[Freeipa-users] cannot logon: system error?

[Jakub Hrozek]

On Tue, Sep 04, 2012 at 11:02:36AM -0700, george he wrote:
> Hi all,
> 
> This is another issue I'm having with another ipa client.
> Both the sever and the client are centos 6.3
> The client was configured all right. I was able to log on at a point.
> but then after the screen was auto-locked over the night, I cannot log on any more.
> If I try on the console, it says "system error" and return to the locked screen.
> If I try ssh myclient, it says "Connection closed by myclient".
> 
> This is what in /var/log/secure
> Sep  4 13:57:52 localhost sshd[4208]: Authorized to jhe, krb5 principal jhe at PSYCH.YALE.EDU (krb5_kuserok)
> Sep  4 13:57:52 localhost sshd[4208]: pam_sss(sshd:account): Access denied for user jhe: 4 (System error)
> Sep  4 13:57:52 localhost sshd[4209]: fatal: Access denied for user jhe by PAM account configuration
> 

System Error usually means an internal error in the SSSD.

Please put debug_level = 8 into the [pam] and [domain] sections, restart
the SSSD, re-run the login attempt and attach or copy the relevant
sections of /var/log/sssd/sssd_pam.log and
/var/log/sssd/sssd_$domain.log