Hi
 
I am attempting to set up a Single Sign On (SSO) development environment in a Fedora 34 Virtual Machine on my laptop.
 
I have successfully installed and configured freeipa-server, and can create freeipa users both on the CLI, and via the Web UI. —> OK.
 
I can both “kinit” and “su” to the freeipa users —> OK. This implies that that the users can be successfully authenticated, password is correct etc.
 
However I cannot log in to the Fedora Desktop (Gnome) of the VM running freeipa-server with the freeipa users. —> NOT OK.
 
I do get the “last log in" + date message displayed, then it returns to the login dialog without displaying any error message.
 
The “last log in” message suggests that authentication was successful, but something after that has a worm in it.
 
My setup is:
VM Fedora Linux 34, freeipa-server 4.9.6, sssd 2.5.2
VM Host: macOS Big Sur 11.4 Parallels Desktop Pro Version 16.5.1 (49187)
 
 
I found this issue https://bugzilla.redhat.com/show_bug.cgi?id=1837749 where the user also cannot login, but for Active Directory users. My users are  plain vanilla freeipa.
 
I have attached an extract from the sssd_acme.org.log at the time of login attempt (09:40:10) The user is "lamb".
 
Any ideas?
 
Chris