Proxmox and sssd pam auth

geos_one

Renowned Member
Aug 28, 2014
32
0
71
Is there a way to authenticate with the pam sssd module ?
in the auth log i can find the pam auth with success but i am unabel to login via webinterface (user in in gui created with admin permissions)

{"EventReceivedTime":"2016-08-01 12:50:11","SourceModuleName":"unix_in","SourceModuleType":"im_uds","SyslogFacilityValue":1,"SyslogFacility":"USER","SyslogSeverityValue":5,"SyslogSeverity":"NOTICE","SeverityValue":2,"Severity":"INFO","Hostname":"pro-pve01-p","EventTime":"2016-08-01 12:50:11","SourceName":"IPCC.xs","ProcessID":"17095","Message":"{\"EventReceivedTime\":\"2016-08-01 12:50:11\",\"SourceModuleName\":\"unix_in\",\"SourceModuleType\":\"im_uds\",\"SyslogFacilityValue\":10,\"SyslogFacility\":\"AUTHPRIV\",\"SyslogSeverityValue\":6,\"SyslogSeverity\":\"INFO\",\"SeverityValue\":2,\"Severity\":\"INFO\",\"Hostname\":\"pro-pve01-p\",\"EventTime\":\"2016-08-01 12:50:11\",\"SourceName\":\"IPCC.xs\",\"ProcessID\":\"17095\",\"Message\":\"pam_sss(common-auth:auth): authentication success; logname= uid=0 euid=0 tty= ruser= rhost= user=xxxx.yyyy\"}"}
 
Hi,
unabel to login via webinterface
can you specify this a bit more?

Do you get an empty screen and the login windows is gone
or is the login still present?
 
Error: Login failed. Please try again

i have taken a look at the pam auth code: it looks like it reads the users from /etc/passwd|shadow file but the user is not in in any of this files it is in kerberos/ldap (IPA) server (can't use the ldap auth our ipa system requires non anonymous bind so i setup the sssd daemon in the hope it will work with the pam auth of proxmox)
 

About

The Proxmox community has been around for many years and offers help and support for Proxmox VE, Proxmox Backup Server, and Proxmox Mail Gateway.
We think our community is one of the best thanks to people like you!

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get yours easily in our online shop.

Buy now!