https://bugzilla.redhat.com/show_bug.cgi?id=1850548
--- Comment #5 from Sumit Bose <sbose(a)redhat.com> ---
Hi,
thanks for the logs. Since there is no message from pam_unix I think this is a
known regression caused by the fix for
https://pagure.io/SSSD/sssd/issue/4174.
The regression is currently discussed in
https://bugzilla.redhat.com/show_bug.cgi?id=1815584 (sorry, this ticket is
mostly private). We can use this ticket here to track the fix for Fedora.
Unfortunately there is no easy work-around. One would be to change one of the
passwords (I assume /etc/shadow and Kerberos password are currently the same)
then pam_unix should fail if you use the Kerberos password and now SSSD has a
chance to do Kerberos authentication. But this of course would only work if
this affects just a few users.
bye,
Sumit
--
You are receiving this mail because:
You are on the CC list for the bug.
You are the assignee for the bug.