https://bugzilla.redhat.com/show_bug.cgi?id=2260445
Bug ID: 2260445
Summary: how to set up proxy provider for local smart card
authentication?
Product: Fedora
Version: rawhide
URL:
https://artifacts.dev.testing-farm.io/64496df8-0c7b-44
54-9349-dc22f69f4a24/
OS: Linux
Status: NEW
Component: sssd
Keywords: Regression
Severity: high
Assignee: sssd-maintainers(a)lists.fedoraproject.org
Reporter: mpitt(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: abokovoy(a)redhat.com, atikhono(a)redhat.com,
lslebodn(a)redhat.com, mzidek(a)redhat.com,
pbrezina(a)redhat.com, sbose(a)redhat.com,
ssorce(a)redhat.com,
sssd-maintainers(a)lists.fedoraproject.org
Target Milestone: ---
Classification: Fedora
The recent sssd-2.9.4-3.fc40.x86_64 rawhide update [1] disabled the "files"
provider [2]. The Fedora changes page [3] promised "some document on sssd.io"
that explains the migration, but I didn't find anything. We are using this to
test cockpit smartcard authentication [4] with certmap (we also have a full
FreeIPA integration test case, but that can't run on Testing Farm for distro
gating), which now stopped working:
---------------- 8< -----------------
[sssd]
domains = local
[domain/local]
id_provider = files
[certmap/local/alice]
# Requires sssd >= 2.6.1 and installing sssd_auth_ca_db.pem; with earlier sssd
this is completely unsafe
matchrule = <SUBJECT>^DC=LAN,DC=COCKPIT,CN=alice$
---------------- 8< -----------------
I checked various resources [5][6][7][8], but they provide either very little,
or contradicting information (id_provider vs. auth_provider, etc.). I tried
with
[domain/local]
id_provider = proxy
auth_provider = proxy
proxy_lib_name = files
and various combinations, but in all cases sssd.service fails to start up:
Jan 26 09:22:48 fedora-rawhide-127-0-0-2-2201 sssd_be[5357]: Starting up
Jan 26 09:22:48 fedora-rawhide-127-0-0-2-2201 sssd[5353]: Exiting the SSSD.
Could not restart critical service [local].
and /var/log/sssd/sssd_local.log essentially says
Unable to load target [id] [80]: Accessing a corrupted shared library.
I attach the full log for reference.
[1]
https://bodhi.fedoraproject.org/updates/FEDORA-2024-6d3f839766
[2]
https://bugzilla.redhat.com/show_bug.cgi?id=2253183
[3]
https://fedoraproject.org/wiki/Changes/SSSDRemoveFilesProvider
[4]
https://github.com/cockpit-project/cockpit/blob/4021b8a60237076bdde01183a...
[5]
https://access.redhat.com/documentation/de-de/red_hat_enterprise_linux/7/...
[6]
https://github.com/SSSD/sssd/releases/tag/2.9.0
[7]
https://sssd.io/release-notes/sssd-2.9.3.html
[8]
https://manpages.ubuntu.com/manpages/jammy/en/man5/sssd.conf.5.html
Reproducible: Always
Steps to Reproduce:
see above
--
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2260445
Report this comment as SPAM:
https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=rep...