Somehow I've managed to damage the ipa server configuration so
that ipal users cannot login anymore. Local users work fine.
Using the console on the ipa server:
Login: ...
Password: ...
System error
Messages in /var/log/secure say:
--
... login[25478]: pam_sss(login:auth): authentication failure; logname=LOGIN uid=0 euid=0
tty=tty1 ruser= rhost= user=USERNAME
... login[25478]: pam_sss(login:auth): received for user USERNAME: 12 (Authentication
token is no longer valid; new one required)
... login[25478]: pam_sss(login:account): Access denied for user USERNAME: 4 (System
error)
... login[25478]: System error
--
I've no idea what the problem could be. (The "no longer valid"
message is because it's the initial password that needs to be
changed.)
Ciao
Dominik ^_^ ^_^
--
Dominik Vogt