Cannot start sssd from source [libsss_ldap_common.so: undefined symbol: ldap_tls_inplace]
by Amit Kumar
Hello,
I build sssd-1.16.0-19 from source.
#./configure; make; make install
# /usr/local/sbin/sssd -i -d 1
ldb: unable to dlopen /usr/lib64/ldb/modules/ldb/memberof.la :
/usr/lib64/ldb/modules/ldb/memberof.la: invalid ELF header
ldb: unable to dlopen /usr/lib64/ldb/modules/ldb/memberof.la :
/usr/lib64/ldb/modules/ldb/memberof.la: invalid ELF header
(Mon Nov 19 12:49:31 2018) [sssd[be[atest.com]]] [dp_module_open_lib]
(0x0010): Unable to load module [ad] with path
[/usr/local/lib/sssd/libsss_ad.so]:
/usr/local/lib/sssd/libsss_ldap_common.so: undefined symbol:
ldap_tls_inplace
(Mon Nov 19 12:49:31 2018) [sssd[be[atest.com]]] [dp_load_module]
(0x0020): Unable to create DP module.
(Mon Nov 19 12:49:31 2018) [sssd[be[atest.com]]] [dp_target_init]
(0x0010): Unable to load module ad
(Mon Nov 19 12:49:31 2018) [sssd[be[atest.com]]] [dp_load_targets]
(0x0020): Unable to load target [id] [80]: Accessing a corrupted shared
library.
(Mon Nov 19 12:49:31 2018) [sssd[be[atest.com]]] [dp_init] (0x0020):
Unable to initialize DP targets [1432158209]: Internal Error
(Mon Nov 19 12:49:31 2018) [sssd[be[atest.com]]] [be_process_init]
(0x0010): Unable to setup data provider [1432158209]: Internal Error
(Mon Nov 19 12:49:31 2018) [sssd[be[atest.com]]] [main] (0x0010): Could
not initialize backend [1432158209]
ldb: unable to dlopen /usr/lib64/ldb/modules/ldb/memberof.la :
/usr/lib64/ldb/modules/ldb/memberof.la: invalid ELF header
(Mon Nov 19 12:49:31 2018) [sssd[be[atest.com]]] [dp_module_open_lib]
(0x0010): Unable to load module [ad] with path
[/usr/local/lib/sssd/libsss_ad.so]:
/usr/local/lib/sssd/libsss_ldap_common.so: undefined symbol:
ldap_tls_inplace
(Mon Nov 19 12:49:31 2018) [sssd[be[atest.com]]] [dp_load_module]
(0x0020): Unable to create DP module.
(Mon Nov 19 12:49:31 2018) [sssd[be[atest.com]]] [dp_target_init]
(0x0010): Unable to load module ad
(Mon Nov 19 12:49:31 2018) [sssd[be[atest.com]]] [dp_load_targets]
(0x0020): Unable to load target [id] [80]: Accessing a corrupted shared
library.
(Mon Nov 19 12:49:31 2018) [sssd[be[atest.com]]] [dp_init] (0x0020):
Unable to initialize DP targets [1432158209]: Internal Error
(Mon Nov 19 12:49:31 2018) [sssd[be[atest.com]]] [be_process_init]
(0x0010): Unable to setup data provider [1432158209]: Internal Error
(Mon Nov 19 12:49:31 2018) [sssd[be[atest.com]]] [main] (0x0010): Could
not initialize backend [1432158209]
ldb: unable to dlopen /usr/lib64/ldb/modules/ldb/memberof.la :
/usr/lib64/ldb/modules/ldb/memberof.la: invalid ELF header
(Mon Nov 19 12:49:33 2018) [sssd[be[atest.com]]] [dp_module_open_lib]
(0x0010): Unable to load module [ad] with path
[/usr/local/lib/sssd/libsss_ad.so]:
/usr/local/lib/sssd/libsss_ldap_common.so: undefined symbol:
ldap_tls_inplace
(Mon Nov 19 12:49:33 2018) [sssd[be[atest.com]]] [dp_load_module]
(0x0020): Unable to create DP module.
(Mon Nov 19 12:49:33 2018) [sssd[be[atest.com]]] [dp_target_init]
(0x0010): Unable to load module ad
(Mon Nov 19 12:49:33 2018) [sssd[be[atest.com]]] [dp_load_targets]
(0x0020): Unable to load target [id] [80]: Accessing a corrupted shared
library.
(Mon Nov 19 12:49:33 2018) [sssd[be[atest.com]]] [dp_init] (0x0020):
Unable to initialize DP targets [1432158209]: Internal Error
(Mon Nov 19 12:49:33 2018) [sssd[be[atest.com]]] [be_process_init]
(0x0010): Unable to setup data provider [1432158209]: Internal Error
(Mon Nov 19 12:49:33 2018) [sssd[be[atest.com]]] [main] (0x0010): Could
not initialize backend [1432158209]
(Mon Nov 19 12:49:36 2018) [sssd] [services_startup_timeout] (0x0020):
Providers did not start in time, forcing services startup!
ldb: unable to dlopen /usr/lib64/ldb/modules/ldb/memberof.la :
/usr/lib64/ldb/modules/ldb/memberof.la: invalid ELF header
ldb: unable to dlopen /usr/lib64/ldb/modules/ldb/memberof.la :
/usr/lib64/ldb/modules/ldb/memberof.la: invalid ELF header
ldb: unable to dlopen /usr/lib64/ldb/modules/ldb/memberof.la :
/usr/lib64/ldb/modules/ldb/memberof.la: invalid ELF header
(Mon Nov 19 12:49:36 2018) [sssd[ssh]] [sbus_client_init] (0x0020):
check_file failed for
[/usr/local/var/lib/sss/pipes/private/sbus-dp_atest.com].
(Mon Nov 19 12:49:36 2018) [sssd[ssh]] [sss_dp_init] (0x0010): Failed to
connect to monitor services.
(Mon Nov 19 12:49:36 2018) [sssd[ssh]] [sss_process_init] (0x0010):
fatal error setting up backend connector
(Mon Nov 19 12:49:36 2018) [sssd[ssh]] [ssh_process_init] (0x0010):
sss_process_init() failed
(Mon Nov 19 12:49:36 2018) [sssd[pam]] [sbus_client_init] (0x0020):
check_file failed for
[/usr/local/var/lib/sss/pipes/private/sbus-dp_atest.com].
(Mon Nov 19 12:49:36 2018) [sssd[pam]] [sss_dp_init] (0x0010): Failed to
connect to monitor services.
(Mon Nov 19 12:49:36 2018) [sssd[pam]] [sss_process_init] (0x0010):
fatal error setting up backend connector
(Mon Nov 19 12:49:36 2018) [sssd[pam]] [pam_process_init] (0x0010):
sss_process_init() failed
(Mon Nov 19 12:49:36 2018) [sssd[nss]] [sbus_client_init] (0x0020):
check_file failed for
[/usr/local/var/lib/sss/pipes/private/sbus-dp_atest.com].
(Mon Nov 19 12:49:36 2018) [sssd[nss]] [sss_dp_init] (0x0010): Failed to
connect to monitor services.
(Mon Nov 19 12:49:36 2018) [sssd[nss]] [sss_process_init] (0x0010):
fatal error setting up backend connector
(Mon Nov 19 12:49:36 2018) [sssd[nss]] [nss_process_init] (0x0010):
sss_process_init() failed
ldb: unable to dlopen /usr/lib64/ldb/modules/ldb/memberof.la :
/usr/lib64/ldb/modules/ldb/memberof.la: invalid ELF header
ldb: unable to dlopen /usr/lib64/ldb/modules/ldb/memberof.la :
/usr/lib64/ldb/modules/ldb/memberof.la: invalid ELF header
(Mon Nov 19 12:49:36 2018) [sssd[nss]] [sbus_client_init] (0x0020):
check_file failed for
[/usr/local/var/lib/sss/pipes/private/sbus-dp_atest.com].
(Mon Nov 19 12:49:36 2018) [sssd[nss]] [sss_dp_init] (0x0010): Failed to
connect to monitor services.
(Mon Nov 19 12:49:36 2018) [sssd[nss]] [sss_process_init] (0x0010):
fatal error setting up backend connector
(Mon Nov 19 12:49:36 2018) [sssd[nss]] [nss_process_init] (0x0010):
sss_process_init() failed
ldb: unable to dlopen /usr/lib64/ldb/modules/ldb/memberof.la :
/usr/lib64/ldb/modules/ldb/memberof.la: invalid ELF header
(Mon Nov 19 12:49:36 2018) [sssd[ssh]] [sbus_client_init] (0x0020):
check_file failed for
[/usr/local/var/lib/sss/pipes/private/sbus-dp_atest.com].
(Mon Nov 19 12:49:36 2018) [sssd[ssh]] [sss_dp_init] (0x0010): Failed to
connect to monitor services.
(Mon Nov 19 12:49:36 2018) [sssd[ssh]] [sss_process_init] (0x0010):
fatal error setting up backend connector
(Mon Nov 19 12:49:36 2018) [sssd[ssh]] [ssh_process_init] (0x0010):
sss_process_init() failed
(Mon Nov 19 12:49:36 2018) [sssd[pam]] [sbus_client_init] (0x0020):
check_file failed for
[/usr/local/var/lib/sss/pipes/private/sbus-dp_atest.com].
(Mon Nov 19 12:49:36 2018) [sssd[pam]] [sss_dp_init] (0x0010): Failed to
connect to monitor services.
(Mon Nov 19 12:49:36 2018) [sssd[pam]] [sss_process_init] (0x0010):
fatal error setting up backend connector
(Mon Nov 19 12:49:36 2018) [sssd[pam]] [pam_process_init] (0x0010):
sss_process_init() failed
ldb: unable to dlopen /usr/lib64/ldb/modules/ldb/memberof.la :
/usr/lib64/ldb/modules/ldb/memberof.la: invalid ELF header
(Mon Nov 19 12:49:37 2018) [sssd[be[atest.com]]] [dp_module_open_lib]
(0x0010): Unable to load module [ad] with path
[/usr/local/lib/sssd/libsss_ad.so]:
/usr/local/lib/sssd/libsss_ldap_common.so: undefined symbol:
ldap_tls_inplace
(Mon Nov 19 12:49:37 2018) [sssd[be[atest.com]]] [dp_load_module]
(0x0020): Unable to create DP module.
(Mon Nov 19 12:49:37 2018) [sssd[be[atest.com]]] [dp_target_init]
(0x0010): Unable to load module ad
(Mon Nov 19 12:49:37 2018) [sssd[be[atest.com]]] [dp_load_targets]
(0x0020): Unable to load target [id] [80]: Accessing a corrupted shared
library.
(Mon Nov 19 12:49:37 2018) [sssd[be[atest.com]]] [dp_init] (0x0020):
Unable to initialize DP targets [1432158209]: Internal Error
(Mon Nov 19 12:49:37 2018) [sssd[be[atest.com]]] [be_process_init]
(0x0010): Unable to setup data provider [1432158209]: Internal Error
(Mon Nov 19 12:49:37 2018) [sssd[be[atest.com]]] [main] (0x0010): Could
not initialize backend [1432158209]
(Mon Nov 19 12:49:37 2018) [sssd] [monitor_restart_service] (0x0010):
Process [atest.com], definitely stopped!
(Mon Nov 19 12:49:37 2018) [sssd] [monitor_quit] (0x0020): Terminating
[nss][12122]
(Mon Nov 19 12:49:37 2018) [sssd] [monitor_quit] (0x0020): Couldn't kill
[nss][12122]: [No such process]
(Mon Nov 19 12:49:37 2018) [sssd] [monitor_quit] (0x0020): Terminating
[pam][12121]
(Mon Nov 19 12:49:37 2018) [sssd] [monitor_quit] (0x0020): Couldn't kill
[pam][12121]: [No such process]
(Mon Nov 19 12:49:37 2018) [sssd] [monitor_quit] (0x0020): Terminating
[ssh][12120]
(Mon Nov 19 12:49:37 2018) [sssd] [monitor_quit] (0x0020): Couldn't kill
[ssh][12120]: [No such process]
(Mon Nov 19 12:49:37 2018) [sssd] [monitor_cleanup] (0x0010): Error
removing pidfile! (2 [No such file or directory])
#
# ldd /usr/local/lib/sssd/libsss_ldap_common.so
linux-vdso.so.1 => (0x00007ffc5c391000)
libsss_krb5_common.so => /usr/local/lib/sssd/libsss_krb5_common.so
(0x00007f9f0364f000)
libkeyutils.so.1 => /lib64/libkeyutils.so.1 (0x00007f9f0344b000)
libkrb5.so.3 => /lib64/libkrb5.so.3 (0x00007f9f03163000)
libk5crypto.so.3 => /lib64/libk5crypto.so.3 (0x00007f9f02f30000)
libcom_err.so.2 => /lib64/libcom_err.so.2 (0x00007f9f02d2c000)
libsss_idmap.so.0 => /usr/local/lib/libsss_idmap.so.0
(0x00007f9f02b25000)
libsss_util.so => /usr/local/lib/sssd/libsss_util.so
(0x00007f9f0289f000)
librt.so.1 => /lib64/librt.so.1 (0x00007f9f02697000)
libpopt.so.0 => /lib64/libpopt.so.0 (0x00007f9f0248d000)
libldb.so.1 => /lib64/libldb.so.1 (0x00007f9f0225c000)
libdbus-1.so.3 => /lib64/libdbus-1.so.3 (0x00007f9f0200c000)
libpcre.so.1 => /lib64/libpcre.so.1 (0x00007f9f01daa000)
libini_config.so.5 => /usr/local/lib/libini_config.so.5
(0x00007f9f01b91000)
libpath_utils.so.1 => /usr/local/lib/libpath_utils.so.1
(0x00007f9f0198d000)
libbasicobjects.so.0 => /usr/local/lib/libbasicobjects.so.0
(0x00007f9f0178a000)
libref_array.so.1 => /usr/local/lib/libref_array.so.1
(0x00007f9f01587000)
libcollection.so.4 => /usr/local/lib/libcollection.so.4
(0x00007f9f0137b000)
libldap-2.4.so.2 => /usr/local/lib/libldap-2.4.so.2 (0x00007f9f01139000)
liblber-2.4.so.2 => /usr/local/lib/liblber-2.4.so.2 (0x00007f9f00f2a000)
libresolv.so.2 => /lib64/libresolv.so.2 (0x00007f9f00d11000)
libsasl2.so.3 => /lib64/libsasl2.so.3 (0x00007f9f00af4000)
libselinux.so.1 => /lib64/libselinux.so.1 (0x00007f9f008cd000)
libtdb.so.1 => /lib64/libtdb.so.1 (0x00007f9f006b6000)
libsystemd.so.0 => /lib64/libsystemd.so.0 (0x00007f9f00485000)
libglib-2.0.so.0 => /lib64/libglib-2.0.so.0 (0x00007f9f00171000)
libsss_child.so => /usr/local/lib/sssd/libsss_child.so
(0x00007f9efff6b000)
libtevent.so.0 => /usr/local/lib/libtevent.so.0 (0x00007f9effd57000)
libsss_cert.so => /usr/local/lib/sssd/libsss_cert.so
(0x00007f9effb52000)
libsss_crypt.so => /usr/local/lib/sssd/libsss_crypt.so
(0x00007f9eff94b000)
libdhash.so.1 => /usr/local/lib/libdhash.so.1 (0x00007f9eff747000)
libsss_debug.so => /usr/local/lib/sssd/libsss_debug.so
(0x00007f9eff543000)
libsss_certmap.so.0 => /usr/local/lib/libsss_certmap.so.0
(0x00007f9eff334000)
libtalloc.so.2 => /lib64/libtalloc.so.2 (0x00007f9eff124000)
libssl3.so => /lib64/libssl3.so (0x00007f9efeed2000)
libsmime3.so => /lib64/libsmime3.so (0x00007f9efecab000)
libnss3.so => /lib64/libnss3.so (0x00007f9efe97e000)
libnssutil3.so => /lib64/libnssutil3.so (0x00007f9efe74f000)
libplds4.so => /lib64/libplds4.so (0x00007f9efe54b000)
libplc4.so => /lib64/libplc4.so (0x00007f9efe346000)
libnspr4.so => /lib64/libnspr4.so (0x00007f9efe108000)
libpthread.so.0 => /lib64/libpthread.so.0 (0x00007f9efdeec000)
libdl.so.2 => /lib64/libdl.so.2 (0x00007f9efdce8000)
libc.so.6 => /lib64/libc.so.6 (0x00007f9efd91b000)
libkrb5support.so.0 => /lib64/libkrb5support.so.0 (0x00007f9efd70d000)
/lib64/ld-linux-x86-64.so.2 (0x00007f9f03b0c000)
libcrypt.so.1 => /lib64/libcrypt.so.1 (0x00007f9efd4d6000)
libgssapi_krb5.so.2 => /lib64/libgssapi_krb5.so.2 (0x00007f9efd289000)
libcap.so.2 => /lib64/libcap.so.2 (0x00007f9efd084000)
libm.so.6 => /lib64/libm.so.6 (0x00007f9efcd82000)
liblzma.so.5 => /lib64/liblzma.so.5 (0x00007f9efcb5c000)
liblz4.so.1 => /lib64/liblz4.so.1 (0x00007f9efc947000)
libgcrypt.so.11 => /lib64/libgcrypt.so.11 (0x00007f9efc6c6000)
libgpg-error.so.0 => /lib64/libgpg-error.so.0 (0x00007f9efc4c1000)
libdw.so.1 => /lib64/libdw.so.1 (0x00007f9efc27a000)
libgcc_s.so.1 => /lib64/libgcc_s.so.1 (0x00007f9efc064000)
libattr.so.1 => /lib64/libattr.so.1 (0x00007f9efbe5f000)
libfreebl3.so => /lib64/libfreebl3.so (0x00007f9efbc5c000)
libelf.so.1 => /lib64/libelf.so.1 (0x00007f9efba44000)
libz.so.1 => /lib64/libz.so.1 (0x00007f9efb82e000)
libbz2.so.1 => /lib64/libbz2.so.1 (0x00007f9efb61e000)
# # ldd /usr/lib64/sssd/libsss_ldap_common.so
linux-vdso.so.1 => (0x00007ffe6650c000)
libsss_krb5_common.so => /usr/lib64/sssd/libsss_krb5_common.so
(0x00007f4722c31000)
libkeyutils.so.1 => /lib64/libkeyutils.so.1 (0x00007f4722a2d000)
libkrb5.so.3 => /lib64/libkrb5.so.3 (0x00007f4722745000)
libk5crypto.so.3 => /lib64/libk5crypto.so.3 (0x00007f4722512000)
libcom_err.so.2 => /lib64/libcom_err.so.2 (0x00007f472230e000)
libsss_idmap.so.0 => /lib64/libsss_idmap.so.0 (0x00007f4722107000)
libsss_util.so => /usr/lib64/sssd/libsss_util.so (0x00007f4721e7c000)
librt.so.1 => /lib64/librt.so.1 (0x00007f4721c74000)
libpopt.so.0 => /lib64/libpopt.so.0 (0x00007f4721a6a000)
libldb.so.1 => /lib64/libldb.so.1 (0x00007f4721839000)
libdbus-1.so.3 => /lib64/libdbus-1.so.3 (0x00007f47215e9000)
libpcre.so.1 => /lib64/libpcre.so.1 (0x00007f4721387000)
libini_config.so.3 => /lib64/libini_config.so.3 (0x00007f472116d000)
libbasicobjects.so.0 => /lib64/libbasicobjects.so.0 (0x00007f4720f6a000)
libref_array.so.1 => /lib64/libref_array.so.1 (0x00007f4720d67000)
libcollection.so.2 => /lib64/libcollection.so.2 (0x00007f4720b5a000)
liblber-2.4.so.2 => /lib64/liblber-2.4.so.2 (0x00007f472094b000)
libldap-2.4.so.2 => /lib64/libldap-2.4.so.2 (0x00007f47206f6000)
libselinux.so.1 => /lib64/libselinux.so.1 (0x00007f47204cf000)
libtdb.so.1 => /lib64/libtdb.so.1 (0x00007f47202b8000)
libglib-2.0.so.0 => /lib64/libglib-2.0.so.0 (0x00007f471ffa4000)
libsss_child.so => /usr/lib64/sssd/libsss_child.so (0x00007f471fd9e000)
libtevent.so.0 => /lib64/libtevent.so.0 (0x00007f471fb8e000)
libsss_cert.so => /usr/lib64/sssd/libsss_cert.so (0x00007f471f989000)
libsss_crypt.so => /usr/lib64/sssd/libsss_crypt.so (0x00007f471f782000)
libdhash.so.1 => /lib64/libdhash.so.1 (0x00007f471f57e000)
libsss_debug.so => /usr/lib64/sssd/libsss_debug.so (0x00007f471f379000)
libsystemd.so.0 => /lib64/libsystemd.so.0 (0x00007f471f148000)
libsss_certmap.so.0 => /lib64/libsss_certmap.so.0 (0x00007f471ef39000)
libtalloc.so.2 => /lib64/libtalloc.so.2 (0x00007f471ed29000)
libssl3.so => /lib64/libssl3.so (0x00007f471ead7000)
libsmime3.so => /lib64/libsmime3.so (0x00007f471e8b0000)
libnss3.so => /lib64/libnss3.so (0x00007f471e583000)
libnssutil3.so => /lib64/libnssutil3.so (0x00007f471e354000)
libplds4.so => /lib64/libplds4.so (0x00007f471e150000)
libplc4.so => /lib64/libplc4.so (0x00007f471df4b000)
libnspr4.so => /lib64/libnspr4.so (0x00007f471dd0d000)
libpthread.so.0 => /lib64/libpthread.so.0 (0x00007f471daf1000)
libdl.so.2 => /lib64/libdl.so.2 (0x00007f471d8ed000)
libc.so.6 => /lib64/libc.so.6 (0x00007f471d520000)
libkrb5support.so.0 => /lib64/libkrb5support.so.0 (0x00007f471d312000)
libresolv.so.2 => /lib64/libresolv.so.2 (0x00007f471d0f9000)
/lib64/ld-linux-x86-64.so.2 (0x00007f47230f0000)
libcrypt.so.1 => /lib64/libcrypt.so.1 (0x00007f471cec2000)
libpath_utils.so.1 => /lib64/libpath_utils.so.1 (0x00007f471ccbe000)
libsasl2.so.3 => /lib64/libsasl2.so.3 (0x00007f471caa1000)
libssl.so.10 => /lib64/libssl.so.10 (0x00007f471c830000)
libcrypto.so.10 => /lib64/libcrypto.so.10 (0x00007f471c3cf000)
libcap.so.2 => /lib64/libcap.so.2 (0x00007f471c1ca000)
libm.so.6 => /lib64/libm.so.6 (0x00007f471bec8000)
liblzma.so.5 => /lib64/liblzma.so.5 (0x00007f471bca2000)
liblz4.so.1 => /lib64/liblz4.so.1 (0x00007f471ba8d000)
libgcrypt.so.11 => /lib64/libgcrypt.so.11 (0x00007f471b80c000)
libgpg-error.so.0 => /lib64/libgpg-error.so.0 (0x00007f471b607000)
libdw.so.1 => /lib64/libdw.so.1 (0x00007f471b3c0000)
libgcc_s.so.1 => /lib64/libgcc_s.so.1 (0x00007f471b1aa000)
libfreebl3.so => /lib64/libfreebl3.so (0x00007f471afa7000)
libgssapi_krb5.so.2 => /lib64/libgssapi_krb5.so.2 (0x00007f471ad5a000)
libz.so.1 => /lib64/libz.so.1 (0x00007f471ab44000)
libattr.so.1 => /lib64/libattr.so.1 (0x00007f471a93f000)
libelf.so.1 => /lib64/libelf.so.1 (0x00007f471a727000)
Thanks
Amit
4 years, 6 months
PAM Authentication is returning failure when I am trying to use MFA
by MOHIT KUMAR
I have hooked one pam implementation module pam_custom.so which does multi factor authentication for a user
I am trying to use pam_get_item for otp in my internal pam pam_custom.so module with msg.style type as PAM_TEXT_INFO.
But it is failing as i am getting error message as Conversation style 3 not supported. This is breaking my existing functionality and I am not able to use sssd. Is it a limitation with sssd? Although normal username and password is authenticated successfully for which MFA is not there.
sssd.conf
--------------------[sssd]
config_file_version = 2
services = nss, pam
domains = proxy_proxy
[nss]
[pam]
[domain/proxy_proxy]
auth_provider = proxy
id_provider = proxy
proxy_lib_name = customnss
proxy_pam_target = sssdproxycustom
enumerate = false
cache_credentials = false
debug_level = 9
min_id = 500
sssdproxycustom
--------------------------
auth required pam_custom.so
account required pam_custom.so
password required pam_custom.so
session required pam_custom.so
4 years, 6 months
[sssd PR#685][opened] Hi,
by jhrozek
URL: https://github.com/SSSD/sssd/pull/685
Author: jhrozek
Title: #685: Hi,
Action: opened
PR body:
"""
this PR allows the administrator to only restart the KCM service in order
to apply changes in sssd.conf's [kcm] section.
I think this would be nice for admins, but the code feels already a bit
hackish to me. I think we should keep on working on the static files with
the read-only configuration, because then:
- we could get rid of the special case to remove the section, because
the section would always be there
- we could remove different cases for adding/replacing sections
- ..and of course the other things like config-show or running with
no config file, just snippets
I also didn't enable this functionality for the other responders. I don't
know if it makes sense without more testing and in general I don't think
there are too many users of socket activated responders except kcm.
"""
To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/685/head:pr685
git checkout pr685
4 years, 7 months
[sssd PR#691][opened] CI: Make the c-ares suppression file more relaxed to prevent failures on Debian
by jhrozek
URL: https://github.com/SSSD/sssd/pull/691
Author: jhrozek
Title: #691: CI: Make the c-ares suppression file more relaxed to prevent failures on Debian
Action: opened
PR body:
"""
Prevents tests running under valgrind from failing with:
==9189== 2 bytes in 1 blocks are possibly lost in loss record 1 of 195
==9189== at 0x48357BF: malloc (in
/usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==9189== by 0x60C7EF9: strdup (strdup.c:42)
==9189== by 0x6E6C0EE: ares_init_options (in
/usr/lib/x86_64-linux-gnu/libcares.so.2.2.0)
==9189== by 0x5F96674: recreate_ares_channel (async_resolv.c:430)
==9189== by 0x5F967D6: resolv_init (async_resolv.c:471)
==9189== by 0x5F83147: be_res_init (data_provider_fo.c:884)
==9189== by 0x5F83147: be_res_init (data_provider_fo.c:865)
==9189== by 0x5F832B8: be_init_failover (data_provider_fo.c:70)
==9189== by 0x127876: test_ipa_server_create_trusts_setup
(test_ipa_subdomains_server.c:311)
==9189== by 0x48541E2: ??? (in
/usr/lib/x86_64-linux-gnu/libcmocka.so.0.5.1)
==9189== by 0x4854A16: _cmocka_run_group_tests (in
/usr/lib/x86_64-linux-gnu/libcmocka.so.0.5.1)
==9189== by 0x1146CC: main (test_ipa_subdomains_server.c:999)
The failure is expected as the tests fork but the child processes never
clean up after themselves.
"""
To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/691/head:pr691
git checkout pr691
4 years, 7 months
[sssd PR#688][opened] Allow non-privileged sssd user connect to private dbus
by stanislavlevin
URL: https://github.com/SSSD/sssd/pull/688
Author: stanislavlevin
Title: #688: Allow non-privileged sssd user connect to private dbus
Action: opened
PR body:
"""
During startup SSSD monitor launches the children and stands on
a private dbus to waiting for a reply from them. But by default
dbus auth rules connection is allowed if the client is root or
has the same UID or anonymous is allowed. The forked children drop
their root privileges in favor of non-privileged user (e.g sssd).
In such a case there is no access to the monitor dbus connection
to say: "Hey, i'm here.". Thus, sssd service becomes
failed.
This patch changes the default dbus authorization rules for a
private connections to allow incomings from root or sssd user.
Fixes: https://pagure.io/SSSD/sssd/issue/3871
"""
To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/688/head:pr688
git checkout pr688
4 years, 7 months