[SSSD] SSSD Configuration issue

Stephen Gallagher sgallagh at redhat.com
Mon Nov 21 13:51:51 UTC 2011


On Mon, 2011-11-21 at 19:13 +0530, Nitesh Mehare wrote:
> I tried putting debug level 9 pam section of sssd.conf
> Below is the messages in sssd_pam.log
<snip>
> The initial messages are for when i restart the sssd service.I do not
> see any specific messaages when i try to do authentication.
> I'm not sure how to move fwd from here cause till now the settings i
> have done seems to be correct.
> 
> Would like to thank for the help I'm getting in this forum hope it
> will help resolving my issue.

Ok, interesting. So we're seeing pam_sss.so writing to the PAM socket,
but apparently we're not seeing the sssd_pam process receiving and
handling the response. That's... really, really strange.

From the strace:

connect(5, {sa_family=AF_FILE,
path="/var/lib/sss/pipes/private/pam"...}, 110) = 0
poll([{fd=5, events=POLLOUT}], 1, 300000) = 1 ([{fd=5,
revents=POLLOUT}])

Ok, we opened the socket fine

write(5, "\24\0\0\0\1\0\0\0\0\0\0\0\0\0\0\0", 16) = 16
poll([{fd=5, events=POLLOUT}], 1, 300000) = 1 ([{fd=5,
revents=POLLOUT}])
write(5, "\3\0\0\0", 4)                 = 4
poll([{fd=5, events=POLLIN}], 1, 300000) = 1 ([{fd=5, revents=POLLIN}])
read(5, "\24\0\0\0\1\0\0\0\0\0\0\0\0\0\0\0", 16) = 16
poll([{fd=5, events=POLLIN}], 1, 300000) = 1 ([{fd=5, revents=POLLIN}])
read(5, "\3\0\0\0", 4)                  = 4
getsockopt(5, SOL_SOCKET, SO_PEERCRED, "LY\0\0\0\0\0\0\0\0\0\0", [12]) =
0

And we sent the peer credentials, which apparently succeeded. We should
be seeing, at minimum:
(Mon Nov 21 08:49:59 2011) [sssd[pam]] [get_client_cred] (0x4000):
Client creds: euid[0] egid[13041] pid[14259].



poll([{fd=5, events=POLLOUT}], 1, 300000) = 1 ([{fd=5,
revents=POLLOUT}])
write(5, "]\0\0\0\364\0\0\0\0\0\0\0\0\0\0\0", 16) = 16
poll([{fd=5, events=POLLOUT}], 1, 300000) = 1 ([{fd=5,
revents=POLLOUT}])
write(5, "IPAM\1\0\0\0\t\0\0\0nitback1\0\2\0\0\0\5\0\0\0su-"..., 77) =
77

We sent a request to authenticate through 'su - <user>'

poll([{fd=5, events=POLLIN}], 1, 300000) = 1 ([{fd=5, revents=POLLIN}])
read(5, "%\0\0\0\364\0\0\0\0\0\0\0\0\0\0\0", 16) = 16
poll([{fd=5, events=POLLIN}], 1, 300000) = 1 ([{fd=5, revents=POLLIN}])
read(5, "\0\0\0\0\1\0\0\0\2\0\0\0\5\0\0\0LDAP\0", 21) = 21

And then we get a reply (I can't tell what it was from this).


I can't understand why we're not seeing any logs
in /var/log/sssd/sssd_pam.log. That doesn't make any sense.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: This is a digitally signed message part
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20111121/7c4d21ed/attachment.sig>


More information about the sssd-devel mailing list