- This user account's password has expired. The password must change in order to logon. Please update the password or contact your system administrator or technical support.
- Originally published July, 2017 and updated August, 2019. How to Get a List of Expired User Accounts with PowerShell. One of the most important tasks that an Active Directory administrator performs is ensuring that expired user accounts are reported in a timely manner and that action is taken to immediately remove or disable them.
Active Directory User Account Expiration
Hi
I'm unable to login via ssh to an ipa client or server as the admin user or a new user. This a new installation of the ipa server and clients.
I've saved some of the error messages:
Sep 30 13:39:34 gnu kernel: audit: type=1130 audit(.485:42): pid=1 uid=0 auid= ses= msg='unit=user-runtime-dir@976 comm='systemd' exe='/us Sep 30 13:39:34 gnu systemd3033: pamunix(systemd-user:account): account sddm has expired (account expired) Sep 30 13:39:34 gnu systemd3033: PAM failed: User account has expired Sep 30 13:39:34 gnu systemd3033: user@976. Mar 16 12:29:56 authpriv.err sshd30694: error: PAM: User account has expired for tuser from 10.109.4.20 Mar 16 12:29:56 authpriv.info sshd30694: Failed keyboard-interactive/pam for tuser from port 60942 ssh2.
I created a test user (tuser). I was able to su – tuser successfully. I was not able to ssh to the master ipa server or any of the clients.
Below I have some information from the sssd log, the command ipa hbactest, and the secure log.
If you need any other info please let me know.
Thanks
Jeff
sssd_.log
User Account Has Expired Suse
sh tuser pcs1dc01 Download jabber for mac.
Mar 16 12:39:53 pcs1dc01 authpriv.info sshd[30792]: Set /proc/self/oom_score_adj to 0
Mar 16 12:39:53 pcs1dc01 authpriv.info sshd[30792]: Connection from 10.109.4.20 port 60969
Mar 16 12:39:53 pcs1dc01 authpriv.info sshd[30792]: Failed publickey for tuser from 10.109.4.20 port 60969 ssh2
Password: Mar 16 12:39:53 pcs1dc01 authpriv.info sshd[30793]: Postponed keyboard-interactive for tuser from 10.109.4.20 port 60969 ssh2
Mar 16 12:40:57 pcs1dc01 authpriv.notice sshd[30795]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.109.4.20 user=tuser
Mar 16 12:40:57 pcs1dc01 authpriv.info sshd[30795]: pam_sss(sshd:auth): authentication success; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.109.4.20 user=tuser
I created a test user (tuser). I was able to su – tuser successfully. I was not able to ssh to the master ipa server or any of the clients.
Below I have some information from the sssd log, the command ipa hbactest, and the secure log.
If you need any other info please let me know.
Thanks
Jeff
sssd_.log
User Account Has Expired Suse
sh tuser pcs1dc01 Download jabber for mac.
Mar 16 12:39:53 pcs1dc01 authpriv.info sshd[30792]: Set /proc/self/oom_score_adj to 0
Mar 16 12:39:53 pcs1dc01 authpriv.info sshd[30792]: Connection from 10.109.4.20 port 60969
Mar 16 12:39:53 pcs1dc01 authpriv.info sshd[30792]: Failed publickey for tuser from 10.109.4.20 port 60969 ssh2
Password: Mar 16 12:39:53 pcs1dc01 authpriv.info sshd[30793]: Postponed keyboard-interactive for tuser from 10.109.4.20 port 60969 ssh2
Mar 16 12:40:57 pcs1dc01 authpriv.notice sshd[30795]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.109.4.20 user=tuser
Mar 16 12:40:57 pcs1dc01 authpriv.info sshd[30795]: pam_sss(sshd:auth): authentication success; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.109.4.20 user=tuser
Mar 16 12:40:57 pcs1dc01 authpriv.notice sshd[30795]: pam_sss(sshd:account): Access denied for user tuser: 6 (Permission denied)
Mar 16 12:40:57 pcs1dc01 authpriv.err sshd[30792]: error: PAM: User account has expired for tuser from 10.109.4.20
Mar 16 12:40:57 pcs1dc01 authpriv.info sshd[30792]: Failed keyboard-interactive/pam for tuser from 10.109.4.20 port 60969 ssh2
Received disconnect from UNKNOWN: 2: Too many authentication failures for tuser
Mar 16 12:40:57 pcs1dc01 authpriv.info sshd[30793]: Disconnecting: Too many authentication failures for tuse
Processmaker User Account Expired
Command: ipa hbactest
User name: tuser
Target host:
Service: ssh
---------------------
Access granted: False
---------------------
Not matched rules: GUI_ACCESS
Not matched rules: SSH_ACCESS
Secure log
Mar 16 12:29:55 authpriv.notice sshd[30697]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost= user=tuser
Mar 16 12:29:56 authpriv.info sshd[30697]: pam_sss(sshd:auth): authentication success; logname= uid=0 euid=0 tty=ssh ruser= rhost= user=tuser
Mar 16 12:29:56 authpriv.notice sshd[30697]: pam_sss(sshd:account): Access denied for user tuser: 6 (Permission denied)
Mar 16 12:29:56 authpriv.err sshd[30694]: error: PAM: User account has expired for tuser from 10.109.4.20
Mar 16 12:29:56 authpriv.info sshd[30694]: Failed keyboard-interactive/pam for tuser from port 60942 ssh2
User Account Has Expired Ad
Received disconnect from UNKNOWN: 2: Too many authentication failures for tuser
User Account Has Expired Pam
Mar 16 12:29:56 authpriv.info sshd[30695]: Disconnecting: Too many authentication failures for tuser
