[Freeipa-users] Re: Password expired is not requested with Ubuntu clients

2024-04-26 Thread Carlos Lopez via FreeIPA-users
Sorry for this later response. Problem is solved. The problem was in the common-auth file, in the line referring to pam_sss.so that was missing the option 'use_first_pass'. Many thanks to all for your help Regards, C. L. Martinez -Original Message- From: Sumit Bose Sent: Friday, Apri

[Freeipa-users] Re: Password expired is not requested with Ubuntu clients

2024-04-19 Thread Sumit Bose via FreeIPA-users
Am Fri, Apr 19, 2024 at 05:03:46PM + schrieb Carlos Lopez: > Of course. Here it is: > > # PAM configuration for the Secure Shell service > > # Standard Un*x authentication. > @include common-auth > > # Disallow non-root logins when /etc/nologin exists. > accountrequired pam_nologin.s

[Freeipa-users] Re: Password expired is not requested with Ubuntu clients

2024-04-19 Thread Carlos Lopez via FreeIPA-users
Of course. Here it is: # PAM configuration for the Secure Shell service # Standard Un*x authentication. @include common-auth # Disallow non-root logins when /etc/nologin exists. accountrequired pam_nologin.so # Uncomment and edit /etc/security/access.conf if you need to set complex # ac

[Freeipa-users] Re: Password expired is not requested with Ubuntu clients

2024-04-19 Thread Sumit Bose via FreeIPA-users
Am Fri, Apr 19, 2024 at 08:56:36AM + schrieb Carlos Lopez via FreeIPA-users: > Good morning, > > I have configured some Ubuntu clientes to authenticate via Kerberos against > my RHEL9 IdM server. Everything works correctly: clients are authenticated, > etc. > > The problem comes when a user