Renato Del Castillo

AD authentication works, I only SSH using my AD user, I also retrieved the miniserv.debug file using SCP with my AD user

Hi Jamie, I left this case open waiting for the new version of Ubuntu, 22.04, to figure it out if there was something wrong with version 20.04, but the behavior looks the same. Update environment is: Ubuntu 22.04 Webmin 1.994 I'm attaching a new output of /var/webmin/miniserv.debug to resume where we left. I also noticed that the the files /var/log/syslog and /var/log/sssd/sssd_nss.log record entries when the web login fails, here are the outputs. /var/log/syslog : Jun 11 21:50:42 nwsvr kernel: [...

there you have it, debug log for 1 failed login attempt

When going to the webmin web interface, the AD receives the request and authenticates it successfully as shown before. At the same time, auth.log shows: "cxnginx webmin[301124]: Invalid login as tatodc@smartteg.com from 192.168.255.169".

After a while investigating in the issue, my domain user couldn't log into the Ubuntu server, logs on Ubuntu are: Jan 1 00:35:30 cxwebsvr sshd[4386]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.168.255.170 user=tatodc@smartteg.com Jan 1 00:35:31 cxwebsvr sshd[4386]: pam_sss(sshd:auth): authentication success; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.168.255.170 user=tatodc@smartteg.com Authentication fails on pam_unix and succeeds on pam_sss,...

I'm not an AD expert, tried to do the best I can trying to be not as invasive as the AD is a production server. Just tried a webmin login attempt and the AD logged "An account was successfully logged on." Full log: An account was successfully logged on. Subject: Security ID: NULL SID Account Name: - Account Domain: - Logon ID: 0x0 Logon Information: Logon Type: 3 Restricted Admin Mode: - Virtual Account: No Elevated Token: Yes Impersonation Level: Impersonation New Logon: Security ID: SYSTEM Account...

no, unfortunately, it doesn't

Random checkup, refreshed Webmin, AD user was still logged in, did a log out, then tried to log in again but the problem appeared. Tried to do it one more time just in case I mistyped the password, same problem. Here's what the auth.log file shows: Dec 13 02:44:50 cxwebsvr webmin[605426]: Logout by tatodc@smartteg.com from 192.168.255.169 Dec 13 02:45:01 cxwebsvr webmin[605435]: Invalid login as tatodc@smartteg.com from 192.168.255.169 Dec 13 02:46:44 cxwebsvr webmin[605434]: Invalid login as tatodc@smartteg.com...