Server: RHEL 7 IdM,  ipa-server-4.6.5-11.el7_7.4.x86_64

Client: Debian 10, freeipa-client 4.7.2-3 amd64

Is this version difference a show stopper ?  It sorta-kinda-mostly works.

I created a test user to test the HBAC rules, and I cannot ssh into this Debian server as this test user.

I can ssh in as me, but my login has admin permissions.

I can ssh into a CentOS 7 and a RHEL 7 client as "test_user"

I tried "su - test_user" and got "sh: Authentication failure"

Any suggestions ?  I am a novice at Debian.  Most of my experience is with Red Hat/CentOS

______________________________________________________________________________________________

Daniel E. White
daniel.e.white@nasa.gov

NICS Linux Engineer
NASA Goddard Space Flight Center
8800 Greenbelt Road
Building 14, Room E175
Greenbelt, MD 20771

Office: (301) 286-6919

Mobile: (240) 513-5290