> On 14 Mar 2018, at 20:14, Jim Richard wrote:
>
> Thanks.
>
> I deployed a clean/new Fedora 27 minimal, installed ipa-client/sssd, we have
> sssd version 1.16.0-6.fc27 on that virtual machine now, and then enrolled the
> host in our FreeIPA.
>
> Then I did a:
> service sssd stop ; rm -rvf
ok, pretty sure this is selinux related or sssd/pam handling of selinux related
if I put selinux_provider = none
in my sssd.conf
problem goes away AND my slow logins since the latest sssd version for CentOS
was pushed problem goes away as well
we have
SELinux status: disabled
Thanks.
I deployed a clean/new Fedora 27 minimal, installed ipa-client/sssd, we have
sssd version 1.16.0-6.fc27 on that virtual machine now, and then enrolled the
host in our FreeIPA.
Then I did a:
service sssd stop ; rm -rvf /var/lib/sss/db/* ; rm -rvf /var/lib/sss/mc/* ; rm
-rvf /var/log/sss
> On 13 Mar 2018, at 04:44, Jim Richard wrote:
>
> result in:
>
> pam_sss(sshd:account): Access denied for user rundeck: 4 (System error)
>
> I know this has been an issue in the past per some info I see in places like:
> https://access.redhat.com/solutions/1477473
>
> any chance there's bee