On Wed, Apr 15, 2015 at 02:36:32PM -0400, tmpchq wrote:
I noticed that when login to IPA server (mripa1) itself, the only
PAM
process is PAM_OPEN_SESSION,
whereas for mripadm it goes through 5: PAM_AUTHENTICATE, PAM_ACCT_MGMT,
PAM_SETCRED,
PAM_OPEN_SESSION, PAM_SETCRED in that order. I have virtually identical SSSD
and PAM config
for both servers...
how exactly did you login? In the case where only session was called,
did you maybe su from root or ssh-ed with GSSAPI? Both cases bypass
SSSD..