No, it is not a typo, 'alongina' is my local account - sorry , I should cut it off from the log ;(
Domain user is longina@n.c.domain
I use following option to turn off gpo : .... ad_gpo_access_control = permissive pam_public_domains = all selinux_provider = none ....
Is it not enough?
Best Longina
-----Oprindelig meddelelse----- Fra: Lukas Slebodnik [mailto:lslebodn@redhat.com] Sendt: 21. november 2016 10:11 Til: End-user discussions about the System Security Services Daemon Emne: [SSSD-users] Re: sssd-13.4 can't login
On (21/11/16 09:01), Longina Przybyszewska wrote:
Thank you for the response. The problems with login started after upgrades -this is Ubuntu Xenial . In the meantime I debugged PAM. I will look now in domain log
I attach sssd.conf and the sequence for 'longina' login from sssd-pam.log Could it be that the problem is generated by lightdm / PAM? It seems that there is something wrong in the very last step of the login
sequence.
cat common-session |grep -v ^#
session [default=1] pam_permit.so session requisite pam_deny.so session required pam_permit.so session optional pam_umask.so session required pam_unix.so session optional pam_sss.so session optional pam_mount.so session optional pam_systemd.so
cat lightdm |grep -v ^#
auth requisite pam_nologin.so auth sufficient pam_succeed_if.so user ingroup nopasswdlogin @include common-auth auth optional pam_gnome_keyring.so auth optional pam_kwallet.so auth optional pam_kwallet5.so @include common-account session [success=ok ignore=ignore module_unknown=ignore default=bad]
pam_selinux.so close
session required pam_limits.so @include common-session session [success=ok ignore=ignore module_unknown=ignore default=bad]
pam_selinux.so open
session optional pam_gnome_keyring.so auto_start session optional pam_kwallet.so auto_start session optional pam_kwallet5.so auto_start session required pam_env.so readenv=1 session required pam_env.so readenv=1 user_readenv=1
envfile=/etc/default/locale
@include common-password
Best, Longina
-----Oprindelig meddelelse----- Fra: Jakub Hrozek [mailto:jhrozek@redhat.com] Sendt: 17. november 2016 09:25 Til: sssd-users@lists.fedorahosted.org Emne: [SSSD-users] Re: sssd-13.4 can't login
On Wed, Nov 09, 2016 at 02:45:56PM +0000, Longina Przybyszewska
wrote:
Hi again, I still hang on that problem. Client and server are configured in AD trust realm environment. Client and server are joind to a.c.domain; User is from n.c.domain.
During login sequence NFS-share (sec=krb5) homedir is mounted with
right nfsidmapping .
User can't login because of access denied to the homedir.
If I change mount parameter to sec=sys, user can successfully login.
Machine's and user's credentials *are* valid ;
== Ticket cache: FILE:/tmp/krb5cc_332405654_B4r6Sy Default principal: longina@N.C.DOMAIN
Valid starting Expires Service principal 11/09/2016 15:00:43 11/10/2016 01:00:43
krbtgt/N.C.DOMAIN@N.C.DOMAIN
renew until 11/10/2016 01:00:4311/09/2016 15:00:45 11/10/2016 01:00:43
krbtgt/C.SDU.DK@N.C.DOMAIN
renew until 11/10/2016 01:00:4311/09/2016 15:00:45 11/10/2016 01:00:43 nfs/adm-lptest.a.c.domain@ renew until 11/10/2016 01:00:43 11/09/2016 15:00:45 11/10/2016 01:00:43 nfs/adm-
lptest.a.c.domain@A.C.DOMAIN
renew until 11/10/2016 01:00:43 == Kerberos sequence forlogin ends with (krb5_child.log) :
==[sss_get_ccache_name_for_principal] (0x2000):
krb5_cc_cache_match
failed: [-1765328243][Can't find client principal longina@N.C.DOMAIN in cache collection]=
You can ignore this, since you are using the FILE: ccache which is doesn't support collections, this error is harmless.
It looks like the krb5_child itself finished fine, according to:
(Wed Nov 9 15:00:44 2016) [[sssd[krb5_child[1563]]]] [k5c_send_data]
(0x0200): Received error code 0
(Wed Nov 9 15:00:44 2016) [[sssd[krb5_child[1563]]]]
[pack_response_packet] (0x2000): response packet size: [142]
(Wed Nov 9 15:00:44 2016) [[sssd[krb5_child[1563]]]] [k5c_send_data]
(0x4000): Response sent.
(Wed Nov 9 15:00:44 2016) [[sssd[krb5_child[1563]]]] [main] (0x0400):
krb5_child completed successfully
So I would suggest to look into the domain logs as well. Chances are some other part (maybe the access control later?) is failing. _______________________________________________ sssd-users mailing list -- sssd-users@lists.fedorahosted.org To unsubscribe send an email to sssd-users-leave@lists.fedorahosted.org
(Thu Nov 17 11:30:05 2016) [sssd[pam]] [pam_cmd_acct_mgmt] (0x0100): entering pam_cmd_acct_mgmt (Thu Nov 17 11:30:05 2016) [sssd[pam]] [sss_parse_name_for_domains] (0x0200): name 'longina@n.c.domain' matched expression for domain 'n.c.domain', user is longina (Thu Nov 17 11:30:05 2016) [sssd[pam]] [pam_print_data] (0x0100): command: SSS_PAM_ACCT_MGMT (Thu Nov 17 11:30:05 2016) [sssd[pam]] [pam_print_data] (0x0100): domain: n.c.domain (Thu Nov 17 11:30:05 2016) [sssd[pam]] [pam_print_data] (0x0100): user: longina (Thu Nov 17 11:30:05 2016) [sssd[pam]] [pam_print_data] (0x0100): service: su (Thu Nov 17 11:30:05 2016) [sssd[pam]] [pam_print_data] (0x0100): tty: /dev/pts/19 (Thu Nov 17 11:30:05 2016) [sssd[pam]] [pam_print_data] (0x0100): ruser: root (Thu Nov 17 11:30:05 2016) [sssd[pam]] [pam_print_data] (0x0100): rhost: not set (Thu Nov 17 11:30:05 2016) [sssd[pam]] [pam_print_data] (0x0100): authtok type: 0 (Thu Nov 17 11:30:05 2016) [sssd[pam]] [pam_print_data] (0x0100): newauthtok type: 0 (Thu Nov 17 11:30:05 2016) [sssd[pam]] [pam_print_data] (0x0100): priv: 1
(Thu Nov 17 11:30:05 2016) [sssd[pam]] [pam_print_data] (0x0100): cli_pid: 6611 (Thu Nov 17 11:30:05 2016) [sssd[pam]] [pam_print_data] (0x0100): logon name: longina@n.c.domain (Thu Nov 17 11:30:05 2016) [sssd[pam]] [sss_ncache_check_str] (0x2000): Checking negative cache for [NCE/USER/n.c.domain/longina] (Thu Nov 17 11:30:05 2016) [sssd[pam]] [pam_initgr_check_timeout] (0x4000): User [longina@n.c.domain] not found in PAM cache.
(Thu Nov 17 11:30:05 2016) [sssd[pam]] [sss_dp_issue_request] (0x0400): Issuing request for [0x410090:3:longina@n.c.domain] (Thu Nov 17 11:30:05 2016) [sssd[pam]] [sss_dp_get_account_msg] (0x0400): Creating request for [n.c.domain][0x3][BE_REQ_INITGROUPS][1][name=longina] (Thu Nov 17 11:30:05 2016) [sssd[pam]] [sbus_add_timeout] (0x2000): 0x1fcbd80 (Thu Nov 17 11:30:05 2016) [sssd[pam]] [sss_dp_internal_get_send] (0x0400): Entering request [0x410090:3:longina@n.c.domain] (Thu Nov 17 11:30:05 2016) [sssd[pam]] [sbus_remove_timeout] (0x2000): 0x1fcbd80 (Thu Nov 17 11:30:05 2016)
[sssd[pam]] [sbus_dispatch] (0x4000): dbus conn: 0x1fcc1e0 (Thu Nov 17 11:30:05 2016) [sssd[pam]] [sbus_dispatch] (0x4000): Dispatching.
(Thu Nov 17 11:30:05 2016) [sssd[pam]] [sss_dp_get_reply] (0x1000): Got reply from Data Provider - DP error code: 0 errno: 0 error message: Success (Thu Nov 17 11:30:05 2016) [sssd[pam]] [pam_check_user_search] (0x0100): Requesting info for [longina@n.c.domain] (Thu Nov 17 11:30:05 2016) [sssd[pam]] [ldb] (0x4000): Added timed event "ltdb_callback": 0x1fd4570
(Thu Nov 17 11:30:05 2016) [sssd[pam]] [ldb] (0x4000): Added timed event "ltdb_timeout": 0x1fd4630
(Thu Nov 17 11:30:05 2016) [sssd[pam]] [ldb] (0x4000): Running timer event
0x1fd4570 "ltdb_callback"
(Thu Nov 17 11:30:05 2016) [sssd[pam]] [ldb] (0x4000): Destroying timer
event 0x1fd4630 "ltdb_timeout"
(Thu Nov 17 11:30:05 2016) [sssd[pam]] [ldb] (0x4000): Ending timer event
0x1fd4570 "ltdb_callback"
(Thu Nov 17 11:30:05 2016) [sssd[pam]] [pam_check_user_search] (0x0400): Returning info for user [longina@n.c.domain] (Thu Nov 17 11:30:05 2016) [sssd[pam]] [pd_set_primary_name] (0x0400): User's primary name is longina@n.c.domain (Thu Nov 17 11:30:05 2016)
[sssd[pam]] [pam_initgr_cache_set] (0x2000): [longina@n.c.domain] added to PAM initgroup cache (Thu Nov 17 11:30:05 2016) [sssd[pam]] [pam_dp_send_req] (0x0100): Sending request with the following data:
(Thu Nov 17 11:30:05 2016) [sssd[pam]] [pam_print_data] (0x0100): command: SSS_PAM_ACCT_MGMT (Thu Nov 17 11:30:05 2016) [sssd[pam]] [pam_print_data] (0x0100): domain: n.c.domain (Thu Nov 17 11:30:05 2016) [sssd[pam]] [pam_print_data] (0x0100): user: longina@n.c.domain (Thu Nov 17 11:30:05 2016) [sssd[pam]] [pam_print_data] (0x0100): service: su (Thu Nov 17 11:30:05 2016) [sssd[pam]] [pam_print_data] (0x0100): tty: /dev/pts/19 (Thu Nov 17 11:30:05 2016) [sssd[pam]] [pam_print_data] (0x0100): ruser: root (Thu Nov 17 11:30:05 2016) [sssd[pam]] [pam_print_data] (0x0100): rhost: not set (Thu Nov 17 11:30:05 2016) [sssd[pam]] [pam_print_data] (0x0100): authtok type: 0 (Thu Nov 17 11:30:05 2016) [sssd[pam]] [pam_print_data] (0x0100): newauthtok type: 0 (Thu Nov 17 11:30:05 2016) [sssd[pam]] [pam_print_data] (0x0100): priv: 1 (Thu Nov 17 11:30:05 2016) [sssd[pam]] [pam_print_data] (0x0100): cli_pid: 6611 (Thu Nov 17 11:30:05 2016) [sssd[pam]] [pam_print_data] (0x0100): logon name: longina@n.c.domain (Thu Nov 17 11:30:05 2016) [sssd[pam]] [sbus_add_timeout] (0x2000): 0x1fcd6d0 (Thu Nov 17 11:30:05 2016) [sssd[pam]] [pam_dom_forwarder] (0x0100): pam_dp_send_req returned
0 (Thu Nov 17 11:30:05 2016) [sssd[pam]] [sss_dp_req_destructor] (0x0400): Deleting request: [0x410090:3:longina@n.c.domain] (Thu Nov 17 11:30:06 2016) [sssd[pam]] [sbus_remove_timeout] (0x2000): 0x1fcd6d0 (Thu Nov 17 11:30:06 2016) [sssd[pam]] [sbus_dispatch] (0x4000): dbus conn: 0x1fcc1e0 (Thu Nov 17 11:30:06 2016) [sssd[pam]] [sbus_dispatch] (0x4000): Dispatching.
(Thu Nov 17 11:30:06 2016) [sssd[pam]] [pam_dp_process_reply] (0x0200): received: [0 (Success)][n.c.domain] (Thu Nov 17 11:30:06 2016) [sssd[pam]]
[pam_reply] (0x0200): pam_reply called with result [0]: Success.
(Thu Nov 17 11:30:06 2016) [sssd[pam]] [pam_reply] (0x0200): blen: 29 (Thu Nov 17 11:30:06 2016) [sssd[pam]] [reset_idle_timer] (0x4000): Idle timer re-set for client [0x1fd3fc0][19] (Thu Nov 17 11:30:06 2016) [sssd[pam]] [reset_idle_timer] (0x4000): Idle timer re-set for client [0x1fd3fc0][19] (Thu Nov 17 11:30:06 2016) [sssd[pam]] [pam_cmd_open_session] (0x0100): entering pam_cmd_open_session
(Thu Nov
17 11:30:06 2016) [sssd[pam]] [sss_parse_name_for_domains] (0x0200): name 'longina@n.c.domain' matched expression for domain 'n.c.domain', user is longina (Thu Nov 17 11:30:06 2016) [sssd[pam]] [pam_print_data] (0x0100): command: SSS_PAM_OPEN_SESSION (Thu Nov 17 11:30:06 2016) [sssd[pam]] [pam_print_data] (0x0100): domain: n.c.domain (Thu Nov 17 11:30:06 2016) [sssd[pam]] [pam_print_data] (0x0100): user: longina (Thu Nov 17 11:30:06 2016) [sssd[pam]] [pam_print_data] (0x0100): service: su (Thu Nov 17 11:30:06 2016) [sssd[pam]] [pam_print_data] (0x0100): tty: /dev/pts/19 (Thu Nov 17 11:30:06 2016) [sssd[pam]] [pam_print_data] (0x0100): ruser: root (Thu Nov 17 11:30:06 2016) [sssd[pam]] [pam_print_data] (0x0100): rhost: not set (Thu Nov 17 11:30:06 2016) [sssd[pam]] [pam_print_data] (0x0100): authtok type: 0 (Thu Nov 17 11:30:06 2016) [sssd[pam]] [pam_print_data] (0x0100):
newauthtok type: 0 (Thu Nov 17 11:30:06 2016) [sssd[pam]] [pam_print_data] (0x0100): priv: 1 (Thu Nov 17 11:30:06 2016) [sssd[pam]] [pam_print_data] (0x0100): cli_pid: 6611 (Thu Nov 17 11:30:06 2016) [sssd[pam]] [pam_print_data] (0x0100): logon name: longina@n.c.domain (Thu Nov 17 11:30:06 2016) [sssd[pam]] [sss_ncache_check_str] (0x2000): Checking negative cache for [NCE/USER/n.c.domain/longina] (Thu Nov 17 11:30:06 2016) [sssd[pam]] [pam_initgr_check_timeout] (0x2000): User [longina@n.c.domain] found in PAM cache.
(Thu Nov 17 11:30:06 2016) [sssd[pam]] [pam_check_user_search] (0x0100): Requesting info for [longina@n.c.domain] (Thu Nov 17 11:30:06 2016) [sssd[pam]] [ldb] (0x4000): Added timed event "ltdb_callback": 0x1fd07d0
(Thu Nov 17 11:30:06 2016) [sssd[pam]] [ldb] (0x4000): Added timed event "ltdb_timeout": 0x1fd0890
(Thu Nov 17 11:30:06 2016) [sssd[pam]] [ldb] (0x4000): Running timer event
0x1fd07d0 "ltdb_callback"
(Thu Nov 17 11:30:06 2016) [sssd[pam]] [ldb] (0x4000): Destroying timer
event 0x1fd0890 "ltdb_timeout"
(Thu Nov 17 11:30:06 2016) [sssd[pam]] [ldb] (0x4000): Ending timer event
0x1fd07d0 "ltdb_callback"
(Thu Nov 17 11:30:06 2016) [sssd[pam]] [pam_check_user_search] (0x0400): Returning info for user [longina@n.c.domain] (Thu Nov 17 11:30:06 2016) [sssd[pam]] [pd_set_primary_name] (0x0400): User's
primary name is longina@n.c.domain (Thu Nov 17 11:30:06 2016) [sssd[pam]] [pam_dp_send_req] (0x0100): Sending request with the following data:
(Thu Nov 17 11:30:06 2016) [sssd[pam]] [pam_print_data] (0x0100): command: SSS_PAM_OPEN_SESSION (Thu Nov 17 11:30:06 2016)
[sssd[pam]]
[pam_print_data] (0x0100): domain: n.c.domain (Thu Nov 17 11:30:06 2016) [sssd[pam]] [pam_print_data] (0x0100): user: longina@n.c.domain (Thu Nov 17 11:30:06 2016) [sssd[pam]] [pam_print_data] (0x0100): service: su (Thu Nov 17 11:30:06 2016) [sssd[pam]] [pam_print_data] (0x0100): tty: /dev/pts/19 (Thu Nov 17 11:30:06 2016) [sssd[pam]] [pam_print_data] (0x0100): ruser: root (Thu Nov 17 11:30:06 2016) [sssd[pam]] [pam_print_data] (0x0100): rhost: not set (Thu Nov 17 11:30:06 2016) [sssd[pam]] [pam_print_data] (0x0100): authtok type: 0 (Thu Nov 17 11:30:06 2016) [sssd[pam]] [pam_print_data] (0x0100): newauthtok type: 0 (Thu Nov 17 11:30:06 2016) [sssd[pam]] [pam_print_data] (0x0100): priv: 1 (Thu Nov 17 11:30:06 2016) [sssd[pam]] [pam_print_data] (0x0100): cli_pid: 6611 (Thu Nov 17 11:30:06 2016) [sssd[pam]] [pam_print_data] (0x0100): logon name: longina@n.c.domain (Thu Nov 17 11:30:06 2016) [sssd[pam]] [sbus_add_timeout] (0x2000): 0x1fcd640 (Thu Nov 17 11:30:06 2016)
[sssd[pam]] [pam_dom_forwarder] (0x0100): pam_dp_send_req returned 0 (Thu Nov 17 11:30:06 2016) [sssd[pam]] [sbus_remove_timeout] (0x2000): 0x1fcd640 (Thu Nov 17 11:30:06 2016) [sssd[pam]] [sbus_dispatch] (0x4000): dbus conn: 0x1fcc1e0 (Thu Nov 17 11:30:06 2016) [sssd[pam]] [sbus_dispatch] (0x4000): Dispatching.
(Thu Nov 17 11:30:06 2016) [sssd[pam]] [pam_dp_process_reply] (0x0200): received: [0 (Success)][n.c.domain] (Thu Nov 17 11:30:06 2016) [sssd[pam]]
[pam_reply] (0x0200): pam_reply called with result [0]: Success.
(Thu Nov 17 11:30:06 2016) [sssd[pam]] [pam_reply] (0x0200): blen: 29 (Thu Nov 17 11:30:06 2016) [sssd[pam]] [reset_idle_timer] (0x4000): Idle timer re-set for client [0x1fd3fc0][19] (Thu Nov 17 11:30:10 2016) [sssd[pam]] [pam_initgr_cache_remove] (0x2000): [longina@n.c.domain] removed from PAM initgroup cache (Thu Nov 17 11:30:12 2016) [sssd[pam]]
[sbus_dispatch] (0x4000): dbus conn: 0x1fcfa30 (Thu Nov 17 11:30:12 2016) [sssd[pam]] [sbus_dispatch] (0x4000): Dispatching.
(Thu Nov 17 11:30:12 2016) [sssd[pam]] [sbus_message_handler] (0x2000): Received SBUS method org.freedesktop.sssd.service.ping on path /org/freedesktop/sssd/service (Thu Nov 17 11:30:12 2016) [sssd[pam]] [sbus_get_sender_id_send] (0x2000): Not a sysbus message, quit (Thu Nov
17 11:30:22 2016) [sssd[pam]] [sbus_dispatch] (0x4000): dbus conn: 0x1fcfa30 (Thu Nov 17 11:30:22 2016) [sssd[pam]] [sbus_dispatch] (0x4000): Dispatching.
(Thu Nov 17 11:30:22 2016) [sssd[pam]] [sbus_message_handler] (0x2000): Received SBUS method org.freedesktop.sssd.service.ping on path /org/freedesktop/sssd/service (Thu Nov 17 11:30:22 2016) [sssd[pam]] [sbus_get_sender_id_send] (0x2000): Not a sysbus message, quit (Thu Nov
17 11:30:32 2016) [sssd[pam]] [sbus_dispatch] (0x4000): dbus conn: 0x1fcfa30 (Thu Nov 17 11:30:32 2016) [sssd[pam]] [sbus_dispatch] (0x4000): Dispatching.
(Thu Nov 17 11:30:32 2016) [sssd[pam]] [sbus_message_handler] (0x2000): Received SBUS method org.freedesktop.sssd.service.ping on path /org/freedesktop/sssd/service (Thu Nov 17 11:30:32 2016) [sssd[pam]] [sbus_get_sender_id_send] (0x2000): Not a sysbus message, quit (Thu Nov
17 11:30:42 2016) [sssd[pam]] [sbus_dispatch] (0x4000): dbus conn: 0x1fcfa30 (Thu Nov 17 11:30:42 2016) [sssd[pam]] [sbus_dispatch] (0x4000): Dispatching.
(Thu Nov 17 11:30:42 2016) [sssd[pam]] [sbus_message_handler] (0x2000): Received SBUS method org.freedesktop.sssd.service.ping on path /org/freedesktop/sssd/service (Thu Nov 17 11:30:42 2016) [sssd[pam]] [sbus_get_sender_id_send] (0x2000): Not a sysbus message, quit (Thu Nov
17 11:30:52 2016) [sssd[pam]] [sbus_dispatch] (0x4000): dbus conn: 0x1fcfa30 (Thu Nov 17 11:30:52 2016) [sssd[pam]] [sbus_dispatch] (0x4000): Dispatching.
(Thu Nov 17 11:30:52 2016) [sssd[pam]] [sbus_message_handler] (0x2000): Received SBUS method org.freedesktop.sssd.service.ping on path /org/freedesktop/sssd/service (Thu Nov 17 11:30:52 2016) [sssd[pam]] [sbus_get_sender_id_send] (0x2000): Not a sysbus message, quit (Thu Nov 17 11:30:53 2016) [sssd[pam]] [reset_idle_timer] (0x4000): Idle timer re-set for client [0x1fd3fc0][19] (Thu Nov 17 11:30:53 2016) [sssd[pam]] [pam_cmd_close_session] (0x0100): entering pam_cmd_close_session (Thu Nov 17 11:30:53 2016) [sssd[pam]] [sss_parse_name_for_domains] (0x0200): name 'longina@n.c.domain' matched expression for domain 'n.c.domain', user is longina (Thu Nov 17 11:30:53 2016) [sssd[pam]] [pam_print_data] (0x0100): command: SSS_PAM_CLOSE_SESSION (Thu Nov 17 11:30:53 2016) [sssd[pam]] [pam_print_data] (0x0100): domain: n.c.domain (Thu Nov 17 11:30:53 2016) [sssd[pam]] [pam_print_data] (0x0100): user: longina (Thu Nov 17 11:30:53 2016) [sssd[pam]] [pam_print_data] (0x0100): service: su (Thu Nov 17 11:30:53 2016) [sssd[pam]] [pam_print_data] (0x0100): tty: /dev/pts/19 (Thu Nov 17 11:30:53 2016) [sssd[pam]] [pam_print_data] (0x0100): ruser: root (Thu Nov 17 11:30:53 2016) [sssd[pam]] [pam_print_data] (0x0100): rhost: not set (Thu Nov 17 11:30:53 2016)
[sssd[pam]] [pam_print_data] (0x0100): authtok type: 0 (Thu Nov 17 11:30:53 2016) [sssd[pam]] [pam_print_data] (0x0100): newauthtok type: 0 (Thu Nov 17 11:30:53 2016) [sssd[pam]] [pam_print_data] (0x0100): priv: 1 (Thu Nov 17 11:30:53 2016) [sssd[pam]] [pam_print_data] (0x0100): cli_pid: 6611 (Thu Nov 17 11:30:53 2016) [sssd[pam]] [pam_print_data] (0x0100): logon name: longina@n.c.domain (Thu Nov 17 11:30:53 2016) [sssd[pam]] [sss_ncache_check_str] (0x2000): Checking negative cache for [NCE/USER/n.c.domain/longina] (Thu Nov 17 11:30:53 2016) [sssd[pam]] [pam_initgr_check_timeout] (0x4000): User [longina@n.c.domain] not found in PAM cache.
(Thu Nov 17 11:30:53 2016) [sssd[pam]] [sss_dp_issue_request] (0x0400): Issuing request for [0x410090:3:longina@n.c.domain] (Thu Nov 17 11:30:53 2016) [sssd[pam]] [sss_dp_get_account_msg] (0x0400): Creating request for [n.c.domain][0x3][BE_REQ_INITGROUPS][1][name=longina] (Thu Nov 17 11:30:53 2016) [sssd[pam]] [sbus_add_timeout] (0x2000): 0x1fcd6d0 (Thu Nov 17 11:30:53 2016) [sssd[pam]] [sss_dp_internal_get_send] (0x0400): Entering request [0x410090:3:longina@n.c.domain] (Thu Nov 17 11:30:53 2016) [sssd[pam]] [sbus_remove_timeout] (0x2000): 0x1fcd6d0 (Thu Nov 17 11:30:53 2016)
[sssd[pam]] [sbus_dispatch] (0x4000): dbus conn: 0x1fcc1e0 (Thu Nov 17 11:30:53 2016) [sssd[pam]] [sbus_dispatch] (0x4000): Dispatching.
(Thu Nov 17 11:30:53 2016) [sssd[pam]] [sss_dp_get_reply] (0x1000): Got reply from Data Provider - DP error code: 0 errno: 0 error message: Success (Thu Nov 17 11:30:53 2016) [sssd[pam]] [pam_check_user_search] (0x0100): Requesting info for [longina@n.c.domain] (Thu Nov 17 11:30:53 2016) [sssd[pam]] [ldb] (0x4000): Added timed event "ltdb_callback": 0x1fd07d0
(Thu Nov 17 11:30:53 2016) [sssd[pam]] [ldb] (0x4000): Added timed event "ltdb_timeout": 0x1fd0890
(Thu Nov 17 11:30:53 2016) [sssd[pam]] [ldb] (0x4000): Running timer event
0x1fd07d0 "ltdb_callback"
(Thu Nov 17 11:30:53 2016) [sssd[pam]] [ldb] (0x4000): Destroying timer
event 0x1fd0890 "ltdb_timeout"
(Thu Nov 17 11:30:53 2016) [sssd[pam]] [ldb] (0x4000): Ending timer event
0x1fd07d0 "ltdb_callback"
(Thu Nov 17 11:30:53 2016) [sssd[pam]] [pam_check_user_search] (0x0400): Returning info for user [longina@n.c.domain] (Thu Nov 17 11:30:53 2016) [sssd[pam]] [pd_set_primary_name] (0x0400): User's primary name is longina@n.c.domain (Thu Nov 17 11:30:53 2016)
[sssd[pam]] [pam_initgr_cache_set] (0x2000): [longina@n.c.domain] added to PAM initgroup cache (Thu Nov 17 11:30:53 2016) [sssd[pam]] [pam_dp_send_req] (0x0100): Sending request with the following data:
(Thu Nov 17 11:30:53 2016) [sssd[pam]] [pam_print_data] (0x0100): command: SSS_PAM_CLOSE_SESSION (Thu Nov 17 11:30:53 2016)
[sssd[pam]]
[pam_print_data] (0x0100): domain: n.c.domain (Thu Nov 17 11:30:53 2016) [sssd[pam]] [pam_print_data] (0x0100): user: longina@n.c.domain (Thu Nov 17 11:30:53 2016) [sssd[pam]] [pam_print_data] (0x0100): service: su (Thu Nov 17 11:30:53 2016) [sssd[pam]] [pam_print_data] (0x0100): tty: /dev/pts/19 (Thu Nov 17 11:30:53 2016) [sssd[pam]] [pam_print_data] (0x0100): ruser: root (Thu Nov 17 11:30:53 2016) [sssd[pam]] [pam_print_data] (0x0100): rhost: not set (Thu Nov 17 11:30:53 2016) [sssd[pam]] [pam_print_data] (0x0100): authtok type: 0 (Thu Nov 17 11:30:53 2016) [sssd[pam]] [pam_print_data] (0x0100): newauthtok type: 0 (Thu Nov 17 11:30:53 2016) [sssd[pam]] [pam_print_data] (0x0100): priv: 1 (Thu Nov 17 11:30:53 2016) [sssd[pam]] [pam_print_data] (0x0100): cli_pid: 6611 (Thu Nov 17 11:30:53 2016) [sssd[pam]] [pam_print_data] (0x0100): logon name: longina@n.c.domain (Thu Nov 17 11:30:53 2016) [sssd[pam]] [sbus_add_timeout] (0x2000): 0x1fcbd80 (Thu Nov 17 11:30:53 2016) [sssd[pam]] [pam_dom_forwarder] (0x0100): pam_dp_send_req returned
0 (Thu Nov 17 11:30:53 2016) [sssd[pam]] [sss_dp_req_destructor] (0x0400): Deleting request: [0x410090:3:longina@n.c.domain] (Thu Nov 17 11:30:53 2016) [sssd[pam]] [sbus_remove_timeout] (0x2000): 0x1fcbd80 (Thu Nov 17 11:30:53 2016) [sssd[pam]] [sbus_dispatch] (0x4000): dbus conn: 0x1fcc1e0 (Thu Nov 17 11:30:53 2016) [sssd[pam]] [sbus_dispatch] (0x4000): Dispatching.
(Thu Nov 17 11:30:53 2016) [sssd[pam]] [pam_dp_process_reply] (0x0200): received: [0 (Success)][n.c.domain] (Thu Nov 17 11:30:53 2016) [sssd[pam]]
[pam_reply] (0x0200): pam_reply called with result [0]: Success.
(Thu Nov 17 11:30:53 2016) [sssd[pam]] [pam_reply] (0x0200): blen: 29 (Thu Nov 17 11:30:53 2016) [sssd[pam]] [reset_idle_timer] (0x4000): Idle timer re-set for client [0x1fd3fc0][19] (Thu Nov 17 11:30:53 2016) [sssd[pam]] [reset_idle_timer] (0x4000): Idle timer re-set for client
[0x1fd3fc0][19] (Thu Nov 17 11:30:53 2016) [sssd[pam]] [client_recv] (0x0200): Client disconnected!
(Thu Nov 17 11:30:53 2016) [sssd[pam]] [client_destructor] (0x2000): Terminated client [0x1fd3fc0][19] (Thu Nov 17 11:30:58 2016) [sssd[pam]] [pam_initgr_cache_remove] (0x2000): [longina@n.c.domain]
removed from PAM initgroup cache (Thu Nov 17 11:30:59 2016) [sssd[pam]] [get_client_cred] (0x4000): Client creds: euid[0] egid[0] pid[1717].
(Thu Nov 17 11:30:59 2016) [sssd[pam]] [reset_idle_timer] (0x4000): Idle timer re-set for client [0x1fd3fc0][19] (Thu Nov 17 11:30:59 2016)
[sssd[pam]] [accept_fd_handler] (0x0400): Client connected to privileged pipe!
(Thu Nov 17 11:30:59 2016) [sssd[pam]] [reset_idle_timer] (0x4000): Idle timer re-set for client [0x1fd3fc0][19] (Thu Nov 17 11:30:59 2016)
[sssd[pam]] [sss_cmd_get_version] (0x0200): Received client version [3].
(Thu Nov 17 11:30:59 2016) [sssd[pam]] [sss_cmd_get_version] (0x0200):
Offered version [3].
(Thu Nov 17 11:30:59 2016) [sssd[pam]] [reset_idle_timer] (0x4000): Idle timer re-set for client [0x1fd3fc0][19] (Thu Nov 17 11:30:59 2016) [sssd[pam]] [reset_idle_timer] (0x4000): Idle timer re-set for client [0x1fd3fc0][19] (Thu Nov 17 11:30:59 2016) [sssd[pam]] [pam_cmd_close_session] (0x0100): entering pam_cmd_close_session
(Thu
Nov 17 11:30:59 2016) [sssd[pam]] [sss_parse_name_for_domains] (0x0200): name 'alongina' matched without domain, user is alongina (Thu Nov 17 11:30:59 2016) [sssd[pam]] [pam_print_data] (0x0100): command: SSS_PAM_CLOSE_SESSION (Thu Nov 17 11:30:59 2016) [sssd[pam]] [pam_print_data] (0x0100): domain: not set (Thu Nov 17 11:30:59 2016) [sssd[pam]] [pam_print_data] (0x0100): user: alongina (Thu Nov 17 11:30:59 2016) [sssd[pam]] [pam_print_data] (0x0100): service: lightdm (Thu Nov 17 11:30:59 2016) [sssd[pam]] [pam_print_data] (0x0100): tty: :0 (Thu Nov 17 11:30:59 2016) [sssd[pam]] [pam_print_data] (0x0100): ruser: not set (Thu Nov 17 11:30:59 2016) [sssd[pam]] [pam_print_data] (0x0100): rhost: not set (Thu Nov 17 11:30:59 2016) [sssd[pam]] [pam_print_data] (0x0100): authtok type: 0 (Thu Nov 17 11:30:59 2016)
[sssd[pam]] [pam_print_data] (0x0100): newauthtok type: 0 (Thu Nov 17 11:30:59 2016) [sssd[pam]] [pam_print_data] (0x0100): priv: 1 (Thu Nov 17 11:30:59 2016) [sssd[pam]] [pam_print_data] (0x0100): cli_pid: 1717 (Thu Nov 17 11:30:59 2016) [sssd[pam]] [pam_print_data] (0x0100): logon name: alongina (Thu Nov 17 11:30:59 2016) [sssd[pam]] [pam_reply] (0x0200): pam_reply called with result [10]: User not known to the underlying authentication module.
(Thu Nov 17 11:30:59 2016) [sssd[pam]] [pam_reply] (0x0200): blen: 8
Is it a typo? because the user "alongina" was not recognized as a sssd user. Therefore there is a pam error "User not known to the underlying authentication module"
Different user was used in previous pam actions "longina@n.c.domain"
(Thu Nov 17 11:30:59 2016) [sssd[pam]] [reset_idle_timer] (0x4000): Idle timer re-set for client [0x1fd3fc0][19] (Thu Nov 17 11:30:59 2016) [sssd[pam]] [reset_idle_timer] (0x4000): Idle timer re-set for client
[0x1fd3fc0][19] (Thu Nov 17 11:30:59 2016) [sssd[pam]] [client_recv] (0x0200): Client disconnected!
(Thu Nov 17 11:30:59 2016) [sssd[pam]] [client_destructor] (0x2000): Terminated client [0x1fd3fc0][19] (Thu Nov 17 11:31:00 2016) [sssd[pam]]
[get_client_cred] (0x4000): Client creds: euid[0] egid[0] pid[6669].
(Thu Nov 17 11:31:00 2016) [sssd[pam]] [reset_idle_timer] (0x4000): Idle timer re-set for client [0x1fd3fc0][19] (Thu Nov 17 11:31:00 2016)
[sssd[pam]] [accept_fd_handler] (0x0400): Client connected to privileged pipe!
(Thu Nov 17 11:31:00 2016) [sssd[pam]] [reset_idle_timer] (0x4000): Idle timer re-set for client [0x1fd3fc0][19] (Thu Nov 17 11:31:00 2016)
[sssd[pam]] [sss_cmd_get_version] (0x0200): Received client version [3].
(Thu Nov 17 11:31:00 2016) [sssd[pam]] [sss_cmd_get_version] (0x0200):
Offered version [3].
(Thu Nov 17 11:31:00 2016) [sssd[pam]] [reset_idle_timer] (0x4000): Idle timer re-set for client [0x1fd3fc0][19] (Thu Nov 17 11:31:00 2016) [sssd[pam]] [reset_idle_timer] (0x4000): Idle timer re-set for client [0x1fd3fc0][19] (Thu Nov 17 11:31:00 2016) [sssd[pam]] [pam_cmd_open_session] (0x0100): entering pam_cmd_open_session
(Thu Nov
17 11:31:00 2016) [sssd[pam]] [sss_parse_name_for_domains] (0x0200): name 'lightdm' matched without domain, user is lightdm (Thu Nov 17 11:31:00 2016) [sssd[pam]] [pam_print_data] (0x0100): command: SSS_PAM_OPEN_SESSION (Thu Nov 17 11:31:00 2016) [sssd[pam]] [pam_print_data] (0x0100): domain: not set (Thu Nov 17 11:31:00 2016) [sssd[pam]] [pam_print_data] (0x0100): user: lightdm (Thu Nov 17 11:31:00 2016) [sssd[pam]] [pam_print_data] (0x0100): service: lightdm-greeter (Thu Nov 17 11:31:00 2016) [sssd[pam]] [pam_print_data] (0x0100): tty: :0 (Thu Nov 17 11:31:00 2016) [sssd[pam]] [pam_print_data] (0x0100): ruser: not set (Thu Nov 17 11:31:00 2016) [sssd[pam]] [pam_print_data] (0x0100): rhost: not set (Thu Nov 17 11:31:00 2016) [sssd[pam]] [pam_print_data] (0x0100): authtok type: 0 (Thu
Nov 17 11:31:00 2016) [sssd[pam]] [pam_print_data] (0x0100): newauthtok type: 0 (Thu Nov 17 11:31:00 2016) [sssd[pam]] [pam_print_data] (0x0100): priv: 1 (Thu Nov 17 11:31:00 2016) [sssd[pam]] [pam_print_data] (0x0100): cli_pid: 6669 (Thu Nov 17 11:31:00 2016) [sssd[pam]] [pam_print_data] (0x0100): logon name: lightdm (Thu Nov 17 11:31:00 2016) [sssd[pam]] [pam_reply] (0x0200): pam_reply called with result [10]: User not known to the underlying authentication module. I think it is expected user lightdm is not handled by sssd. So I am not sure wheter it could cause a problem. The only problem could be caused by gpo and that service "lightdm-greeter" is not allowed by default.
LS _______________________________________________ sssd-users mailing list -- sssd-users@lists.fedorahosted.org To unsubscribe send an email to sssd-users-leave@lists.fedorahosted.org