Receiving error on SSH login error: PAM: Authentication failure

Showing results for 
Search instead for 
Do you mean 
Reply
Participant III
Posts: 59
Registered: ‎12-02-2010
#1 of 8 23,116
Accepted Solution

Receiving error on SSH login error: PAM: Authentication failure

I am getting in /var/log/secure PAM: authentication failure when trying to login with a user through SSH.  I have UsePam enabled and ChallengeResponse set to yes.

 

I am running on RHEL 5 and I am able to switch to user if logged in as root and I switch to the user.  So it appears to be SSH.

 

Any ideas on what to check?

 

error: PAM: Authentication failure

Posts: 932
Topics: 3
Kudos: 259
Blog Posts: 6
Ideas: 0
Solutions: 122
Registered: ‎07-06-2010
#2 of 8 23,092

Re: Receiving error on SSH login error: PAM: Authentication failure

Hi,

 

First of all, test all is well from an AD-integration perpective.  To do this type the following command for the user account in question:

 

 adinfo -A -u fred.thomas
Active Directory password:
Password for user "fred.thomas" is correct

 

If the command returns that the password is correct, next check to make sure the account is in good standing by using adquery as shown below.

 

# adquery user fred.thomas -xwclkde
accountExpires:Never
passwordExpires:Never
nextPasswordChange:Tue Dec 17 11:04:11 2012
lastPasswordChange:Mon Apr 16 11:04:11 2012
accountLocked:false
accountDisabled:false
zoneEnabled:true

 

If the user's password is good and the account is in good standing, then its likely an issue with SSH.

 

To troubleshoot SSH, please send me the following information:

 

What version of OpenSSH are you using?  Run "ps -ef | grep sshd" and "ssh -V". 

 

Send the sshd_config for review.
 

Turn ON Centrify debug by running "/usr/share/centrifydc/bin/addebug on".

 

Next run "<path_to_sshd>/sshd -ddde -p 2222" to start the SSHD server in the foreground with verbosity turned on.

 

From the ssh client, connect to the SSHD server on port 2222, "ssh -p 2222 -vvv <hostname>" and try to authenticate.

 

Please send the output from the SSHD foreground session and cient for analysis.

 

Now turn OFF Centrify debug "/usr/share/centrifydc/bin/addebug off"

 

Collect the system's diagnostics by running "adinfo --support".

 

Send the files /tmp/adinfo_support.tar, sshd_config and verbose sshd and ssh client outputs to felderi.santiago@centrify.com for review.

 

Regards,

 

Felderi Santiago
VP of Enterprise Solutions
Centrify Corporation
Found my response helpful? Click the Kudos button!
Follow Centrify:
Participant I
Posts: 1
Registered: ‎10-26-2012
#3 of 8 23,013

Re: Receiving error on SSH login error: PAM: Authentication failure

Hi Fel.

 

I have a similar error. I am running HP-UX 11.31 with Direct Control 5.0.2-388, OPenSSH 4.5.4-121 and  Windows 2008 R2 AD.

 

Can you provide the solution to this problem?

 

I have all the logs colected as per your instructions.

 

Thank you for your support.

 

Mihai 

Posts: 932
Topics: 3
Kudos: 259
Blog Posts: 6
Ideas: 0
Solutions: 122
Registered: ‎07-06-2010
#4 of 8 23,001

Re: Receiving error on SSH login error: PAM: Authentication failure

Hi,

 

Send me the logs and we will look into the problem further. 

 

Thanks,

Felderi Santiago
VP of Enterprise Solutions
Centrify Corporation
Found my response helpful? Click the Kudos button!
Follow Centrify:
Participant III
Posts: 59
Registered: ‎12-02-2010
#5 of 8 22,892

Re: Receiving error on SSH login error: PAM: Authentication failure

Felderi,

  I left and rejoined and it is working now.  Something didn't join correctly.  Thanks

Posts: 932
Topics: 3
Kudos: 259
Blog Posts: 6
Ideas: 0
Solutions: 122
Registered: ‎07-06-2010
#6 of 8 22,889

Re: Receiving error on SSH login error: PAM: Authentication failure

Good news.

 

Thanks for letting us know and thank you for using Centrify.

Felderi Santiago
VP of Enterprise Solutions
Centrify Corporation
Found my response helpful? Click the Kudos button!
Follow Centrify:
Participant II
Posts: 7
Registered: ‎08-12-2016
#7 of 8 13,814

Re: Receiving error on SSH login error: PAM: Authentication failure

I'm sorry.  Which logs specifically?  Do I just post them here?

Centrify Guru I
Posts: 2,239
Registered: ‎07-26-2012
#8 of 8 13,809

Re: Receiving error on SSH login error: PAM: Authentication failure

Moderation:

This is a resolved thread from 2012. 

Please create a new thread based on your issue.  If you are still trying to deal with disconnects - do an adinfo -T and check connectivity with your domain controllers.

Want to learn more about practical Centrify examples? Check out my blog at http://centrifying.blogspot.com
Follow Centrify: