[X2Go-User] x2goserver Active Directory User Login Issue

[Jason Scalia]

Hello,

I am currently running x2goserver on a RHEL 6.6 x64 instance. I am able to
login with a local user fine, but receive an "access denied" message when I
try to use an Active Directory authenticated user. I confirmed on the RHEL
host that I can SSH in with the AD creds for the user, I can also login
with a local user using x2goclient without issue.

I have tried the x2goclient on OS X 10.9.5, Windows Server 2012 x64,
Windows 7 x64, and even tried from the RHEL 6.6 x64 server instance with no
luck.

I have x2goserver set to loglevel=debug. There are no logs populated that I
can see in the user's homedir for the session. If someone can point me in
the right direction perhaps regarding this issue it would be greatly
appreciated, from googling and checking the archives it looks like this has
been done successfully, but I am at a loss here. Any and all help is
appreciated.

Logs are below.

/var/log/secure:

Dec 11 11:02:17 x2g5-dpmgmt-smq sshd[14384]: debug1: rexec start in 5 out 5
newsock 5 pipe 7 sock 8
Dec 11 11:02:17 x2g5-dpmgmt-smq sshd[14384]: debug1: inetd sockets after
dupping: 3, 3
Dec 11 11:02:17 x2g5-dpmgmt-smq sshd[14384]: Connection from $clientip port
62850
Dec 11 11:02:17 x2g5-dpmgmt-smq sshd[14384]: debug1: Client protocol
version 2.0; client software version libssh-0.6.3
Dec 11 11:02:17 x2g5-dpmgmt-smq sshd[14384]: debug1: no match: libssh-0.6.3
Dec 11 11:02:17 x2g5-dpmgmt-smq sshd[14384]: debug1: Enabling compatibility
mode for protocol 2.0
Dec 11 11:02:17 x2g5-dpmgmt-smq sshd[14384]: debug1: Local version string
SSH-2.0-OpenSSH_5.3
Dec 11 11:02:17 x2g5-dpmgmt-smq sshd[14385]: debug1: permanently_set_uid:
74/74
Dec 11 11:02:17 x2g5-dpmgmt-smq sshd[14385]: debug1: list_hostkey_types:
ssh-rsa,ssh-dss
Dec 11 11:02:17 x2g5-dpmgmt-smq sshd[14385]: debug1: SSH2_MSG_KEXINIT sent
Dec 11 11:02:17 x2g5-dpmgmt-smq sshd[14385]: debug1: SSH2_MSG_KEXINIT
received
Dec 11 11:02:17 x2g5-dpmgmt-smq sshd[14385]: debug1: kex: client->server
aes256-ctr hmac-sha1 none
Dec 11 11:02:17 x2g5-dpmgmt-smq sshd[14385]: debug1: kex: server->client
aes256-ctr hmac-sha1 none
Dec 11 11:02:17 x2g5-dpmgmt-smq sshd[14385]: debug1: expecting
SSH2_MSG_KEXDH_INIT
Dec 11 11:02:17 x2g5-dpmgmt-smq sshd[14385]: debug1: SSH2_MSG_NEWKEYS sent
Dec 11 11:02:17 x2g5-dpmgmt-smq sshd[14385]: debug1: expecting
SSH2_MSG_NEWKEYS
Dec 11 11:02:17 x2g5-dpmgmt-smq sshd[14385]: debug1: SSH2_MSG_NEWKEYS
received
Dec 11 11:02:17 x2g5-dpmgmt-smq sshd[14385]: debug1: KEX done
Dec 11 11:02:18 x2g5-dpmgmt-smq sshd[14385]: debug1: userauth-request for
user mydomain\\jscalia service ssh-connection method none
Dec 11 11:02:18 x2g5-dpmgmt-smq sshd[14385]: debug1: attempt 0 failures 0
Dec 11 11:02:18 x2g5-dpmgmt-smq sshd[14384]: debug1: PAM: initializing for
"mydomain\\jscalia"
Dec 11 11:02:18 x2g5-dpmgmt-smq sshd[14385]: debug1: userauth-request for
user mydomain\\jscalia service ssh-connection method keyboard-interactive
Dec 11 11:02:18 x2g5-dpmgmt-smq sshd[14385]: debug1: attempt 1 failures 0
Dec 11 11:02:18 x2g5-dpmgmt-smq sshd[14385]: debug1: keyboard-interactive
devs
Dec 11 11:02:18 x2g5-dpmgmt-smq sshd[14385]: debug1: auth2_challenge:
user=mydomain\\jscalia devs=
Dec 11 11:02:18 x2g5-dpmgmt-smq sshd[14385]: debug1: kbdint_alloc: devices
'pam'
Dec 11 11:02:18 x2g5-dpmgmt-smq sshd[14385]: debug1: auth2_challenge_start:
trying authentication method 'pam'
Dec 11 11:02:18 x2g5-dpmgmt-smq sshd[14384]: debug1: PAM: setting PAM_RHOST
to "$client_hostname"
Dec 11 11:02:18 x2g5-dpmgmt-smq sshd[14384]: debug1: PAM: setting PAM_TTY
to "ssh"
Dec 11 11:02:18 x2g5-dpmgmt-smq sshd[14385]: Postponed keyboard-interactive
for mydomain\\jscalia from $clientip port 62850 ssh2
Dec 11 11:02:18 x2g5-dpmgmt-smq sshd[14385]: Received disconnect from
$clientip: 11: Bye Bye
Dec 11 11:02:18 x2g5-dpmgmt-smq sshd[14385]: debug1: do_cleanup
Dec 11 11:02:18 x2g5-dpmgmt-smq sshd[14384]: debug1: do_cleanup
Dec 11 11:02:18 x2g5-dpmgmt-smq sshd[14384]: debug1: PAM: cleanup

/var/log/messages has no entries.

Regards,
Jason

layne on #x2go
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.x2go.org/pipermail/x2go-user/attachments/20141211/d93a4817/attachment.html>