[Freeipa-users] error install replication

Martin Kosek mkosek at redhat.com
Mon Feb 9 10:12:38 UTC 2015


Ok. When on the server, does

# id admin

or "ssh admin@`hostname`" work? Maybe it does not recognize the admin user.

On 02/09/2015 09:29 AM, alireza baghery wrote:
> ipasrv# Service SSSD status
> sssd is runing
> nevertheless i restart service sssd
> but problem do not solved
> 
> On Mon, Feb 9, 2015 at 11:19 AM, Martin Kosek <mkosek at redhat.com> wrote:
> 
>> On 02/09/2015 07:42 AM, alireza baghery wrote:
>>> i check on both server ssh each other's name and ssh successful and
>> resolve
>>> name was also correct on each server
>>> but i can not login with user admin from ipareplica via ssh
>> (root at ipareplica]#
>>> ssh admin at ipasrv ===> failed)
>>>
>>> [root at ipareplica ~]# ssh ipasrv
>>> root at ipasrv's password:
>>> Last login: Mon Feb  9 09:49:54 2015 from 10.30.160.20
>>> =====log /var/secure====
>>> Feb  9 09:50:29 ipasrv sshd[12076]: Accepted password for root from
>>> 10.30.160.20 port 52110 ssh2
>>> Feb  9 09:50:29 ipasrv sshd[12076]: pam_unix(sshd:session): session
>> opened
>>> for user root by (uid=0)
>>> =====
>>> [root at ipasrv ~]# ssh ipareplica
>>> root at ipareplica's password:
>>> Last login: Mon Feb  9 09:50:20 2015 from 10.30.160.19
>>>
>>> ======
>>> [root at ipareplica ~]# nslookup ipasrv
>>> Server:         10.30.160.19
>>> Address:        10.30.160.19#53
>>>
>>> Name:   ipasrv
>>> Address: 10.30.160.19
>>>
>>> ========
>>> [root at ipasrv ~]# nslookup ipareplica
>>> Server:         127.0.0.1
>>> Address:        127.0.0.1#53
>>>
>>> Name:   ipareplica
>>> Address: 10.30.160.20
>>> =========
>>
>> Ok, so ssh is running, you can log in with root. I think that by 99%
>> chance,
>> your SSSD service is not running on the IPA server. Please check if this
>> is the
>> case and if yes, please try to (re)start it. If that helped, it would be
>> also
>> useful to see *why* the SSSD is not running (crash, misconfiguration, ...)
>>
>> Martin
>>
> 
> 
> 




More information about the Freeipa-users mailing list