Hi all.

I´m migrating from LDAP to freeIPA and everything has going well.
I have one server with two replicas and two clients attached to the realm.

I migrated all the user accounts with the ipa migrate-ds command without issues.

Then I choose the seamlessly password migration using SSSD, but that only works when the users access the system using one of the clients, no both.
Both clients went attached in the same way and has the same configuration. The only difference is that the one who doesn’t work has some modifications in /etc/pam.d/sshd.

Anyone knows if the process runs on the client side or on the server?
Any hints about how to debug this?

Thanks in advance.
Marcos