-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
So far, the systemd unit file is only packaged but not used in any of
the packaged spec files.
Fixes: #584
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
iEYEARECAAYFAkx9PSkACgkQHsardTLnvCUXpACeJQFNIC7sa4SNchbVoOM67dic
XgsAoLVIIARh75bfWkV4SzO6ZYRu5B+u
=QD4y
-----END PGP SIGNATURE-----
Hi,
this is (hopefully) my last stab at asynchronous ldap bind. I have
tested it on fedora and it seems to work pretty ok, but I haven't tried
it yet with an older openldap where the asynchronous connections aren't
supported.
Martin
Hello sssd, this is Transifex at http://www.transifex.net.
The following attached files were submitted to SSSD | Stable Branch (1.2.x) by logan <logan(a)fedoraproject.org>
Please, visit Transifex at http://www.transifex.net/projects/p/sssd/c/stable12/ in order to see the component page.
Thank you,
Transifex
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Further patches submitted by Maxim through the upstream Trac at
https://fedorahosted.org/sssd/ticket/606
I rebased these patches atop the current master and tested them. I
squashed two of them together since they were mutually dependent and
very very small.
Ack.
- --
Stephen Gallagher
RHCE 804006346421761
Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
iEYEARECAAYFAkxz3c4ACgkQeiVVYja6o6N14ACfffjeD+OYsU9Z8+L1HKgxqKTV
7lUAn2P9zDO1wRSMl8AiQjf8pPzko/6g
=jUC3
-----END PGP SIGNATURE-----
I came across this a while back but don't remember the calisthenics I
had to go through to sort it out. Can somebody help me out?
[root@ipaserver ~]# yum update
Loaded plugins: presto, refresh-packagekit
Setting up Update Process
Resolving Dependencies
--> Running transaction check
---> Package certmonger.i686 0:0.30-0.2010082713git9ccdd16.fc12 set to
be updated
---> Package ipa-admintools.i686 0:1.91-0.2010090115gite93932b.fc12 set
to be updated
---> Package ipa-client.i686 0:1.91-0.2010090115gite93932b.fc12 set to
be updated
---> Package ipa-python.i686 0:1.91-0.2010090115gite93932b.fc12 set to
be updated
---> Package ipa-server.i686 0:1.91-0.2010090115gite93932b.fc12 set to
be updated
--> Processing Dependency: pki-silent >= 1.3.4 for package:
ipa-server-1.91-0.2010090115gite93932b.fc12.i686
--> Processing Dependency: pki-ca >= 1.3.6 for package:
ipa-server-1.91-0.2010090115gite93932b.fc12.i686
---> Package ipa-server-selinux.i686 0:1.91-0.2010090115gite93932b.fc12
set to be updated
---> Package libcollection.i686 0:0.5.0-0.2010082417git410c714.fc12 set
to be updated
---> Package libdhash.i686 0:0.4.0-0.2010082417git410c714.fc12 set to be
updated
---> Package libini_config.i686 0:0.5.1-0.2010082417git410c714.fc12 set
to be updated
---> Package sssd.i686 0:1.2.3-0.2010082417git410c714.fc12 set to be updated
---> Package sssd-client.i686 0:1.2.3-0.2010082417git410c714.fc12 set to
be updated
--> Finished Dependency Resolution
Error: Package: ipa-server-1.91-0.2010090115gite93932b.fc12.i686 (ipa-devel)
Requires: pki-ca >= 1.3.6
Installed: pki-ca-1.3.3-1.fc12.noarch (@updates)
Error: Package: ipa-server-1.91-0.2010090115gite93932b.fc12.i686 (ipa-devel)
Requires: pki-silent >= 1.3.4
Installed: pki-silent-1.3.2-1.fc12.noarch (@updates)
You could try using --skip-broken to work around the problem
You could try running: rpm -Va --nofiles --nodigest
[root@ipaserver ~]#
I'm using jdennis' ipa-devel and sssd repos. Is f12 getting long in the
tooth?
thanks
--
David O'Brien
Red Hat APAC Pty Ltd
"We couldn't care less about comfort. We make you feel good."
Federico Minoli CEO Ducati Motor S.p.A.
hi
i m using fedora 13 with sssd on our labs
we use the ldap backed to authneticate
sometime used remove network cable
then i can see that sssd goes in offline mode
here what i can see in my sssd.log
(Wed Sep 1 11:32:59 2010) [sssd[be[default]]] [fo_resolve_service_done]
(1): Fa
iled to resolve server 'ldap2.int-evry.fr': Could not contact DNS servers
(Wed Sep 1 11:32:59 2010) [sssd[be[default]]] [fo_resolve_service_done]
(1): Fa
iled to resolve server 'ldap1.int-evry.fr': Could not contact DNS servers
(Wed Sep 1 11:32:59 2010) [sssd[be[default]]] [fo_resolve_service_done]
(1): Fa
iled to resolve server 'ldap3.int-evry.fr': Could not contact DNS servers
(Wed Sep 1 11:32:59 2010) [sssd[be[default]]] [fo_resolve_service_send]
(1): No
available servers for service 'LDAP'
(Wed Sep 1 11:32:59 2010) [sssd[be[default]]] [be_run_offline_cb] (3):
Going of
fline. Running callbacks.
(Wed Sep 1 11:34:37 2010) [sssd[be[default]]] [fo_resolve_service_done]
(1): Fa
iled to resolve server 'ldap2.int-evry.fr': Could not contact DNS servers
(Wed Sep 1 11:34:37 2010) [sssd[be[default]]] [fo_resolve_service_done]
(1): Fa
iled to resolve server 'ldap1.int-evry.fr': Could not contact DNS servers
(Wed Sep 1 11:34:37 2010) [sssd[be[default]]] [fo_resolve_service_done]
(1): Fa
iled to resolve server 'ldap3.int-evry.fr': Could not contact DNS servers
(Wed Sep 1 11:34:37 2010) [sssd[be[default]]] [fo_resolve_service_send]
(1): No
available servers for service 'LDAP'
(Wed Sep 1 11:34:37 2010) [sssd[be[default]]] [be_run_offline_cb] (3):
Going of
fline. Running callbacks.
but when i put the network cable on sssd is not aware of the network
back before one or two minutes.
is there a way to speed up the process?
it would be nice if i could send a signal to check again with Networkmanager
Hi all,
In our setup, we run into the following problem: When sssd is configured,
the authentication against ldap fails, but succeeds against kerberos/AD. Our
ldap/edirectory guru has, as far as he is concerned, pinned the problem down
due to the fact that ldap authentication fails with the logging saying
"password failed":
Here's the part in /var/log/secure:
Aug 30 11:45:36 hpdw0001 sshd[27645]: pam_sss(sshd:auth): authentication
failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=
hpdw0001.ddns.nl-htc01.nxp.com
user=nxp21358
Aug 30 11:45:36 hpdw0001 sshd[27645]: pam_sss(sshd:auth): received for user
nxp21358: 6 (Permission denied)
Aug 30 11:45:38 hpdw0001 sshd[27645]: Failed password for nxp21358 from
134.27.211.178 port 51963 ssh2
And the part in /var/log/sssd/
(Mon Aug 30 11:45:33 2010) [sssd[be[LDAP]]] [sdap_get_generic_send] (6):
calling ldap_search_ext with
[(&(uid=nxp21358)(objectclass=NxpUserAuxClass))][ou=TS
T_EMEA_NL-TST01,ou=Locations,ou=NXDI,o=NXP].
(Mon Aug 30 11:45:33 2010) [sssd[be[LDAP]]] [sdap_get_generic_send] (7):
Requesting attrs: [objectClass]
(Mon Aug 30 11:45:33 2010) [sssd[be[LDAP]]] [sdap_get_generic_send] (7):
Requesting attrs: [uid]
(Mon Aug 30 11:45:33 2010) [sssd[be[LDAP]]] [sdap_get_generic_send] (7):
Requesting attrs: [userPassword]
(Mon Aug 30 11:45:33 2010) [sssd[be[LDAP]]] [sdap_get_generic_send] (7):
Requesting attrs: [uidNumber]
(Mon Aug 30 11:45:33 2010) [sssd[be[LDAP]]] [sdap_get_generic_send] (7):
Requesting attrs: [gidNumber]
(Mon Aug 30 11:45:33 2010) [sssd[be[LDAP]]] [sdap_get_generic_send] (7):
Requesting attrs: [gecos]
(Mon Aug 30 11:45:33 2010) [sssd[be[LDAP]]] [sdap_get_generic_send] (7):
Requesting attrs: [homeDirectory]
(Mon Aug 30 11:45:33 2010) [sssd[be[LDAP]]] [sdap_get_generic_send] (7):
Requesting attrs: [loginShell]
(Mon Aug 30 11:45:33 2010) [sssd[be[LDAP]]] [sdap_get_generic_send] (7):
Requesting attrs: [krbPrincipalName]
(Mon Aug 30 11:45:33 2010) [sssd[be[LDAP]]] [sdap_get_generic_send] (7):
Requesting attrs: [cn]
(Mon Aug 30 11:45:33 2010) [sssd[be[LDAP]]] [sdap_get_generic_send] (7):
Requesting attrs: [modifyTimestamp]
(Mon Aug 30 11:45:33 2010) [sssd[be[LDAP]]] [sdap_get_generic_send] (7):
Requesting attrs: [shadowLastChange]
(Mon Aug 30 11:45:33 2010) [sssd[be[LDAP]]] [sdap_get_generic_send] (7):
Requesting attrs: [shadowMin]
(Mon Aug 30 11:45:33 2010) [sssd[be[LDAP]]] [sdap_get_generic_send] (7):
Requesting attrs: [shadowMax]
(Mon Aug 30 11:45:33 2010) [sssd[be[LDAP]]] [sdap_get_generic_send] (7):
Requesting attrs: [shadowWarning]
(Mon Aug 30 11:45:33 2010) [sssd[be[LDAP]]] [sdap_get_generic_send] (7):
Requesting attrs: [shadowInactive]
(Mon Aug 30 11:45:33 2010) [sssd[be[LDAP]]] [sdap_get_generic_send] (7):
Requesting attrs: [shadowExpire]
(Mon Aug 30 11:45:33 2010) [sssd[be[LDAP]]] [sdap_get_generic_send] (7):
Requesting attrs: [shadowFlag]
(Mon Aug 30 11:45:33 2010) [sssd[be[LDAP]]] [sdap_get_generic_send] (7):
Requesting attrs: [krbLastPwdChange]
(Mon Aug 30 11:45:33 2010) [sssd[be[LDAP]]] [sdap_get_generic_send] (7):
Requesting attrs: [krbPasswordExpiration]
(Mon Aug 30 11:45:33 2010) [sssd[be[LDAP]]] [sdap_get_generic_send] (7):
Requesting attrs: [pwdAttribute]
(Mon Aug 30 11:45:33 2010) [sssd[be[LDAP]]] [sdap_get_generic_send] (8):
ldap_search_ext called, msgid = 9
(Mon Aug 30 11:45:33 2010) [sssd[be[LDAP]]] [sdap_process_result] (8):
Trace: sh[0x4d1eeb0], connected[1], ops[0x4d5be80], ldap[0x4d1f060]
(Mon Aug 30 11:45:33 2010) [sssd[be[LDAP]]] [sdap_parse_entry] (9):
OriginalDN: [cn=nxp21358,ou=Personal,ou=People,ou=NXDI,o=NXP].
(Mon Aug 30 11:45:33 2010) [sssd[be[LDAP]]] [sdap_process_result] (8):
Trace: sh[0x4d1eeb0], connected[1], ops[0x4d5be80], ldap[0x4d1f060]
(Mon Aug 30 11:45:33 2010) [sssd[be[LDAP]]] [sdap_get_generic_done] (6):
Search result: Success(0),
(Mon Aug 30 11:45:33 2010) [sssd[be[LDAP]]] [sdap_get_initgr_user] (9):
Receiving info for the user
(Mon Aug 30 11:45:33 2010) [sssd[be[LDAP]]] [sdap_process_result] (8):
Trace: sh[0x4d1eeb0], connected[1], ops[(nil)], ldap[0x4d1f060]
(Mon Aug 30 11:45:33 2010) [sssd[be[LDAP]]] [sdap_process_result] (8):
Trace: ldap_result found nothing!
Now, browsing through the options that can be set, we sat that we were able
to set an ldap_default_authtok_type. However, the only possible option here
is "password". However, the object "password" is unknown in eDirectory. All
other options can be set/remapped to other attributes, and this particular
one cannot. Is there a work around for this that anyone knows of ?
best regards,
Andy