https://bugzilla.redhat.com/show_bug.cgi?id=1887077
Sumit Bose <sbose(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |besser82(a)fedoraproject.org,
| |ipedrosa(a)redhat.com,
| |tmraz(a)redhat.com
Component|sssd |pam
Assignee|sssd-maintainers(a)lists.fedo |ipedrosa(a)redhat.com
|raproject.org |
Flags| |needinfo?(ipedrosa(a)redhat.c
| |om)
--- Comment #5 from Sumit Bose <sbose(a)redhat.com> ---
(In reply to James from comment #4)
The user name concerned isn't present in /etc/passwd or
/etc/shadow, it's
purely IPA-based.
I also tried clearing out the sssd cache, but the problem remains.
The affected machines were set up as IPA clients by the usual means, by
running ipa-client-install --mkhomedir --no-ntp. So this could be a PAM
misconfiguration... do you want me to attach /etc/nsswitch.conf or something
from /etc/pam.d ?
Hi,
please check the journal (or /var/log/secure if you use this style of logging)
for messages from the time of the authentication. On a tet system I can see
messages like:
Oct 14 12:26:21 f33.rhel75.devel sshd[9844]: pam_unix(sshd:account):
password for user testsc1 will expire in 32767 days
or
Oct 14 12:20:11 f33.rhel75.devel su[9798]: pam_unix(su:account): password
for user testsc1(a)rhel75.devel will expire in 0 days
which are in agreement to your observations but as can be seen really are
coming from pam_unix.
I'll change the component to 'pam', Iker, can you have a look, it looks like
you really need F33 with pam-1.4.0 to reproduce this.
bye,
Sumit
--
You are receiving this mail because:
You are on the CC list for the bug.
You are the assignee for the bug.