[SSSD] Kerb credential cache not getting into default_cache.ldb
Norman Elton
normelton at gmail.com
Tue Jun 14 13:15:05 UTC 2011
Stephen / Sumit,
Thanks for your responses...
> This sounds like pam_krb5 is still called somewhere in your pam stack
> and doing authentication instead of sssd.
It does seem that way, but grep'ing through /etc/pam.d/* reveals no
instances of krb. I rebooted the box just to make sure nothing was
hanging around from before.
> Could you send the (sanitized) sssd_default.log of the login?
Attached. I'll also attach my sssd.conf, sshd_config, and
/etc/pam.d/system-auth (which is identical to password-auth).
In my sshd_config, I've still got GSSAPIAuthentication enabled. Is
this somehow bypassing sssd? I tried disabling it and leaving UsePAM
enabled, and couldn't login with my kerb ticket.
Norman
>
> HTH
>
> bye,
> Sumit
>
>
>>
>> What would cause sssd to not recognize the cache name? selinux is in
>> permissive mode, I tried blowing away my sssd config (deleted all the
>> ldb databases) and reconfiguring everything from scratch with
>> authconfig. I'm not convinced something is leftover from a previous
>> bad config, but am not sure where else to look.
>>
>> Thanks for all the help,
>>
>> Norman
>> _______________________________________________
>> sssd-devel mailing list
>> sssd-devel at lists.fedorahosted.org
>> https://fedorahosted.org/mailman/listinfo/sssd-devel
> _______________________________________________
> sssd-devel mailing list
> sssd-devel at lists.fedorahosted.org
> https://fedorahosted.org/mailman/listinfo/sssd-devel
>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: sssd.conf
Type: application/octet-stream
Size: 4111 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20110614/6e66647e/attachment.obj>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: sssd.log
Type: application/octet-stream
Size: 27511 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20110614/6e66647e/attachment-0001.obj>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: system-auth
Type: application/octet-stream
Size: 1115 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20110614/6e66647e/attachment-0002.obj>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: sshd_config
Type: application/octet-stream
Size: 4173 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20110614/6e66647e/attachment-0003.obj>
More information about the sssd-devel
mailing list