Created attachment 1888304[details]
sssd krb5 log file
Description of problem:
Attempting to authenticate via password on Fedora 36 host connected to FreeIPA with sssd 2.7.1-1 fails. ID lookups still function as normal.
Version-Release number of selected component (if applicable):
sssd-2.7.1-1.fc36
How reproducible:
Every attempt.
Steps to Reproduce:
1. Connect host to FreeIPA
2. Attempt to auth FreeIPA user via password
3.
Actual results:
"System Error" in /var/log/secure, and "PAC check failed for principal" in /var/log/sssd/krb5_child.log
Expected results:
Password auth is functional
Additional info:
Downgrading sssd to 2.7.0 resolves the issue and users can login as normal.
As a work-around set
pac_check = check_upn, check_upn_dns_info_ex
in the [pac] section of sssd.conf.
*** This bug has been marked as a duplicate of bug 2094685 ***
Created attachment 1888304 [details] sssd krb5 log file Description of problem: Attempting to authenticate via password on Fedora 36 host connected to FreeIPA with sssd 2.7.1-1 fails. ID lookups still function as normal. Version-Release number of selected component (if applicable): sssd-2.7.1-1.fc36 How reproducible: Every attempt. Steps to Reproduce: 1. Connect host to FreeIPA 2. Attempt to auth FreeIPA user via password 3. Actual results: "System Error" in /var/log/secure, and "PAC check failed for principal" in /var/log/sssd/krb5_child.log Expected results: Password auth is functional Additional info: Downgrading sssd to 2.7.0 resolves the issue and users can login as normal.