Hi,

I have set up 389 directory server and I think it works..

I have configured a test desktop machine.

getent passwd | grep /home
..
...
KathySmith:*:530:530:Kathy Smith:/home/KathySmith:/bin/bash
ASmith:*:601:601:Andrew Smith:/home/AndrewSmith:/bin/bash
....

Via ssh ASmith can log in

Jan 19 12:22:22 desktop sshd[5220]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=laptop.example.com user=ASmith
Jan 19 12:22:22 desktop sshd[5220]: pam_sss(sshd:auth): authentication success; logname= uid=0 euid=0 tty=ssh ruser= rhost=laptop.example.com user=ASmith
Jan 19 12:22:22 desktop sshd[5220]: Accepted password for ASmith from 10.0.1.12 port 52082 ssh2
Jan 19 12:22:22 desktop sshd[5220]: pam_unix(sshd:session): session opened for user ASmith by (uid=0)


VIA gui ASmith can login

Jan 19 12:23:18 desktop pam: gdm-password: pam_unix(gdm-password:auth): authentication failure; logname= uid=0 euid=0 tty=:0 ruser= rhost= user=ASmith
Jan 19 12:23:18 desktop pam: gdm-password: pam_sss(gdm-password:auth): authentication success; logname= uid=0 euid=0 tty=:0 ruser= rhost= user=ASmith
Jan 19 12:23:19 desktop pam: gdm-password: pam_unix(gdm-password:session): session opened for user ASmith by (uid=0)
Jan 19 12:23:19 desktop polkitd(authority=local): Unregistered Authentication Agent for session /org/freedesktop/ConsoleKit/Session25 (system bus name :1.214, object path /org/gnome/PolicyKit1/AuthenticationAgent, locale en_US.UTF-8) (disconnected from bus)
Jan 19 12:23:20 desktop polkitd(authority=local): Registered Authentication Agent for session /org/freedesktop/ConsoleKit/Session26 (system bus name :1.223 [/usr/libexec/polkit-gnome-authentication-agent-1], object path /org/gnome/PolicyKit1/AuthenticationAgent, locale en_US.UTF-8)

But for some users H for example I can ssh in

==> /var/log/secure <==

Jan 19 12:28:17 desktop sshd[6149]: pam_sss(sshd:auth): authentication success; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.0.1.21 user=hh
Jan 19 12:28:17 desktop sshd[6149]: Accepted password for hh from 10.0.1.21 port 53319 ssh2
Jan 19 12:28:17 desktop sshd[6149]: pam_unix(sshd:session): session opened for user hh by (uid=0)

But for gui

Jan 19 12:32:14 desktop pam: gdm-password: pam_sss(gdm-password:auth): authentication success; logname= uid=0 euid=0 tty=:0 ruser= rhost= user=hh
Jan 19 12:32:15 desktop pam: gdm-password: pam_unix(gdm-password:session): session opened for user hh by (uid=0)
Jan 19 12:32:15 desktop polkitd(authority=local): Unregistered Authentication Agent for session /org/freedesktop/ConsoleKit/Session33 (system bus name :1.282, object path /org/gnome/PolicyKit1/AuthenticationAgent, locale en_US.UTF-8) (disconnected from bus)
Jan 19 12:32:15 desktop pam: gdm-password: pam_unix(gdm-password:session): session closed for user hh
Jan 19 12:32:17 desktop polkitd(authority=local): Registered Authentication Agent for session /org/freedesktop/ConsoleKit/Session35 (system bus name :1.293 [/usr/libexec/polkit-gnome-authentication-agent-1], object path /org/gnome/PolicyKit1/AuthenticationAgent, locale en_US.UTF-8)

It seems that the desktop loads but then immediately quits and goes back to the login screen again.

SELINUX is off.

[root@desktop ~]# getenforce
Permissive


Any ideas?

No one?