Plain centos 7 box, sssd-1.14.0-43.el7_3.18.x86_64
Log says:
(Wed Aug 30 06:59:11 2017) [sssd[pam]] [sss_ncache_check_str] (0x2000): Checking negative cache for [NCE/USER/cloudius-systems.com/avi@cloudius-systems.com] (Wed Aug 30 06:59:11 2017) [sssd[pam]] [sss_dp_issue_request] (0x0400): Issuing request for [0x7fd4f5f68030:3:avi@cloudius-systems.com@cloudius-systems.com] (Wed Aug 30 06:59:11 2017) [sssd[pam]] [sss_dp_get_account_msg] (0x0400): Creating request for [cloudius-systems.com][0x3][BE_REQ_INITGROUPS][1][name=avi@cloudius-systems.com:-] (Wed Aug 30 06:59:11 2017) [sssd[pam]] [sbus_add_timeout] (0x2000): 0x7fd4f7030710 (Wed Aug 30 06:59:11 2017) [sssd[pam]] [sss_dp_internal_get_send] (0x0400): Entering request [0x7fd4f5f68030:3:avi@cloudius-systems.com@cloudius-systems.com] (Wed Aug 30 06:59:11 2017) [sssd[pam]] [sbus_remove_timeout] (0x2000): 0x7fd4f7030710 (Wed Aug 30 06:59:11 2017) [sssd[pam]] [sss_dp_get_reply] (0x1000): Got reply from Data Provider - DP error code: 0 errno: 0 error message: Success (Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_check_user_search] (0x0100): Requesting info for [avi@cloudius-systems.com] (Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_check_user_search] (0x0400): Returning info for user [avi@cloudius-systems.com@cloudius-systems.com] (Wed Aug 30 06:59:11 2017) [sssd[pam]] [pd_set_primary_name] (0x0400): User's primary name is avi@cloudius-systems.com (Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_initgr_cache_set] (0x2000): [avi] added to PAM initgroup cache (Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_dp_send_req] (0x0100): Sending request with the following data: (Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_print_data] (0x0100): command: SSS_PAM_ACCT_MGMT (Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_print_data] (0x0100): domain: cloudius-systems.com (Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_print_data] (0x0100): user: avi@cloudius-systems.com (Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_print_data] (0x0100): service: sshd (Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_print_data] (0x0100): tty: ssh (Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_print_data] (0x0100): ruser: not set (Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_print_data] (0x0100): rhost: 77.138.249.123 (Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_print_data] (0x0100): authtok type: 0 (Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_print_data] (0x0100): newauthtok type: 0 (Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_print_data] (0x0100): priv: 1 (Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_print_data] (0x0100): cli_pid: 3991 (Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_print_data] (0x0100): logon name: avi (Wed Aug 30 06:59:11 2017) [sssd[pam]] [sbus_add_timeout] (0x2000): 0x7fd4f702de30 (Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_dom_forwarder] (0x0100): pam_dp_send_req returned 0 (Wed Aug 30 06:59:11 2017) [sssd[pam]] [sss_dp_req_destructor] (0x0400): Deleting request: [0x7fd4f5f68030:3:avi@cloudius-systems.com@cloudius-systems.com] (Wed Aug 30 06:59:13 2017) [sssd[pam]] [sbus_remove_timeout] (0x2000): 0x7fd4f702de30 (Wed Aug 30 06:59:13 2017) [sssd[pam]] [pam_dp_process_reply] (0x0200): received: [4 (System error)][cloudius-systems.com] (Wed Aug 30 06:59:13 2017) [sssd[pam]] [pam_reply] (0x0200): pam_reply called with result [4]: System error. (Wed Aug 30 06:59:13 2017) [sssd[pam]] [pam_reply] (0x0200): blen: 37 (Wed Aug 30 06:59:13 2017) [sssd[pam]] [client_recv] (0x0200): Client disconnected!
Any idea what went wrong?
First, I’m sorry your mail was stuck in moderation for so long. We receive large amount of spam lately and legitimate mails sometimes slip..
Second, you need to look into the domain logs and/or the child helpers (krb5_child, gpo_child) because that’s what emits the error. Please see https://docs.pagure.org/SSSD.sssd/users/troubleshooting.html and in general https://pagure.io/docs/SSSD/sssd/
On 30 Aug 2017, at 14:06, Avi Kivity avi@scylladb.com wrote:
Plain centos 7 box, sssd-1.14.0-43.el7_3.18.x86_64
Log says:
(Wed Aug 30 06:59:11 2017) [sssd[pam]] [sss_ncache_check_str] (0x2000): Checking negative cache for [NCE/USER/cloudius-systems.com/avi@cloudius-systems.com] (Wed Aug 30 06:59:11 2017) [sssd[pam]] [sss_dp_issue_request] (0x0400): Issuing request for [0x7fd4f5f68030:3:avi@cloudius-systems.com@cloudius-systems.com] (Wed Aug 30 06:59:11 2017) [sssd[pam]] [sss_dp_get_account_msg] (0x0400): Creating request for [cloudius-systems.com][0x3][BE_REQ_INITGROUPS][1][name=avi@cloudius-systems.com:-] (Wed Aug 30 06:59:11 2017) [sssd[pam]] [sbus_add_timeout] (0x2000): 0x7fd4f7030710 (Wed Aug 30 06:59:11 2017) [sssd[pam]] [sss_dp_internal_get_send] (0x0400): Entering request [0x7fd4f5f68030:3:avi@cloudius-systems.com@cloudius-systems.com] (Wed Aug 30 06:59:11 2017) [sssd[pam]] [sbus_remove_timeout] (0x2000): 0x7fd4f7030710 (Wed Aug 30 06:59:11 2017) [sssd[pam]] [sss_dp_get_reply] (0x1000): Got reply from Data Provider - DP error code: 0 errno: 0 error message: Success (Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_check_user_search] (0x0100): Requesting info for [avi@cloudius-systems.com] (Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_check_user_search] (0x0400): Returning info for user [avi@cloudius-systems.com@cloudius-systems.com] (Wed Aug 30 06:59:11 2017) [sssd[pam]] [pd_set_primary_name] (0x0400): User's primary name is avi@cloudius-systems.com (Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_initgr_cache_set] (0x2000): [avi] added to PAM initgroup cache (Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_dp_send_req] (0x0100): Sending request with the following data: (Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_print_data] (0x0100): command: SSS_PAM_ACCT_MGMT (Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_print_data] (0x0100): domain: cloudius-systems.com (Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_print_data] (0x0100): user: avi@cloudius-systems.com (Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_print_data] (0x0100): service: sshd (Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_print_data] (0x0100): tty: ssh (Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_print_data] (0x0100): ruser: not set (Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_print_data] (0x0100): rhost: 77.138.249.123 (Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_print_data] (0x0100): authtok type: 0 (Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_print_data] (0x0100): newauthtok type: 0 (Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_print_data] (0x0100): priv: 1 (Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_print_data] (0x0100): cli_pid: 3991 (Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_print_data] (0x0100): logon name: avi (Wed Aug 30 06:59:11 2017) [sssd[pam]] [sbus_add_timeout] (0x2000): 0x7fd4f702de30 (Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_dom_forwarder] (0x0100): pam_dp_send_req returned 0 (Wed Aug 30 06:59:11 2017) [sssd[pam]] [sss_dp_req_destructor] (0x0400): Deleting request: [0x7fd4f5f68030:3:avi@cloudius-systems.com@cloudius-systems.com] (Wed Aug 30 06:59:13 2017) [sssd[pam]] [sbus_remove_timeout] (0x2000): 0x7fd4f702de30 (Wed Aug 30 06:59:13 2017) [sssd[pam]] [pam_dp_process_reply] (0x0200): received: [4 (System error)][cloudius-systems.com] (Wed Aug 30 06:59:13 2017) [sssd[pam]] [pam_reply] (0x0200): pam_reply called with result [4]: System error. (Wed Aug 30 06:59:13 2017) [sssd[pam]] [pam_reply] (0x0200): blen: 37 (Wed Aug 30 06:59:13 2017) [sssd[pam]] [client_recv] (0x0200): Client disconnected!
Any idea what went wrong?
sssd-users mailing list -- sssd-users@lists.fedorahosted.org To unsubscribe send an email to sssd-users-leave@lists.fedorahosted.org
I managed to fix and forget about the problem already. It turned out that the VPS had selinux enabled, and the fix was to to exorcise anything selinux related from the configuration files.
I may go into selinux hell for saying this, but the only way I managed to get selinux working is to install a server from media and then turn the server off and disconnect it from the power cord.
On 09/08/2017 12:24 PM, Jakub Hrozek wrote:
First, I’m sorry your mail was stuck in moderation for so long. We receive large amount of spam lately and legitimate mails sometimes slip..
Second, you need to look into the domain logs and/or the child helpers (krb5_child, gpo_child) because that’s what emits the error. Please see https://docs.pagure.org/SSSD.sssd/users/troubleshooting.html and in general https://pagure.io/docs/SSSD/sssd/
On 30 Aug 2017, at 14:06, Avi Kivity avi@scylladb.com wrote:
Plain centos 7 box, sssd-1.14.0-43.el7_3.18.x86_64
Log says:
(Wed Aug 30 06:59:11 2017) [sssd[pam]] [sss_ncache_check_str] (0x2000): Checking negative cache for [NCE/USER/cloudius-systems.com/avi@cloudius-systems.com] (Wed Aug 30 06:59:11 2017) [sssd[pam]] [sss_dp_issue_request] (0x0400): Issuing request for [0x7fd4f5f68030:3:avi@cloudius-systems.com@cloudius-systems.com] (Wed Aug 30 06:59:11 2017) [sssd[pam]] [sss_dp_get_account_msg] (0x0400): Creating request for [cloudius-systems.com][0x3][BE_REQ_INITGROUPS][1][name=avi@cloudius-systems.com:-] (Wed Aug 30 06:59:11 2017) [sssd[pam]] [sbus_add_timeout] (0x2000): 0x7fd4f7030710 (Wed Aug 30 06:59:11 2017) [sssd[pam]] [sss_dp_internal_get_send] (0x0400): Entering request [0x7fd4f5f68030:3:avi@cloudius-systems.com@cloudius-systems.com] (Wed Aug 30 06:59:11 2017) [sssd[pam]] [sbus_remove_timeout] (0x2000): 0x7fd4f7030710 (Wed Aug 30 06:59:11 2017) [sssd[pam]] [sss_dp_get_reply] (0x1000): Got reply from Data Provider - DP error code: 0 errno: 0 error message: Success (Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_check_user_search] (0x0100): Requesting info for [avi@cloudius-systems.com] (Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_check_user_search] (0x0400): Returning info for user [avi@cloudius-systems.com@cloudius-systems.com] (Wed Aug 30 06:59:11 2017) [sssd[pam]] [pd_set_primary_name] (0x0400): User's primary name is avi@cloudius-systems.com (Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_initgr_cache_set] (0x2000): [avi] added to PAM initgroup cache (Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_dp_send_req] (0x0100): Sending request with the following data: (Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_print_data] (0x0100): command: SSS_PAM_ACCT_MGMT (Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_print_data] (0x0100): domain: cloudius-systems.com (Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_print_data] (0x0100): user: avi@cloudius-systems.com (Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_print_data] (0x0100): service: sshd (Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_print_data] (0x0100): tty: ssh (Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_print_data] (0x0100): ruser: not set (Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_print_data] (0x0100): rhost: 77.138.249.123 (Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_print_data] (0x0100): authtok type: 0 (Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_print_data] (0x0100): newauthtok type: 0 (Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_print_data] (0x0100): priv: 1 (Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_print_data] (0x0100): cli_pid: 3991 (Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_print_data] (0x0100): logon name: avi (Wed Aug 30 06:59:11 2017) [sssd[pam]] [sbus_add_timeout] (0x2000): 0x7fd4f702de30 (Wed Aug 30 06:59:11 2017) [sssd[pam]] [pam_dom_forwarder] (0x0100): pam_dp_send_req returned 0 (Wed Aug 30 06:59:11 2017) [sssd[pam]] [sss_dp_req_destructor] (0x0400): Deleting request: [0x7fd4f5f68030:3:avi@cloudius-systems.com@cloudius-systems.com] (Wed Aug 30 06:59:13 2017) [sssd[pam]] [sbus_remove_timeout] (0x2000): 0x7fd4f702de30 (Wed Aug 30 06:59:13 2017) [sssd[pam]] [pam_dp_process_reply] (0x0200): received: [4 (System error)][cloudius-systems.com] (Wed Aug 30 06:59:13 2017) [sssd[pam]] [pam_reply] (0x0200): pam_reply called with result [4]: System error. (Wed Aug 30 06:59:13 2017) [sssd[pam]] [pam_reply] (0x0200): blen: 37 (Wed Aug 30 06:59:13 2017) [sssd[pam]] [client_recv] (0x0200): Client disconnected!
Any idea what went wrong?
sssd-users mailing list -- sssd-users@lists.fedorahosted.org To unsubscribe send an email to sssd-users-leave@lists.fedorahosted.org
sssd-users@lists.fedorahosted.org
-
Avi Kivity -
Jakub Hrozek