On Sun, 6 Mar 2016 16:30:22 +0100, Jakub Hrozek wrote:
I haven't configured NIS myself for a very long time, but before
logins
start working, sssd must be able to retrieve user information. I presume
"getent passwd -s sss $nisuser" doesn't return anything using this
configuration?
Yes, it does:
# getent passwd -s sss wtestman
wtestman:*:580:504:Walter A. Testman:/home/wtestman:/bin/tcsh
# getent shadow -s sss wtestman
# getent shadow -s nis wtestman
wtestman:$TOPSECRET:10779:0:99999:7:::
#
The "identification" part of the setup appears to work.
If you want to start testing just identity w/o authentication, you
can
start with:
auth_provider = none
Interesting enough, this doesn't make a difference. I suspect PAM plays
a role here, but my PAM fu is not up to the challenge...
FTR, I got the
auth_provider = proxy
proxy_pam_target = none
from <
https://fedorahosted.org/sssd/ticket/1339>; I also followed the
example in <
https://bugzilla.redhat.com/show_bug.cgi?id=578463>,
setting nsswitch.conf up like
passwd files sss
group files sss
shadow files nis
all of which do not make a difference for authentication.
A typical cycle in the logs is
### sssd.log
(Mon Mar 7 11:22:00 2016) [sssd] [ping_check] (0x0020): A service PING
timed out on [spgnts]. Attempt [1]
(Mon Mar 7 11:22:10 2016) [sssd] [ping_check] (0x0020): A service PING
timed out on [spgnts]. Attempt [2]
(Mon Mar 7 11:22:20 2016) [sssd] [tasks_check_handler] (0x0020):
Killing service [spgnts], not responding to pings!
(Mon Mar 7 11:22:20 2016) [sssd] [ping_check] (0x0020): A service PING
timed out on [spgnts]. Attempt [3]
(Mon Mar 7 11:22:20 2016) [sssd] [mt_svc_exit_handler] (0x0040): Child
[spgnts] exited with code [0]
### sssd_nss.log
(Mon Mar 7 11:22:20 2016) [sssd[nss]] [sbus_dispatch] (0x0020):
Performing auto-reconnect
(Mon Mar 7 11:22:21 2016) [sssd[nss]] [nss_dp_reconnect_init]
(0x0020): Reconnected to the Data Provider.
(Mon Mar 7 11:22:34 2016) [sssd[nss]] [nss_cmd_getpwnam_search]
(0x0040): No results for getpwnam call
### sssd_pam.log
(Mon Mar 7 11:22:20 2016) [sssd[pam]] [sbus_dispatch] (0x0020):
Performing auto-reconnect
(Mon Mar 7 11:22:21 2016) [sssd[pam]] [pam_dp_reconnect_init]
(0x0020): Reconnected to the Data Provider.
(Mon Mar 7 11:22:21 2016) [sssd[pam]] [pam_check_user_dp_callback]
(0x0040): Unable to get information from Data Provider
Error: 3, 5, (null)
### sssd_spgnts
(Mon Mar 7 11:16:40 2016) [sssd[be[spgnts]]]
[get_initgr_groups_process] (0x0040): proxy -> initgroups_dyn failed
(0)[Success]
(Mon Mar 7 11:16:40 2016) [sssd[be[spgnts]]] [get_initgr] (0x0040):
Could not process initgroups
(Mon Mar 7 11:16:40 2016) [sssd[be[spgnts]]] [be_process_init]
(0x0020): No selinux module provided for [spgnts] !!
(Mon Mar 7 11:16:40 2016) [sssd[be[spgnts]]] [be_process_init]
(0x0020): No host info module provided for [spgnts] !!
(Mon Mar 7 11:16:40 2016) [sssd[be[spgnts]]] [be_process_init]
(0x0020): Subdomains are not supported for [spgnts] !!
(Mon Mar 7 11:17:42 2016) [sssd[be[spgnts]]] [pc_init_sig_handler]
(0x0020): waitpid did not find a child with changed status.
(Mon Mar 7 11:17:42 2016) [sssd[be[spgnts]]] [proxy_child_sig_handler]
(0x0020): waitpid did not found a child with changed status.
(Mon Mar 7 11:17:42 2016) [sssd[be[spgnts]]] [proxy_child_sig_handler]
(0x0020): waitpid did not found a child with changed status.
(Mon Mar 7 11:17:42 2016) [sssd[be[spgnts]]] [proxy_child_sig_handler]
(0x0020): waitpid did not found a child with changed status.
(Mon Mar 7 11:17:42 2016) [sssd[be[spgnts]]] [proxy_child_sig_handler]
(0x0020): waitpid did not found a child with changed status.
(Mon Mar 7 11:17:42 2016) [sssd[be[spgnts]]] [proxy_child_sig_handler]
(0x0020): waitpid did not found a child with changed status.
(Mon Mar 7 11:17:42 2016) [sssd[be[spgnts]]] [proxy_child_sig_handler]
(0x0020): waitpid did not found a child with changed status.
(Mon Mar 7 11:17:42 2016) [sssd[be[spgnts]]] [proxy_child_sig_handler]
(0x0020): waitpid did not found a child with changed status.
(Mon Mar 7 11:17:42 2016) [sssd[be[spgnts]]] [proxy_child_sig_handler]
(0x0020): waitpid did not found a child with changed status.
(Mon Mar 7 11:17:42 2016) [sssd[be[spgnts]]] [proxy_child_sig_handler]
(0x0020): waitpid did not found a child with changed status.
(Mon Mar 7 11:17:42 2016) [sssd[be[spgnts]]] [pc_init_sig_handler]
(0x0020): waitpid did not find a child with changed status.
(Mon Mar 7 11:17:42 2016) [sssd[be[spgnts]]] [proxy_child_sig_handler]
(0x0020): waitpid did not found a child with changed status.
(Mon Mar 7 11:17:42 2016) [sssd[be[spgnts]]] [proxy_child_sig_handler]
(0x0020): waitpid did not found a child with changed status.
(Mon Mar 7 11:17:42 2016) [sssd[be[spgnts]]] [proxy_child_sig_handler]
(0x0020): waitpid did not found a child with changed status.
(Mon Mar 7 11:17:42 2016) [sssd[be[spgnts]]] [proxy_child_sig_handler]
(0x0020): waitpid did not found a child with changed status.
(Mon Mar 7 11:17:42 2016) [sssd[be[spgnts]]] [proxy_child_sig_handler]
(0x0020): waitpid did not found a child with changed status.
(Mon Mar 7 11:17:42 2016) [sssd[be[spgnts]]] [proxy_child_sig_handler]
(0x0020): waitpid did not found a child with changed status.
(Mon Mar 7 11:17:42 2016) [sssd[be[spgnts]]] [proxy_child_sig_handler]
(0x0020): waitpid did not found a child with changed status.
(Mon Mar 7 11:17:42 2016) [sssd[be[spgnts]]] [proxy_child_sig_handler]
(0x0020): waitpid did not found a child with changed status.
(Mon Mar 7 11:17:42 2016) [sssd[be[spgnts]]] [proxy_child_sig_handler]
(0x0020): waitpid did not found a child with changed status.
(Mon Mar 7 11:17:42 2016) [sssd[be[spgnts]]] [proxy_child_sig_handler]
(0x0020): waitpid did not found a child with changed status.
(Mon Mar 7 11:17:42 2016) [sssd[be[spgnts]]] [proxy_child_sig_handler]
(0x0020): waitpid did not found a child with changed status.
(Mon Mar 7 11:17:42 2016) [sssd[be[spgnts]]] [proxy_child_sig_handler]
(0x0020): waitpid did not found a child with changed status.
(Mon Mar 7 11:17:42 2016) [sssd[be[spgnts]]] [proxy_child_sig_handler]
(0x0020): waitpid did not found a child with changed status.
(Mon Mar 7 11:17:42 2016) [sssd[be[spgnts]]] [proxy_child_sig_handler]
(0x0020): waitpid did not found a child with changed status.
(Mon Mar 7 11:17:42 2016) [sssd[be[spgnts]]] [proxy_child_sig_handler]
(0x0020): waitpid did not found a child with changed status.
(Mon Mar 7 11:17:42 2016) [sssd[be[spgnts]]] [proxy_child_sig_handler]
(0x0020): waitpid did not found a child with changed status.
(Mon Mar 7 11:17:42 2016) [sssd[be[spgnts]]] [proxy_child_sig_handler]
(0x0020): waitpid did not found a child with changed status.
(Mon Mar 7 11:17:42 2016) [sssd[be[spgnts]]] [proxy_child_sig_handler]
(0x0020): waitpid did not found a child with changed status.
(Mon Mar 7 11:17:42 2016) [sssd[be[spgnts]]] [proxy_child_sig_handler]
(0x0020): waitpid did not found a child with changed status.
(Mon Mar 7 11:17:42 2016) [sssd[be[spgnts]]] [proxy_child_sig_handler]
(0x0020): waitpid failed [10][No child processes].
(Mon Mar 7 11:17:42 2016) [sssd[be[spgnts]]] [proxy_child_sig_handler]
(0x0020): waitpid failed [10][No child processes].
(Mon Mar 7 11:17:42 2016) [sssd[be[spgnts]]] [proxy_child_sig_handler]
(0x0020): waitpid failed [10][No child processes].
(Mon Mar 7 11:17:42 2016) [sssd[be[spgnts]]] [proxy_child_sig_handler]
(0x0020): waitpid failed [10][No child processes].
(Mon Mar 7 11:17:42 2016) [sssd[be[spgnts]]] [proxy_child_sig_handler]
(0x0020): waitpid failed [10][No child processes].
(Mon Mar 7 11:17:42 2016) [sssd[be[spgnts]]] [proxy_child_sig_handler]
(0x0020): waitpid failed [10][No child processes].
### proxy_child_spgnts.log
(Mon Mar 7 11:08:11 2016) [sssd[proxy_child[spgnts]]] [main] (0x0020):
Proxy child for domain [spgnts] started!
Cheerio,
Hauke
--
The ASCII Ribbon Campaign Hauke Fath
() No HTML/RTF in email Institut für Nachrichtentechnik
/\ No Word docs in email TU Darmstadt
Respect for open standards Ruf +49-6151-16-21344