[Freeipa-users] Unable to authenticate a client user against IPA

[Rob Crittenden]

Steven Jones wrote:
> 8><------
>
>
> So how do I fault find? where do I start?
>
> ie Where do I start to look to determine why a user cannot login to a
> client via freeipa?
>
> How can I be more clear? because so far the replies have been not very
> productive.
>
> regards
>
>

Add debug_level = 9 to the ipa provide in /etc/sssd/sssd.conf, restart 
sssd, and try your login again. Look 
in/var/log/sssd/sssd_example.com.log for information on the login attempt.

Your uid/gid will likely differ.

# getent passwd admin
admin:*:264200000:264200000:Administrator:/home/admin:/bin/bash
# id admin
uid=264200000(admin) gid=264200000(admins) groups=264200000(admins)
# getent group admins
admins:*:264200000:admin
# finger admin
Login: admin                            Name: Administrator
Directory: /home/admin                  Shell: /bin/bash
Never logged in.
No mail.
No Plan.