Re: Centrify Express and x2go

Hi , many thanks for the reply. I believe my PAM setup is fine as the logs show that the AD user is authenticating and the x2go session partially starts. I'm using x2go in standalone mode so the x2gobroker settings don't apply to my setup. I've been debugging Centrify and the 

centrifydc.log suggests that the cause is that my AD user is denied shadow access (see section in red below). Can you advise on how to allow this? Many thanks.

Jul 24 22:21:49 servername adclient[2545]: DEBUG <fd:10 x2golistsession(23831)> Result: account='<AD-username>' password=(hidden) UID='1619015552' GID='1619015552' gecos='Duke, Christopher' homedir='$

Jul 24 22:21:49 servername adclient[2545]: DEBUG <fd:10 x2golistsession(23831)> <- getpwuid_centrifydc_r, result=NSS_SUCCESS(1)

Jul 24 22:21:49 servername adclient[2545]: DEBUG <main> daemon.ipcserver lrpc client disconnected normally <fd:24>

Jul 24 22:21:49 servername adclient[2545]: DEBUG <main> daemon.ipcserver lrpc client disconnected normally <fd:10>

Jul 24 22:21:49 servername adclient[2545]: DEBUG <main> daemon.ipcserver Accepted new lrpc2 client on <fd:10> with flags 0x00000802

Jul 24 22:21:49 servername adclient[2545]: DEBUG <fd:10 x2golistsession(23831)> -> getspnam_centrifydc_r  shadow="<AD-username>"

Jul 24 22:21:49 servername adclient[2545]: DEBUG <fd:10 x2golistsession(23831)> Process UID=1619015552, EUID=1619015552 denied shadow access

Jul 24 22:21:49 servername adclient[2545]: DEBUG <fd:10 x2golistsession(23831)> <- getspnam_centrifydc_r, result=NSS_UNAVAIL(-1)

Jul 24 22:21:49 servername adclient[2545]: DEBUG <main> daemon.ipcserver lrpc client disconnected normally <fd:10>

Jul 24 22:21:49 servername adclient[2545]: DEBUG <main> daemon.ipcserver Accepted new lrpc2 client on <fd:10> with flags 0x00000802

Jul 24 22:21:49 servername adclient[2545]: DEBUG <fd:10 x2gosqlitewrapp(23840)> -> getpwnam_centrifydc_r  user="x2gouser"

Jul 24 22:21:49 servername adclient[2545]: DEBUG <fd:10 x2gosqlitewrapp(23840)> User="x2gouser" str2ent=(nil) result=0x62d7b8, buffer=0x631cd0