Home / server / Questions / 819050
In Process
Aleksandr Makhov
Asked: 2016-12-07 08:02:50 +0800 CST

'su' command doesn't work for AD users

  • 772

I want to have AD users to log in my Linux machine. I have added a CentOS 6.7 machine to an AD domain and all things look ok. I can execute 'kinit' command without error and 'wbinfo' works fine and shows to me all AD users and groups. Also I can get information about my users using 'id' command. The problem is I cannot execute this command: 'su domain_user' and get error:

$ su domain_user
Password: 
Access is denied
su: incorrect password

In the same time I can login to this Linux machine using this account via SSH.

How is it possible? Thank for your help.

linux active-directory authentication

1 Answers

  1. I added the file /etc/security/pam_winbind.conf And now it works fine.

    # cat /etc/security/pam_winbind.conf
[global]
debug = no
debug_state = no
try_first_pass = yes
krb5_auth = yes
krb5_cache_type = FILE
cached_login = yes
silent = no
mkhomedir = yes
    • 1