On ma, 30 marras 2020, mir mal via FreeIPA-users wrote:
I've created 6 files, for sssd_<domain>, sssd_pam and
auth.log file for both a successful and failed login and pasted in pastebin.
successful login
https://pastebin.com/G75fv7tk - c111111_successful_login_sssd.log
https://pastebin.com/dEqCzyPk - c111111_successful_login_auth.log
https://pastebin.com/MrwKiwPe - c111111_successful_login_sssd_pam.log
failed login
https://pastebin.com/WWaGFNBS - c111111_failed_login_sssd.log
https://pastebin.com/tXejaUn7 - c111111_failed_login_auth.log
https://pastebin.com/zHs1cZRj - c111111_failed_login_sssd_pam.log
sshd log in the 'failed' case covers earlier time period than SSSD log.
Please try to co-relate timespan in all logs.
--
/ Alexander Bokovoy
Sr. Principal Software Engineer
Security / Identity Management Engineering
Red Hat Limited, Finland