Return
-
Title
Active Directory user ssh logon to AIX server fails with 'invalid user' error in logs -
Description
Active Directory user ssh logon to AIX server fails with 'invalid user' error in logs
The system log will show an invalid user error similar to the following:
Nov 25 17:29:04 server01 auth:info sshd[14483544]: Postponed keyboard-interactive for invalid user aduser01 from ip address
The same user can logon using the console and also when performing a double 'su -' to the user from the root user.
A 'vastool user checklogin username' command is also successful.
A local user can ssh to the same AIX server without any errors. -
Cause
Possible configuration issue in following file:
/etc/security/user
-
Resolution
This error message has been seen on AIX if the SYSTEM entry in the default section is incorrect.
An example of the correct configuration for SYSTEM in the /etc/security/user file is:
SYSTEM = "VAS OR compat"
Resolution:
Correct any syntax errors in the /etc/security/user file and try the ssh logon again.
You can run the following command to set this to the default entry required for Authentication services (SYSTEM = "VAS OR compat")
# /opt/quest/bin/vastool configure lam