configuration suggestion. I tried it this morning but it didn’t work. That particular user is still not able to login. What is even more interesting is that I created a user with the identical setup and the
new user worked (i.e., they were able to ssh in remotely). </p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">I am really confused by this because it does not appear to be a global setup issue like ssh. It may be some sort of HBAC rule violation or something else equally strange. I just can’t figure it out.</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">Can you suggest any other ways to troubleshoot this?</p>
<p class="MsoNormal"><br>
Thanks,</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">Joe</p>
<p class="MsoNormal"> </p>
</div>
</div>
</div>
</div>
</body>
</html>