Well, in a related development, it appears there is a hardware issue with
the testing PC- bad hard disk. Will replace, reinstall OS, and re-test.
However, there is definitely a case sensitivity issue happening.
My other hosts only have an issue when logging in with Guest as opposed to
guest. Guest causes /home/guest to be created despite what's in the
unixHomeDirectory attribute; then I'm always dropped in / because "Could
not chdir to home directory /tmp/Guest: No such file or directory." I
imagine this because sssd is lowercasing usernames but PAM isn't? "getent
passwd guest" always returns the same result: guest:*:1596000501:1596000514:
Guest:/tmp/Guest:/bin/bash
If I login in with guest, everything works as expected (after the cache is
cleared). It seems strange that I'm even allowed to auth with both guest
and Guest. Shouldn't one fail? Is this a bug or feature?
-Chris
On Wed, Oct 9, 2013 at 11:50 AM, Chris Hartman <qrstuv(a)gmail.com> wrote:
Hmm. This may be host-specific. I'm not able to reproduce this
problem on
other hosts.
Does getent use a cache that could be screwing things up? I've disabled
caching and enumerating in SSSD temporarily for troubleshooting.
-Chris
On Wed, Oct 9, 2013 at 11:47 AM, Chris Hartman <qrstuv(a)gmail.com> wrote:
> getent passwd Guest returns:
>
> guest:*:1596000501:1596000514:Guest:/:/bin/bash
>
> Also, I'm wondering if this has something to do with case sensitivity?
> `getent passwd Guest` and `getent passwd guest` return the same result.
> Also, I can login with either Guest or guest. Just a thought.
>
>
> -Chris
>
>
> On Wed, Oct 9, 2013 at 11:32 AM, Jakub Hrozek <jhrozek(a)redhat.com> wrote:
>
>> On Wed, Oct 09, 2013 at 11:25:51AM -0400, Chris Hartman wrote:
>> > I'm having a problem getting pam_mkhomedir.so to make a user's home
>> > directory when it's specified using an LDAP attribute. The backend
>> > directory server is AD on Server 2008. The client is Ubuntu 12.04, sssd
>> > version 1.11.1.
>> >
>> > First, my sssd.conf:
>> >
>> > [sssd]
>> > config_file_version = 2
>> > debug_level = 0
>> > reconnection_retries = 3
>> > sbus_timeout = 30
>> > services = nss, pam
>> > domains = domain
>> >
>> > [pam]
>> > debug_level = 0
>> >
>> > [nss]
>> > debug_level = 0
>> > filter_users =
>> >
>> root,ldap,named,avahi,haldaemon,dbus,radvd,tomcat,radiusd,news,mailman,nscd,gdm
>> > filter_groups =
>> >
>> root,ldap,named,avahi,haldaemon,dbus,radvd,tomcat,radiusd,news,mailman,nscd,gdm
>> > reconnection_retries = 3
>> >
>> > [domain/domain]
>> > debug_level = 0
>> > ad_domain = domain.local
>> > id_provider = ad
>> > auth_provider = ad
>> > chpass_provider = ad
>> > access_provider = ad
>> > enumerate = true
>> > cache_credentials = true
>> > # Will check unixHomeDirectory LDAP attribute for a value first
>> > fallback_homedir = /home/%u
>> > ldap_user_home_directory = unixHomeDirectory
>> > dyndns_update = true
>> > dyndns_update_ptr = true
>> > ldap_schema = ad
>> > ldap_id_mapping = true
>> >
>> > I'm testing using the Guest user.
>> >
>> > Guest, unlike all my other users, has a home directory set in the
>> > unixHomeDirectory attribute (/tmp/Guest). All other users rely on the
>> > fallback_homedir option. When a normal user signs in and does not have
>> a
>> > home directory, I've configured pam to create one by adding this to the
>> > common-session file:
>> >
>> > session required pam_mkhomedir.so umask=077
>> >
>> > This all works fine when ldap_user_home_directory is empty; the home
>> > directory is created automatically upon logging in using the
>> > fallback_homedir option.
>> >
>> > However, when unixHomeDirectory actually contains a path, no home
>> directory
>> > is ever created and I'm always dropped in /.
>> >
>> > Interestingly enough, "echo $HOME" as the Guest returns two
different
>> > values depending on if fallback_homedir is set. If it is set, $HOME =
>> > /home/Guest. If it's commented out, $HOME = /tmp/Guest.
>> >
>> > Any ideas? Thanks!
>> >
>> > -Chris
>>
>>
>> What does getent passwd Guest say? Which homedir do you get back?
>> _______________________________________________
>> sssd-users mailing list
>> sssd-users(a)lists.fedorahosted.org
>>
https://lists.fedorahosted.org/mailman/listinfo/sssd-users
>>
>
>