I configured a client (rinaldo) with ipa-client-install and when I ssh into it, it says Could not chdir to home directory /home/zaira/smith: Permission denied and I end up in directory /.$ ssh -v rinaldoOpenSSH_6.9p1, OpenSSL 1.0.1k-fips 8 Jan 2015debug1: Reading configuration data /home/zaira/smith/.ssh/configdebug1: Reading configuration data /etc/ssh/ssh_configdebug1: /etc/ssh/ssh_config line 56: Applying options for *debug1: Executing proxy command: exec /usr/bin/sss_ssh_knownhostsproxy -p 22 rinaldodebug1: permanently_drop_suid: 1010debug1: identity file /home/zaira/smith/.ssh/id_rsa type 1debug1: key_load_public: No such file or directorydebug1: identity file /home/zaira/smith/.ssh/id_rsa-cert type -1debug1: identity file /home/zaira/smith/.ssh/id_dsa type 2debug1: key_load_public: No such file or directorydebug1: identity file /home/zaira/smith/.ssh/id_dsa-cert type -1debug1: key_load_public: No such file or directorydebug1: identity file /home/zaira/smith/.ssh/id_ecdsa type -1debug1: key_load_public: No such file or directorydebug1: identity file /home/zaira/smith/.ssh/id_ecdsa-cert type -1debug1: key_load_public: No such file or directorydebug1: identity file /home/zaira/smith/.ssh/id_ed25519 type -1debug1: key_load_public: No such file or directorydebug1: identity file /home/zaira/smith/.ssh/id_ed25519-cert type -1debug1: Enabling compatibility mode for protocol 2.0debug1: Local version string SSH-2.0-OpenSSH_6.9debug1: Remote protocol version 2.0, remote software version OpenSSH_6.9debug1: match: OpenSSH_6.9 pat OpenSSH* compat 0x04000000debug1: Authenticating to rinaldo:22 as 'smith'debug1: SSH2_MSG_KEXINIT sentdebug1: SSH2_MSG_KEXINIT receiveddebug1: kex: server->client chacha20-poly1305@openssh.com <implicit> nonedebug1: kex: client->server chacha20-poly1305@openssh.com <implicit> nonedebug1: kex: curve25519-sha256@libssh.org need=64 dh_need=64debug1: kex: curve25519-sha256@libssh.org need=64 dh_need=64debug1: expecting SSH2_MSG_KEX_ECDH_REPLYdebug1: Server host key: ssh-rsa SHA256:ExXrqaZXfg/AUwaEu7FJ33hhh8j6RW8Tp9Qe3vQcAiEDNS lookup error: name does not existdebug1: Host 'rinaldo' is known and matches the RSA host key.debug1: Found key in /var/lib/sss/pubconf/known_hosts:2debug1: SSH2_MSG_NEWKEYS sentdebug1: expecting SSH2_MSG_NEWKEYSdebug1: SSH2_MSG_NEWKEYS receiveddebug1: Roaming not allowed by serverdebug1: SSH2_MSG_SERVICE_REQUEST sentdebug1: SSH2_MSG_SERVICE_ACCEPT receiveddebug1: Authentications that can continue: publickey,gssapi-keyex,gssapi-with-mic,passworddebug1: Next authentication method: gssapi-keyexdebug1: No valid Key exchange contextdebug1: Next authentication method: gssapi-with-micdebug1: Unspecified GSS failure.  Minor code may provide more informationDecrypt integrity check faileddebug1: Authentications that can continue: publickey,gssapi-keyex,gssapi-with-mic,passworddebug1: Authentications that can continue: publickey,gssapi-keyex,gssapi-with-mic,passworddebug1: Authentications that can continue: publickey,gssapi-keyex,gssapi-with-mic,passworddebug1: Authentications that can continue: publickey,gssapi-keyex,gssapi-with-mic,passworddebug1: Next authentication method: publickeydebug1: Offering DSA public key: /home/zaira/smith/.ssh/id_dsadebug1: Server accepts key: pkalg ssh-dss blen 434debug1: Authentication succeeded (publickey).Authenticated to rinaldo (via proxy).debug1: channel 0: new [client-session]debug1: Requesting no-more-sessions@openssh.comdebug1: Entering interactive session.debug1: client_input_global_request: rtype hostkeys-00@openssh.com want_reply 0debug1: Requesting X11 forwarding with authentication spoofing.debug1: Sending environment.debug1: Sending env XMODIFIERS = @im=kinput2debug1: Sending env LANG = en_US.utf8Last login: Fri Sep 18 08:31:55 2015 from 10.0.21.200Could not chdir to home directory /home/zaira/smith: Permission denied/usr/bin/xauth:  timeout in locking authority file /home/zaira/smith/.Xauthority-bash: /home/zaira/smith/.bash_profile: Permission denied-bash-4.3$ pwd/from file /var/log/secure:Sep 18 08:43:30 rinaldo sshd[9130]: Accepted publickey for smith from 10.0.21.200 port 43475 ssh2: DSA SHA256:2N4kjqgS6iIHO/p/4rpErAZcKtXRY5ilQhGo6ZdEe2aQSep 18 08:43:30 rinaldo systemd: pam_unix(systemd-user:session): session opened for user smith by (uid=0)Sep 18 08:43:30 rinaldo sshd[9130]: pam_unix(sshd:session): session opened for user smith by (uid=0)When I ssh into rinaldo, i see this:debug1: Unspecified GSS failure.  Minor code may provide more informationDecrypt integrity check failedWhat can cause this message to appear?I don't see it when I log into another client (ernani):$ ssh -v ernaniOpenSSH_6.9p1, OpenSSL 1.0.1k-fips 8 Jan 2015debug1: Reading configuration data /home/zaira/smith/.ssh/configdebug1: Reading configuration data /etc/ssh/ssh_configdebug1: /etc/ssh/ssh_config line 56: Applying options for *debug1: Executing proxy command: exec /usr/bin/sss_ssh_knownhostsproxy -p 22 ernanidebug1: permanently_drop_suid: 1010debug1: identity file /home/zaira/smith/.ssh/id_rsa type 1debug1: key_load_public: No such file or directorydebug1: identity file /home/zaira/smith/.ssh/id_rsa-cert type -1debug1: identity file /home/zaira/smith/.ssh/id_dsa type 2debug1: key_load_public: No such file or directorydebug1: identity file /home/zaira/smith/.ssh/id_dsa-cert type -1debug1: key_load_public: No such file or directorydebug1: identity file /home/zaira/smith/.ssh/id_ecdsa type -1debug1: key_load_public: No such file or directorydebug1: identity file /home/zaira/smith/.ssh/id_ecdsa-cert type -1debug1: key_load_public: No such file or directorydebug1: identity file /home/zaira/smith/.ssh/id_ed25519 type -1debug1: key_load_public: No such file or directorydebug1: identity file /home/zaira/smith/.ssh/id_ed25519-cert type -1debug1: Enabling compatibility mode for protocol 2.0debug1: Local version string SSH-2.0-OpenSSH_6.9debug1: Remote protocol version 2.0, remote software version OpenSSH_6.9debug1: match: OpenSSH_6.9 pat OpenSSH* compat 0x04000000debug1: Authenticating to ernani:22 as 'smith'debug1: SSH2_MSG_KEXINIT sentdebug1: SSH2_MSG_KEXINIT receiveddebug1: kex: server->client chacha20-poly1305@openssh.com <implicit> nonedebug1: kex: client->server chacha20-poly1305@openssh.com <implicit> nonedebug1: kex: curve25519-sha256@libssh.org need=64 dh_need=64debug1: kex: curve25519-sha256@libssh.org need=64 dh_need=64debug1: expecting SSH2_MSG_KEX_ECDH_REPLYdebug1: Server host key: ssh-rsa SHA256:gT/ePibtXA9wWiBBzXLNPNrh5lPNjFV45cnY5oDwcW0DNS lookup error: name does not existdebug1: Host 'ernani' is known and matches the RSA host key.debug1: Found key in /var/lib/sss/pubconf/known_hosts:10debug1: SSH2_MSG_NEWKEYS sentdebug1: expecting SSH2_MSG_NEWKEYSdebug1: SSH2_MSG_NEWKEYS receiveddebug1: Roaming not allowed by serverdebug1: SSH2_MSG_SERVICE_REQUEST sentdebug1: SSH2_MSG_SERVICE_ACCEPT receiveddebug1: Authentications that can continue: publickey,gssapi-keyex,gssapi-with-mic,passworddebug1: Next authentication method: gssapi-keyexdebug1: No valid Key exchange contextdebug1: Next authentication method: gssapi-with-micdebug1: Authentications that can continue: publickey,gssapi-keyex,gssapi-with-mic,passworddebug1: Authentications that can continue: publickey,gssapi-keyex,gssapi-with-mic,passworddebug1: Authentications that can continue: publickey,gssapi-keyex,gssapi-with-mic,passworddebug1: Authentications that can continue: publickey,gssapi-keyex,gssapi-with-mic,passworddebug1: Next authentication method: publickeydebug1: Offering DSA public key: /home/zaira/smith/.ssh/id_dsadebug1: Server accepts key: pkalg ssh-dss blen 434debug1: Authentication succeeded (publickey).Authenticated to ernani (via proxy).debug1: channel 0: new [client-session]debug1: Requesting no-more-sessions@openssh.comdebug1: Entering interactive session.debug1: client_input_global_request: rtype hostkeys-00@openssh.com want_reply 0debug1: Requesting X11 forwarding with authentication spoofing.debug1: Sending environment.debug1: Sending env XMODIFIERS = @im=kinput2debug1: Sending env LANG = en_US.utf8Last login: Thu Sep 17 18:19:37 2015 from 10.0.21.201smith@ernani $ UPDATE 1I have the following in my /etc/fstab:zaira2:/home/zaira       /home/zaira             nfs4    defaults,auto,sec=krb5i,rw,proto=tcp,port=2049   0 0and once /home/zaira is mounted, -bash-4.3$ ll /home/ls: cannot access /home/zaira: Permission deniedtotal 0d????????? ? ? ? ?            ? zairaSo, of course, impossible to chdir to home directory.
Could not chdir to home directory: Permission denied
nfs