<html><head><style type='text/css'>p { margin: 0; }</style></head><body><div style='font-family: tahoma,new york,times,serif; font-size: 12pt; color: #000000'><span style="color: rgb(0, 0, 0); font-size: medium;">Hi Shashank, </span><div style="color: rgb(0, 0, 0); font-size: medium;"><br></div><div style="color: rgb(0, 0, 0); font-size: medium;">Besides the KB settings, you must create the HBAC service on IPA. Policy -> HBAC Service -> Add, then create a service named "<a href="https://vmp-ipa01.santos.sp.gov.br/ipa/ui/#rhn-satellite" style="text-decoration: none; color: rgb(29, 133, 213); font-family: 'Liberation Sans', Arial, Sans; font-size: 11px; background-color: rgb(255, 255, 255);">rhn-satellite</a>" and suit it into your HBAC rules, just like you would do with sshd or login services.</div><div style="color: rgb(0, 0, 0); font-size: medium;"><br></div><div style="color: rgb(0, 0, 0); font-size: medium;">After that, on Spacewalk, just create the matching login users and mark PAM authentication. It should work.</div><br><div><font size="3"><span name="x"></span></font><b style="color: rgb(0, 0, 0); font-size: 12pt;"><font color="#4d4d4d" face="tahoma, new york, times, serif">Bruno Henrique Barbosa</font></b>
<div>
<div><font color="#808080" size="2">Jr. Sys Admin</font></div></div><div><font color="#808080" size="2">IT Department</font></div><div><font color="#808080" size="2">Santos City Hall</font></div><font size="3"><span name="x"></span></font><br></div><hr id="zwchr" style="color: rgb(0, 0, 0); font-size: 12pt;"><div style="color: rgb(0, 0, 0); font-size: 12pt; font-weight: normal; font-style: normal; text-decoration: none; font-family: Helvetica, Arial, sans-serif;"><b>De: </b>"Shashank Sahni" <shredder12@gmail.com><br><b>Para: </b>spacewalk-list@redhat.com<br><b>Enviadas: </b>Terça-feira, 25 de Fevereiro de 2014 8:30:03<br><b>Assunto: </b>[Spacewalk-list] Integrating Spacewalk Authentication with IPA<br><br><div dir="ltr"><div><div><div>Hi everyone,<br><br></div>I'm currently running configured instances of Spacewalk and Kibana. In order to integrate Spacewalk authentication with IPA, I followed the following post.<br><br>
<a href="https://access.redhat.com/site/documentation/en-US/Red_Hat_Network_Satellite/5.4/html-single/Installation_Guide/index.html#sect-Installation_Guide-Maintenance-Implementing_PAM_Authentication" target="_blank">https://access.redhat.com/site/documentation/en-US/Red_Hat_Network_Satellite/5.4/html-single/Installation_Guide/index.html#sect-Installation_Guide-Maintenance-Implementing_PAM_Authentication</a><br>
<br></div>I created a new user and marked it to be authenticated via PAM. I populated the PAM file with the contents mentioned in the post above. Unfortunately, the authentication isn't working.<br><br></div>I get the following log message in tomcat6/catalina.out<br>
<br>com.redhat.rhn.domain.user.legacy.UserImpl - PAM login for user User abc (id 4, org_id 1) failed with error Authentication failure.<br><div><div><div><br></div><div>Note that, ipa-client is successfully installed and configured on spacewalk server.<br>
<br></div><div>Any suggestions?<br></div><div><br clear="all"><div><div><div>--<br>Shashank Sahni<br></div>
</div></div></div></div></div></div>
<br>_______________________________________________<br>Spacewalk-list mailing list<br>Spacewalk-list@redhat.com<br>https://www.redhat.com/mailman/listinfo/spacewalk-list</div><br></div></body></html>