[SSSD] SSSD Configuration issue

Stephen Gallagher sgallagh at redhat.com
Fri Nov 11 13:21:13 UTC 2011


On Fri, 2011-11-11 at 14:48 +0530, Nitesh Mehare wrote:
> Jakub, 
> I tried the modifying sssd.conf  to use  simple_allow_groups = idsldap
> Still it is not working.One thing I would like to ask .is my
> configuration correct in system-auth and nsswitch.conf file?
> Am i missing something.
> Also one more thing I have noticed in /var/log/secure log file
> 
> Nov 11 13:34:58 bagira sshd[30879]: Address 9.118.25.17 maps to
> nitesh.in.ibm.com, but this does not map back to the address -
> POSSIBLE BREAK-IN ATTEMPT!
> Nov 11 13:35:00 bagira sshd[30879]: pam_unix(sshd:auth):
> authentication failure; logname= uid=0 euid=0 tty=ssh ruser=
> rhost=9.118.25.17  user=nitback1
> Nov 11 13:35:02 bagira sshd[30879]: Failed password for nitback1 from
> 9.118.25.17 port 4300 ssh2
> 
> In above log i do not see entry for pam_sss I;m not sure why is
> this...


Can you make sure that your /etc/ssh/sshd_config file has 'UsePAM yes'
in it? That may make the difference.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: This is a digitally signed message part
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20111111/758a0366/attachment.sig>


More information about the sssd-devel mailing list