<div dir="ltr">Well, in a related development, it appears there is a hardware issue with the testing PC- bad hard disk. Will replace, reinstall OS, and re-test.<div><br></div><div>However, there is definitely a case sensitivity issue happening.<br>
<div><br></div><div>My other hosts only have an issue when logging in with Guest as opposed to guest. Guest causes /home/guest to be created despite what's in the unixHomeDirectory attribute; then I'm always dropped in / because "Could not chdir to home directory /tmp/Guest: No such file or directory." I imagine this because sssd is lowercasing usernames but PAM isn't? "getent passwd guest" always returns the same result: <span style="font-size:13px;font-family:arial,sans-serif">guest:*:1596000501:1596000514:</span><span style="font-size:13px;font-family:arial,sans-serif">Guest:/tmp/Guest:/bin/bash</span></div>
<div><br></div><div>If I login in with guest, everything works as expected (after the cache is cleared). It seems strange that I'm even allowed to auth with both guest and Guest. Shouldn't one fail? Is this a bug or feature?</div>
</div></div><div class="gmail_extra"><br clear="all"><div><div><br></div>-Chris</div>
<br><br><div class="gmail_quote">On Wed, Oct 9, 2013 at 11:50 AM, Chris Hartman <span dir="ltr"><<a href="mailto:qrstuv@gmail.com" target="_blank">qrstuv@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="ltr">Hmm. This may be host-specific. I'm not able to reproduce this problem on other hosts.<div><br></div><div>Does getent use a cache that could be screwing things up? I've disabled caching and enumerating in SSSD temporarily for troubleshooting.</div>
<span class="HOEnZb"><font color="#888888">
</font></span></div><div class="gmail_extra"><span class="HOEnZb"><font color="#888888"><br clear="all"><div><div><br></div>-Chris</div></font></span><div><div class="h5">
<br><br><div class="gmail_quote">On Wed, Oct 9, 2013 at 11:47 AM, Chris Hartman <span dir="ltr"><<a href="mailto:qrstuv@gmail.com" target="_blank">qrstuv@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="ltr">getent passwd Guest returns:<div><br></div><div>guest:*:1596000501:1596000514:Guest:/:/bin/bash<br></div><div><br></div><div>Also, I'm wondering if this has something to do with case sensitivity? `getent passwd Guest` and `getent passwd guest` return the same result. Also, I can login with either Guest or guest. Just a thought.</div>
<span><font color="#888888">
</font></span></div><div class="gmail_extra"><span><font color="#888888"><br clear="all"><div><div><br></div>-Chris</div></font></span><div><div>
<br><br><div class="gmail_quote">On Wed, Oct 9, 2013 at 11:32 AM, Jakub Hrozek <span dir="ltr"><<a href="mailto:jhrozek@redhat.com" target="_blank">jhrozek@redhat.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div><div>On Wed, Oct 09, 2013 at 11:25:51AM -0400, Chris Hartman wrote:<br>
> I'm having a problem getting pam_mkhomedir.so to make a user's home<br>
> directory when it's specified using an LDAP attribute. The backend<br>
> directory server is AD on Server 2008. The client is Ubuntu 12.04, sssd<br>
> version 1.11.1.<br>
><br>
> First, my sssd.conf:<br>
><br>
> [sssd]<br>
> config_file_version = 2<br>
> debug_level = 0<br>
> reconnection_retries = 3<br>
> sbus_timeout = 30<br>
> services = nss, pam<br>
> domains = domain<br>
><br>
> [pam]<br>
> debug_level = 0<br>
><br>
> [nss]<br>
> debug_level = 0<br>
> filter_users =<br>
> root,ldap,named,avahi,haldaemon,dbus,radvd,tomcat,radiusd,news,mailman,nscd,gdm<br>
> filter_groups =<br>
> root,ldap,named,avahi,haldaemon,dbus,radvd,tomcat,radiusd,news,mailman,nscd,gdm<br>
> reconnection_retries = 3<br>
><br>
> [domain/domain]<br>
> debug_level = 0<br>
> ad_domain = domain.local<br>
> id_provider = ad<br>
> auth_provider = ad<br>
> chpass_provider = ad<br>
> access_provider = ad<br>
> enumerate = true<br>
> cache_credentials = true<br>
> # Will check unixHomeDirectory LDAP attribute for a value first<br>
> fallback_homedir = /home/%u<br>
> ldap_user_home_directory = unixHomeDirectory<br>
> dyndns_update = true<br>
> dyndns_update_ptr = true<br>
> ldap_schema = ad<br>
> ldap_id_mapping = true<br>
><br>
> I'm testing using the Guest user.<br>
><br>
> Guest, unlike all my other users, has a home directory set in the<br>
> unixHomeDirectory attribute (/tmp/Guest). All other users rely on the<br>
> fallback_homedir option. When a normal user signs in and does not have a<br>
> home directory, I've configured pam to create one by adding this to the<br>
> common-session file:<br>
><br>
> session required pam_mkhomedir.so umask=077<br>
><br>
> This all works fine when ldap_user_home_directory is empty; the home<br>
> directory is created automatically upon logging in using the<br>
> fallback_homedir option.<br>
><br>
> However, when unixHomeDirectory actually contains a path, no home directory<br>
> is ever created and I'm always dropped in /.<br>
><br>
> Interestingly enough, "echo $HOME" as the Guest returns two different<br>
> values depending on if fallback_homedir is set. If it is set, $HOME =<br>
> /home/Guest. If it's commented out, $HOME = /tmp/Guest.<br>
><br>
> Any ideas? Thanks!<br>
><br>
> -Chris<br>
<br>
<br>
</div></div>What does getent passwd Guest say? Which homedir do you get back?<br>
_______________________________________________<br>
sssd-users mailing list<br>
<a href="mailto:sssd-users@lists.fedorahosted.org" target="_blank">sssd-users@lists.fedorahosted.org</a><br>
<a href="https://lists.fedorahosted.org/mailman/listinfo/sssd-users" target="_blank">https://lists.fedorahosted.org/mailman/listinfo/sssd-users</a><br>
</blockquote></div><br></div></div></div>
</blockquote></div><br></div></div></div>
</blockquote></div><br></div>