On Thu, Apr 04, 2013 at 09:35:00PM -0400, Sutton, Harry (GSSE) wrote:
On 04/04/2013 01:07 PM, Dmitri Pal wrote:
>
>How SSH is configured on the RHEL box?
>Does it use GSSAPI Authentication?
>
>The version in F18 should be very close to version in RHEL 6.4.
>Are your sssd.conf files in any way different?
>It seems that your RHEL box is misconfigured in some way.
>
>Things to look at is your pam.conf for the desktop login,
>nsswitch.conf, sssd.conf and ssh configuration files.
>Looking at those would most likely provide the answers.
Thanks, the GDM login problem turned out to be missing pam_krb5.so
lines in /etc/pam.d/system-auth and password-auth. The other
configuration files are identical between the working Fedora laptop
and the (now working) RHEL 6.4 workstation.
SSH is configured to use GSSAPI, as I suspected and your suggestion
that I check confirmed.
/Harry
Hi,
are you using pam_krb5 along with SSSD authentication? Is there a reason
not to use pam_sss.so ?
In general I would not recommend configuring the PAM stack yourself but
rather let authconfig do the job. This call would let authconfig
generate /etc/nsswitch.conf /etc/pam.d/system-auth and
/etc/pam.d/password-auth but would let you keep using the sssd.conf:
authconfig --enablesssdauth --enablesssd --update