银河麒麟加AD域后，锁屏后提示拒绝访问

[m0_70722442]

银河麒麟V10加域后，锁屏后再次登录域账号，提示拒绝访问，报错如下，有什么解决方案吗

Jun  9 14:17:58 zbxcvm01 ukui-screensaver-dialog: pam_succeed_if(ukui-screensaver-qt:auth): requirement "user ingroup nopasswdlogin" not met by user "xcuer02"

Jun  9 14:18:05 zbxcvm01 ukui-screensaver-dialog: pam_unix(ukui-screensaver-qt:auth): authentication failure; logname= uid=1412499654 euid=1412499654 tty= ruser= rhost=  user=xcuer02

Jun  9 14:18:05 zbxcvm01 ukui-screensaver-dialog: pam_sss(ukui-screensaver-qt:auth): authentication success; logname= uid=1412499654 euid=1412499654 tty= ruser= rhost= user=xcuer02
Jun  9 14:18:05 zbxcvm01 ukui-screensaver-dialog: pam_sss(ukui-screensaver-qt:account): Access denied for user xcuer02: 6 (拒绝权限)
Jun  9 14:18:05 zbxcvm01 ukui-screensaver-dialog: pam_sss(ukui-screensaver-qt:account): User info message: 拒绝访问。

Jun  9 14:18:05 zbxcvm01 ukui-screensaver-dialog: pam_succeed_if(ukui-screensaver-qt:auth): requirement "user ingroup nopasswdlogin" not met by user "xcuer02"

[家峰]

我也试了银河麒麟加域后，域用户账号锁屏后再登录会提示拒绝访问，后面发现修改了/etc/sssd/sssd.conf 里面的access_provider = ad 改为 access_provider = sample 即可。我这没看日志，一个个排查发下可行，不确定你这是否成功，你可以试试。记得用sudo vim更新配置文件后，命令 sudo systemctl restart sssd 重启一下sssd。