[Bug 217415] security/sssd Cannot authenticate towards Active Directory

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=217415

--- Comment #17 from lukas.slebodnik at intrak.sk ---
I've just realized that the same message "Got KDC time offset" is also in
centos.logs. But MIT kerberos can handle small time offset.

I checked logs one more time and I overlooked one important thing
>(Wed Mar  8 09:00:06 2017) [sssd[be[FOO.BAR]]] [krb5_pam_handler] (0x1000): Wait queue of user [username] is empty, running request immediately.
>(Wed Mar  8 09:00:06 2017) [sssd[be[FOO.BAR]]] [krb5_auth_send] (0x0020): Illegal zero-length authtok for user [username]

Password is empty. There seems to be some issue with pam stack.
I will try to compare your pam configuration with working one.

-- 
You are receiving this mail because:
You are the assignee for the bug.