Oct 22 16:40:49 SERVER_IP sshd: pam_sss(sshd:account): system info: Oct 22 16:40:48 SERVER_IP sshd: pam_unix(sshd:session): session closed for user uexpired Oct 22 16:40:48 SERVER_IP sshd: Received disconnect from CLIENT_IP: 11: disconnected by user Oct 22 16:40:47 SERVER_IP sshd: pam_unix(sshd:session): session opened for user uexpired by (uid=0) Oct 22 16:40:47 SERVER_IP sshd: Accepted publickey for uexpired from CLIENT_IP port ssh2: RSA

I should never be able to login if my account is expired.ĪuthorizedKeysCommand /usr/bin/sss_ssh_authorizedkeys The first time pam_unix(sshd:session) si active, the rest pam_sss(sshd:account) is being used.Ĭan you explain if this is an issue with my setup. In the logs it looks like the client is not going through the same path for the first time and the period after. My expected result is that the user gets denied always because of the expired account. After a couple of seconds, about 5, the client is able to log back in again.

When I logout and log back in the account is now denied with user account has expired. I try to login with the user and the ssh public key gets returned and the account is allowed. I have a user that has a public key in but has a expired account. My authentication provider is Windows AD. Have been trying to setup ssh key based authentication.

User account has expired