aaahh ok I see what is meant by "in addition to any included installed backends"
I have changed it back I don't have a /var/log/secure but i have /var/log/auth.log This is just trying login from tty2 Jan 12 15:41:00 vut-precise01 login[781]: pam_krb5(login:auth): authentication failure; logname=jsharp_sa uid=0 euid=0 tty=/dev/tty2 ruser= rhost= Jan 12 15:41:00 vut-precise01 login[781]: pam_unix(login:auth): authentication failure; logname=LOGIN uid=0 euid=0 tty=/dev/tty2 ruser= rhost= user=jsharp_sa Jan 12 15:41:01 vut-precise01 login[781]: pam_sss(login:auth): authentication failure; logname=LOGIN uid=0 euid=0 tty=/dev/tty2 ruser= rhost= user=jsharp_sa Jan 12 15:41:01 vut-precise01 login[781]: pam_sss(login:auth): received for user jsharp_sa: 4 (System error) Jan 12 15:41:04 vut-precise01 login[781]: FAILED LOGIN (1) on '/dev/tty2' FOR 'jsharp_sa', Authentication failure kinit results in an error that simply says 'generic preauthentication failure while getting initial credentials' which is leading me to believe its AD that returning a different value -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/915386 Title: SSSD/AD 2008 and Password Change To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/sssd/+bug/915386/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs