[Freeipa-users] IPA Client will authenticate users

[Sumit Bose]

On Thu, Jan 19, 2017 at 04:33:59PM -0600, Michael Rainey (Contractor) wrote:
> Hello everyone,
> 
> I have come across a problem which you might find interesting. With all of
> the systems I have running, there is one system which refuses to
> authenticate any user who needs to login.  I have deleted and reinstalled
> the to the domain in the hopes it would resolve the problem.  I have copied
> pam files from working systems to the failing system to see if this action
> would fix the problem.  No such luck.
> 
> I've included the sssd_pam.log file starters.

Looks like authentication is ok but access control denies access. You
should check the domain log for reasons why access is denied.

HTH

bye,
Sumit

> 
> Thanks in advance.
> --