-
Notifications
You must be signed in to change notification settings - Fork 36
Open
Labels
bugSomething isn't workingSomething isn't working
Description
In a Questing (25.10) VM, when I use ssh to log in as an authd user on localhost, the ssh command hangs without printing any output:
ssh test@ubudev1.onmicrosoft.com@localhost
The same happens when I try to log in as a non-existing user:
ssh not-a-user@localhost
System information and logs
authd version
authd 0.5.6+git251208+1372+183d8bb8~ubuntu25.10.1
authd-msentraid broker version
name: authd-msentraid
summary: Microsoft Entra ID authentication for Ubuntu
publisher: Canonical**
store-url: https://snapcraft.io/authd-msentraid
license: GPL-3.0
description: |
authd is a powerful authentication service for Ubuntu, designed to
integrate with cloud identity providers like Microsoft Entra ID. It
delivers a secure, flexible solution for organizations and individuals who
are transitioning to cloud-based identity management on Ubuntu workstations
and servers.
authd uses the OAuth Device Authorization Grant and ensures a consistent
and secure login experience across Ubuntu Desktop and Server — whether
through GDM, SSH, or network services like NFS and Samba.
Key Features
* Cloud identity provider Integration: Connects with Microsoft Entra ID
* Secure Login: authd leverages the OAuth Device Authorization Grant RFC
8628-compliant workflows for reliability and security.
* Open-Source: Free and community-driven, with contributions welcomed.
* Enterprise ready: Ubuntu Pro customers will benefit from the same
expanded security and support guarantees.
* authd is free for all Ubuntu Desktop and Server 24.04 LTS users and is
under active development. Explore the official documentation for
installation and configuration steps, or visit the GitHub repository to
contribute or provide feedback.
services:
authd-msentraid: dbus, enabled, active
snap-id: vS3oJLMss6lgWwoFcPqYDUA2HB20I1Dc
tracking: 0.x/edge
refresh-date: 5 days ago, at 21:18 UTC
channels:
0.x/stable: 0.3.0 2025-06-12 (200) 20MB -
0.x/candidate: 0.3.0+d9de539.43f11a7 2025-07-21 (220) 20MB -
0.x/beta: ^
0.x/edge: 0.3.5+c75829a.0297aa8 2026-02-05 (317) 22MB -
installed: 0.3.5+c75829a.0297aa8 (317) 22MB -
gnome-shell version
gnome-shell:
Installed: 49.0-1ubuntu1.2
Candidate: 49.0-1ubuntu1.2
Version table:
*** 49.0-1ubuntu1.2 500
500 http://archive.ubuntu.com/ubuntu questing-updates/main amd64 Packages
100 /var/lib/dpkg/status
49.0-1ubuntu1 500
500 http://archive.ubuntu.com/ubuntu questing/main amd64 Packages
49~beta.1-0ubuntu4~authd3 500
500 https://ppa.launchpadcontent.net/ubuntu-enterprise-desktop/authd-edge/ubuntu questing/main amd64 Packages
Distribution
Distributor ID: Ubuntu
Description: Ubuntu 25.10
Release: 25.10
Codename: questing
Logs
[471102.218053] ubuntu systemd[1]: Starting snap.authd-msentraid.authd-msentraid.service - Service for snap application authd-msentraid.authd-msentraid...
[471103.121268] ubuntu authd-msentraid[26303]: Version: Dev
[471103.121295] ubuntu authd-msentraid[26303]: Debug mode is enabled
[471103.146549] ubuntu systemd[1]: Started snap.authd-msentraid.authd-msentraid.service - Service for snap application authd-msentraid.authd-msentraid.
[471103.146889] ubuntu authd-msentraid[26303]: Building new daemon
[471103.146895] ubuntu authd-msentraid[26303]: Starting to serve requests
[471103.146899] ubuntu authd-msentraid[26303]: Serving requests as com.ubuntu.authd.MSEntraID
[471103.146942] ubuntu authd-msentraid[26303]: Creating new session (username=test@ubudev1.onmicrosoft.com, lang=C, mode=auth)
[471103.384551] ubuntu authd-msentraid[26303]: Created new session <UUID redacted>
[471103.393747] ubuntu authd[1151]: 2102147668-<UUID redacted>: New auth session for "test@ubudev1.onmicrosoft.com"
[471103.399139] ubuntu authd-msentraid[26303]: Getting authentication modes for session <UUID redacted>
[471103.399872] ubuntu authd-msentraid[26303]: Got authentication modes for session <UUID redacted>: [map[id:password label:Local Password Authentication] map[id:device_auth label:Device Authentication]]
[471103.401733] ubuntu authd-msentraid[26303]: Selecting authentication mode password for session <UUID redacted>
[471103.401755] ubuntu authd-msentraid[26303]: Selected authentication mode password for session <UUID redacted>: map[entry:chars_password label:Enter your local password type:form]
[471103.405629] ubuntu authd-msentraid[26303]: Handling IsAuthenticated call for session <UUID redacted>
[471103.526264] ubuntu authd-msentraid[26303]: Authentication failure: incorrect local password for user "test@ubudev1.onmicrosoft.com"
[471103.526354] ubuntu authd-msentraid[26303]: IsAuthenticated result (session <UUID redacted>): retry, {"message":"Incorrect password, please try again."}
[471103.526972] ubuntu authd[1151]: 2102147668-<UUID redacted>: Authentication result: retry
[471103.530489] ubuntu authd-msentraid[26303]: Handling IsAuthenticated call for session <UUID redacted>
[471103.654708] ubuntu authd-msentraid[26303]: Authentication failure: incorrect local password for user "test@ubudev1.onmicrosoft.com"
[471103.654754] ubuntu authd-msentraid[26303]: IsAuthenticated result (session <UUID redacted>): retry, {"message":"Incorrect password, please try again."}
[471103.655167] ubuntu authd[1151]: 2102147668-<UUID redacted>: Authentication result: retry
[471103.658032] ubuntu authd-msentraid[26303]: Handling IsAuthenticated call for session <UUID redacted>
[471103.676339] ubuntu authd-msentraid[26303]: Authentication failure: incorrect local password for user "test@ubudev1.onmicrosoft.com"
[471103.676405] ubuntu authd-msentraid[26303]: IsAuthenticated result (session <UUID redacted>): denied, {"message":"Maximum number of authentication attempts reached"}
[471103.676816] ubuntu authd[1151]: 2102147668-<UUID redacted>: Authentication result: denied
[471103.678195] ubuntu authd-msentraid[26303]: Ending session <UUID redacted>
[471103.678378] ubuntu authd[1151]: 2102147668-<UUID redacted>: End session "Microsoft Entra ID"
[471142.611877] ubuntu authd[1151]: GetUserByName: user "systemd-coredump" not found
[471178.889860] ubuntu authd[1151]: GetUserByName: user "systemd-coredump" not found
[471185.773546] ubuntu authd-msentraid[26303]: Creating new session (username=test@ubudev1.onmicrosoft.com, lang=C, mode=auth)
[471185.903421] ubuntu authd-msentraid[26303]: Created new session <UUID redacted>
[471185.903888] ubuntu authd[1151]: 2102147668-<UUID redacted>: New auth session for "test@ubudev1.onmicrosoft.com"
[471185.920420] ubuntu authd-msentraid[26303]: Getting authentication modes for session <UUID redacted>
[471185.920736] ubuntu authd-msentraid[26303]: Got authentication modes for session <UUID redacted>: [map[id:password label:Local Password Authentication] map[id:device_auth label:Device Authentication]]
[471185.923287] ubuntu authd-msentraid[26303]: Selecting authentication mode password for session <UUID redacted>
[471185.923314] ubuntu authd-msentraid[26303]: Selected authentication mode password for session <UUID redacted>: map[entry:chars_password label:Enter your local password type:form]
[471185.934023] ubuntu authd-msentraid[26303]: Handling IsAuthenticated call for session <UUID redacted>
[471185.954850] ubuntu authd-msentraid[26303]: Authentication failure: incorrect local password for user "test@ubudev1.onmicrosoft.com"
[471185.954918] ubuntu authd-msentraid[26303]: IsAuthenticated result (session <UUID redacted>): retry, {"message":"Incorrect password, please try again."}
[471185.955473] ubuntu authd[1151]: 2102147668-<UUID redacted>: Authentication result: retry
[471185.964201] ubuntu authd-msentraid[26303]: Handling IsAuthenticated call for session <UUID redacted>
[471185.985958] ubuntu authd-msentraid[26303]: Authentication failure: incorrect local password for user "test@ubudev1.onmicrosoft.com"
[471185.986047] ubuntu authd-msentraid[26303]: IsAuthenticated result (session <UUID redacted>): retry, {"message":"Incorrect password, please try again."}
[471185.986667] ubuntu authd[1151]: 2102147668-<UUID redacted>: Authentication result: retry
[471185.989691] ubuntu authd-msentraid[26303]: Handling IsAuthenticated call for session <UUID redacted>
[471186.007514] ubuntu authd-msentraid[26303]: Authentication failure: incorrect local password for user "test@ubudev1.onmicrosoft.com"
[471186.007586] ubuntu authd-msentraid[26303]: IsAuthenticated result (session <UUID redacted>): denied, {"message":"Maximum number of authentication attempts reached"}
[471186.008150] ubuntu authd[1151]: 2102147668-<UUID redacted>: Authentication result: denied
[471186.009482] ubuntu authd-msentraid[26303]: Ending session <UUID redacted>
[471186.009685] ubuntu authd[1151]: 2102147668-<UUID redacted>: End session "Microsoft Entra ID"
[471238.592190] ubuntu authd-msentraid[26303]: Creating new session (username=test@ubudev1.onmicrosoft.com, lang=C, mode=auth)
[471238.705165] ubuntu authd-msentraid[26303]: Created new session <UUID redacted>
[471238.705809] ubuntu authd[1151]: 2102147668-<UUID redacted>: New auth session for "test@ubudev1.onmicrosoft.com"
[471238.719572] ubuntu authd-msentraid[26303]: Getting authentication modes for session <UUID redacted>
[471238.719818] ubuntu authd-msentraid[26303]: Got authentication modes for session <UUID redacted>: [map[id:password label:Local Password Authentication] map[id:device_auth label:Device Authentication]]
[471238.732162] ubuntu authd-msentraid[26303]: Selecting authentication mode password for session <UUID redacted>
[471238.732204] ubuntu authd-msentraid[26303]: Selected authentication mode password for session <UUID redacted>: map[entry:chars_password label:Enter your local password type:form]
[471238.739470] ubuntu authd-msentraid[26303]: Handling IsAuthenticated call for session <UUID redacted>
[471238.758093] ubuntu authd-msentraid[26303]: Authentication failure: incorrect local password for user "test@ubudev1.onmicrosoft.com"
[471238.758156] ubuntu authd-msentraid[26303]: IsAuthenticated result (session <UUID redacted>): retry, {"message":"Incorrect password, please try again."}
[471238.758673] ubuntu authd[1151]: 2102147668-<UUID redacted>: Authentication result: retry
[471238.774189] ubuntu authd-msentraid[26303]: Handling IsAuthenticated call for session <UUID redacted>
[471238.794145] ubuntu authd-msentraid[26303]: Authentication failure: incorrect local password for user "test@ubudev1.onmicrosoft.com"
[471238.794220] ubuntu authd-msentraid[26303]: IsAuthenticated result (session <UUID redacted>): retry, {"message":"Incorrect password, please try again."}
[471238.794734] ubuntu authd[1151]: 2102147668-<UUID redacted>: Authentication result: retry
[471238.798382] ubuntu authd-msentraid[26303]: Handling IsAuthenticated call for session <UUID redacted>
[471238.816161] ubuntu authd-msentraid[26303]: Authentication failure: incorrect local password for user "test@ubudev1.onmicrosoft.com"
[471238.816227] ubuntu authd-msentraid[26303]: IsAuthenticated result (session <UUID redacted>): denied, {"message":"Maximum number of authentication attempts reached"}
[471238.816736] ubuntu authd[1151]: 2102147668-<UUID redacted>: Authentication result: denied
[471238.818154] ubuntu authd-msentraid[26303]: Ending session <UUID redacted>
[471238.818447] ubuntu authd[1151]: 2102147668-<UUID redacted>: End session "Microsoft Entra ID"
[471294.045637] ubuntu authd-msentraid[26303]: Creating new session (username=test@ubudev1.onmicrosoft.com, lang=C, mode=auth)
[471294.154850] ubuntu authd-msentraid[26303]: Created new session <UUID redacted>
[471294.155339] ubuntu authd[1151]: 2102147668-<UUID redacted>: New auth session for "test@ubudev1.onmicrosoft.com"
[471294.167212] ubuntu authd-msentraid[26303]: Getting authentication modes for session <UUID redacted>
[471294.167424] ubuntu authd-msentraid[26303]: Got authentication modes for session <UUID redacted>: [map[id:password label:Local Password Authentication] map[id:device_auth label:Device Authentication]]
[471294.179198] ubuntu authd-msentraid[26303]: Selecting authentication mode password for session <UUID redacted>
[471294.179243] ubuntu authd-msentraid[26303]: Selected authentication mode password for session <UUID redacted>: map[entry:chars_password label:Enter your local password type:form]
[471294.183947] ubuntu authd-msentraid[26303]: Handling IsAuthenticated call for session <UUID redacted>
[471294.204707] ubuntu authd-msentraid[26303]: Authentication failure: incorrect local password for user "test@ubudev1.onmicrosoft.com"
[471294.204762] ubuntu authd-msentraid[26303]: IsAuthenticated result (session <UUID redacted>): retry, {"message":"Incorrect password, please try again."}
[471294.205192] ubuntu authd[1151]: 2102147668-<UUID redacted>: Authentication result: retry
[471294.213913] ubuntu authd-msentraid[26303]: Handling IsAuthenticated call for session <UUID redacted>
[471294.233635] ubuntu authd-msentraid[26303]: Authentication failure: incorrect local password for user "test@ubudev1.onmicrosoft.com"
[471294.233695] ubuntu authd-msentraid[26303]: IsAuthenticated result (session <UUID redacted>): retry, {"message":"Incorrect password, please try again."}
[471294.234151] ubuntu authd[1151]: 2102147668-<UUID redacted>: Authentication result: retry
[471294.238464] ubuntu authd-msentraid[26303]: Handling IsAuthenticated call for session <UUID redacted>
[471294.257407] ubuntu authd-msentraid[26303]: Authentication failure: incorrect local password for user "test@ubudev1.onmicrosoft.com"
[471294.257473] ubuntu authd-msentraid[26303]: IsAuthenticated result (session <UUID redacted>): denied, {"message":"Maximum number of authentication attempts reached"}
[471294.257945] ubuntu authd[1151]: 2102147668-<UUID redacted>: Authentication result: denied
[471294.259353] ubuntu authd-msentraid[26303]: Ending session <UUID redacted>
[471294.259569] ubuntu authd[1151]: 2102147668-<UUID redacted>: End session "Microsoft Entra ID"
[471372.880266] ubuntu authd-msentraid[26303]: Creating new session (username=test@ubudev1.onmicrosoft.com, lang=C, mode=auth)
[471373.331580] ubuntu authd-msentraid[26303]: Created new session <UUID redacted>
[471373.332490] ubuntu authd[1151]: 2102147668-<UUID redacted>: New auth session for "test@ubudev1.onmicrosoft.com"
[471373.334822] ubuntu authd-msentraid[26303]: Getting authentication modes for session <UUID redacted>
[471373.335217] ubuntu authd-msentraid[26303]: Got authentication modes for session <UUID redacted>: [map[id:password label:Local Password Authentication] map[id:device_auth label:Device Authentication]]
[471373.350207] ubuntu authd-msentraid[26303]: Selecting authentication mode password for session <UUID redacted>
[471373.350240] ubuntu authd-msentraid[26303]: Selected authentication mode password for session <UUID redacted>: map[entry:chars_password label:Enter your local password type:form]
[471373.353440] ubuntu authd-msentraid[26303]: Handling IsAuthenticated call for session <UUID redacted>
[471373.371522] ubuntu authd-msentraid[26303]: Authentication failure: incorrect local password for user "test@ubudev1.onmicrosoft.com"
[471373.371574] ubuntu authd-msentraid[26303]: IsAuthenticated result (session <UUID redacted>): retry, {"message":"Incorrect password, please try again."}
[471373.372042] ubuntu authd[1151]: 2102147668-<UUID redacted>: Authentication result: retry
[471373.377724] ubuntu authd-msentraid[26303]: Handling IsAuthenticated call for session <UUID redacted>
[471373.398353] ubuntu authd-msentraid[26303]: Authentication failure: incorrect local password for user "test@ubudev1.onmicrosoft.com"
[471373.398413] ubuntu authd-msentraid[26303]: IsAuthenticated result (session <UUID redacted>): retry, {"message":"Incorrect password, please try again."}
[471373.398983] ubuntu authd[1151]: 2102147668-<UUID redacted>: Authentication result: retry
[471373.401780] ubuntu authd-msentraid[26303]: Handling IsAuthenticated call for session <UUID redacted>
[471373.421050] ubuntu authd-msentraid[26303]: Authentication failure: incorrect local password for user "test@ubudev1.onmicrosoft.com"
[471373.421117] ubuntu authd-msentraid[26303]: IsAuthenticated result (session <UUID redacted>): denied, {"message":"Maximum number of authentication attempts reached"}
[471373.421770] ubuntu authd[1151]: 2102147668-<UUID redacted>: Authentication result: denied
[471373.423178] ubuntu authd-msentraid[26303]: Ending session <UUID redacted>
[471373.423454] ubuntu authd[1151]: 2102147668-<UUID redacted>: End session "Microsoft Entra ID"
[471433.568930] ubuntu authd[1151]: Pre-checking user "test"
[471433.569684] ubuntu authd-msentraid[26303]: UserPreCheck: test
[471433.569709] ubuntu authd-msentraid[26303]: UserPreCheck result:
[471433.569967] ubuntu authd[1151]: UserPreCheck: <nil>
[471433.569981] ubuntu authd[1151]: GetUserByName: user "test" is unknown and not authorized to log in via SSH for the first time by any configured broker
[471433.571261] ubuntu authd[1151]: Pre-checking user "test"
[471433.571642] ubuntu authd-msentraid[26303]: UserPreCheck: test
[471433.571666] ubuntu authd-msentraid[26303]: UserPreCheck result:
[471433.571874] ubuntu authd[1151]: UserPreCheck: <nil>
[471433.571911] ubuntu authd[1151]: GetUserByName: user "test" is unknown and not authorized to log in via SSH for the first time by any configured broker
[471433.599372] ubuntu authd[1151]: GetUserByName: user "test" not found
[471433.599853] ubuntu authd[1151]: GetPreviousBroker: User "test" not found
[471433.601184] ubuntu authd[1151]: Pre-checking user "test"
[471433.601858] ubuntu authd-msentraid[26303]: UserPreCheck: test
[471433.601887] ubuntu authd-msentraid[26303]: UserPreCheck result:
[471433.602245] ubuntu authd[1151]: UserPreCheck: <nil>
[471433.602289] ubuntu authd[1151]: GetUserByName: user "test" is unknown and not authorized to log in via SSH for the first time by any configured broker
[471433.638606] ubuntu authd[1151]: Pre-checking user "test"
[471433.639182] ubuntu authd-msentraid[26303]: UserPreCheck: test
[471433.639201] ubuntu authd-msentraid[26303]: UserPreCheck result:
[471433.639394] ubuntu authd[1151]: UserPreCheck: <nil>
[471433.639405] ubuntu authd[1151]: GetUserByName: user "test" is unknown and not authorized to log in via SSH for the first time by any configured broker
[471433.642385] ubuntu authd[1151]: Pre-checking user "test"
[471433.642712] ubuntu authd-msentraid[26303]: UserPreCheck: test
[471433.642735] ubuntu authd-msentraid[26303]: UserPreCheck result:
[471433.642968] ubuntu authd[1151]: UserPreCheck: <nil>
[471433.642986] ubuntu authd[1151]: GetUserByName: user "test" is unknown and not authorized to log in via SSH for the first time by any configured broker
[471660.202036] ubuntu authd[1151]: Pre-checking user "test"
[471660.202983] ubuntu authd-msentraid[26303]: UserPreCheck: test
[471660.203032] ubuntu authd-msentraid[26303]: UserPreCheck result:
[471660.203437] ubuntu authd[1151]: UserPreCheck: <nil>
[471660.203451] ubuntu authd[1151]: GetUserByName: user "test" is unknown and not authorized to log in via SSH for the first time by any configured broker
[471660.204765] ubuntu authd[1151]: Pre-checking user "test"
[471660.205487] ubuntu authd-msentraid[26303]: UserPreCheck: test
[471660.205494] ubuntu authd-msentraid[26303]: UserPreCheck result:
[471660.205734] ubuntu authd[1151]: UserPreCheck: <nil>
[471660.205746] ubuntu authd[1151]: GetUserByName: user "test" is unknown and not authorized to log in via SSH for the first time by any configured broker
[471660.224907] ubuntu authd[1151]: GetUserByName: user "test" not found
[471660.225284] ubuntu authd[1151]: GetPreviousBroker: User "test" not found
[471660.226364] ubuntu authd[1151]: Pre-checking user "test"
[471660.227035] ubuntu authd-msentraid[26303]: UserPreCheck: test
[471660.227058] ubuntu authd-msentraid[26303]: UserPreCheck result:
[471660.227372] ubuntu authd[1151]: UserPreCheck: <nil>
[471660.227396] ubuntu authd[1151]: GetUserByName: user "test" is unknown and not authorized to log in via SSH for the first time by any configured broker
[471660.263734] ubuntu authd[1151]: Pre-checking user "test"
[471660.264297] ubuntu authd-msentraid[26303]: UserPreCheck: test
[471660.264314] ubuntu authd-msentraid[26303]: UserPreCheck result:
[471660.264549] ubuntu authd[1151]: UserPreCheck: <nil>
[471660.264568] ubuntu authd[1151]: GetUserByName: user "test" is unknown and not authorized to log in via SSH for the first time by any configured broker
[471660.267147] ubuntu authd[1151]: Pre-checking user "test"
[471660.267509] ubuntu authd-msentraid[26303]: UserPreCheck: test
[471660.267524] ubuntu authd-msentraid[26303]: UserPreCheck result:
[471660.267704] ubuntu authd[1151]: UserPreCheck: <nil>
[471660.267725] ubuntu authd[1151]: GetUserByName: user "test" is unknown and not authorized to log in via SSH for the first time by any configured broker
[471667.903717] ubuntu authd[1151]: Pre-checking user "test"
[471667.904519] ubuntu authd-msentraid[26303]: UserPreCheck: test
[471667.904564] ubuntu authd-msentraid[26303]: UserPreCheck result:
[471667.904901] ubuntu authd[1151]: UserPreCheck: <nil>
[471667.904915] ubuntu authd[1151]: GetUserByName: user "test" is unknown and not authorized to log in via SSH for the first time by any configured broker
[471667.906675] ubuntu authd[1151]: Pre-checking user "test"
[471667.907408] ubuntu authd-msentraid[26303]: UserPreCheck: test
[471667.907453] ubuntu authd-msentraid[26303]: UserPreCheck result:
[471667.907731] ubuntu authd[1151]: UserPreCheck: <nil>
[471667.907750] ubuntu authd[1151]: GetUserByName: user "test" is unknown and not authorized to log in via SSH for the first time by any configured broker
[471667.927323] ubuntu authd[1151]: GetUserByName: user "test" not found
[471667.927505] ubuntu authd[1151]: GetPreviousBroker: User "test" not found
[471667.928974] ubuntu authd[1151]: Pre-checking user "test"
[471667.929691] ubuntu authd-msentraid[26303]: UserPreCheck: test
[471667.929717] ubuntu authd-msentraid[26303]: UserPreCheck result:
[471667.929958] ubuntu authd[1151]: UserPreCheck: <nil>
[471667.929994] ubuntu authd[1151]: GetUserByName: user "test" is unknown and not authorized to log in via SSH for the first time by any configured broker
[471667.967940] ubuntu authd[1151]: Pre-checking user "test"
[471667.968572] ubuntu authd-msentraid[26303]: UserPreCheck: test
[471667.968589] ubuntu authd-msentraid[26303]: UserPreCheck result:
[471667.968918] ubuntu authd[1151]: UserPreCheck: <nil>
[471667.968935] ubuntu authd[1151]: GetUserByName: user "test" is unknown and not authorized to log in via SSH for the first time by any configured broker
[471667.972095] ubuntu authd[1151]: Pre-checking user "test"
[471667.972458] ubuntu authd-msentraid[26303]: UserPreCheck: test
[471667.972480] ubuntu authd-msentraid[26303]: UserPreCheck result:
[471667.972688] ubuntu authd[1151]: UserPreCheck: <nil>
[471667.972705] ubuntu authd[1151]: GetUserByName: user "test" is unknown and not authorized to log in via SSH for the first time by any configured broker
[471679.353723] ubuntu authd[1151]: Pre-checking user "test"
[471679.354465] ubuntu authd-msentraid[26303]: UserPreCheck: test
[471679.354473] ubuntu authd-msentraid[26303]: UserPreCheck result:
[471679.354768] ubuntu authd[1151]: UserPreCheck: <nil>
[471679.354778] ubuntu authd[1151]: GetUserByName: user "test" is unknown and not authorized to log in via SSH for the first time by any configured broker
[471679.356279] ubuntu authd[1151]: Pre-checking user "test"
[471679.356689] ubuntu authd-msentraid[26303]: UserPreCheck: test
[471679.356716] ubuntu authd-msentraid[26303]: UserPreCheck result:
[471679.356975] ubuntu authd[1151]: UserPreCheck: <nil>
[471679.356990] ubuntu authd[1151]: GetUserByName: user "test" is unknown and not authorized to log in via SSH for the first time by any configured broker
[471679.378187] ubuntu authd[1151]: GetUserByName: user "test" not found
[471679.378509] ubuntu authd[1151]: GetPreviousBroker: User "test" not found
[471679.379903] ubuntu authd[1151]: Pre-checking user "test"
[471679.380611] ubuntu authd-msentraid[26303]: UserPreCheck: test
[471679.380627] ubuntu authd-msentraid[26303]: UserPreCheck result:
[471679.380888] ubuntu authd[1151]: UserPreCheck: <nil>
[471679.380896] ubuntu authd[1151]: GetUserByName: user "test" is unknown and not authorized to log in via SSH for the first time by any configured broker
[471679.419559] ubuntu authd[1151]: Pre-checking user "test"
[471679.420131] ubuntu authd-msentraid[26303]: UserPreCheck: test
[471679.420146] ubuntu authd-msentraid[26303]: UserPreCheck result:
[471679.420354] ubuntu authd[1151]: UserPreCheck: <nil>
[471679.420381] ubuntu authd[1151]: GetUserByName: user "test" is unknown and not authorized to log in via SSH for the first time by any configured broker
[471679.430647] ubuntu authd[1151]: Pre-checking user "test"
[471679.430950] ubuntu authd-msentraid[26303]: UserPreCheck: test
[471679.430978] ubuntu authd-msentraid[26303]: UserPreCheck result:
[471679.431181] ubuntu authd[1151]: UserPreCheck: <nil>
[471679.431199] ubuntu authd[1151]: GetUserByName: user "test" is unknown and not authorized to log in via SSH for the first time by any configured broker
[471709.030834] ubuntu authd[1151]: GetUserByName: user "gdm-greeter" not found
[471709.031688] ubuntu authd[1151]: GetUserByName: user "gdm-greeter" not found
[471709.032585] ubuntu authd[1151]: GetUserByName: user "gdm-greeter" not found
[471709.033363] ubuntu authd[1151]: GetUserByName: user "gdm-greeter" not found
[471753.933104] ubuntu authd-msentraid[26303]: Creating new session (username=test@ubudev1.onmicrosoft.com, lang=C, mode=auth)
[471754.207486] ubuntu authd-msentraid[26303]: Created new session <UUID redacted>
[471754.207968] ubuntu authd[1151]: 2102147668-<UUID redacted>: New auth session for "test@ubudev1.onmicrosoft.com"
[471754.209844] ubuntu authd-msentraid[26303]: Getting authentication modes for session <UUID redacted>
[471754.210219] ubuntu authd-msentraid[26303]: Got authentication modes for session <UUID redacted>: [map[id:password label:Local Password Authentication] map[id:device_auth label:Device Authentication]]
[471754.221556] ubuntu authd-msentraid[26303]: Selecting authentication mode password for session <UUID redacted>
[471754.221588] ubuntu authd-msentraid[26303]: Selected authentication mode password for session <UUID redacted>: map[entry:chars_password label:Enter your local password type:form]
[471754.224551] ubuntu authd-msentraid[26303]: Handling IsAuthenticated call for session <UUID redacted>
[471754.255608] ubuntu authd-msentraid[26303]: Authentication failure: incorrect local password for user "test@ubudev1.onmicrosoft.com"
[471754.255661] ubuntu authd-msentraid[26303]: IsAuthenticated result (session <UUID redacted>): retry, {"message":"Incorrect password, please try again."}
[471754.256102] ubuntu authd[1151]: 2102147668-<UUID redacted>: Authentication result: retry
[471754.259794] ubuntu authd-msentraid[26303]: Handling IsAuthenticated call for session <UUID redacted>
[471754.470285] ubuntu authd-msentraid[26303]: Authentication failure: incorrect local password for user "test@ubudev1.onmicrosoft.com"
[471754.470363] ubuntu authd-msentraid[26303]: IsAuthenticated result (session <UUID redacted>): retry, {"message":"Incorrect password, please try again."}
[471754.471144] ubuntu authd[1151]: 2102147668-<UUID redacted>: Authentication result: retry
[471754.475290] ubuntu authd-msentraid[26303]: Handling IsAuthenticated call for session <UUID redacted>
[471754.499229] ubuntu authd-msentraid[26303]: Authentication failure: incorrect local password for user "test@ubudev1.onmicrosoft.com"
[471754.499290] ubuntu authd-msentraid[26303]: IsAuthenticated result (session <UUID redacted>): denied, {"message":"Maximum number of authentication attempts reached"}
[471754.499991] ubuntu authd[1151]: 2102147668-<UUID redacted>: Authentication result: denied
[471754.501925] ubuntu authd-msentraid[26303]: Ending session <UUID redacted>
[471754.502199] ubuntu authd[1151]: 2102147668-<UUID redacted>: End session "Microsoft Entra ID"
[471879.022756] ubuntu authd[1151]: GetUserByName: user "gdm-greeter" not found
[471879.023621] ubuntu authd[1151]: GetUserByName: user "gdm-greeter" not found
[471879.024455] ubuntu authd[1151]: GetUserByName: user "gdm-greeter" not found
[471879.025196] ubuntu authd[1151]: GetUserByName: user "gdm-greeter" not found
[471920.021789] ubuntu authd[1151]: GetUserByName: user "gdm-greeter" not found
[471920.022799] ubuntu authd[1151]: GetUserByName: user "gdm-greeter" not found
[471920.023687] ubuntu authd[1151]: GetUserByName: user "gdm-greeter" not found
[471920.024427] ubuntu authd[1151]: GetUserByName: user "gdm-greeter" not found
[471925.622879] ubuntu authd[1151]: GetUserByName: user "test" not found
[471925.624086] ubuntu authd[1151]: GetUserByName: user "test" not found
[471925.644048] ubuntu authd[1151]: GetUserByName: user "test" not found
[471925.644456] ubuntu authd[1151]: GetPreviousBroker: User "test" not found
[471925.645539] ubuntu authd[1151]: Pre-checking user "test"
[471925.646167] ubuntu authd-msentraid[26303]: UserPreCheck: test
[471925.646183] ubuntu authd-msentraid[26303]: UserPreCheck result:
[471925.646406] ubuntu authd[1151]: UserPreCheck: <nil>
[471925.646418] ubuntu authd[1151]: GetUserByName: user "test" is unknown and not authorized to log in via SSH for the first time by any configured broker
[471925.683761] ubuntu authd[1151]: GetUserByName: user "test" not found
[471925.686587] ubuntu authd[1151]: GetUserByName: user "test" not found
[471937.015225] ubuntu authd-msentraid[26303]: Creating new session (username=test@ubudev1.onmicrosoft.com, lang=C, mode=auth)
[471937.293816] ubuntu authd-msentraid[26303]: Created new session <UUID redacted>
[471937.294471] ubuntu authd[1151]: 2102147668-<UUID redacted>: New auth session for "test@ubudev1.onmicrosoft.com"
[471937.296186] ubuntu authd-msentraid[26303]: Getting authentication modes for session <UUID redacted>
[471937.296428] ubuntu authd-msentraid[26303]: Got authentication modes for session <UUID redacted>: [map[id:password label:Local Password Authentication] map[id:device_auth label:Device Authentication]]
[471937.303475] ubuntu authd-msentraid[26303]: Selecting authentication mode password for session <UUID redacted>
[471937.303517] ubuntu authd-msentraid[26303]: Selected authentication mode password for session <UUID redacted>: map[entry:chars_password label:Enter your local password type:form]
[471937.307219] ubuntu authd-msentraid[26303]: Handling IsAuthenticated call for session <UUID redacted>
[471937.327729] ubuntu authd-msentraid[26303]: Authentication failure: incorrect local password for user "test@ubudev1.onmicrosoft.com"
[471937.327794] ubuntu authd-msentraid[26303]: IsAuthenticated result (session <UUID redacted>): retry, {"message":"Incorrect password, please try again."}
[471937.328316] ubuntu authd[1151]: 2102147668-<UUID redacted>: Authentication result: retry
[471937.333967] ubuntu authd-msentraid[26303]: Handling IsAuthenticated call for session <UUID redacted>
[471937.367129] ubuntu authd-msentraid[26303]: Authentication failure: incorrect local password for user "test@ubudev1.onmicrosoft.com"
[471937.367196] ubuntu authd-msentraid[26303]: IsAuthenticated result (session <UUID redacted>): retry, {"message":"Incorrect password, please try again."}
[471937.367688] ubuntu authd[1151]: 2102147668-<UUID redacted>: Authentication result: retry
[471937.370606] ubuntu authd-msentraid[26303]: Handling IsAuthenticated call for session <UUID redacted>
[471937.388198] ubuntu authd-msentraid[26303]: Authentication failure: incorrect local password for user "test@ubudev1.onmicrosoft.com"
[471937.388264] ubuntu authd-msentraid[26303]: IsAuthenticated result (session <UUID redacted>): denied, {"message":"Maximum number of authentication attempts reached"}
[471937.388772] ubuntu authd[1151]: 2102147668-<UUID redacted>: Authentication result: denied
[471937.390071] ubuntu authd-msentraid[26303]: Ending session <UUID redacted>
[471937.390280] ubuntu authd[1151]: 2102147668-<UUID redacted>: End session "Microsoft Entra ID"
[471950.320218] ubuntu authd-msentraid[26303]: Creating new session (username=test@ubudev1.onmicrosoft.com, lang=C, mode=auth)
[471950.507558] ubuntu authd-msentraid[26303]: Created new session <UUID redacted>
[471950.508146] ubuntu authd[1151]: 2102147668-<UUID redacted>: New auth session for "test@ubudev1.onmicrosoft.com"
[471950.520084] ubuntu authd-msentraid[26303]: Getting authentication modes for session <UUID redacted>
[471950.520766] ubuntu authd-msentraid[26303]: Got authentication modes for session <UUID redacted>: [map[id:password label:Local Password Authentication] map[id:device_auth label:Device Authentication]]
[471950.523239] ubuntu authd-msentraid[26303]: Selecting authentication mode password for session <UUID redacted>
[471950.523294] ubuntu authd-msentraid[26303]: Selected authentication mode password for session <UUID redacted>: map[entry:chars_password label:Enter your local password type:form]
[471950.529732] ubuntu authd-msentraid[26303]: Handling IsAuthenticated call for session <UUID redacted>
[471950.548028] ubuntu authd-msentraid[26303]: Authentication failure: incorrect local password for user "test@ubudev1.onmicrosoft.com"
[471950.548091] ubuntu authd-msentraid[26303]: IsAuthenticated result (session <UUID redacted>): retry, {"message":"Incorrect password, please try again."}
[471950.548578] ubuntu authd[1151]: 2102147668-<UUID redacted>: Authentication result: retry
[471950.552986] ubuntu authd-msentraid[26303]: Handling IsAuthenticated call for session <UUID redacted>
[471950.572512] ubuntu authd-msentraid[26303]: Authentication failure: incorrect local password for user "test@ubudev1.onmicrosoft.com"
[471950.572576] ubuntu authd-msentraid[26303]: IsAuthenticated result (session <UUID redacted>): retry, {"message":"Incorrect password, please try again."}
[471950.573063] ubuntu authd[1151]: 2102147668-<UUID redacted>: Authentication result: retry
[471950.576371] ubuntu authd-msentraid[26303]: Handling IsAuthenticated call for session <UUID redacted>
[471950.594305] ubuntu authd-msentraid[26303]: Authentication failure: incorrect local password for user "test@ubudev1.onmicrosoft.com"
[471950.594376] ubuntu authd-msentraid[26303]: IsAuthenticated result (session <UUID redacted>): denied, {"message":"Maximum number of authentication attempts reached"}
[471950.594824] ubuntu authd[1151]: 2102147668-<UUID redacted>: Authentication result: denied
[471950.596145] ubuntu authd-msentraid[26303]: Ending session <UUID redacted>
[471950.596374] ubuntu authd[1151]: 2102147668-<UUID redacted>: End session "Microsoft Entra ID"
[471999.264871] ubuntu authd-msentraid[26303]: Creating new session (username=test@ubudev1.onmicrosoft.com, lang=C, mode=auth)
[471999.393851] ubuntu authd-msentraid[26303]: Created new session <UUID redacted>
[471999.395125] ubuntu authd[1151]: 2102147668-<UUID redacted>: New auth session for "test@ubudev1.onmicrosoft.com"
[471999.396811] ubuntu authd-msentraid[26303]: Getting authentication modes for session <UUID redacted>
[471999.397039] ubuntu authd-msentraid[26303]: Got authentication modes for session <UUID redacted>: [map[id:password label:Local Password Authentication] map[id:device_auth label:Device Authentication]]
[471999.400846] ubuntu authd-msentraid[26303]: Selecting authentication mode password for session <UUID redacted>
[471999.400881] ubuntu authd-msentraid[26303]: Selected authentication mode password for session <UUID redacted>: map[entry:chars_password label:Enter your local password type:form]
[471999.403840] ubuntu authd-msentraid[26303]: Handling IsAuthenticated call for session <UUID redacted>
[471999.422439] ubuntu authd-msentraid[26303]: Authentication failure: incorrect local password for user "test@ubudev1.onmicrosoft.com"
[471999.422504] ubuntu authd-msentraid[26303]: IsAuthenticated result (session <UUID redacted>): retry, {"message":"Incorrect password, please try again."}
[471999.422999] ubuntu authd[1151]: 2102147668-<UUID redacted>: Authentication result: retry
[471999.435943] ubuntu authd-msentraid[26303]: Handling IsAuthenticated call for session <UUID redacted>
[471999.454071] ubuntu authd-msentraid[26303]: Authentication failure: incorrect local password for user "test@ubudev1.onmicrosoft.com"
[471999.454134] ubuntu authd-msentraid[26303]: IsAuthenticated result (session <UUID redacted>): retry, {"message":"Incorrect password, please try again."}
[471999.454629] ubuntu authd[1151]: 2102147668-<UUID redacted>: Authentication result: retry
[471999.457664] ubuntu authd-msentraid[26303]: Handling IsAuthenticated call for session <UUID redacted>
[471999.476681] ubuntu authd-msentraid[26303]: Authentication failure: incorrect local password for user "test@ubudev1.onmicrosoft.com"
[471999.476744] ubuntu authd-msentraid[26303]: IsAuthenticated result (session <UUID redacted>): denied, {"message":"Maximum number of authentication attempts reached"}
[471999.477229] ubuntu authd[1151]: 2102147668-<UUID redacted>: Authentication result: denied
[471999.478530] ubuntu authd-msentraid[26303]: Ending session <UUID redacted>
[471999.478762] ubuntu authd[1151]: 2102147668-<UUID redacted>: End session "Microsoft Entra ID"
authd apt history
Start-Date: 2026-01-29 17:45:53
Commandline: apt-get install -y authd
Requested-By: ubuntu (1000)
Install: authd:amd64 (0.5.6+git251208+1372+183d8bb8~ubuntu25.10.1)
End-Date: 2026-01-29 17:45:54
authd broker configuration
/etc/authd/brokers.d/msentraid.conf
# This section is used by authd to identify and communicate with the broker.
# It should not be edited.
[authd]
name = Microsoft Entra ID
brand_icon = /snap/authd-msentraid/current/broker_icon.png
dbus_name = com.ubuntu.authd.MSEntraID
dbus_object = /com/ubuntu/authd/MSEntraID
authd-msentraid configuration
[oidc]
issuer = https://login.microsoftonline.com/<UUID redacted>/v2.0
client_id = <UUID redacted>
## Force remote authentication with the identity provider during login,
## even if a local method (e.g. local password) is used.
## This works by forcing a token refresh during login, which fails if the
## user does not have the necessary permissions in the identity provider.
##
## If set to false (the default), remote authentication with the identity
## provider only happens if there is a working internet connection and
## the provider is reachable during login.
##
## Important: Enabling this option prevents authd users from logging in
## if the identity provider is unreachable (e.g. due to network issues).
#force_provider_authentication = false
[msentraid]
## Enable automatic device registration with Microsoft Entra ID
## when a user logs in through this broker.
##
## If set to true, authd will attempt to register the local machine
## as a device in Entra ID upon successful login.
##
## If set to false (the default), device registration will be skipped.
#register_device = false
[users]
## The directory where the home directories of new users are created.
## Existing users will keep their current home directory.
## The home directories are created in the format <home_base_dir>/<username>
#home_base_dir = /home
## By default, SSH only allows logins from users that already exist on the
## system.
## New authd users (who have never logged in before) are *not* allowed to log
## in for the first time via SSH unless this option is configured.
##
## If configured, only users with a suffix in this list are allowed to
## authenticate for the first time directly through SSH.
## Note that this does not affect users that already authenticated for
## the first time and already exist on the system.
##
## Suffixes must be comma-separated (e.g., '@example.com,@example.org').
## To allow all suffixes, use a single asterisk ('*').
##
## Example:
## ssh_allowed_suffixes_first_auth = @example.com,@anotherexample.org
##
## Example (allow all):
## ssh_allowed_suffixes_first_auth = *
##
#ssh_allowed_suffixes_first_auth =
## 'allowed_users' specifies the users who are permitted to log in after
## successfully authenticating with the identity provider.
## Values are separated by commas. Supported values:
## - 'OWNER': Grants access to the user specified in the 'owner' option
## (see below). This is the default.
## - 'ALL': Grants access to all users who successfully authenticate
## with the identity provider.
## - <username>: Grants access to specific additional users
## (e.g. user1@example.com).
## Example: allowed_users = OWNER,user1@example.com,admin@example.com
#allowed_users = OWNER
## 'owner' specifies the user assigned the owner role. This user is
## permitted to log in if 'OWNER' is included in the 'allowed_users'
## option.
##
## If this option is left unset, the first user to successfully log in
## via this broker will automatically be assigned the owner role. A
## drop-in configuration file will be created in broker.conf.d/ to set
## the 'owner' option.
##
## To disable automatic assignment, you can either:
## 1. Explicitly set this option to an empty value (e.g. owner = "")
## 2. Remove 'OWNER' from the 'allowed_users' option
##
## Example: owner = user2@example.com
#owner =
## A comma-separated list of local groups which authd users will be
## added to upon login.
## Example: extra_groups = users
#extra_groups =
## Like 'extra_groups', but only the user assigned the owner role
## (see 'owner' option) will be added to these groups.
## Example: owner_extra_groups = sudo,lpadmin
#owner_extra_groups =
authd-google configuration
cat: /var/snap/authd-google/current/broker.conf: No such file or directory (os error 2)
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
bugSomething isn't workingSomething isn't working