<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"Segoe UI";
panose-1:2 11 5 2 4 2 4 2 2 3;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 70.85pt 70.85pt 70.85pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="NL" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal"><span lang="EN-US">Hello<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">I am trying to setup an IPA configuration at an remote site. I got the ssh-connection working with a 6.6 client ( ipa-client version 3.0.0), but I can’t get it working with a 7.3 client ( ipa-client version 4.4.0 ).<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Version of the server is 4.4.0.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Can some help me with this problem.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">From the logfiles I got the following messages.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">/var/log/secure:<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">May 11 13:05:10 edsnfmwsv009 sshd[14026]: pam_sss(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.168.72.145 user=berkouwa<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">May 11 13:05:10 edsnfmwsv009 sshd[14026]: pam_sss(sshd:auth): received for user berkouwa: 17 (Failure setting user credentials)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">May 11 13:05:10 edsnfmwsv009 sshd[14021]: error: PAM: Authentication failure for berkouwa from 192.168.72.145<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">May 11 13:05:10 edsnfmwsv009 sshd[14021]: Postponed keyboard-interactive for berkouwa from 192.168.72.145 port 51772 ssh2 [preauth]<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal">/var/log/sssd/krb5_child.log:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span lang="EN-US">(Thu May 11 13:05:10 2017) [[sssd[krb5_child[14030]]]] [sss_child_krb5_trace_cb] (0x4000): [14030] 1494500710.640900: Received cookie: MIT<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">(Thu May 11 13:05:10 2017) [[sssd[krb5_child[14030]]]] [sss_krb5_responder] (0x4000): Got question [password].<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">(Thu May 11 13:05:10 2017) [[sssd[krb5_child[14030]]]] [sss_krb5_prompter] (0x4000): sss_krb5_prompter name [(null)] banner [(null)] num_prompts [1] EINVAL.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">(Thu May 11 13:05:10 2017) [[sssd[krb5_child[14030]]]] [sss_krb5_prompter] (0x0020): Cannot handle password prompts.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">(Thu May 11 13:05:10 2017) [[sssd[krb5_child[14030]]]] [sss_krb5_prompter] (0x4000): Prompt [0][Password for berkouwa@EDSN.LOCAL].<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">(Thu May 11 13:05:10 2017) [[sssd[krb5_child[14030]]]] [sss_child_krb5_trace_cb] (0x4000): [14030] 1494500710.640958: Preauth module encrypted_challenge (138) (real) returned: -1765328254/Cannot read password<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">(Thu May 11 13:05:10 2017) [[sssd[krb5_child[14030]]]] [get_and_save_tgt] (0x0400): krb5_get_init_creds_password returned [-1765328254} during pre-auth.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">(Thu May 11 13:05:10 2017) [[sssd[krb5_child[14030]]]] [k5c_send_data] (0x0200): Received error code 0<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">(Thu May 11 13:05:10 2017) [[sssd[krb5_child[14030]]]] [pack_response_packet] (0x2000): response packet size: [12]<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">(Thu May 11 13:05:10 2017) [[sssd[krb5_child[14030]]]] [k5c_send_data] (0x4000): Response sent.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">(Thu May 11 13:05:10 2017) [[sssd[krb5_child[14030]]]] [main] (0x0400): krb5_child completed successfully<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">I placed the full logfiles and the sssd.conf here:
</span><span style="font-size:10.0pt;font-family:"Segoe UI",sans-serif"><a href="https://drive.google.com/open?id=0B66tVXzcZy1CdFZNb1dvUjk4Tnc"><span lang="EN-US">https://drive.google.com/open?id=0B66tVXzcZy1CdFZNb1dvUjk4Tnc</span></a></span><span lang="EN-US"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal">Walter<o:p></o:p></p>
</div>
</body>
</html>