I am testing sssd-1.11.0 in Ubuntu Saucy - and have problems with ssh and login from GUI-login (lightdm and gdm) to the machine.
when using local account I get answers from commands:
sudo id aduser
getent passwd aduser
I get "Permission denied:" trying to login :
ssh x.x.x.x -l aduser ssh x.x.x. -l aduser@my.domain.com and login as aduser, aduser@my.domain.com from login screen.
From sssd_pam.log
----------------------- [sssd[pam]] [pam_check_user_search] (0x0400): Returning info for user [aduser@my.domain.com]
(Thu Sep 26 16:25:44 2013) [sssd[pam]] [pam_initgr_cache_set] (0x2000): [aduser] added to PAM initgroup cache
(Thu Sep 26 16:25:44 2013) [sssd[pam]] [pam_dp_send_req] (0x0100):Sending request with the following data:
(Thu Sep 26 16:25:44 2013) [sssd[pam]] [pam_print_data] (0x0100): command: PAM_AUTHENTICATE
(Thu Sep 26 16:25:44 2013) [sssd[pam]] [pam_print_data] (0x0100): domain: my.domain.com
(Thu Sep 26 16:25:44 2013) [sssd[pam]] [pam_print_data] (0x0100): user: aduser
(Thu Sep 26 16:25:44 2013) [sssd[pam]] [pam_print_data] (0x0100): service: sshd
(Thu Sep 26 16:25:44 2013) [sssd[pam]] [pam_print_data] (0x0100): tty: ssh
(Thu Sep 26 16:25:44 2013) [sssd[pam]] [pam_print_data] (0x0100): ruser: not set - Ignored:
(Thu Sep 26 16:25:44 2013) [sssd[pam]] [pam_print_data] (0x0100): rhost: ariadne.i.my.domain.com
(Thu Sep 26 16:25:44 2013) [sssd[pam]] [pam_print_data] (0x0100): authtok type: 1
(Thu Sep 26 16:25:44 2013) [sssd[pam]] [pam_print_data] (0x0100): newauthtok type: 0
(Thu Sep 26 16:25:44 2013) [sssd[pam]] [pam_print_data] (0x0100): priv: 1
(Thu Sep 26 16:25:44 2013) [sssd[pam]] [pam_print_data] (0x0100): cli_pid: 2007
(Thu Sep 26 16:25:44 2013) [sssd[pam]] [sbus_add_timeout] (0x2000): 0x111a980
(Thu Sep 26 16:25:44 2013) [sssd[pam]] [pam_dom_forwarder] (0x0100): pam_dp_send_req returned 0
(Thu Sep 26 16:25:44 2013) [sssd[pam]] [sss_dp_req_destructor] (0x0400): Deleting request: [0x417d20:3:aduser@my.domain.com]
(Thu Sep 26 16:25:44 2013) [sssd[pam]] [sbus_remove_timeout] (0x2000): 0x111a980
(Thu Sep 26 16:25:44 2013) [sssd[pam]] [sbus_dispatch] (0x4000): dbus conn: 111B7C0
(Thu Sep 26 16:25:44 2013) [sssd[pam]] [sbus_dispatch] (0x4000): Dispatching.
(Thu Sep 26 16:25:44 2013) [sssd[pam]] [pam_dp_process_reply] (0x0100): received: [4][my.domain.com]
(Thu Sep 26 16:25:44 2013) [sssd[pam]] [pam_reply] (0x0200): pam_reply called with result [4].
(Thu Sep 26 16:25:44 2013) [sssd[pam]] [pam_reply] (0x0100): blen: 29
(Thu Sep 26 16:25:44 2013) [sssd[pam]] [reset_idle_timer] (0x4000): Idle timer re-set for client [0x1118300][18]
(Thu Sep 26 16:25:49 2013) [sssd[pam]] [pam_initgr_cache_remove] (0x2000): [aduser] removed from PAM initgroup cache
(Thu Sep 26 16:25:51 2013) [sssd[pam]] [sbus_dispatch] (0x4000): dbus conn: 111A1A0
(Thu Sep 26 16:25:51 2013) [sssd[pam]] [sbus_dispatch] (0x4000): Dispatching.
Longina
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
On 09/26/2013 11:11 AM, Longina Przybyszewska wrote:
I am testing sssd-1.11.0 in Ubuntu Saucy - and have problems with ssh and login from GUI-login (lightdm and gdm) to the machine.
when using local account I get answers from commands:
sudo id aduser
getent passwd aduser
I get "Permission denied:" trying to login :
ssh x.x.x.x -l aduser ssh x.x.x. -l aduser@my.domain.com and login as aduser, aduser@my.domain.com from login screen.
From sssd_pam.log -----------------------
<snip>
(Thu Sep 26 16:25:44 2013) [sssd[pam]] [pam_dp_process_reply] (0x0100): received: [4][my.domain.com]
(Thu Sep 26 16:25:44 2013) [sssd[pam]] [pam_reply] (0x0200): pam_reply called with result [4].
Well, this message means that you got error code 4 back from the data provider (which is PAM_SYSTEM_ERR). That usually means a bug of some kind.
We need the log from the sssd_<domain>.log file at the same time to figure out what happened.
On Thu, Sep 26, 2013 at 11:46:04AM -0400, Stephen Gallagher wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
On 09/26/2013 11:11 AM, Longina Przybyszewska wrote:
I am testing sssd-1.11.0 in Ubuntu Saucy - and have problems with ssh and login from GUI-login (lightdm and gdm) to the machine.
when using local account I get answers from commands:
sudo id aduser
getent passwd aduser
I get "Permission denied:" trying to login :
ssh x.x.x.x -l aduser ssh x.x.x. -l aduser@my.domain.com and login as aduser, aduser@my.domain.com from login screen.
From sssd_pam.log -----------------------
<snip> > (Thu Sep 26 16:25:44 2013) [sssd[pam]] [pam_dp_process_reply] > (0x0100): received: [4][my.domain.com] > > (Thu Sep 26 16:25:44 2013) [sssd[pam]] [pam_reply] (0x0200): > pam_reply called with result [4]. >
Well, this message means that you got error code 4 back from the data provider (which is PAM_SYSTEM_ERR). That usually means a bug of some kind.
We need the log from the sssd_<domain>.log file at the same time to figure out what happened.
Also krb5_child.log please.
What debugging level would be reasonable? Level 9 gives a huge file of 15mb for single login ;(
Longina
-----Original Message----- From: sssd-users-bounces@lists.fedorahosted.org [mailto:sssd-users-bounces@lists.fedorahosted.org] On Behalf Of Stephen Gallagher Sent: 26. september 2013 17:46 To: sssd-users@lists.fedorahosted.org Subject: Re: [SSSD-users] login problem sssd-1.11.0 Ubuntu saucy
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
On 09/26/2013 11:11 AM, Longina Przybyszewska wrote:
I am testing sssd-1.11.0 in Ubuntu Saucy - and have problems with ssh and login from GUI-login (lightdm and gdm) to the machine.
when using local account I get answers from commands:
sudo id aduser
getent passwd aduser
I get "Permission denied:" trying to login :
ssh x.x.x.x -l aduser ssh x.x.x. -l aduser@my.domain.com and login as aduser, aduser@my.domain.com from login screen.
From sssd_pam.log -----------------------
<snip>
(Thu Sep 26 16:25:44 2013) [sssd[pam]] [pam_dp_process_reply] (0x0100): received: [4][my.domain.com]
(Thu Sep 26 16:25:44 2013) [sssd[pam]] [pam_reply] (0x0200): pam_reply called with result [4].
Well, this message means that you got error code 4 back from the data provider (which is PAM_SYSTEM_ERR). That usually means a bug of some kind.
We need the log from the sssd_<domain>.log file at the same time to figure out what happened.
_______________________________________________ sssd-users mailing list sssd-users@lists.fedorahosted.org https://lists.fedorahosted.org/mailman/listinfo/sssd-users
sssd-users@lists.fedorahosted.org
-
Jakub Hrozek -
Longina Przybyszewska -
Stephen Gallagher