Re: Potentially false errors when changing user password via `passwd` using krb5 as the chpass_provider
4:41 p.m.
Hi Jakub!
Thank you for the additional information, what you said seems to fit (that
the change operation works, but not kinit with the new password). They
should be talking to the same server, but I'll double check.
I'll check into this on Monday and write back.
-Jesse
7:02 p.m.
New subject: Potentially false errors when changing user
password via `passwd` using krb5 as the chpass_provider
My other message is still held up in the moderation queue, I think
(verified my additional e-mail before sending this), but you were exactly
right. I neglected that we have a load balancer sitting in front of the
directory server (2 replicas) for TLS termination reasons. I verified if I
configured the load balancer to not round robin the requests everything
works as expected -- it was just that it hit the other server to do the
authentication with the new password before the change was replicated.
Thank you for taking the time to respond!
On Sat, Jan 9, 2016 at 2:41 PM, Jesse Szwedko <jesse.szwedko(a)gmail.com>
wrote:
Hi Jakub!
Thank you for the additional information, what you said seems to fit (that
the change operation works, but not kinit with the new password). They
should be talking to the same server, but I'll double check.
I'll check into this on Monday and write back.
-Jesse
2:52 a.m.
New subject: Potentially false errors when changing user
password via `passwd` using krb5 as the chpass_provider
On Mon, Jan 11, 2016 at 05:02:54PM -0800, Jesse Szwedko wrote:
My other message is still held up in the moderation queue,
Ah, that might be my fault, the moderation queue receives a fair amount
of spam and I clear it manually, maybe I deleted your message by
accident :-/
Feel free to subscribe next time (and unsubscribe unless you want to
receive the sssd-users traffic..)
I think
(verified my additional e-mail before sending this), but you were exactly
right. I neglected that we have a load balancer sitting in front of the
directory server (2 replicas) for TLS termination reasons. I verified if I
configured the load balancer to not round robin the requests everything
works as expected -- it was just that it hit the other server to do the
authentication with the new password before the change was replicated.
I'm glad it works now!
Thank you for taking the time to respond!
On Sat, Jan 9, 2016 at 2:41 PM, Jesse Szwedko <jesse.szwedko(a)gmail.com>
wrote:
> Hi Jakub!
>
> Thank you for the additional information, what you said seems to fit (that
> the change operation works, but not kinit with the new password). They
> should be talking to the same server, but I'll double check.
>
> I'll check into this on Monday and write back.
>
> -Jesse
>
_______________________________________________
sssd-users mailing list
sssd-users(a)lists.fedorahosted.org
https://lists.fedorahosted.org/admin/lists/sssd-users@lists.fedorahosted.org
3026
days inactive
3029
days old
sssd-users@lists.fedorahosted.org
2 comments
2 participants
participants (2)
-
Jakub Hrozek -
Jesse Szwedko