[Freeipa-users] cannot logon: system error?

george he george_he7 at yahoo.com
Tue Sep 4 21:41:04 UTC 2012


I removed the host on ipa server (ipa host-del, which works for this client but not another one), reinstalled the system, and configured the client, it worked.
Thanks,
George




>________________________________
> From: Jakub Hrozek <jhrozek at redhat.com>
>To: freeipa-users at redhat.com 
>Sent: Tuesday, September 4, 2012 3:05 PM
>Subject: Re: [Freeipa-users] cannot logon: system error?
> 
>On Tue, Sep 04, 2012 at 11:02:36AM -0700, george he wrote:
>> Hi all,
>> 
>> This is another issue I'm having with another ipa client.
>> Both the sever and the client are centos 6.3
>> The client was configured all right. I was able to log on at a point.
>> but then after the screen was auto-locked over the night, I cannot log on any more.
>> If I try on the console, it says "system error" and return to the locked screen.
>> If I try ssh myclient, it says "Connection closed by myclient".
>> 
>> This is what in /var/log/secure
>> Sep  4 13:57:52 localhost sshd[4208]: Authorized to jhe, krb5 principal jhe at PSYCH.YALE.EDU (krb5_kuserok)
>> Sep  4 13:57:52 localhost sshd[4208]: pam_sss(sshd:account): Access denied for user jhe: 4 (System error)
>> Sep  4 13:57:52 localhost sshd[4209]: fatal: Access denied for user jhe by PAM account configuration
>> 
>
>System Error usually means an internal error in the SSSD.
>
>Please put debug_level = 8 into the [pam] and [domain] sections, restart
>the SSSD, re-run the login attempt and attach or copy the relevant
>sections of /var/log/sssd/sssd_pam.log and
>/var/log/sssd/sssd_$domain.log
>
>_______________________________________________
>Freeipa-users mailing list
>Freeipa-users at redhat.com
>https://www.redhat.com/mailman/listinfo/freeipa-users
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20120904/9bef2a36/attachment.htm>


More information about the Freeipa-users mailing list