On Wed, Apr 15, 2015 at 02:36:32PM -0400, tmpchq wrote: > I noticed that when login to IPA server (mripa1) itself, the only PAM > process is PAM_OPEN_SESSION, > whereas for mripadm it goes through 5: PAM_AUTHENTICATE, PAM_ACCT_MGMT, > PAM_SETCRED, > PAM_OPEN_SESSION, PAM_SETCRED in that order. I have virtually identical SSSD > and PAM config > for both servers...
how exactly did you login? In the case where only session was called, did you maybe su from root or ssh-ed with GSSAPI? Both cases bypass SSSD.. _______________________________________________ sssd-users mailing list sssd-users@lists.fedorahosted.org https://lists.fedorahosted.org/mailman/listinfo/sssd-users
