https://bugzilla.redhat.com/show_bug.cgi?id=2251709
--- Comment #4 from Ralf Schneider ralf.schneider@ra-s.org --- Hi Alexey,
yes indeed it is a local user from /etc/passwd.
My sssd.conf with looks like
-----------------------
[sssd] enable_files_domain = True services = nss, pam domains = shadowutils debug_level = 9
[nss]
[pam] pam_cert_auth = True pam_verbosity = 10 debug_level = 9
[domain/shadowutils] id_provider = files auth_provider = proxy proxy_pam_target = sssd-shadowutils proxy_fast_alias = True debug_level = 9
[certmap/shadowutils/<snip>My user_id<snap>] matchrule = <SUBJECT>.*CN=<snip>My user_id<snap>
-----------------------
The logs should contain two attempts to access the smartcard triggered by pamtester:
In the first one I gave the password,
pamtester login $USER authenticate Password: pamtester: successfully authenticated
In the second one I tried the user key of the smartcard which returned:
pamtester login $USER authenticate Password: pamtester: Authentication failure