hi guys A Putty ssh off a AD's Win10 client to IPA's client (non-master) works with gssapi but without it and when need to use password I see: pam_sss(sshd:auth): received for user myuser(a)mine.private: 6 (Permission denied) To make it more bizarre, that same Win10 client does ssh with password(and gssapi) to IPA's masters just fine. My IPA is pretty "vanilla" default after AD trust installation. Any suggestions as to a cause of this misbehavior of IPA clients? many thanks, L.

On Fri, Jun 21, 2019 at 08:57:39AM +0100, lejeczek via FreeIPA-users wrote: > On 20/06/2019 13:47, lejeczek via FreeIPA-users wrote: >> hi guys >> >> A Putty ssh off a AD's Win10 client to IPA's client (non-master) works >> with gssapi but without it and when need to use password I see: >> >> pam_sss(sshd:auth): received for user myuser(a)mine.private: 6 (Permission >> denied) >> >> To make it more bizarre, that same Win10 client does ssh with >> password(and gssapi) to IPA's masters just fine. >> >> My IPA is pretty "vanilla" default after AD trust installation. >> >> Any suggestions as to a cause of this misbehavior of IPA clients? >> >> many thanks, L. > hi, I've realized that did not mention possibly important bit - the > users I need this (password) to work, who fail with "permission denied", > are from AD. Hi, this is the same issue we are talking about in the other thread, right?

bye, Sumit > > pub rsa2048 2019-01-17 [SC] [verfällt: 2020-01-17] > 93059F241EEEE1D0769A85F455918ABF21224EBA > uid lejeczek <peljasz(a)yahoo.co.uk&gt; > sub rsa2048 2019-01-17 [E] [verfällt: 2020-01-17] > _______________________________________________ > FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org > To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org > Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedoraho... _______________________________________________ FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedoraho...