Comment 6 for bug 1572908

Revision history for this message
Stephen Gallagher (stephen-gallagherhome) wrote : Re: [Bug 1572908] Re: sssd-ad pam_sss(cron:account): Access denied for user

On 05/03/2016 06:27 AM, Robie Basak wrote:
> Thank you for helping with this Jakub. From Franz's response I presume
> this issue is now resolved? Setting this bug as Invalid accordingly. If
> this is incorrect please feel free to open with an explanation.
>
> ** Changed in: sssd (Ubuntu)
> Status: Confirmed => Invalid
>

That is incorrect. By changing that setting, it actually disables policy
enforcement from AD (which is probably not what is desired).

The error code 6 indicates PAM_SYSTEM_ERR, which means that a bug happened and
SSSD was unable to make a proper determination of access (thus it defaults to
denial for safety).

So this is still a bug and logs will be needed to figure out what failed.

See: https://fedorahosted.org/sssd/wiki/Troubleshooting