<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:x="urn:schemas-microsoft-com:office:excel" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"> <head> <meta http-equiv="Content-Type" content="text/html; charset=us-ascii"> <meta name="Generator" content="Microsoft Word 15 (filtered medium)"> <style></style> </head> <body lang="EN-GB" link="#0563C1" vlink="#954F72"> <div class="WordSection1"> Ipa user authentication failure on centos client. Login using a valid account and login success for other ipa client servers. It would be great if you can provide any hind or any modification to overcome the situation.<o:p></o:p> <o:p> </o:p> <o:p></o:p> <o:p> </o:p> Below is the audit log<o:p></o:p> <o:p> </o:p> type=USER_START msg=audit(1493987877.034:112): pid=2333 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.104.2 addr=192.168.104.2 terminal=ssh res=success'<o:p></o:p> type=CRYPTO_KEY_USER msg=audit(1493987877.052:113): pid=2344 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=ad:95:6a:ee:f6:9b:39:1c:e1:ea:1d:c4:04:8b:2d:6d direction=? spid=2344 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.104.2 terminal=pts/0 res=success'<o:p></o:p> type=CRYPTO_KEY_USER msg=audit(1493987877.053:114): pid=2344 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=ec:42:62:ce:a9:56:92:f3:0b:a2:9f:b2:eb:ca:f0:4c direction=? spid=2344 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.104.2 terminal=pts/0 res=success'<o:p></o:p> type=CRYPTO_KEY_USER msg=audit(1493987877.053:115): pid=2344 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d2:56:9c:49:db:85:40:df:34:de:78:82:e5:fb:66:4e direction=? spid=2344 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.104.2 terminal=pts/0 res=success'<o:p></o:p> type=USER_LOGIN msg=audit(1493987877.057:116): pid=2344 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=192.168.104.2 addr=192.168.104.2 terminal=/dev/pts/0 res=success'<o:p></o:p> type=USER_START msg=audit(1493987877.057:117): pid=2344 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=192.168.104.2 addr=192.168.104.2 terminal=/dev/pts/0 res=success'<o:p></o:p> type=CRED_REFR msg=audit(1493987877.063:118): pid=2344 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.104.2 addr=192.168.104.2 terminal=ssh res=success'<o:p></o:p> type=CRYPTO_KEY_USER msg=audit(1493987950.855:119): pid=2367 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=ad:95:6a:ee:f6:9b:39:1c:e1:ea:1d:c4:04:8b:2d:6d direction=? spid=2367 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.104.2 terminal=? res=success'<o:p></o:p> type=CRYPTO_KEY_USER msg=audit(1493987950.855:120): pid=2367 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=ec:42:62:ce:a9:56:92:f3:0b:a2:9f:b2:eb:ca:f0:4c direction=? spid=2367 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.104.2 terminal=? res=success'<o:p></o:p> type=CRYPTO_KEY_USER msg=audit(1493987950.856:121): pid=2367 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d2:56:9c:49:db:85:40:df:34:de:78:82:e5:fb:66:4e direction=? spid=2367 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.104.2 terminal=? res=success'<o:p></o:p> type=CRYPTO_SESSION msg=audit(1493987950.859:122): pid=2366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-ctr ksize=256 mac=hmac-sha1 pfs=diffie-hellman-group-exchange-sha256 spid=2367 suid=74 rport=50587 laddr=192.168.220.5 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.104.2 terminal=? res=success'<o:p></o:p> type=CRYPTO_SESSION msg=audit(1493987950.859:123): pid=2366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-ctr ksize=256 mac=hmac-sha1 pfs=diffie-hellman-group-exchange-sha256 spid=2367 suid=74 rport=50587 laddr=192.168.220.5 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.104.2 terminal=? res=success'<o:p></o:p> type=USER_AUTH msg=audit(1493988003.357:124): pid=2369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="lakshan_864" exe="/usr/sbin/sshd" hostname=192.168.104.2 addr=192.168.104.2 terminal=ssh res=failed'<o:p></o:p> type=USER_AUTH msg=audit(1493988003.360:125): pid=2366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=challenge-response acct="lakshan_864" exe="/usr/sbin/sshd" hostname=? addr=192.168.104.2 terminal=ssh res=failed'<o:p></o:p> type=CRYPTO_KEY_USER msg=audit(1493988025.470:126): pid=2376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=ad:95:6a:ee:f6:9b:39:1c:e1:ea:1d:c4:04:8b:2d:6d direction=? spid=2376 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.104.2 terminal=? res=success'<o:p></o:p> type=CRYPTO_KEY_USER msg=audit(1493988025.470:127): pid=2376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=ec:42:62:ce:a9:56:92:f3:0b:a2:9f:b2:eb:ca:f0:4c direction=? spid=2376 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.104.2 terminal=? res=success'<o:p></o:p> type=CRYPTO_KEY_USER msg=audit(1493988025.470:128): pid=2376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d2:56:9c:49:db:85:40:df:34:de:78:82:e5:fb:66:4e direction=? spid=2376 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.104.2 terminal=? res=success'<o:p></o:p> type=CRYPTO_SESSION msg=audit(1493988025.473:129): pid=2375 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-ctr ksize=256 mac=hmac-sha1 pfs=diffie-hellman-group-exchange-sha256 spid=2376 suid=74 rport=50620 laddr=192.168.220.5 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.104.2 terminal=? res=success'<o:p></o:p> type=CRYPTO_SESSION msg=audit(1493988025.473:130): pid=2375 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-ctr ksize=256 mac=hmac-sha1 pfs=diffie-hellman-group-exchange-sha256 spid=2376 suid=74 rport=50620 laddr=192.168.220.5 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.104.2 terminal=? res=success'<o:p></o:p> type=USER_AUTH msg=audit(1493988068.166:131): pid=2377 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.104.2 addr=192.168.104.2 terminal=ssh res=success'<o:p></o:p> type=USER_ACCT msg=audit(1493988068.172:132): pid=2377 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.104.2 addr=192.168.104.2 terminal=ssh res=success'<o:p></o:p> type=CRYPTO_KEY_USER msg=audit(1493988068.176:133): pid=2375 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2376 suid=74 rport=50620 laddr=192.168.220.5 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.104.2 terminal=? res=success'<o:p></o:p> type=USER_AUTH msg=audit(1493988068.178:134): pid=2375 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.104.2 terminal=ssh res=success'<o:p></o:p> type=CRED_ACQ msg=audit(1493988068.180:135): pid=2375 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.104.2 addr=192.168.104.2 terminal=ssh res=success'<o:p></o:p> type=LOGIN msg=audit(1493988068.180:136): pid=2375 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=2 res=1<o:p></o:p> type=USER_ROLE_CHANGE msg=audit(1493988068.569:137): pid=2375 uid=0 auid=0 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.104.2 addr=192.168.104.2 terminal=ssh res=success'<o:p></o:p> type=USER_START msg=audit(1493988068.606:138): pid=2375 uid=0 auid=0 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.104.2 addr=192.168.104.2 terminal=ssh res=success'<o:p></o:p> type=CRYPTO_KEY_USER msg=audit(1493988068.623:139): pid=2380 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=ad:95:6a:ee:f6:9b:39:1c:e1:ea:1d:c4:04:8b:2d:6d direction=? spid=2380 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.104.2 terminal=pts/1 res=success'<o:p></o:p> type=CRYPTO_KEY_USER msg=audit(1493988068.624:140): pid=2380 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=ec:42:62:ce:a9:56:92:f3:0b:a2:9f:b2:eb:ca:f0:4c direction=? spid=2380 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.104.2 terminal=pts/1 res=success'<o:p></o:p> type=CRYPTO_KEY_USER msg=audit(1493988068.624:141): pid=2380 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d2:56:9c:49:db:85:40:df:34:de:78:82:e5:fb:66:4e direction=? spid=2380 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.104.2 terminal=pts/1 res=success'<o:p></o:p> type=USER_LOGIN msg=audit(1493988068.628:142): pid=2380 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=192.168.104.2 addr=192.168.104.2 terminal=/dev/pts/1 res=success'<o:p></o:p> type=USER_START msg=audit(1493988068.628:143): pid=2380 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=192.168.104.2 addr=192.168.104.2 terminal=/dev/pts/1 res=success'<o:p></o:p> type=CRED_REFR msg=audit(1493988068.633:144): pid=2380 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.104.2 addr=192.168.104.2 terminal=ssh res=success'<o:p></o:p> <o:p> </o:p> <o:p> </o:p> <div> Best Regards,<o:p></o:p> <o:p> </o:p> Reply / Forwarded by<o:p></o:p> Lakshanth Chandika Jayasekara<o:p></o:p> Senior Systems Engineer<o:p></o:p> <o:p> </o:p> Confidentiality Notice: The information contained in this message is privileged and confidential information intended only for the use of the individual or entity named above. If the reader of this message is not the intended recipient, or the employee or agent responsible to deliver it to the intended recipient, you are hereby notified that any release, dissemination, distribution, or copying of this communication is strictly prohibited. If you have received this communication in error, please notify the author immediately by replying to this message and delete the original message. Internet communications cannot be guaranteed to be timely, secure, error or virus-free. The sender does not accept liability for any errors or omissions. This email has been scanned for all viruses by the Symantec End Point Protection Email Security System.<o:p></o:p> P Save a tree. Don't print this e-mail unless it's really necessary. <o:p></o:p> </div> <o:p> </o:p> <div> <div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in"> From: Lakshan Jayasekara Sent: Friday, May 5, 2017 5:06 PM To: 'freeipa-users@redhat.com' <freeipa-users@redhat.com> Subject: Permission Denied for IPA User<o:p></o:p> </div> </div> <o:p> </o:p> IPA user cannot login to the target centos system using the ssh. User and the password are valid and can access IPA server.<o:p></o:p> <o:p> </o:p> <o:p> </o:p> <table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" style="border-collapse:collapse"> <tbody> <tr> <td width="479" valign="top" style="width:359.6pt;padding:0in 5.4pt 0in 5.4pt"> Lakshanth Chandika Jayasekara<o:p></o:p> </td> <td width="284" rowspan="7" valign="top" style="width:213.3pt;padding:0in 5.4pt 0in 5.4pt"> <img width="270" height="135" id="Picture_x0020_1" src="cid:image001.png@01D2C5C3.ACDDD740" alt="cid:image001.png@01D1F258.46575F30"><o:p></o:p> </td> </tr> <tr style="height:17.5pt"> <td width="479" valign="top" style="width:359.6pt;padding:0in 5.4pt 0in 5.4pt;height:17.5pt"> Senior Systems Engineer <o:p></o:p> </td> </tr> <tr> <td width="479" valign="top" style="width:359.6pt;padding:0in 5.4pt 0in 5.4pt"> Mobile:+94 77 294 0396 | Dir:+94 11 235 6949<o:p></o:p> </td> </tr> <tr> <td width="479" valign="top" style="width:359.6pt;padding:0in 5.4pt 0in 5.4pt"> General:+94 11 235 6900 Ext: 949 | Fax:+94 11 2544346<o:p></o:p> </td> </tr> <tr> <td width="479" valign="top" style="width:359.6pt;padding:0in 5.4pt 0in 5.4pt"> LankaClear (Pvt) Ltd, Level 18, Bank of Ceylon Head Office,<o:p></o:p> </td> </tr> <tr> <td width="479" valign="top" style="width:359.6pt;padding:0in 5.4pt 0in 5.4pt"> “BOC Square”, No. 01, Bank of Ceylon Mw, Colombo 01, Sri Lanka.<o:p></o:p> </td> </tr> <tr> <td width="479" valign="top" style="width:359.6pt;padding:0in 5.4pt 0in 5.4pt"> <a href="http://www.lankaclear.com/">http://www.lankaclear.com</a><o:p></o:p> </td> </tr> </tbody> </table> <o:p> </o:p> Confidentiality Notice: The information contained in this message is privileged and confidential information intended only for the use of the individual or entity named above. If the reader of this message is not the intended recipient, or the employee or agent responsible to deliver it to the intended recipient, you are hereby notified that any release, dissemination, distribution, or copying of this communication is strictly prohibited. If you have received this communication in error, please notify the author immediately by replying to this message and delete the original message. Internet communications cannot be guaranteed to be timely, secure, error or virus-free. The sender does not accept liability for any errors or omissions. This email has been scanned for all viruses by the Symantec End Point Protection Email Security System.<o:p></o:p> P Save a tree. Don't print this e-mail unless it's really necessary. <o:p></o:p> <o:p> </o:p> </div> </body> </html>