[Freeipa-users] IPA's clients deny password auth to ssh - 6 (Permission denied) - but gssapi works.

hi guys A Putty ssh off a AD's Win10 client to IPA's client (non-master) works with gssapi but without it and when need to use password I see: pam_sss(sshd:auth): received for user myuser(a)mine.private: 6 (Permission denied) To make it more bizarre, that same Win10 client does ssh with password(and gssapi) to IPA's masters just fine. My IPA is pretty "vanilla" default after AD trust installation. Any suggestions as to a cause of this misbehavior of IPA clients? many thanks, L.