Re: User login issue

2024-02-07 Thread Mike Gabriel
HI Roman, On Mi 07 Feb 2024 12:51:11 CET, roman.meier wrote: Hi folks, Yesterday, I came across the following entry in /var/log/auth.log: Feb 6 11:03:38 tjener su: pam_krb5(su:auth): (user roman) credential verification failed: Cannot find key for host/tjener.intern@INTERN kvno 16 in ke

Re: User login issue

2024-02-07 Thread roman . meier
Hi folks, Yesterday, I came across the following entry in /var/log/auth.log: Feb 6 11:03:38 tjener su: pam_krb5(su:auth): (user roman) credential verification failed: Cannot find key for host/tjener.intern@INTERN kvno 16 in keytab I also had a closer look at the following script: /usr/share/d

Re: User login issue

2024-01-07 Thread roman . meier
Hi folks, Maybe the following is helping to narrow things down? I checked on /var/log/auth.log today and I'm getting the following upon trying to login as user mm in the console: Jan 7 11:04:34 tjener krb5kdc[2232]: AS_REQ (8 etypes {18 17 20 19 16 23 25 26}) 10.0.2.2: NEEDED_PREAUTH: mm@INTE

Re: User login issue

2024-01-06 Thread roman . meier
Hi Mike, > This very likely means that your Kerberos layer / service stack is broken. > > Do you have libpam-krb5 installed on TJENER? (That would be an easy solution). Nope, it was not installed. Maybe my legacy installation is not needing it? I installed it but things did not improve. > Does

Re: User login issue

2024-01-06 Thread Mike Gabriel
Hi Roman, On Sa 06 Jan 2024 12:16:31 CET, roman.meier wrote: I can create a new user but the behavior is the same: I cannot login on the server. Login into GOsa2 works fine. This very likely means that your Kerberos layer / service stack is broken. Do you have libpam-krb5 installed on TJEN

Re: User login issue

2024-01-06 Thread roman . meier
Hi Mike, > One thing caught me at first glance that is strange: why does > ldapsearch try GSS auth although you requested simple_bind > authentication? Hmmm... is that -x in your quoted command really > starting with a '-' dash / minus sign? It looks longer (like an > —)... Yep, you were

Re: User login issue

2024-01-05 Thread Mike Gabriel
On Fr 05 Jan 2024 16:04:10 UTC, roman.meier wrote: Hi folks, I guess I messed up something in my ldap settings using GOsa2. Users can't login on the server any longer with the exception of root. This includes logins via console. The first user however can still login into GOsa2 and things