Score:0

Login loop for FreeIPA users

as flag

I am running into an issue with one of my newly configured freeipa clients where all of the ipa users that try to log into the computer go through a login loop. New users, and users with their passwords reset, can change their passwords but are sent right back to the login screen after authenticating. I have four freeipa clients, all of which are running Ubuntu 20.04.3. The three that work just fine are hand-built systems, and the client that doesn't work is a Dell. I can SSH into the Dell client using ipa credentials though.

My freeipa server is on a VM running CentOS 7, and the home directories for the ipa users are on an NFS server running Ubuntu 20.04.3.

I have tried looking at Xauthority and /tmp file permissions, but the Xauthority file doesn't exist in the ipa user's home directory, and the permissions of /tmp look okay from what I can see. I've never implemented LDAP authentication before, but since the issue is isolated to just one client, it makes me think this is a client-side issue rather than an LDAP one.

fr flag
Is selinux enabled on the new client? If yes - is `use_nfs_home_dirs` set to `on`?
as flag
I don't think so. sestatus isn't a found command on the client.
cn flag
so what's in the log files? You may consider simplifyiing the setup to rule out things first, so no nfs mounts, local homedirs. Does it work? Then try nfs, and so on
as flag
which log files should I check? should I start on my ldap server or the local client?
cn flag
You are having a client issue. I suppose ubuntu uses sssd too, so this would be a good place https://sssd.io/troubleshooting/basics.html
mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.