White, Daniel E. (GSFC-770.0)[NICS] via FreeIPA-users wrote:
Server: RHEL 7 IdM, ipa-server-4.6.5-11.el7_7.4.x86_64
Client: Debian 10, freeipa-client 4.7.2-3 amd64
Is this version difference a show stopper ? It sorta-kinda-mostly works.
I created a test user to test the HBAC rules, and I cannot ssh into this
Debian server as this test user.
I can ssh in as me, but my login has admin permissions.
I can ssh into a CentOS 7 and a RHEL 7 client as "test_user"
I tried "su - test_user" and got "sh: Authentication failure"
Any suggestions ? I am a novice at Debian. Most of my experience is
with Red Hat/CentOS
I'd start here: https://docs.pagure.org/SSSD.sssd/users/troubleshooting.html