Too many hours trying to make this work. I am willing to learn, it can't be this hard.
I completed the install, and it appears to be connected to the DC
sudo adinfo -T
Domain Diagnostics:
Domain: r##########n.net
DNS query for: _ldap._tcp.r##########n.net
DNS query for: _gc._tcp.r##########n.net
Testing Active Directory connectivity:
Global Catalog: nas2.r##########n.net
gc: 3268/tcp - good
Domain Controller: nas2.r##########n.net
ldap: 389/tcp - good
ldap: 389/udp - good
smb: 445/tcp - good
kdc: 88/tcp - good
kpasswd: 464/tcp - good
ntp: 123/udp - good
sudo adinfo
Local host name: master
Joined to domain: r##########n.net
Joined as: master.r##########n.net
Pre-win2K name: master
Current DC: nas2.r##########n.net
Preferred site: Default-First-Site-Name
Zone: Auto Zone
Last password set: 2017-06-13 10:28:16 CDT
CentrifyDC mode: connected
Licensed Features: Disabled
sudo adinfo -A -u bruce
Active Directory password:
Password for user "bruce" is correct
From /var/log/auth.log
Jun 13 13:06:04 master sudo: radmin : TTY=pts/0 ; PWD=/etc/centrifydc/ssh ; USER=root ; COMMAND=/usr/bin/adinfo -A -u bruce
Jun 13 13:06:04 master sudo: pam_unix(sudo:session): session opened for user root by radmin(uid=0)
Jun 13 13:06:11 master adinfo[5786]: INFO base.nocachemode Disabling the agent directory cache
Jun 13 13:06:11 master adinfo[5786]: INFO AUDIT_TRAIL|Centrify Suite|Trusted Path|1.0|2700|Trusted path granted|5|user=bruce pid=5786 utc=1497377171991 centrifyEventID=23700 DASessID=N/A DAInst=N/A status=GRANTED server=ldap/nas2.r##########n.net@R##########N.NET
However whenever I try to SSH in, I can not get authentication to pass.
ssh 192.168.240.31
Ubuntu 16.04.1 LTS master ssh-pty
Password:
Password:
Password:
bruce@192.168.240.31's password:
Permission denied, please try again.
bruce@192.168.240.31's password:
FROM /var/log/auth.log
Jun 13 13:07:57 master sshd[5854]: Invalid user bruce from 192.168.20.105 port 53977
Jun 13 13:07:57 master adclient[1256]: INFO AUDIT_TRAIL|Centrify Suite|Centrify sshd|1.0|101|SSHD denied|5|user=(unknown user) pid=5854 utc=1497377277878 centrifyEventID=27101 DASessID=N/A DAInst=N/A status=DENIED service=(unknown service) tty=(no tty) authMechanism=unknown client=192.168.20.105 reason=INVALID_USER(invalid/invalidated user.)
Jun 13 13:07:57 master sshd[5854]: input_userauth_request: invalid user bruce [preauth]
Jun 13 13:07:57 master adclient[1256]: INFO AUDIT_TRAIL|Centrify Suite|Centrify sshd|1.0|101|SSHD denied|5|user=(invalid user) pid=5854 utc=1497377277880 centrifyEventID=27101 DASessID=N/A DAInst=N/A status=DENIED service=(unknown service) tty=(no tty) authMechanism=unknown client=192.168.20.105 reason=INVALID_USER(invalid/invalidated user.)
Jun 13 13:07:57 master adclient[1256]: WARN <fd:10 PAMUserIsOurResponsibility > base.zonehier Failed to extend object for CN=bruce,CN=Users,DC=r##########n,DC=net
Jun 13 13:07:57 master adclient[1256]: WARN <fd:10 PAMUserIsOurResponsibility > base.zonehier Failed to extend object for CN=bruce,CN=Users,DC=r##########n,DC=net
Jun 13 13:07:57 master sshd[5854]: Postponed keyboard-interactive for invalid user bruce from 192.168.20.105 port 53977 ssh2 [preauth]
Jun 13 13:08:08 master sshd[5856]: pam_unix(sshd:auth): check pass; user unknown
Jun 13 13:08:08 master sshd[5856]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.168.20.105
Jun 13 13:08:10 master sshd[5854]: error: PAM: Authentication failure for illegal user bruce from 192.168.20.105
Jun 13 13:08:10 master sshd[5854]: Failed keyboard-interactive/pam for invalid user bruce from 192.168.20.105 port 53977 ssh2
Jun 13 13:08:10 master adclient[1256]: INFO AUDIT_TRAIL|Centrify Suite|Centrify sshd|1.0|101|SSHD denied|5|user=(invalid user) pid=5854 utc=1497377290814 centrifyEventID=27101 DASessID=N/A DAInst=N/A status=DENIED service=ssh-connection tty=(no tty) authMechanism=keyboard-interactive client=192.168.20.105 reason=AUTH_FAIL_KBDINT(failed in keyboard interactive authentication.)
Jun 13 13:08:10 master adclient[1256]: WARN <fd:10 PAMUserIsOurResponsibility > base.zonehier Failed to extend object for CN=bruce,CN=Users,DC=r##########n,DC=net
Jun 13 13:08:10 master adclient[1256]: WARN <fd:10 PAMUserIsOurResponsibility > base.zonehier Failed to extend object for CN=bruce,CN=Users,DC=r##########n,DC=net
Jun 13 13:08:10 master sshd[5854]: Postponed keyboard-interactive for invalid user bruce from 192.168.20.105 port 53977 ssh2 [preauth]
Jun 13 13:08:17 master sshd[5860]: pam_unix(sshd:auth): check pass; user unknown
Jun 13 13:08:17 master sshd[5860]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.168.20.105
Jun 13 13:08:20 master sshd[5854]: error: PAM: Authentication failure for illegal user bruce from 192.168.20.105
Jun 13 13:08:20 master sshd[5854]: Failed keyboard-interactive/pam for invalid user bruce from 192.168.20.105 port 53977 ssh2
Jun 13 13:08:20 master adclient[1256]: INFO AUDIT_TRAIL|Centrify Suite|Centrify sshd|1.0|101|SSHD denied|5|user=(invalid user) pid=5854 utc=1497377300066 centrifyEventID=27101 DASessID=N/A DAInst=N/A status=DENIED service=ssh-connection tty=(no tty) authMechanism=keyboard-interactive client=192.168.20.105 reason=AUTH_FAIL_KBDINT(failed in keyboard interactive authentication.)
Jun 13 13:08:20 master adclient[1256]: WARN <fd:10 PAMUserIsOurResponsibility > base.zonehier Failed to extend object for CN=bruce,CN=Users,DC=r##########n,DC=net
Jun 13 13:08:20 master adclient[1256]: WARN <fd:10 PAMUserIsOurResponsibility > base.zonehier Failed to extend object for CN=bruce,CN=Users,DC=r##########n,DC=net
Jun 13 13:08:20 master sshd[5854]: Postponed keyboard-interactive for invalid user bruce from 192.168.20.105 port 53977 ssh2 [preauth]
Jun 13 13:08:27 master sshd[5861]: pam_unix(sshd:auth): check pass; user unknown
Jun 13 13:08:27 master sshd[5861]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.168.20.105
Jun 13 13:08:28 master sshd[5854]: error: PAM: Authentication failure for illegal user bruce from 192.168.20.105
Jun 13 13:08:28 master sshd[5854]: Failed keyboard-interactive/pam for invalid user bruce from 192.168.20.105 port 53977 ssh2
Jun 13 13:08:28 master adclient[1256]: INFO AUDIT_TRAIL|Centrify Suite|Centrify sshd|1.0|101|SSHD denied|5|user=(invalid user) pid=5854 utc=1497377308728 centrifyEventID=27101 DASessID=N/A DAInst=N/A status=DENIED service=ssh-connection tty=(no tty) authMechanism=keyboard-interactive client=192.168.20.105 reason=AUTH_FAIL_KBDINT(failed in keyboard interactive authentication.)
Jun 13 13:08:38 master adclient[1256]: WARN <fd:10 PAMUserIsOurResponsibility > base.zonehier Failed to extend object for CN=bruce,CN=Users,DC=r##########n,DC=net
Jun 13 13:08:38 master adclient[1256]: WARN <fd:10 PAMUserIsOurResponsibility > base.zonehier Failed to extend object for CN=bruce,CN=Users,DC=r##########n,DC=net
Jun 13 13:08:38 master sshd[5854]: pam_unix(sshd:auth): check pass; user unknown
Jun 13 13:08:38 master sshd[5854]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.168.20.105
Jun 13 13:08:39 master sshd[5854]: Failed password for invalid user bruce from 192.168.20.105 port 53977 ssh2
Jun 13 13:08:39 master adclient[1256]: INFO AUDIT_TRAIL|Centrify Suite|Centrify sshd|1.0|101|SSHD denied|5|user=(invalid user) pid=5854 utc=1497377319914 centrifyEventID=27101 DASessID=N/A DAInst=N/A status=DENIED service=ssh-connection tty=(no tty) authMechanism=password client=192.168.20.105 reason=AUTH_FAIL_PASSWD(invalid user or password.)
Jun 13 13:08:41 master sshd[5854]: Connection closed by 192.168.20.105 port 53977 [preauth]
Jun 13 13:09:01 master CRON[5887]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun 13 13:09:01 master CRON[5887]: pam_unix(cron:session): session closed for user root