Sample trace:
Oct 12 18:34:30 linuxsvr sshd[38320]: Accepted publickey for apmanuser from 10.13.13.13 port 54464 ssh2
Oct 12 18:34:30 linuxsvr sshd[38320]: pam_unix(sshd:session): session opened for user apmanuser by (uid=0)
Oct 12 18:34:48 linuxsvr sshd[38322]: Received disconnect from 10.13.13.13: 11: The user disconnected the application
Oct 12 18:34:48 linuxsvr sshd[38320]: pam_unix(sshd:session): session closed for user apmanuser
Oct 12 18:38:46 linuxsvr sshd[38467]: pam_access(sshd:account): access denied for user `apmanuser' from `monitoringserver'
Oct 12 18:38:46 linuxsvr sshd[38467]: pam_sss(sshd:account): Access denied for user apmanuser: 10 (User not known to the underlying authentication module)
Oct 12 18:38:46 linuxsvr sshd[38468]: fatal: Access denied for user apmanauser by PAM account configuration
Solution:
# All other users should be denied to get access from all sources.
#- : ALL : ALL
2. In order to avoid the error, we have to explicitly allow the the Applications Manager user to connect to the monitoring server.
Eg.
Here, apmanuser is the username which is configured in the monitor.
monitoringserver is hostname/IP of the Applications Manager server.
You can replace it with the specific username and IP address and add it to the file below the line given in Step 1.