On to, 26 tammi 2023, Florence Blanc-Renaud via FreeIPA-users wrote:
Hi,
On Wed, Jan 25, 2023 at 3:11 PM Damola Azeez via FreeIPA-users <
freeipa-users(a)lists.fedorahosted.org> wrote:
> Hi,
>
> I am Unable to log in to all my Ubuntu Servers after I enabled OTP token
> on my account. I get the bellow errors from the Auth.log
>
Can you provide the commands you executed in order to enable OTP token on
the account?
To me, these logs say that the user dazeez is not known to SSSD. I
suspect it is better to go through
https://sssd.io/troubleshooting/basics.html and collect proper SSSD
domain logs first.
flo
>
>
> Jan 25 13:34:59 softpaydbv4 sshd[2633643]: pam_sss(sshd:auth): received
> for user daazeez: 17 (Failure setting user credentials)
> Jan 25 13:35:01 softpaydbv4 sshd[2633643]: Failed password for daazeez
> from 10.10.40.249 port 9254 ssh2
> Jan 25 13:35:01 softpaydbv4 CRON[2633650]: pam_unix(cron:session): session
> opened for user root by (uid=0)
> Jan 25 13:35:01 softpaydbv4 CRON[2633650]: pam_unix(cron:session): session
> closed for user root
> Jan 25 13:35:12 softpaydbv4 sshd[2633643]: error: Received disconnect from
> 10.10.40.249 port 9254:0: [preauth]
> Jan 25 13:35:12 softpaydbv4 sshd[2633643]: Disconnected from
> authenticating user daazeez 10.10.40.249 port 9254 [preauth]
> Jan 25 13:35:12 softpaydbv4 sshd[2633643]: PAM 1 more authentication
> failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.10.40.249
> user=daazeez
> Jan 25 13:35:16 softpaydbv4 sshd[2633659]: Invalid user dazeez from
> 10.10.40.249 port 9962
> Jan 25 13:35:20 softpaydbv4 sshd[2633659]: pam_unix(sshd:auth): check
> pass; user unknown
> Jan 25 13:35:20 softpaydbv4 sshd[2633659]: pam_unix(sshd:auth):
> authentication failure; logname= uid=0 euid=0 tty=ssh ruser=
> rhost=10.10.40.249
> Jan 25 13:35:20 softpaydbv4 sshd[2633659]: pam_sss(sshd:auth):
> authentication failure; logname= uid=0 euid=0 tty=ssh ruser=
> rhost=10.10.40.249 user=dazeez
> Jan 25 13:35:20 softpaydbv4 sshd[2633659]: pam_sss(sshd:auth): received
> for user dazeez: 10 (User not known to the underlying authentication module)
> Jan 25 13:35:22 softpaydbv4 sshd[2633659]: Failed password for invalid
> user dazeez from 10.10.40.249 port 9962 ssh2
> Jan 25 13:35:27 softpaydbv4 sshd[2633659]: pam_unix(sshd:auth): check
> pass; user unknown
> Jan 25 13:35:27 softpaydbv4 sshd[2633659]: pam_sss(sshd:auth):
> authentication failure; logname= uid=0 euid=0 tty=ssh ruser=
> rhost=10.10.40.249 user=dazeez
> Jan 25 13:35:27 softpaydbv4 sshd[2633659]: pam_sss(sshd:auth): received
> for user dazeez: 10 (User not known to the underlying authentication module)
> Jan 25 13:35:29 softpaydbv4 sshd[2633659]: Failed password for invalid
> user dazeez from 10.10.40.249 port 9962 ssh2
> Jan 25 13:35:36 softpaydbv4 sshd[2633659]: error: Received disconnect from
> 10.10.40.249 port 9962:0: [preauth]
> Jan 25 13:35:36 softpaydbv4 sshd[2633659]: Disconnected from invalid user
> dazeez 10.10.40.249 port 9962 [preauth]
> Jan 25 13:35:36 softpaydbv4 sshd[2633659]: PAM 1 more authentication
> failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.10.40.249
> Jan 25 13:35:57 softpaydbv4 sshd[2633672]: pam_unix(sshd:auth):
> authentication failure; logname= uid=0 euid=0 tty=ssh ruser=
> rhost=10.10.40.249 user=sysadmin
> Jan 25 13:35:57 softpaydbv4 sshd[2633672]: pam_sss(sshd:auth):
> authentication failure; logname= uid=0 euid=0 tty=ssh ruser=
> rhost=10.10.40.249 user=sysadmin
> Jan 25 13:35:57 softpaydbv4 sshd[2633672]: pam_sss(sshd:auth): received
> for user sysadmin: 10 (User not known to the underlying authentication
> module)
> Jan 25 13:36:00 softpaydbv4 sshd[2633672]: Failed password for sysadmin
> from 10.10.40.249 port 10434 ssh2
> Jan 25 13:36:17 softpaydbv4 sshd[2633672]: error: Received disconnect from
> 10.10.40.249 port 10434:0: [preauth]
> Jan 25 13:36:17 softpaydbv4 sshd[2633672]: Disconnected from
> authenticating user sysadmin 10.10.40.249 port 10434 [preauth]
>
>
> Kindly assist
> _______________________________________________
> FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
> To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org
> Fedora Code of Conduct:
>
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
>
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedoraho...
> Do not reply to spam, report it:
>
https://pagure.io/fedora-infrastructure/new_issue
>
--
/ Alexander Bokovoy
Sr. Principal Software Engineer
Security / Identity Management Engineering
Red Hat Limited, Finland