[Freeipa-users] Trying to trace why a user cannot login to a client

Steven Jones Steven.Jones at vuw.ac.nz
Tue May 1 03:47:30 UTC 2012


I have a user jonesst1 which can login to a workstation fine, but a second user thing cannot, here is the secure log output,

=========
May  1 15:45:49 vuwunicorh6ws04 login: pam_unix(login:auth): authentication failure; logname=LOGIN uid=0 euid=0 tty=tty1 ruser= rhost=  user=jonesst1
May  1 15:45:50 vuwunicorh6ws04 login: pam_sss(login:auth): authentication success; logname=LOGIN uid=0 euid=0 tty=tty1 ruser= rhost= user=jonesst1
May  1 15:45:50 vuwunicorh6ws04 login: pam_unix(login:session): session opened for user jonesst1 by LOGIN(uid=0)
May  1 15:45:50 vuwunicorh6ws04 login: LOGIN ON tty1 BY jonesst1
May  1 15:45:52 vuwunicorh6ws04 login: pam_unix(login:session): session closed for user jonesst1
May  1 15:45:55 vuwunicorh6ws04 login: PAM unable to dlopen(/lib64/security/pam_fprintd.so): /lib64/security/pam_fprintd.so: cannot open shared object file: No such file or directory
May  1 15:45:55 vuwunicorh6ws04 login: PAM adding faulty module: /lib64/security/pam_fprintd.so
May  1 15:46:00 vuwunicorh6ws04 login: pam_unix(login:auth): authentication failure; logname=LOGIN uid=0 euid=0 tty=tty1 ruser= rhost=  user=thing
May  1 15:46:00 vuwunicorh6ws04 login: pam_sss(login:auth): system info: [Decrypt integrity check failed]
May  1 15:46:00 vuwunicorh6ws04 login: pam_sss(login:auth): authentication failure; logname=LOGIN uid=0 euid=0 tty=tty1 ruser= rhost= user=thing
May  1 15:46:00 vuwunicorh6ws04 login: pam_sss(login:auth): received for user thing: 4 (System error)
May  1 15:46:03 vuwunicorh6ws04 login: FAILED LOGIN 1 FROM (null) FOR thing, Authentication failure
=============

How do I trace what is wrong with the user "thing"?



regards

Steven Jones

Technical Specialist - Linux RHCE

Victoria University, Wellington, NZ

0064 4 463 6272

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20120501/917acb3b/attachment.htm>


More information about the Freeipa-users mailing list