Looks like _kpasswd SRV entry was missing in my DNS.
Strange that pam_krb5 was authenticating happily without this...
Ondrej
On 08/02/2012 05:08 PM, Ondrej Valousek wrote:
Hi List,
I have a problem with pam_sss:
AugĀ 2 16:59:14 draco sshd[20932]: pam_sss(sshd:auth):
authentication failure; logname= uid=0 euid=0 tty=ssh ruser=
rhost=deneb.prague.s3group.com user=ondrejv
AugĀ 2 16:59:14 draco sshd[20932]: pam_sss(sshd:auth): received
for user ondrejv: 22 (Authentication token lock busy)
Note that if I replace pam_sss with pam_krb5, it works like a
charm.
Anyone knows what the message above means?
Thanks,
Ondrej