Proxmox and sssd pam auth

geos_one

Renowned Member
Aug 28, 2014
32
0
71
Is there a way to authenticate with the pam sssd module ?
in the auth log i can find the pam auth with success but i am unabel to login via webinterface (user in in gui created with admin permissions)

{"EventReceivedTime":"2016-08-01 12:50:11","SourceModuleName":"unix_in","SourceModuleType":"im_uds","SyslogFacilityValue":1,"SyslogFacility":"USER","SyslogSeverityValue":5,"SyslogSeverity":"NOTICE","SeverityValue":2,"Severity":"INFO","Hostname":"pro-pve01-p","EventTime":"2016-08-01 12:50:11","SourceName":"IPCC.xs","ProcessID":"17095","Message":"{\"EventReceivedTime\":\"2016-08-01 12:50:11\",\"SourceModuleName\":\"unix_in\",\"SourceModuleType\":\"im_uds\",\"SyslogFacilityValue\":10,\"SyslogFacility\":\"AUTHPRIV\",\"SyslogSeverityValue\":6,\"SyslogSeverity\":\"INFO\",\"SeverityValue\":2,\"Severity\":\"INFO\",\"Hostname\":\"pro-pve01-p\",\"EventTime\":\"2016-08-01 12:50:11\",\"SourceName\":\"IPCC.xs\",\"ProcessID\":\"17095\",\"Message\":\"pam_sss(common-auth:auth): authentication success; logname= uid=0 euid=0 tty= ruser= rhost= user=xxxx.yyyy\"}"}
 
Hi,
unabel to login via webinterface
can you specify this a bit more?

Do you get an empty screen and the login windows is gone
or is the login still present?
 
Error: Login failed. Please try again

i have taken a look at the pam auth code: it looks like it reads the users from /etc/passwd|shadow file but the user is not in in any of this files it is in kerberos/ldap (IPA) server (can't use the ldap auth our ipa system requires non anonymous bind so i setup the sssd daemon in the hope it will work with the pam auth of proxmox)