<html> <head> <meta http-equiv="content-type" content="text/html; charset=utf-8"> </head> <body bgcolor="#FFFFFF" text="#000000"> Hi all, I' m trying to enable OTP: - Enabled "Two factor authentication (password + OTP)" for a particular user. - Added a OTP token, FreeOTP on an Android that is, for the user which all went fine. Trying to login will fail. After several attempts, systemctl --failed will tell: <blockquote> UNIT LOAD ACTIVE SUB DESCRIPTION * <a class="moz-txt-link-abbreviated" href="mailto:ipa-otpd@0-1642-0.service">ipa-otpd@0-1642-0.service</a> loaded failed failed ipa-otpd service (PID 1642/UID 0) * <a class="moz-txt-link-abbreviated" href="mailto:ipa-otpd@1-1642-0.service">ipa-otpd@1-1642-0.service</a> loaded failed failed ipa-otpd service (PID 1642/UID 0) * <a class="moz-txt-link-abbreviated" href="mailto:ipa-otpd@10-1642-0.service">ipa-otpd@10-1642-0.service</a> loaded failed failed ipa-otpd service (PID 1642/UID 0) * <a class="moz-txt-link-abbreviated" href="mailto:ipa-otpd@11-1642-0.service">ipa-otpd@11-1642-0.service</a> loaded failed failed ipa-otpd service (PID 1642/UID 0) * <a class="moz-txt-link-abbreviated" href="mailto:ipa-otpd@12-1642-0.service">ipa-otpd@12-1642-0.service</a> loaded failed failed ipa-otpd service (PID 1642/UID 0) * <a class="moz-txt-link-abbreviated" href="mailto:ipa-otpd@13-1643-0.service">ipa-otpd@13-1643-0.service</a> loaded failed failed ipa-otpd service (PID 1643/UID 0) * <a class="moz-txt-link-abbreviated" href="mailto:ipa-otpd@14-1643-0.service">ipa-otpd@14-1643-0.service</a> loaded failed failed ipa-otpd service (PID 1643/UID 0) * <a class="moz-txt-link-abbreviated" href="mailto:ipa-otpd@15-1643-0.service">ipa-otpd@15-1643-0.service</a> loaded failed failed ipa-otpd service (PID 1643/UID 0) * <a class="moz-txt-link-abbreviated" href="mailto:ipa-otpd@16-1643-0.service">ipa-otpd@16-1643-0.service</a> loaded failed failed ipa-otpd service (PID 1643/UID 0) * <a class="moz-txt-link-abbreviated" href="mailto:ipa-otpd@2-1642-0.service">ipa-otpd@2-1642-0.service</a> loaded failed failed ipa-otpd service (PID 1642/UID 0) * <a class="moz-txt-link-abbreviated" href="mailto:ipa-otpd@3-1643-0.service">ipa-otpd@3-1643-0.service</a> loaded failed failed ipa-otpd service (PID 1643/UID 0) * <a class="moz-txt-link-abbreviated" href="mailto:ipa-otpd@4-1643-0.service">ipa-otpd@4-1643-0.service</a> loaded failed failed ipa-otpd service (PID 1643/UID 0) * <a class="moz-txt-link-abbreviated" href="mailto:ipa-otpd@5-1643-0.service">ipa-otpd@5-1643-0.service</a> loaded failed failed ipa-otpd service (PID 1643/UID 0) * <a class="moz-txt-link-abbreviated" href="mailto:ipa-otpd@6-1642-0.service">ipa-otpd@6-1642-0.service</a> loaded failed failed ipa-otpd service (PID 1642/UID 0) * <a class="moz-txt-link-abbreviated" href="mailto:ipa-otpd@7-1642-0.service">ipa-otpd@7-1642-0.service</a> loaded failed failed ipa-otpd service (PID 1642/UID 0) * <a class="moz-txt-link-abbreviated" href="mailto:ipa-otpd@8-1643-0.service">ipa-otpd@8-1643-0.service</a> loaded failed failed ipa-otpd service (PID 1643/UID 0) * <a class="moz-txt-link-abbreviated" href="mailto:ipa-otpd@9-1643-0.service">ipa-otpd@9-1643-0.service</a> loaded failed failed ipa-otpd service (PID 1643/UID 0) LOAD = Reflects whether the unit definition was properly loaded. ACTIVE = The high-level unit activation state, i.e. generalization of SUB. SUB = The low-level unit activation state, values depend on unit type. 17 loaded units listed. Pass --all to see loaded but inactive units, too. To show all installed unit files use 'systemctl list-unit-files'. </blockquote> Journalctl will tell some more: <blockquote>root@ipa log]# journalctl -f -u <a class="moz-txt-link-abbreviated" href="mailto:ipa-otpd@9-1643-0.service">ipa-otpd@9-1643-0.service</a> -- Logs begin at Fri 2016-01-29 10:14:55 CET. -- Feb 02 11:03:19 ipa.blabla.bla systemd[1]: <a class="moz-txt-link-abbreviated" href="mailto:ipa-otpd@9-1643-0.service">ipa-otpd@9-1643-0.service</a>: Main process exited, code=exited, status=1/FAILURE Feb 02 11:03:19 ipa.blabla.bla systemd[1]: <a class="moz-txt-link-abbreviated" href="mailto:ipa-otpd@9-1643-0.service">ipa-otpd@9-1643-0.service</a>: Unit entered failed state. Feb 02 11:03:19 ipa.blabla.bla systemd[1]: <a class="moz-txt-link-abbreviated" href="mailto:ipa-otpd@9-1643-0.service">ipa-otpd@9-1643-0.service</a>: Failed with result 'exit-code'. Feb 02 11:04:31 ipa.blabla.bla systemd[1]: Started ipa-otpd service (PID 1643/UID 0). Feb 02 11:04:31 ipa.blabla.bla systemd[1]: Starting ipa-otpd service (PID 1643/UID 0)... Feb 02 11:04:31 ipa.blabla.bla ipa-otpd[2924]: LDAP: ldapi://%2fvar%2frun%2fslapd-BLABLA-BLA.socket Feb 02 11:05:23 ipa.blabla.bla ipa-otpd[2924]: stdio.c:073: Invalid argument: Error receiving packet Feb 02 11:05:23 ipa.blabla.bla systemd[1]: <a class="moz-txt-link-abbreviated" href="mailto:ipa-otpd@9-1643-0.service">ipa-otpd@9-1643-0.service</a>: Main process exited, code=exited, status=1/FAILURE Feb 02 11:05:23 ipa.blabla.bla systemd[1]: <a class="moz-txt-link-abbreviated" href="mailto:ipa-otpd@9-1643-0.service">ipa-otpd@9-1643-0.service</a>: Unit entered failed state. Feb 02 11:05:23 ipa.blabla.bla systemd[1]: <a class="moz-txt-link-abbreviated" href="mailto:ipa-otpd@9-1643-0.service">ipa-otpd@9-1643-0.service</a>: Failed with result 'exit-code'. </blockquote> What' s going wrong here? Winny </body> </html>