<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">On 05/21/2015 05:54 PM, John Williams
wrote:<br>
</div>
<blockquote
cite="mid:1557638601.5865.1432245254174.JavaMail.yahoo@mail.yahoo.com"
type="cite">
<div style="color:#000; background-color:#fff;
font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial,
Lucida Grande, sans-serif;font-size:16px">
<div id="yui_3_16_0_1_1432244876253_7883" dir="ltr">I've got a
freeIPA client where a user account cannot authenticate.</div>
<div id="yui_3_16_0_1_1432244876253_7883" dir="ltr"><br>
</div>
<div id="yui_3_16_0_1_1432244876253_7883" dir="ltr">The log
entry for IPA looks like:</div>
<div id="yui_3_16_0_1_1432244876253_7883" dir="ltr"><br>
</div>
<div id="yui_3_16_0_1_1432244876253_7883" dir="ltr">audit/audit.log.4:type=USER_AUTH
msg=audit(1425316592.375:38090): user pid=16485 uid=0
auid=4294967295 ses=4294967295
subj=system_u:system_r:sshd_t:s0-s0:c0.c1023
msg='op=PAM:authentication acct="aswanda" exe="/usr/sbin/sshd"
hostname=172.31.0.162 addr=172.31.0.162 terminal=ssh
res=failed'<br>
</div>
<div id="yui_3_16_0_1_1432244876253_7883" dir="ltr"><br>
</div>
<div id="yui_3_16_0_1_1432244876253_7883" dir="ltr">When I try
to sudo to the user account, I get the following error:</div>
<div id="yui_3_16_0_1_1432244876253_7883" dir="ltr"><br>
</div>
<div id="yui_3_16_0_1_1432244876253_7883" dir="ltr" class=""
style="">[root@myhost ~]# sudo su - testuser</div>
<div id="yui_3_16_0_1_1432244876253_7883" dir="ltr" class=""
style="">su: user testuser does not exist</div>
<div id="yui_3_16_0_1_1432244876253_7883" dir="ltr" class=""
style=""><br>
</div>
<div id="yui_3_16_0_1_1432244876253_7883" dir="ltr" class=""
style="">However, all that works for my account.</div>
<div id="yui_3_16_0_1_1432244876253_7883" dir="ltr" class=""
style=""><br>
</div>
<div id="yui_3_16_0_1_1432244876253_7883" dir="ltr" class=""
style="">Please help. Thanks in advance.</div>
<div id="yui_3_16_0_1_1432244876253_7883" dir="ltr"><br>
</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
</blockquote>
What do you use on the client? SSSD?<br>
What is the OS version?<br>
What SSSD logs show?<br>
<br>
<pre class="moz-signature" cols="72">--
Thank you,
Dmitri Pal
Director of Engineering for IdM portfolio
Red Hat, Inc.</pre>
</body>
</html>