I am trying to chase this issue down for a while now. Once in a while authentication would fail and I would get the following entries with sudo rstudio-server status below (i am aware of the pam_unix entries since it isn't using that). The system error with pam_sss is the one that represents the failure.
Sep 06 19:50:39 rserver3 rserver-pam[604536]: pam_unix(rstudio:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost= user=john
Sep 06 19:50:50 rserver3 rserver-pam[604536]: pam_sss(rstudio:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost= user=john
Sep 06 19:50:50 rserver3 rserver-pam[604536]: pam_sss(rstudio:auth): received for user john: 4 (System error)
Sep 06 19:51:32 rserver3 rserver-pam[604552]: pam_unix(rstudio:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost= user=testrstudio5
Sep 06 19:51:32 rserver3 rserver-pam[604552]: pam_sss(rstudio:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost= user=testrstudio5
Sep 06 19:51:32 rserver3 rserver-pam[604552]: pam_sss(rstudio:auth): received for user testrstudio5: 4 (System error)
Sep 06 19:51:51 rserver3 rserver-pam[604575]: pam_unix(rstudio:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost= user=testrstudio5
Sep 06 19:51:51 rserver3 rserver-pam[604575]: pam_sss(rstudio:auth): authentication success; logname= uid=0 euid=0 tty= ruser= rhost= user=testrstudio5
Sep 06 19:51:58 rserver3 rserver-pam[604619]: pam_unix(rstudio:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost= user=john
Sep 06 19:51:58 rserver3 rserver-pam[604619]: pam_sss(rstudio:auth): authentication success; logname= uid=0 euid=0 tty= ruser= rhost= user=john
I also notice the following. Let's say when I force failed log in attempts (enter many wrong accounts/passwords within a short period), the next accounts with the correct account/passwords will also have a failed login. It looks like the authentication process isn't fast enough to recover and check the credential. As I give it up some time (10 seconds or so), any correct credentials would login in fine through the web browser. I just turned logging to 10 (debug level) on [domain/mydomain.net]. Any ideas ?
System information:
R version -- 4.1.0
Rstudio version -- 1.4.1717-3
Ubuntu - 20.04.2 LTS
authentication : SSSD connecting to Windows Active Directory