https://bugzilla.redhat.com/show_bug.cgi?id=2260445
Bug ID: 2260445 Summary: how to set up proxy provider for local smart card authentication? Product: Fedora Version: rawhide URL: https://artifacts.dev.testing-farm.io/64496df8-0c7b-44 54-9349-dc22f69f4a24/ OS: Linux Status: NEW Component: sssd Keywords: Regression Severity: high Assignee: sssd-maintainers@lists.fedoraproject.org Reporter: mpitt@redhat.com QA Contact: extras-qa@fedoraproject.org CC: abokovoy@redhat.com, atikhono@redhat.com, lslebodn@redhat.com, mzidek@redhat.com, pbrezina@redhat.com, sbose@redhat.com, ssorce@redhat.com, sssd-maintainers@lists.fedoraproject.org Target Milestone: --- Classification: Fedora
The recent sssd-2.9.4-3.fc40.x86_64 rawhide update [1] disabled the "files" provider [2]. The Fedora changes page [3] promised "some document on sssd.io" that explains the migration, but I didn't find anything. We are using this to test cockpit smartcard authentication [4] with certmap (we also have a full FreeIPA integration test case, but that can't run on Testing Farm for distro gating), which now stopped working:
---------------- 8< ----------------- [sssd] domains = local
[domain/local] id_provider = files
[certmap/local/alice] # Requires sssd >= 2.6.1 and installing sssd_auth_ca_db.pem; with earlier sssd this is completely unsafe matchrule = <SUBJECT>^DC=LAN,DC=COCKPIT,CN=alice$ ---------------- 8< -----------------
I checked various resources [5][6][7][8], but they provide either very little, or contradicting information (id_provider vs. auth_provider, etc.). I tried with
[domain/local] id_provider = proxy auth_provider = proxy proxy_lib_name = files
and various combinations, but in all cases sssd.service fails to start up:
Jan 26 09:22:48 fedora-rawhide-127-0-0-2-2201 sssd_be[5357]: Starting up Jan 26 09:22:48 fedora-rawhide-127-0-0-2-2201 sssd[5353]: Exiting the SSSD. Could not restart critical service [local].
and /var/log/sssd/sssd_local.log essentially says
Unable to load target [id] [80]: Accessing a corrupted shared library.
I attach the full log for reference.
[1] https://bodhi.fedoraproject.org/updates/FEDORA-2024-6d3f839766 [2] https://bugzilla.redhat.com/show_bug.cgi?id=2253183 [3] https://fedoraproject.org/wiki/Changes/SSSDRemoveFilesProvider [4] https://github.com/cockpit-project/cockpit/blob/4021b8a60237076bdde01183a51e... [5] https://access.redhat.com/documentation/de-de/red_hat_enterprise_linux/7/htm... [6] https://github.com/SSSD/sssd/releases/tag/2.9.0 [7] https://sssd.io/release-notes/sssd-2.9.3.html [8] https://manpages.ubuntu.com/manpages/jammy/en/man5/sssd.conf.5.html
Reproducible: Always
Steps to Reproduce: see above