[Freeipa-users] cannot logon: system error?

[george he]

Hi all,

This is another issue I'm having with another ipa client.
Both the sever and the client are centos 6.3
The client was configured all right. I was able to log on at a point.
but then after the screen was auto-locked over the night, I cannot log on any more.
If I try on the console, it says "system error" and return to the locked screen.
If I try ssh myclient, it says "Connection closed by myclient".

This is what in /var/log/secure
Sep  4 13:57:52 localhost sshd[4208]: Authorized to jhe, krb5 principal ***@PSYCH.YALE.EDU (krb5_kuserok)
Sep  4 13:57:52 localhost sshd[4208]: pam_sss(sshd:account): Access denied for user jhe: 4 (System error)
Sep  4 13:57:52 localhost sshd[4209]: fatal: Access denied for user jhe by PAM account configuration

What do I do to fix this problem?

Thanks in advance,
George

[Jakub Hrozek]

Post by george he
Hi all,
This is another issue I'm having with another ipa client.
Both the sever and the client are centos 6.3
The client was configured all right. I was able to log on at a point.
but then after the screen was auto-locked over the night, I cannot log on any more.
If I try on the console, it says "system error" and return to the locked screen.
If I try ssh myclient, it says "Connection closed by myclient".
This is what in /var/log/secure
Sep  4 13:57:52 localhost sshd[4208]: pam_sss(sshd:account): Access denied for user jhe: 4 (System error)
Sep  4 13:57:52 localhost sshd[4209]: fatal: Access denied for user jhe by PAM account configuration

System Error usually means an internal error in the SSSD.

Please put debug_level = 8 into the [pam] and [domain] sections, restart
the SSSD, re-run the login attempt and attach or copy the relevant
sections of /var/log/sssd/sssd_pam.log and
/var/log/sssd/sssd_$domain.log

[george he]

I removed the host on ipa server (ipa host-del, which works for this client but not another one), reinstalled the system, and configured the client, it worked.
Thanks,
George

________________________________
Sent: Tuesday, September 4, 2012 3:05 PM
Subject: Re: [Freeipa-users] cannot logon: system error?

Post by george he
Hi all,
This is another issue I'm having with another ipa client.
Both the sever and the client are centos 6.3
The client was configured all right. I was able to log on at a point.
but then after the screen was auto-locked over the night, I cannot log on any more.
If I try on the console, it says "system error" and return to the locked screen.
If I try ssh myclient, it says "Connection closed by myclient".
This is what in /var/log/secure
Sep  4 13:57:52 localhost sshd[4208]: pam_sss(sshd:account): Access denied for user jhe: 4 (System error)
Sep  4 13:57:52 localhost sshd[4209]: fatal: Access denied for user jhe by PAM account configuration

System Error usually means an internal error in the SSSD.
Please put debug_level = 8 into the [pam] and [domain] sections, restart
the SSSD, re-run the login attempt and attach or copy the relevant
sections of /var/log/sssd/sssd_pam.log and
/var/log/sssd/sssd_$domain.log
_______________________________________________
Freeipa-users mailing list
https://www.redhat.com/mailman/listinfo/freeipa-users