VMware Cloud Community
edmason
Contributor
Contributor

pam_sm_authenticate error

After rebooting our ESXi 5.1 hosts configured to use AD authentication we are seeing this behavior on a few hosts when connecting with vSphere Client.

When I attempt to login to the ESXi host through the vSphere client and I select the option to "Use Windows session credentials" I connect.  However if I instead enter Domain\Username and the correct password I get "Cannot complete login due to an incorrect user name or password".  I am using the correct password and this is failing for all users.

Log errors:

auth.log
[module:pam_lsass]pam_sm_authenticate error [login:domain\user1][error code:40047]


hostd.log
pam_per_user: create_subrequest_handle(): doing map lookup for user "user1"
pam_per_user: create_subrequest_handle(): creating new subrequest (user="user1", service="system-auth-generic")
pam_unix(system-auth-generic:auth): check pass; user unknown
pam_unix(system-auth-generic:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=
pam_per_user: create_subrequest_handle(): doing map lookup for user "domain\user1"
pam_per_user: create_subrequest_handle(): creating new subrequest (user="domain\user1", service="system-auth-generic")
[module:pam_lsass]pam_sm_authenticate error [login:domain\user1][error code:40047]
2013-10-11T15:56:27.515Z [30D81B90 verbose 'Cimsvc'] Ticket issued for CIMOM version 1.0, user root
2013-10-11T15:56:27.744Z [30DE2B90 warning 'UserDirectory'] Group lookup failed for 'domain\ESX Admins'
2013-10-11T15:56:28.332Z [31280B90 info 'Vimsvc.ha-eventmgr' opID=7A3EBE79-00000003] Event 337 : Cannot login user1@10.0.1.24
Rejected password for user user1 from 10.0.1.24


syslog.log
2013-10-11T15:56:26Z lsassd[79742]: 0x77544b90:Failed to authenticate user (name = 'domain\user1') -> error = 40047, symbol = LW_ERROR_KRB5_CALL_FAILED, client pid = 9975

0 Replies