[SSSD] auth.log error message: _sasl_plugin_load failed on sasl_canonuser_init for plugin: ldapdb

Jakub Hrozek jhrozek at redhat.com
Thu Nov 14 09:41:45 UTC 2013


On Wed, Nov 13, 2013 at 04:19:03PM -0500, Qing Chang wrote:
> there was a thread on Aug 8, 2013 that was about this error, my situation is
> a little different. This happens on Ubuntu 12.04 IPA clients, which automounts
> kerberized NFSv4.
> 
> I am let to believe that this error may be the cause of a weird problem that
> users are able to login wither per ssh or lightdm.
> 
> Open an ssh session, type in username and password,  successful authentication
> is logged in auth.log, but the session just hangs at the login prompt.
> =====
> Nov 13 09:52:33 murjo sshd[2746]: pam_unix(sshd:auth):
> authentication failure; logname= uid=0 euid=0 tty=ssh ruser=
> rhost=fish  user=qchang
> Nov 13 09:52:34 murjo sshd[2746]: pam_sss(sshd:auth): authentication
> success; logname= uid=0 euid=0 tty=ssh ruser= rhost=fish user=qchang
> Nov 13 09:52:34 murjo sshd[2746]: Accepted password for qchang from port 33621 ssh2
> Nov 13 09:52:34 murjo sshd[2746]: pam_unix(sshd:session): session opened for user qchang by (uid=0)
> Nov 13 09:53:04 murjo sssd_be: canonuserfunc error -7
> Nov 13 09:53:04 murjo sssd_be: _sasl_plugin_load failed on sasl_canonuser_init for plugin: ldapdb
> Nov 13 09:57:23 murjo sshd[902]: Received signal 15; terminating.
> Nov 13 09:57:23 murjo sshd[997]: Server listening on 0.0.0.0 port 22.
> Nov 13 09:57:23 murjo sshd[997]: Server listening on :: port 22.
> Nov 13 09:57:34 murjo lightdm: pam_unix(lightdm:session): session opened for user lightdm by (uid=0)
> Nov 13 09:57:34 murjo lightdm: pam_ck_connector(lightdm:session): nox11 mode, ignoring PAM_TTY :0
> Nov 13 09:57:35 murjo dbus[910]: [system] Rejected send message, 2
> matched rules; type="method_call", sender=":1.16" (uid=104 pid=1554
> comm="/usr/lib/indicator-datetim
> e/indicator-datetime-ser")
> interface="org.freedesktop.DBus.Properties" member="GetAll" error
> name="(unset)" requested_reply="0" destination=":1.9" (uid=0
> pid=1400 comm
> ="/usr/sbin/console-kit-daemon --no-daemon ")
> Nov 13 09:57:43 murjo automount[1725]: canonuserfunc error -7
> Nov 13 09:57:43 murjo automount[1725]: _sasl_plugin_load failed on
> sasl_canonuser_init for plugin: ldapdb
> Nov 13 09:57:44 murjo automount[1725]: DIGEST-MD5 common mech free
> Nov 13 09:57:44 murjo automount[1725]: canonuserfunc error -7

This looks like some kind of cyrus-sasl misconfiguration, not really
anything wrong in the SSSD.



More information about the sssd-devel mailing list