Hello, I am sending you a mail again with more details and all the logs you asked, I hope now it will be clearer. I would like to implement smartcard authentication to Microsoft AD with sssd on Ubuntu 20.04 LTS. I succeed login to AD with a password but when I tried to use a smartcard the action failed as the description above: After a minute of timeout the password window pop up (instead of PIN code pop up) and even when I put the correct password, I got the following error : "Authentication failure". When I used kinit using a smartcard with the same user the action succeed and I got the TGT. I have attached the configuration files : krb5.conf ,sssd.conf and all the logs files that you asked: krb5_child.log, p11_child.log,sssd_pam.log,sssd_domain.log and sssd.log.

You can see all those logs in two cases: 1. Password login 2. Smartcard login I would appreciate your help on this issue because you are my last resource. Thank you again, Rudi

_______________________________________________ sssd-users mailing list -- sssd-users(a)lists.fedorahosted.org To unsubscribe send an email to sssd-users-leave(a)lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-users@lists.fedorahoste... Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure

Hi, Thanks for your response! Yes, It worked when I used kinit and ksu commands. In addition, I think krb5_child proccess could access the Smartcard beacuse it prompted this log: (Sun Feb 21 13:45:52 2021) [[sssd[krb5_child[155525]]]] [answer_pkinit] (0x4000): [0] Identity [PKCS11:module_name=/lib/libsadaptor.so:slotid=2:token=Crypto Token] flags [0] (Sun Feb 21 13:45:52 2021) [[sssd[krb5_child[155525]]]] [answer_pkinit] (0x4000): Setting pkinit_prompting. (Sun Feb 21 13:45:59 2021) [[sssd[krb5_child[155548]]]] [sss_krb5_prompter] (0x4000): sss_krb5_prompter name [(null)] banner [(null)] num_prompts [1] EINVAL. (Sun Feb 21 13:45:59 2021) [[sssd[krb5_child[155548]]]] [sss_krb5_prompter] (0x4000): Prompt [0][Crypto Token PIN]. Can you suggest additionals possible solutions? Thank you, Rudi _______________________________________________ sssd-users mailing list -- sssd-users(a)lists.fedorahosted.org To unsubscribe send an email to sssd-users-leave(a)lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-users@lists.fedorahoste... Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure