<div class="gmail_quote">On Wed, Sep 26, 2012 at 11:08 PM, David Sastre Medina <<a href="mailto:d.sastre.medina@gmail.com" target="_blank">d.sastre.medina@gmail.com</a>> wrote: <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"> On Wed, Sep 26, 2012 at 03:06:40PM -0400, Rob Crittenden wrote: > David Sastre wrote: > > [big snip] <div class="im">> Does sssd work on this machine otherwise? getent passwd <foo>, you > can log into the console as the user, or perhaps kinit to the user? </div></blockquote></div> It looks like sssd is operating correctly $ getent passwd dsastrem dsastrem:*:1543400001:1543400001:David Sastre Medina:/home/dsastrem:/bin/rbash I can also kinit w/o problems: $ klist klist: No credentials cache found (ticket cache FILE:/tmp/krb5cc_500) $ kinit dsastrem Password for <a href="mailto:dsastrem@SOME.DOMAIN.COM">dsastrem@SOME.DOMAIN.COM</a>: $ klist Ticket cache: FILE:/tmp/krb5cc_500 Default principal: <a href="mailto:dsastrem@SOME.DOMAIN.COM">dsastrem@SOME.DOMAIN.COM</a> I can log in using ssh, and the log shows: debug1: Authentication succeeded (gssapi-with-mic). Valid starting Expires Service principal 09/27/12 07:59:36 09/28/12 07:59:36 krbtgt/<a href="mailto:SOME.DOMAIN.COM@SOME.DOMAIN.COM">SOME.DOMAIN.COM@SOME.DOMAIN.COM</a> renew until 09/28/12 08:01:20 Yet, sudo fails to authenticate me: dsastrem@obelix ~ $ sudo ip addr show [sudo] password for dsastrem: Sorry, try again. [sudo] password for dsastrem: Sorry, try again. [sudo] password for dsastrem: sudo: 2 incorrect password attempts