On Tue, Feb 07, 2012 at 11:04:53AM +0100, Marco Pizzoli wrote:
Hi Jakub,
On Tue, Feb 7, 2012 at 10:58 AM, Jakub Hrozek jhrozek@redhat.com wrote:
On Tue, Feb 07, 2012 at 10:48:59AM +0100, Marco Pizzoli wrote: > Hi John, > > On Tue, Feb 7, 2012 at 10:42 AM, John Hodrien <J.H.Hodrien@leeds.ac.uk> > wrote: > > On Tue, 7 Feb 2012, Marco Pizzoli wrote: > > Hi, > I'm using sssd-1.7.0-5.fc16.x86_64 and during my sssd startup I see > this output: > > [cut] > (Tue Feb 7 10:25:16 2012) [sssd] [mark_service_as_started] (0x0100): > Now starting services! > (Tue Feb 7 10:25:16 2012) [sssd] [start_service] (0x0100): Queueing > service nss for startup > (Tue Feb 7 10:25:16 2012) [sssd] [start_service] (0x0100): Queueing > service pam for startup > (Tue Feb 7 10:25:16 2012) [sssd[be[my_ldap]]] [sbus_toggle_watch] > (0x4000): 0x7f0043097590/0x7f004309c2a0 (17), -/W (disabled) > (Tue Feb 7 10:25:16 2012) [sssd[be[my_ldap]]] [sbus_remove_timeout] > (0x2000): 0x7f004309a510 > (Tue Feb 7 10:25:16 2012) [sssd[be[my_ldap]]] [sbus_dispatch] > (0x4000): dbus conn: 7F0043099BF0 > (Tue Feb 7 10:25:16 2012) [sssd[be[my_ldap]]] [sbus_dispatch] > (0x4000): Dispatching. > (Tue Feb 7 10:25:16 2012) [sssd[be[my_ldap]]] [id_callback] (0x0100): > Got id ack and version (1) from Monitor > (Tue Feb 7 10:25:16 2012) [sssd] [service_startup_handler] (0x0010): > Could not exec sssd_nss, reason: No such file or directory > (Tue Feb 7 10:25:16 2012) [sssd] [service_startup_handler] (0x0010): > (Tue Feb 7 10:25:16 2012) [sssd] [mt_svc_exit_handler] (0x0040): > Child [nss] exited with code [1] > (Tue Feb 7 10:25:16 2012) [sssd] [start_service] (0x0100): Could not > exec sssd_pam, reason: No such file or directory > Queueing service nss for startup > (Tue Feb 7 10:25:16 2012) [sssd] [service_startup_handler] (0x0010): > (Tue Feb 7 10:25:16 2012) [sssd] [mt_svc_exit_handler] (0x0040): > Child [pam] exited with code [1] > (Tue Feb 7 10:25:16 2012) [sssd] [start_service] (0x0100): Could not > exec sssd_nss, reason: No such file or directory > Queueing service pam for startup > (Tue Feb 7 10:25:16 2012) [sssd] [service_startup_handler] (0x0010): > (Tue Feb 7 10:25:16 2012) [sssd] [mt_svc_exit_handler] (0x0040): > Child [nss] exited with code [1] > (Tue Feb 7 10:25:16 2012) [sssd] [start_service] (0x0100): Queueing > service nss for startup > Could not exec sssd_pam, reason: No such file or directory > (Tue Feb 7 10:25:16 2012) [sssd] [service_startup_handler] (0x0010): > (Tue Feb 7 10:25:16 2012) [sssd] [mt_svc_exit_handler] (0x0040): > Could not exec sssd_nss, reason: No such file or directory > Child [pam] exited with code [1] > (Tue Feb 7 10:25:16 2012) [sssd] [start_service] (0x0100): Queueing > service pam for startup > (Tue Feb 7 10:25:16 2012) [sssd] [mt_svc_exit_handler] (0x0040): > Child [nss] exited with code [1] > (Tue Feb 7 10:25:16 2012) [sssd] [start_service] (0x0100): Queueing > service nss for startup > (Tue Feb 7 10:25:16 2012) [sssd] [service_startup_handler] (0x0010): > Could not exec sssd_pam, reason: No such file or directory > (Tue Feb 7 10:25:16 2012) [sssd] [mt_svc_exit_handler] (0x0040): > Child [pam] exited with code [1] > (Tue Feb 7 10:25:16 2012) [sssd] [start_service] (0x0100): Queueing > service pam for startup > (Tue Feb 7 10:25:16 2012) [sssd] [service_startup_handler] (0x0010): > Could not exec sssd_nss, reason: No such file or directory > (Tue Feb 7 10:25:16 2012) [sssd] [mt_svc_exit_handler] (0x0040): > Child [nss] exited with code [1] > (Tue Feb 7 10:25:16 2012) [sssd] [mt_svc_exit_handler] (0x0010): > Process [nss], definitely stopped! > (Tue Feb 7 10:25:16 2012) [sssd] [service_startup_handler] (0x0010): > Could not exec sssd_pam, reason: No such file or directory > (Tue Feb 7 10:25:16 2012) [sssd] [mt_svc_exit_handler] (0x0040): > Child [pam] exited with code [1] > (Tue Feb 7 10:25:16 2012) [sssd] [mt_svc_exit_handler] (0x0010): > Process [pam], definitely stopped! > [cut] > > [root@fedora16 sssd]# locate sssd_pam > /usr/lib/debug/usr/libexec/sssd/sssd_pam.debug > /usr/libexec/sssd/sssd_pam > > [root@fedora16 sssd]# locate sssd_nss > /usr/lib/debug/usr/libexec/sssd/sssd_nss.debug > /usr/libexec/sssd/sssd_nss > > Could you help me in finding the problem? > > AVC denials listed in /var/log/audit/audit.log? SELinux was my first > thought > looking at this. > > If you do: > > setenforce 0 > service sssd restart > > Does it work then? If not, it's something else ;) > > [root@fedora16 sssd]# getenforce > Disabled > > > > stracing the sssd process could give you a pointer as to exactly what > it's > trying to do that's failing, in case it's looking in the wrong place or > something. > > Thanks to pointing me to this. Found the problem. > [pid 1853] execve("/usr/local/bin/sssd_pam", ["sssd_pam"], [/* 26 vars > */]) = -1 ENOENT (No such file or directory) This ^^ is wrong. Did you build the package yourself or is this an offictial one? Does your sssd.conf use the "command" parameter?This is the rpm Stephen asked me to try last week.
Yes, I used the command parameter on both cases. It has been a fault? I was only trying expliciting default parameters.
This is a manpage bug.
The manpage says the default is sssd_${service}, but it's in fact ${libexec}/sssd_${service} which expands to absolute path pointing to /usr/libexec/sssd/sssd_${service} by default.
When you specified a relative command name, execvp() probably tried to execute the command somewhere in $PATH and failed.
We should either remove the command parameter altogether or at least fix the default.
Thanks, this is tracked in https://fedorahosted.org/sssd/ticket/1174 now.
Removing the command parameter will make the sssd work.
[nss] description = NSS Responder Configuration enum_cache_timeout = 120 entry_cache_nowait_percentage = 50 entry_negative_timeout = 15 filter_groups = root filter_users = root filter_users_in_groups = true #override_homedir = /home/%u #allowed_shells = bash #vetoed_shells = csh #shell_fallback = /bin/sh
debug-level = 0x03B0 debug_timestamps = true debug_microseconds = true reconnection_retries = 3 command = sssd_nss
[pam] description = PAM Responder Configuration offline_credentials_expiration = 0 offline_failed_login_attempts = 0 offline_failed_login_delay = 5 pam_verbosity = 1 pam_id_timeout = 5 pam_pwd_expiration_warning = 7
debug-level = 0x03B0 debug_timestamps = true debug_microseconds = true reconnection_retries = 3 command = sssd_pam