[SSSD] sudo

Marcus Moeller mail at marcus-moeller.de
Wed Aug 11 11:29:32 UTC 2010


Hi all.

>> While trying to use sudo with sssd I got an error like:
>>
>> Aug  9 16:20:41 HOST sudo: pam_sss(sudo:auth): received for user USER:
>> 9 (Authentication service cannot retrieve authentication info)
>>
>
> During authentication, the sssd Kerberos backend returns
> PAM_AUTHINFO_UNAVAIL (which is the error code 9 you are seeing) when the
> KDC is unreachable and cached credentials not available.
>
> Would you mind checking the sssd logs if there is something interesting
> either from the backend process or the krb5_child one? If sssd is
> running as daemon, that would be in /var/log/sss/sssd_$DOMAIN.log or
> /var/log/sss/krb5_child.log.

This is the only output I got during sudo:

(Wed Aug 11 13:22:07 2010) [sssd[be[MYDOMAIN]]] [get_server_status]
(7): Status of server 'kdc.mydomain' is 'working'
(Wed Aug 11 13:22:07 2010) [sssd[be[MYDOMAIN]]] [get_port_status] (7):
Port status of port 88 for server 'kdc.mydomain' is 'working'
(Wed Aug 11 13:22:07 2010) [sssd[be[MYDOMAIN]]] [resolve_srv_send]
(6): The status of SRV lookup is resolved
(Wed Aug 11 13:22:07 2010) [sssd[be[MYDOMAIN]]] [get_server_status]
(7): Status of server 'kdc.mydomain' is 'working'
(Wed Aug 11 13:22:07 2010) [sssd[be[MYDOMAIN]]]
[be_resolve_server_done] (4): Found address for server kdc.mydomain:
[192.168.1.201]
(Wed Aug 11 13:22:07 2010) [sssd[be[MYDOMAIN]]]
[be_pam_handler_callback] (4): Backend returned: (1, 9, <NULL>)
[Provider is Offline (Bad file descriptor)]

Best Regards
Marcus



More information about the sssd-devel mailing list