So, I have a RHEL server that is ad joined. Users are not able to login, even when using the correct passwords.
I can login through console, but only with root, none of the AD accounts will work. I cannot use root to login via Putty, it only works via console. No AD user can login via console, only root login works.
Logs have been frustratingly unhelpful.
When trying to access via SSH/Putty and an AD account (Two factor is turned on) I get the Duo prompt, so can verify that it's reaching out. I was getting a your password expires in 7 days message, so I updated my password in AD and now no longer get the your password expires in 7 days message. This tells me that the server is able to reach AD and read AD info. Below is the text when trying to login with an AD account:
Passcode or option (1-3): 1 Using keyboard-interactive authentication. Success. Logging you in... Access denied
When logging in with root (no two factor setup for root ironically) it just goes straight to access denied.
I've cleared SSSD cache, verified the SSSD settings, compared the SSSD settings to one of our other servers that isn't having the issue, and they are the same.
Since root is also getting denied SSH login, I don't really believe the problem is related to AD though.
Any help would be greatly appreciated.