SSSD / sssd

#2669 Can't authenticate via pam_sss
Closed: Invalid Opened by mtecknology.

Closed: Invalid
Reopen Issue

I have samba making use of sssd. I'm trying to set things up so that users can ssh into the system as well. Samba is working without troubles. I can "su - " without issues as well. However, if I try to SSH into the system I'm seeing "Failed password" in auth.log. If I try to "su - " and then su to another user (which requires authentication), I'm not able to authenticate.

/etc/sssd/sssd.conf:

[sssd]
config_file_version = 2
services = nss, pam
domains = ad.good-sam.com
[nss]
[pam]
[domain/ad.good-sam.com]
id_provider = ad
krb5_keytab = /etc/krb5.keytab

attachment
auth.log

attachment
krb5_child.log

attachment
ldap_child.log

attachment
sssd.log

attachment
sssd_nss.log

attachment
sssd_pam.log

Marking sensitive as the logs were not fully sanitized.

sensitive: => 1

FOUND IT!! /etc/krb5.conf wasn't world readable. chmod 644 /etc/krb5.conf and the issues is resolved. :D

Ah, great, I'm glad SSSD works for you!

resolution: => invalid
status: new => closed

Metadata Update from @mtecknology:
- Issue set to the milestone: NEEDS_TRIAGE

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/3710

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.
Metadata
None
None
None
None
Normal
defect
SSSD
1.11.7
0
0
None
0
0
0
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.