[SSSD-users] sssd basic questions

Lukas Slebodnik lslebodn at redhat.com
Thu Jun 5 15:54:54 UTC 2014


On (05/06/14 16:43), Robert Zmijan wrote:
>> On Wed, Jun 04, 2014 at 11:54:39PM +0100, Robert Zmijan wrote:
>>>> On 06/04/2014 04:13 PM, Robert Zmijan wrote:
>>>>>> On Wed, 2014-06-04 at 18:15 +0100, Robert Zmijan wrote:
>>>>>>> Hi
>>>>>>>
>>>>>>> I want to setup sssd to use ldap_default_bind_dn and 
>>>>>>> ldap_default_authok. currently I have in my sssd.conf 
>>>>>>> ldap_default_bind_dn = cn=sssd,ou=services,dc=myhost,dc=net 
>>>>>>> ldap_default_authok = mypassword I understand that I would 
>>>>>>> have to put 'mypassword' in ldap under the name of 'sssd'
>>>>>>> the problem I'm facing is that when i type: sss_obfuscate I
>>>>>>> get this:
>>>>>>>
>>>>>>> File "/usr/sbin/sss_obfuscate", line 81 print "Cannot read 
>>>>>>> internal configuration files"
>>>>>>
>>>>>> chmod 0600 /etc/sssd/sssd.conf
>>>>>>
>>>>
>>>>> Just did that. running sss_obuscate has still the same effect as 
>>>>> above:
>>>>
>>>>> File "/usr/sbin/sss_obfuscate", line 81 print "Cannot read 
>>>>> internal configuration files"
>>>>
>>>>> Syntax Error: invalid syntax
>>>>
>>>> "invalid syntax" probably means you have an error in the config 
>>>> file. Mind including it so we can help you spot the syntax error?
>>>
>>> Sure, did you mean sssd.conf?
>>>
>>> here it is
>>>
>>> [sssd]
>>> config_file_version = 2
>>> services = nss, pam
>>> domains = LDAP
>>>
>>> [nss]
>>>
>>> filter_users = root,ldap,named,avahi,haldaemon,dbus,radiusd,news,nscd
>>>
>>>
>>> [pam]
>>>
>>> # Example LDAP domain
>>> [domain/LDAP]
>>> id_provider = ldap
>>>
>>> ldap_id_use_start_tls = True
>>>
>>> auth_provider = ldap
>>> chpass_provider = ldap
>>> access_provider = ldap
>>>
>>> ldap_access_filter = gidNumber=100
>>>
>>> ldap_user_ssh_public_key = sshPublicKey
>>> ldap_default_bind_dn=cn=sssd,ou=services,dc=myhost,dc=net
>>>
>>> ldap_tls_reqcert = never
>>> ldap_tls_cacert = /etc/openldap/ssl/ldapscert.crt
>>> ldap_uri = ldap://127.0.0.1
>>> ldap_search_base = dc=homelinux,dc=net
>>> ldap_user_search_base = ou=People,dc=myhost,dc=net
>>> ldap_group_search_base = ou=Group,dc=myhost,dc=net
>>>
>>> enumerate = true
>>>
>>> cache_credentials = true
>> 
>> This configuration looks good and is working for me with sss_obfuscate.
>> Which platform/distribution do you use? Maybe there are issues with the
>> path to the config file? You can use the -f option to explicitly tell
>> sss_obfuscate which config file to read.
>> 
>> HTH
>> 
>> bye,
>> Sumit
>
>I'm using Gentoo. No luck so far. I even copied the sssd.conf to my home
>directory, gave 666 permissions and did sss_obfuscate -f /root/sssd.conf
sssd.conf have to have permissions 0600, otherwise sssd will not start.

>
>Again I get
>
>File "/usr/sbin/sss_obfuscate", line 81 print "Cannot read
>internal configuration files"
>
>SyntaxError: invalid syntax
/usr/sbin/sss_obfuscate is python script.
You can try debug this script if you have sucxh python skills :-)
https://docs.python.org/2/library/pdb.html

>I guess the issue is more basic, and broader than just permission to
>sssd.conf
>
>the line "Cannot read internal configuration files" sounds too enigmatic
>to me. What configuration files are meant to be read?
Dou you run sss_obfuscate as root?

LS


More information about the sssd-users mailing list