Yes
Pwget is working, also doing a “su - username(a)ad.xn--domain-1i0c is working.
> Il giorno 22 mar 2018, alle ore 20:35, Jakub Hrozek <jhrozek(a)redhat.com> ha
scritto:
>
>
>
>> On 22 Mar 2018, at 16:14, stich86--- via FreeIPA-users
<freeipa-users(a)lists.fedorahosted.org> wrote:
>>
>> Hi all,
>>
>> i'm trying to configure and HP-UX 11.31 to connect on my IPA Server and use
and AD user to connect via SSH.
>> First attempt was using Kerberos, kinit local works without issue but i'm
getting error trying to logon using via SSH because the KDC seems to not respond correctly
(using an IPA user instead of AD user works).
>>
>> So i'm trying to configure HP-UX using LDAP auth instead of Kerberos, but
i'm getting this error:
>>
>> Mar 22 14:55:32 test sshd[12630]: pam_authenticate: error No account present for
user
>> Mar 22 14:55:36 test sshd[12630]: debug1: PAM: password authentication failed for
myuser(a)ad.domain: No account present for user
>> Mar 22 14:55:36 test sshd[12630]: Failed password for g.marzano(a)octo.local from
X.X.X.X port 63080 ssh2
>> Mar 22 14:55:36 test sshd[12630]: debug1: Entering record_failed_login uid 0
>> Mar 22 14:55:32 test sshd[12630]: pam_authenticate: error No account present for
user
>
> I’m not really an HP-UX user, but this error message sounds like the account can’t be
found at all. So I would first make sure that retrieving the user
(
https://www.freeipa.org/page/ConfiguringUnixClients seems to suggest that pwget and grget
are the commands to run?) work correctly.
>
>>
>> Doing a tcpdump between HP-UX machine and IPA server I've seen that LDAP
query are successful. I'm also using "Proxy Users" to bind on the IPA to
have access on directory.
>>
>> Is it this configuration supported or i'm just wasting time?
>> Thanks!
>> _______________________________________________
>> FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
>> To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org
>