Beta 4515.1.0 and Alpha 4547.0.0 - sssd not working #1985
Description
Description
I am not able to authenticate on nodes with Beta 4515.1.0 and Alpha 4547.0.0 using ldap/sssd (keyboard-interactive).
Environment and steps to reproduce
- Set-up:
# cat /etc/os-release
NAME="Flatcar Container Linux by Kinvolk"
ID=flatcar
ID_LIKE=coreos
VERSION=4515.1.0
VERSION_ID=4515.1.0
BUILD_ID=2025-12-12-1622
SYSEXT_LEVEL=1.0
PRETTY_NAME="Flatcar Container Linux by Kinvolk 4515.1.0 (Oklo)"
ANSI_COLOR="38;5;75"
HOME_URL="https://flatcar.org/"
BUG_REPORT_URL="https://issues.flatcar.org"
FLATCAR_BOARD="amd64-usr"
CPE_NAME="cpe:2.3:o:flatcar-linux:flatcar_linux:4515.1.0:*:*:*:*:*:*:*"- Task: keyboard-interactive login
- Error:
On the server:
systemd[1]: Started sshd@2-10.1.1.7:22-10.2.2.8:52976.service - OpenSSH per-connection server daemon.
sshd[1298002]: PAM user mismatch
systemd[1]: sshd@2-10.1.1.7:22-10.2.2.8:52976.service: Deactivated successfully.On the client:
› ssh -v 10.1.1.74
OpenSSH_9.9p2, LibreSSL 3.3.6
debug1: Reading configuration data /HOME/.ssh/config
--snip--
debug1: Authentications that can continue: publickey,keyboard-interactive
debug1: Next authentication method: keyboard-interactive
Connection closed by 10.1.1.74 port 22Expected behavior
Exact same /etc/pam.d/system-auth and /etc/sssd/sssd.conf config has worked previously.
Additional information
It works right away if I downgrade to the previous beta:
flatcar-update --to-version 4459.1.2 --listen-port-2 9093 && rebootor current stable:
flatcar-update --to-version 4515.1.0 --listen-port-2 9093 && reboot