[Freeipa-users] Issue with users logging in for the first time using X

[David Christensen]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I am having an issue when a new user is logging in for the first time
using an X session.

When they first login everything seems to go ok, when they enter their
password, they are prompted that their password has expired and informed
that they need to change their pw, they are asked for the kerberos pw,
then prompted for a new Unix pw, where they enter it twice, however once
they do this they get an error that the user can not be authorized.

However, ff the user then logs in to any kerberized box via ssh, and
goes through the same procedure their password is changed and once this
is done they are then able to login via an X session.

Any ideas as to why this happens?

Thanks.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iEYEARECAAYFAkpcoSgACgkQ5B+8XEnAvqtNTgCggkGvpsVHioH0RH7o7XHDgYdz
R9IAnjT27NX09oUr7hFzwLR0FhafWA+P
=Wf37
-----END PGP SIGNATURE-----