7:06 a.m.
Plain centos 7 box, sssd-1.14.0-43.el7_3.18.x86_64
Log says:
(Wed Aug 30 06:59:11 2017) [sssd[pam]] [sss_ncache_check_str] (0x2000):
Checking negative cache for
[NCE/USER/cloudius-systems.com/avi@cloudius-systems.com]
(Wed Aug 30 06:59:11 2017) [sssd[pam]] [sss_dp_issue_request] (0x0400):
Issuing request for
[0x7fd4f5f68030:3:avi@cloudius-systems.com@cloudius-systems.com]
(Wed Aug 30 06:59:11 2017) [sssd[pam]] [sss_dp_get_account_msg]
(0x0400): Creating request for
[cloudius-systems.com][0x3][BE_REQ_INITGROUPS][1][name=avi@cloudius-systems.com:-]
(Wed Aug 30 06:59:11 2017) [sssd[pam]] [sbus_add_timeout] (0x2000):
0x7fd4f7030710
(Wed Aug 30 06:59:11 2017) [sssd[pam]] [sss_dp_internal_get_send]
(0x0400): Entering request
[0x7fd4f5f68030:3:avi@cloudius-systems.com@cloudius-systems.com]
(Wed Aug 30 06:59:11 2017) [sssd[pam]] [sbus_remove_timeout] (0x2000):
0x7fd4f7030710
(Wed Aug 30 06:59:11 2017) [sssd[pam]] [sss_dp_get_reply] (0x1000): Got
reply from Data Provider - DP error code: 0 errno: 0 error message: Success
(Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_check_user_search] (0x0100):
Requesting info for [avi(a)cloudius-systems.com]
(Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_check_user_search] (0x0400):
Returning info for user [avi@cloudius-systems.com(a)cloudius-systems.com]
(Wed Aug 30 06:59:11 2017) [sssd[pam]] [pd_set_primary_name] (0x0400):
User's primary name is avi(a)cloudius-systems.com
(Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_initgr_cache_set] (0x2000):
[avi] added to PAM initgroup cache
(Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_dp_send_req] (0x0100):
Sending request with the following data:
(Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_print_data] (0x0100):
command: SSS_PAM_ACCT_MGMT
(Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_print_data] (0x0100):
domain: cloudius-systems.com
(Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_print_data] (0x0100): user:
avi(a)cloudius-systems.com
(Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_print_data] (0x0100):
service: sshd
(Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_print_data] (0x0100): tty: ssh
(Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_print_data] (0x0100): ruser:
not set
(Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_print_data] (0x0100): rhost:
77.138.249.123
(Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_print_data] (0x0100):
authtok type: 0
(Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_print_data] (0x0100):
newauthtok type: 0
(Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_print_data] (0x0100): priv: 1
(Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_print_data] (0x0100):
cli_pid: 3991
(Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_print_data] (0x0100): logon
name: avi
(Wed Aug 30 06:59:11 2017) [sssd[pam]] [sbus_add_timeout] (0x2000):
0x7fd4f702de30
(Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_dom_forwarder] (0x0100):
pam_dp_send_req returned 0
(Wed Aug 30 06:59:11 2017) [sssd[pam]] [sss_dp_req_destructor] (0x0400):
Deleting request:
[0x7fd4f5f68030:3:avi@cloudius-systems.com@cloudius-systems.com]
(Wed Aug 30 06:59:13 2017) [sssd[pam]] [sbus_remove_timeout] (0x2000):
0x7fd4f702de30
(Wed Aug 30 06:59:13 2017) [sssd[pam]] [pam_dp_process_reply] (0x0200):
received: [4 (System error)][cloudius-systems.com]
(Wed Aug 30 06:59:13 2017) [sssd[pam]] [pam_reply] (0x0200): pam_reply
called with result [4]: System error.
(Wed Aug 30 06:59:13 2017) [sssd[pam]] [pam_reply] (0x0200): blen: 37
(Wed Aug 30 06:59:13 2017) [sssd[pam]] [client_recv] (0x0200): Client
disconnected!
Any idea what went wrong?
4:24 a.m.
First, I’m sorry your mail was stuck in moderation for so long. We receive large amount of
spam lately and legitimate mails sometimes slip..
Second, you need to look into the domain logs and/or the child helpers (krb5_child,
gpo_child) because that’s what emits the error. Please see
https://docs.pagure.org/SSSD.sssd/users/troubleshooting.html and in general
https://pagure.io/docs/SSSD/sssd/
On 30 Aug 2017, at 14:06, Avi Kivity <avi(a)scylladb.com> wrote:
Plain centos 7 box, sssd-1.14.0-43.el7_3.18.x86_64
Log says:
(Wed Aug 30 06:59:11 2017) [sssd[pam]] [sss_ncache_check_str] (0x2000): Checking negative
cache for [NCE/USER/cloudius-systems.com/avi@cloudius-systems.com]
(Wed Aug 30 06:59:11 2017) [sssd[pam]] [sss_dp_issue_request] (0x0400): Issuing request
for [0x7fd4f5f68030:3:avi@cloudius-systems.com@cloudius-systems.com]
(Wed Aug 30 06:59:11 2017) [sssd[pam]] [sss_dp_get_account_msg] (0x0400): Creating
request for
[cloudius-systems.com][0x3][BE_REQ_INITGROUPS][1][name=avi@cloudius-systems.com:-]
(Wed Aug 30 06:59:11 2017) [sssd[pam]] [sbus_add_timeout] (0x2000): 0x7fd4f7030710
(Wed Aug 30 06:59:11 2017) [sssd[pam]] [sss_dp_internal_get_send] (0x0400): Entering
request [0x7fd4f5f68030:3:avi@cloudius-systems.com@cloudius-systems.com]
(Wed Aug 30 06:59:11 2017) [sssd[pam]] [sbus_remove_timeout] (0x2000): 0x7fd4f7030710
(Wed Aug 30 06:59:11 2017) [sssd[pam]] [sss_dp_get_reply] (0x1000): Got reply from Data
Provider - DP error code: 0 errno: 0 error message: Success
(Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_check_user_search] (0x0100): Requesting info
for [avi(a)cloudius-systems.com]
(Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_check_user_search] (0x0400): Returning info
for user [avi@cloudius-systems.com(a)cloudius-systems.com]
(Wed Aug 30 06:59:11 2017) [sssd[pam]] [pd_set_primary_name] (0x0400): User's primary
name is avi(a)cloudius-systems.com
(Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_initgr_cache_set] (0x2000): [avi] added to
PAM initgroup cache
(Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_dp_send_req] (0x0100): Sending request with
the following data:
(Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_print_data] (0x0100): command:
SSS_PAM_ACCT_MGMT
(Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_print_data] (0x0100): domain:
cloudius-systems.com
(Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_print_data] (0x0100): user:
avi(a)cloudius-systems.com
(Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_print_data] (0x0100): service: sshd
(Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_print_data] (0x0100): tty: ssh
(Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_print_data] (0x0100): ruser: not set
(Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_print_data] (0x0100): rhost: 77.138.249.123
(Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_print_data] (0x0100): authtok type: 0
(Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_print_data] (0x0100): newauthtok type: 0
(Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_print_data] (0x0100): priv: 1
(Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_print_data] (0x0100): cli_pid: 3991
(Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_print_data] (0x0100): logon name: avi
(Wed Aug 30 06:59:11 2017) [sssd[pam]] [sbus_add_timeout] (0x2000): 0x7fd4f702de30
(Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_dom_forwarder] (0x0100): pam_dp_send_req
returned 0
(Wed Aug 30 06:59:11 2017) [sssd[pam]] [sss_dp_req_destructor] (0x0400): Deleting
request: [0x7fd4f5f68030:3:avi@cloudius-systems.com@cloudius-systems.com]
(Wed Aug 30 06:59:13 2017) [sssd[pam]] [sbus_remove_timeout] (0x2000): 0x7fd4f702de30
(Wed Aug 30 06:59:13 2017) [sssd[pam]] [pam_dp_process_reply] (0x0200): received: [4
(System error)][cloudius-systems.com]
(Wed Aug 30 06:59:13 2017) [sssd[pam]] [pam_reply] (0x0200): pam_reply called with result
[4]: System error.
(Wed Aug 30 06:59:13 2017) [sssd[pam]] [pam_reply] (0x0200): blen: 37
(Wed Aug 30 06:59:13 2017) [sssd[pam]] [client_recv] (0x0200): Client disconnected!
Any idea what went wrong?
_______________________________________________
sssd-users mailing list -- sssd-users(a)lists.fedorahosted.org
To unsubscribe send an email to sssd-users-leave(a)lists.fedorahosted.org
4:39 p.m.
I managed to fix and forget about the problem already. It turned out
that the VPS had selinux enabled, and the fix was to to exorcise
anything selinux related from the configuration files.
I may go into selinux hell for saying this, but the only way I managed
to get selinux working is to install a server from media and then turn
the server off and disconnect it from the power cord.
On 09/08/2017 12:24 PM, Jakub Hrozek wrote:
First, I’m sorry your mail was stuck in moderation for so long. We
receive large amount of spam lately and legitimate mails sometimes slip..
Second, you need to look into the domain logs and/or the child helpers (krb5_child,
gpo_child) because that’s what emits the error. Please see
https://docs.pagure.org/SSSD.sssd/users/troubleshooting.html and in general
https://pagure.io/docs/SSSD/sssd/
> On 30 Aug 2017, at 14:06, Avi Kivity <avi(a)scylladb.com> wrote:
>
> Plain centos 7 box, sssd-1.14.0-43.el7_3.18.x86_64
>
>
> Log says:
>
>
> (Wed Aug 30 06:59:11 2017) [sssd[pam]] [sss_ncache_check_str] (0x2000): Checking
negative cache for [NCE/USER/cloudius-systems.com/avi@cloudius-systems.com]
> (Wed Aug 30 06:59:11 2017) [sssd[pam]] [sss_dp_issue_request] (0x0400): Issuing
request for [0x7fd4f5f68030:3:avi@cloudius-systems.com@cloudius-systems.com]
> (Wed Aug 30 06:59:11 2017) [sssd[pam]] [sss_dp_get_account_msg] (0x0400): Creating
request for
[cloudius-systems.com][0x3][BE_REQ_INITGROUPS][1][name=avi@cloudius-systems.com:-]
> (Wed Aug 30 06:59:11 2017) [sssd[pam]] [sbus_add_timeout] (0x2000): 0x7fd4f7030710
> (Wed Aug 30 06:59:11 2017) [sssd[pam]] [sss_dp_internal_get_send] (0x0400): Entering
request [0x7fd4f5f68030:3:avi@cloudius-systems.com@cloudius-systems.com]
> (Wed Aug 30 06:59:11 2017) [sssd[pam]] [sbus_remove_timeout] (0x2000):
0x7fd4f7030710
> (Wed Aug 30 06:59:11 2017) [sssd[pam]] [sss_dp_get_reply] (0x1000): Got reply from
Data Provider - DP error code: 0 errno: 0 error message: Success
> (Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_check_user_search] (0x0100): Requesting
info for [avi(a)cloudius-systems.com]
> (Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_check_user_search] (0x0400): Returning
info for user [avi@cloudius-systems.com(a)cloudius-systems.com]
> (Wed Aug 30 06:59:11 2017) [sssd[pam]] [pd_set_primary_name] (0x0400): User's
primary name is avi(a)cloudius-systems.com
> (Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_initgr_cache_set] (0x2000): [avi] added
to PAM initgroup cache
> (Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_dp_send_req] (0x0100): Sending request
with the following data:
> (Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_print_data] (0x0100): command:
SSS_PAM_ACCT_MGMT
> (Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_print_data] (0x0100): domain:
cloudius-systems.com
> (Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_print_data] (0x0100): user:
avi(a)cloudius-systems.com
> (Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_print_data] (0x0100): service: sshd
> (Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_print_data] (0x0100): tty: ssh
> (Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_print_data] (0x0100): ruser: not set
> (Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_print_data] (0x0100): rhost:
77.138.249.123
> (Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_print_data] (0x0100): authtok type: 0
> (Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_print_data] (0x0100): newauthtok type: 0
> (Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_print_data] (0x0100): priv: 1
> (Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_print_data] (0x0100): cli_pid: 3991
> (Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_print_data] (0x0100): logon name: avi
> (Wed Aug 30 06:59:11 2017) [sssd[pam]] [sbus_add_timeout] (0x2000): 0x7fd4f702de30
> (Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_dom_forwarder] (0x0100): pam_dp_send_req
returned 0
> (Wed Aug 30 06:59:11 2017) [sssd[pam]] [sss_dp_req_destructor] (0x0400): Deleting
request: [0x7fd4f5f68030:3:avi@cloudius-systems.com@cloudius-systems.com]
> (Wed Aug 30 06:59:13 2017) [sssd[pam]] [sbus_remove_timeout] (0x2000):
0x7fd4f702de30
> (Wed Aug 30 06:59:13 2017) [sssd[pam]] [pam_dp_process_reply] (0x0200): received: [4
(System error)][cloudius-systems.com]
> (Wed Aug 30 06:59:13 2017) [sssd[pam]] [pam_reply] (0x0200): pam_reply called with
result [4]: System error.
> (Wed Aug 30 06:59:13 2017) [sssd[pam]] [pam_reply] (0x0200): blen: 37
> (Wed Aug 30 06:59:13 2017) [sssd[pam]] [client_recv] (0x0200): Client disconnected!
>
>
> Any idea what went wrong?
>
> _______________________________________________
> sssd-users mailing list -- sssd-users(a)lists.fedorahosted.org
> To unsubscribe send an email to sssd-users-leave(a)lists.fedorahosted.org
2419
days inactive
2429
days old
sssd-users@lists.fedorahosted.org
2 comments
2 participants
participants (2)
-
Avi Kivity -
Jakub Hrozek