Active Directory user ssh logon to AIX server fails with 'invalid user' error in logs (4285467)

Active Directory user ssh logon to AIX server fails with 'invalid user' error in logs

Active Directory user ssh logon to AIX server fails with 'invalid user' error in logs

The system log will show an invalid user error similar to the following:
Nov 25 17:29:04 server01 auth:info sshd[14483544]: Postponed keyboard-interactive for invalid user aduser01 from ip address

 The same user can logon using the console and also when performing a double 'su -' to the user from the root user.
A 'vastool user checklogin username' command is also successful.

A local user can ssh to the same AIX server without any errors.

Possible configuration issue in  following file:
 /etc/security/user

This error message has been seen on AIX if the SYSTEM entry in the default section is incorrect.

An example of the correct configuration for SYSTEM in the /etc/security/user file is:
SYSTEM = "VAS OR compat"



Resolution:
Correct any syntax errors in the /etc/security/user file and try the ssh logon again.

You can run the following command to set this to the default entry required for Authentication services (SYSTEM = "VAS OR compat")
# /opt/quest/bin/vastool configure lam