hey all, Im new to sssd and ldap so be gentle =)
I've followed some guides on how to set up sssd ldap client authentication on Centos 6.3 but mine doesnt seem to be working here is my sssd.conf
----- [sssd] config_file_version = 2 services = nss, pam domains = default
[nss] filter_users = root,ldap,named,avahi,haldaemon,dbus,radiusd,news,nscd
[pam]
[domain/default] auth_provider = ldap debug_level = 9 enumerate = True cache_credentials = True chpass_provider = ldap entry_cache_timeout = 600 krb5_realm = EXAMPLE.COM krb5_server = kerberos.example.com ldap_chpass_uri = ldaps://xx.xx.xx.xx:<PORT>/ ldap_force_upper_case_realm = True id_provider = ldap ldap_group_member = uniquemember ldap_group_object_class = group ldap_id_use_start_tls = False ldap_pwd_policy = none ldap_search_base = ou=organizationunit3,ou=organizationunit2,ou=organizationunit1,o=example ldap_schema = rfc2307bis ldap_tls_cacertdir = /etc/openldap/cacerts ldap_tls_reqcert = never ldap_uri = ldaps://xx.xx.xx.xx:<PORT>/ ldap_user_gecos = displayName ldap_user_home_directory = unixHomeDirectory ldap_user_name = cn ldap_user_object_class = user
------
ldapsearcg -z 'cn=username' comes back with all the information about the user
but id username takes a really long time and then returns no such user.
here is a piece of the log:
-------------------------------------------------------------------------- (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [server_setup] (0x0400): CONFDB: /var/lib/sss/db/config.ldb (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [recreate_ares_channel] (0x0100): Initializing new c-ares channel (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [resolv_get_family_order] (0x1000): Lookup order: ipv4_first (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [fo_context_init] (0x0400): Created new fail over context, retry timeout is 30 (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [confdb_get_domain_internal] (0x1000): pwd_expiration_warning is -1 (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sysdb_domain_init_internal] (0x0200): DB File for default: /var/lib/sss/db/cache_default.ldb (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [ldb] (0x4000): Added timed event "ltdb_callback": 0x14778c0
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [ldb] (0x4000): Added timed event "ltdb_timeout": 0x148d4d0
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [ldb] (0x4000): Destroying timer event 0x148d4d0 "ltdb_timeout"
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [ldb] (0x4000): Ending timer event 0x14778c0 "ltdb_callback"
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [ldb] (0x0400): asq: Unable to register control with rootdse! (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [ldb] (0x4000): Added timed event "ltdb_callback": 0x148f840
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [ldb] (0x4000): Added timed event "ltdb_timeout": 0x148d4d0
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [ldb] (0x4000): Destroying timer event 0x148d4d0 "ltdb_timeout"
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [ldb] (0x4000): Ending timer event 0x148f840 "ltdb_callback"
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [ldb] (0x4000): Added timed event "ltdb_callback": 0x14778c0
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [ldb] (0x4000): Added timed event "ltdb_timeout": 0x1490390
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [ldb] (0x4000): Destroying timer event 0x1490390 "ltdb_timeout"
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [ldb] (0x4000): Ending timer event 0x14778c0 "ltdb_callback"
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sbus_init_connection] (0x0200): Adding connection 14905E0 (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sbus_add_watch] (0x2000): 0x1490a30/0x148f9e0 (15), -/W (enabled) (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sbus_toggle_watch] (0x4000): 0x1490a30/0x148d2f0 (15), R/- (disabled) (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [monitor_common_send_id] (0x0100): Sending ID: (%BE_default,1) (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sbus_add_timeout] (0x2000): 0x1490db0 (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sbus_toggle_watch] (0x4000): 0x1490a30/0x148d2f0 (15), R/- (enabled) (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sbus_toggle_watch] (0x4000): 0x1490a30/0x148f9e0 (15), -/W (disabled) (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sss_names_init] (0x0100): Using re [(?P<name>[^@]+)@?(?P<domain>[^@]*$)]. (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [create_socket_symlink] (0x1000): Symlinking the dbus path /var/lib/sss/pipes/private/sbus-dp_default.639 to a link /var/lib/sss/pipes/private/sbus-dp_default (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sbus_new_server] (0x0400): D-BUS Server listening on unix:path=/var/lib/sss/pipes/private/sbus-dp_default.639,guid=604ced1a38c1615f3905892500000097 (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sbus_add_watch] (0x2000): 0x148cec0/0x148da70 (16), R/- (enabled) (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [load_backend_module] (0x1000): Loading backend [ldap] with path [/usr/lib64/sssd/libsss_ldap.so]. (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options] (0x0400): Option ldap_uri has value ldaps://xx.xx.xx.xx:<port>/ (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options] (0x0400): Option ldap_backup_uri has no value (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options] (0x0400): Option ldap_search_base has value ou=organizationunit3,ou=organizationunit2,ou=organizationunit1,o=example (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options] (0x0400): Option ldap_default_bind_dn has no value (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options] (0x0400): Option ldap_default_authtok_type has value password (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options] (0x0400): Option ldap_default_authtok has no binary value. (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options] (0x0400): Option ldap_search_timeout has value 6 (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options] (0x0400): Option ldap_network_timeout has value 6 (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options] (0x0400): Option ldap_opt_timeout has value 6 (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options] (0x0400): Option ldap_tls_reqcert has value never (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options] (0x0400): Option ldap_user_search_base has no value (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options] (0x0400): Option ldap_user_search_scope has value sub (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options] (0x0400): Option ldap_user_search_filter has no value (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options] (0x0400): Option ldap_group_search_base has no value (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options] (0x0400): Option ldap_group_search_scope has value sub (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options] (0x0400): Option ldap_group_search_filter has no value (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options] (0x0400): Option ldap_service_search_base has no value (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options] (0x0400): Option ldap_sudo_search_base has no value (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options] (0x0400): Option ldap_sudo_full_refresh_interval has value 21600 (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options] (0x0400): Option ldap_sudo_smart_refresh_interval has value 900 (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options] (0x0400): Option ldap_sudo_use_host_filter is TRUE (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options] (0x0400): Option ldap_sudo_hostnames has no value (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options] (0x0400): Option ldap_sudo_ip has no value (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options] (0x0400): Option ldap_sudo_include_netgroups is TRUE (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options] (0x0400): Option ldap_sudo_include_regexp is TRUE (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options] (0x0400): Option ldap_autofs_search_base has no value (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options] (0x0400): Option ldap_schema has value rfc2307bis (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options] (0x0400): Option ldap_offline_timeout has value 60 (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options] (0x0400): Option ldap_force_upper_case_realm is FALSE (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options] (0x0400): Option ldap_enumeration_refresh_timeout has value 300 (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options] (0x0400): Option ldap_purge_cache_timeout has value 10800 (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options] (0x0400): Option ldap_tls_cacert has no value (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options] (0x0400): Option ldap_tls_cacertdir has value /etc/openldap/cacerts (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options] (0x0400): Option ldap_tls_cert has no value (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options] (0x0400): Option ldap_tls_key has no value (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options] (0x0400): Option ldap_tls_cipher_suite has no value (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options] (0x0400): Option ldap_id_use_start_tls is FALSE (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options] (0x0400): Option ldap_id_mapping is FALSE (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options] (0x0400): Option ldap_sasl_mech has no value (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options] (0x0400): Option ldap_sasl_authid has no value (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options] (0x0400): Option ldap_sasl_realm has no value (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options] (0x0400): Option ldap_sasl_minssf has value -1 (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options] (0x0400): Option ldap_krb5_keytab has no value (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options] (0x0400): Option ldap_krb5_init_creds is TRUE (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options] (0x0400): Option krb5_server has no value (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options] (0x0400): Option krb5_backup_server has no value (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options] (0x0400): Option krb5_realm has no value (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options] (0x0400): Option krb5_canonicalize is TRUE (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options] (0x0400): Option ldap_pwd_policy has value none (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options] (0x0400): Option ldap_referrals is TRUE (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options] (0x0400): Option account_cache_expiration has value 0 (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options] (0x0400): Option ldap_dns_service_name has value ldap (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options] (0x0400): Option ldap_krb5_ticket_lifetime has value 86400 (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options] (0x0400): Option ldap_access_filter has no value (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options] (0x0400): Option ldap_netgroup_search_base has no value (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options] (0x0400): Option ldap_group_nesting_level has value 2 (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options] (0x0400): Option ldap_deref has no value (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options] (0x0400): Option ldap_account_expire_policy has no value (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options] (0x0400): Option ldap_access_order has value filter (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options] (0x0400): Option ldap_chpass_uri has value ldaps://xx.xx.xx.xx:<port>/ (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options] (0x0400): Option ldap_chpass_backup_uri has no value (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options] (0x0400): Option ldap_chpass_dns_service_name has no value (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options] (0x0400): Option ldap_chpass_update_last_change is FALSE (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options] (0x0400): Option ldap_enumeration_search_timeout has value 60 (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options] (0x0400): Option ldap_auth_disable_tls_never_use_in_production is FALSE (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options] (0x0400): Option ldap_page_size has value 1000 (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options] (0x0400): Option ldap_deref_threshold has value 10 (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options] (0x0400): Option ldap_sasl_canonicalize is FALSE (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options] (0x0400): Option ldap_connection_expire_timeout has value 900 (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options] (0x0400): Option ldap_disable_paging is FALSE (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options] (0x0400): Option ldap_idmap_range_min has value 200000 (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options] (0x0400): Option ldap_idmap_range_max has value 2000200000 (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options] (0x0400): Option ldap_idmap_range_size has value 200000 (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options] (0x0400): Option ldap_idmap_autorid_compat is FALSE (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options] (0x0400): Option ldap_idmap_default_domain has no value (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options] (0x0400): Option ldap_idmap_default_domain_sid has no value (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options] (0x0400): Option ldap_groups_use_matching_rule_in_chain is FALSE (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options] (0x0400): Option ldap_initgroups_use_matching_rule_in_chain is FALSE (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [ldap_get_options] (0x0400): Option ldap_user_search_base set to ou=organizationunit3,ou=organizationunit2,ou=organizationunit1,o=example (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [ldap_get_options] (0x0400): Option ldap_group_search_base set to ou=organizationunit3,ou=organizationunit2,ou=organizationunit1,o=example (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [ldap_get_options] (0x0400): Option ldap_netgroup_search_base set to ou=organizationunit3,ou=organizationunit2,ou=organizationunit1,o=example (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [ldap_get_options] (0x0400): Option ldap_service_search_base set to ou=organizationunit3,ou=organizationunit2,ou=organizationunit1,o=example (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [common_parse_search_base] (0x0100): Search base added: [DEFAULT][ou=organizationunit3,ou=organizationunit2,ou=organizationunit1,o=example][SUBTREE][] (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [common_parse_search_base] (0x0100): Search base added: [USER][ou=organizationunit3,ou=organizationunit2,ou=organizationunit1,o=example][SUBTREE][] (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [common_parse_search_base] (0x0100): Search base added: [GROUP][ou=organizationunit3,ou=organizationunit2,ou=organizationunit1,o=example][SUBTREE][] (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [common_parse_search_base] (0x0100): Search base added: [NETGROUP][ou=organizationunit3,ou=organizationunit2,ou=organizationunit1,o=example][SUBTREE][] (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [common_parse_search_base] (0x0100): Search base added: [SERVICE][ou=organizationunit3,ou=organizationunit2,ou=organizationunit1,o=example][SUBTREE][] (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map] (0x0400): Option ldap_entry_usn has no value (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map] (0x0400): Option ldap_rootdse_last_usn has no value (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map] (0x0400): Option ldap_user_object_class has value user (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map] (0x0400): Option ldap_user_name has value cn (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map] (0x0400): Option ldap_user_pwd has value userPassword (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map] (0x0400): Option ldap_user_uid_number has value uidNumber (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map] (0x0400): Option ldap_user_gid_number has value gidNumber (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map] (0x0400): Option ldap_user_gecos has value displayName (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map] (0x0400): Option ldap_user_home_directory has value unixHomeDirectory (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map] (0x0400): Option ldap_user_shell has value loginShell (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map] (0x0400): Option ldap_user_principal has value krbPrincipalName (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map] (0x0400): Option ldap_user_fullname has value cn (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map] (0x0400): Option ldap_user_member_of has value memberOf (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map] (0x0400): Option ldap_user_uuid has value nsUniqueId (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map] (0x0400): Option ldap_user_objectsid has no value (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map] (0x0400): Option ldap_user_primary_group has no value (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map] (0x0400): Option ldap_user_modify_timestamp has value modifyTimestamp (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map] (0x0400): Option ldap_user_entry_usn has no value (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map] (0x0400): Option ldap_user_shadow_last_change has value shadowLastChange (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map] (0x0400): Option ldap_user_shadow_min has value shadowMin (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map] (0x0400): Option ldap_user_shadow_max has value shadowMax (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map] (0x0400): Option ldap_user_shadow_warning has value shadowWarning (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map] (0x0400): Option ldap_user_shadow_inactive has value shadowInactive (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map] (0x0400): Option ldap_user_shadow_expire has value shadowExpire (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map] (0x0400): Option ldap_user_shadow_flag has value shadowFlag (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map] (0x0400): Option ldap_user_krb_last_pwd_change has value krbLastPwdChange (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map] (0x0400): Option ldap_user_krb_password_expiration has value krbPasswordExpiration (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map] (0x0400): Option ldap_pwd_attribute has value pwdAttribute (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map] (0x0400): Option ldap_user_authorized_service has value authorizedService (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map] (0x0400): Option ldap_user_ad_account_expires has value accountExpires (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map] (0x0400): Option ldap_user_ad_user_account_control has value userAccountControl (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map] (0x0400): Option ldap_ns_account_lock has value nsAccountLock (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map] (0x0400): Option ldap_user_authorized_host has value host (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map] (0x0400): Option ldap_user_nds_login_disabled has value loginDisabled (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map] (0x0400): Option ldap_user_nds_login_expiration_time has value loginExpirationTime (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map] (0x0400): Option ldap_user_nds_login_allowed_time_map has value loginAllowedTimeMap (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map] (0x0400): Option ldap_user_ssh_public_key has no value (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map] (0x0400): Option ldap_group_object_class has value group (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map] (0x0400): Option ldap_group_name has value cn (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map] (0x0400): Option ldap_group_pwd has value userPassword (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map] (0x0400): Option ldap_group_gid_number has value gidNumber (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map] (0x0400): Option ldap_group_member has value uniquemember (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map] (0x0400): Option ldap_group_uuid has value nsUniqueId (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map] (0x0400): Option ldap_group_objectsid has no value (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map] (0x0400): Option ldap_group_modify_timestamp has value modifyTimestamp (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map] (0x0400): Option ldap_group_entry_usn has no value (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map] (0x0400): Option ldap_netgroup_object_class has value nisNetgroup (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map] (0x0400): Option ldap_netgroup_name has value cn (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map] (0x0400): Option ldap_netgroup_member has value memberNisNetgroup (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map] (0x0400): Option ldap_netgroup_triple has value nisNetgroupTriple (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map] (0x0400): Option ldap_netgroup_uuid has value nsUniqueId (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map] (0x0400): Option ldap_netgroup_modify_timestamp has value modifyTimestamp (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map] (0x0400): Option ldap_service_object_class has value ipService (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map] (0x0400): Option ldap_service_name has value cn (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map] (0x0400): Option ldap_service_port has value ipServicePort (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map] (0x0400): Option ldap_service_proto has value ipServiceProtocol (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map] (0x0400): Option ldap_service_entry_usn has no value (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [krb5_try_kdcip] (0x0100): No KDC found in configuration, trying legacy option (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sssm_ldap_id_init] (0x1000): Service name for discovery set to ldap (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [fo_new_service] (0x0400): Creating new service 'LDAP' (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_urls_init] (0x0400): Added URI ldaps://xx.xx.xx.xx:<port>/ (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [fo_add_server] (0x0080): Adding new server 'xx.xx.xx.xx', to service 'LDAP' (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [ldb] (0x4000): Added timed event "ltdb_callback": 0x149a4b0
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [ldb] (0x4000): Added timed event "ltdb_timeout": 0x149a5a0
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [ldb] (0x4000): Destroying timer event 0x149a5a0 "ltdb_timeout"
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [ldb] (0x4000): Ending timer event 0x149a4b0 "ltdb_callback"
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [ldap_id_enumerate_set_timer] (0x0400): Scheduling next enumeration at 1366735849.298624 (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [be_process_init] (0x2000): ID backend target successfully loaded from provider [ldap]. (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [load_backend_module] (0x1000): Backend [ldap] already loaded. (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sssm_ldap_id_init] (0x2000): Re-using sdap_id_ctx for this provider (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [be_process_init] (0x2000): AUTH backend target successfully loaded from provider [ldap]. (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [load_backend_module] (0x0200): no module name found in confdb, using [permit]. (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [be_process_init] (0x2000): ACCESS backend target successfully loaded from provider [permit]. (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [load_backend_module] (0x1000): Backend [ldap] already loaded. (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sssm_ldap_id_init] (0x2000): Re-using sdap_id_ctx for this provider (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [fo_new_service] (0x0400): Creating new service 'LDAP_CHPASS' (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_urls_init] (0x0400): Added URI ldaps://xx.xx.xx.xx:<port>/ (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [fo_add_server] (0x0080): Adding new server 'xx.xx.xx.xx', to service 'LDAP_CHPASS' (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [be_process_init] (0x2000): CHPASS backend target successfully loaded from provider [ldap]. (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [be_process_init_sudo] (0x0400): SUDO is not listed in services, disabling SUDO module. (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [be_process_init] (0x0080): No SUDO module provided for [default] !! (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [load_backend_module] (0x0200): no module name found in confdb, using [ldap]. (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [load_backend_module] (0x1000): Backend [ldap] already loaded. (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sssm_ldap_id_init] (0x2000): Re-using sdap_id_ctx for this provider (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_autofs_init] (0x2000): Initializing autofs LDAP back end (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [ldap_get_autofs_options] (0x0200): Option ldap_autofs_search_base set to ou=organizationunit3,ou=organizationunit2,ou=organizationunit1,o=example (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [common_parse_search_base] (0x0100): Search base added: [AUTOFS][ou=organizationunit3,ou=organizationunit2,ou=organizationunit1,o=example][SUBTREE][] (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map] (0x0400): Option ldap_autofs_map_object_class has value automountMap (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map] (0x0400): Option ldap_autofs_map_name has value automountMapName (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map] (0x0400): Option ldap_autofs_entry_object_class has value automount (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map] (0x0400): Option ldap_autofs_entry_key has value automountKey (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map] (0x0400): Option ldap_autofs_entry_value has value automountInformation (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [be_process_init] (0x2000): autofs backend target successfully loaded from provider [ldap]. (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [load_backend_module] (0x0200): no module name found in confdb, using [ldap]. (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [load_backend_module] (0x1000): Backend [ldap] already loaded. (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [be_process_init] (0x0020): No selinux module provided for [default] !! (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [load_backend_module] (0x0200): no module name found in confdb, using [ldap]. (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [load_backend_module] (0x1000): Backend [ldap] already loaded. (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [be_process_init] (0x0020): No host info module provided for [default] !! (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [load_backend_module] (0x0200): no module name found in confdb, using [ldap]. (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [load_backend_module] (0x1000): Backend [ldap] already loaded. (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [be_process_init] (0x0020): Subdomains are not supported for [default] !! (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [main] (0x0400): Backend provider (default) started! (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sbus_dispatch] (0x4000): dbus conn: 14905E0 (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sbus_dispatch] (0x4000): dbus conn: 14905E0 (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sbus_toggle_watch] (0x4000): 0x1490a30/0x148d2f0 (15), R/- (disabled) (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sbus_toggle_watch] (0x4000): 0x1490a30/0x148f9e0 (15), -/W (enabled) (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sbus_toggle_watch] (0x4000): 0x1490a30/0x148d2f0 (15), R/- (enabled) (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sbus_toggle_watch] (0x4000): 0x1490a30/0x148f9e0 (15), -/W (disabled) (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sbus_remove_timeout] (0x2000): 0x1490db0 (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sbus_dispatch] (0x4000): dbus conn: 14905E0 (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sbus_dispatch] (0x4000): Dispatching. (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [id_callback] (0x0100): Got id ack and version (1) from Monitor (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sbus_server_init_new_connection] (0x0200): Entering. (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sbus_server_init_new_connection] (0x0200): Adding connection 0x149b3f0. (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sbus_init_connection] (0x0200): Adding connection 149B3F0 (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sbus_add_watch] (0x2000): 0x149a760/0x149bb40 (18), -/W (disabled) (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sbus_toggle_watch] (0x4000): 0x149a760/0x1499570 (18), R/- (enabled) (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sbus_server_init_new_connection] (0x0200): Got a connection (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [be_client_init] (0x0100): Set-up Backend ID timeout [0x149be50] (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sbus_dispatch] (0x4000): dbus conn: 149B3F0 (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sbus_toggle_watch] (0x4000): 0x149a760/0x1499570 (18), R/- (disabled) (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sbus_toggle_watch] (0x4000): 0x149a760/0x149bb40 (18), -/W (enabled) (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sbus_toggle_watch] (0x4000): 0x149a760/0x1499570 (18), R/- (enabled) (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sbus_toggle_watch] (0x4000): 0x149a760/0x149bb40 (18), -/W (disabled) (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sbus_dispatch] (0x4000): dbus conn: 149B3F0 (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sbus_dispatch] (0x4000): Dispatching. (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sbus_message_handler] (0x4000): Received SBUS method [RegisterService] (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [client_registration] (0x0100): Cancel DP ID timeout [0x149be50] (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [client_registration] (0x0100): Added Frontend client [PAM] (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sbus_server_init_new_connection] (0x0200): Entering. (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sbus_server_init_new_connection] (0x0200): Adding connection 0x14a0b80. (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sbus_init_connection] (0x0200): Adding connection 14A0B80 (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sbus_add_watch] (0x2000): 0x14a11c0/0x149c0c0 (19), -/W (disabled) (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sbus_toggle_watch] (0x4000): 0x14a11c0/0x149c110 (19), R/- (enabled) (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sbus_server_init_new_connection] (0x0200): Got a connection (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [be_client_init] (0x0100): Set-up Backend ID timeout [0x14a1430] (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sbus_dispatch] (0x4000): dbus conn: 14A0B80 (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sbus_toggle_watch] (0x4000): 0x14a11c0/0x149c110 (19), R/- (disabled) (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sbus_toggle_watch] (0x4000): 0x14a11c0/0x149c0c0 (19), -/W (enabled) (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sbus_toggle_watch] (0x4000): 0x14a11c0/0x149c110 (19), R/- (enabled) (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sbus_toggle_watch] (0x4000): 0x14a11c0/0x149c0c0 (19), -/W (disabled) (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sbus_dispatch] (0x4000): dbus conn: 14A0B80 (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sbus_dispatch] (0x4000): Dispatching. (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sbus_message_handler] (0x4000): Received SBUS method [RegisterService] (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [client_registration] (0x0100): Cancel DP ID timeout [0x14a1430] (Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [client_registration] (0x0100): Added Frontend client [NSS] (Tue Apr 23 12:50:40 2013) [sssd[be[default]]] [sbus_dispatch] (0x4000): dbus conn: 14A0B80 (Tue Apr 23 12:50:40 2013) [sssd[be[default]]] [sbus_dispatch] (0x4000): Dispatching. (Tue Apr 23 12:50:40 2013) [sssd[be[default]]] [sbus_message_handler] (0x4000): Received SBUS method [getDomains] (Tue Apr 23 12:50:40 2013) [sssd[be[default]]] [be_get_subdomains] (0x2000): Undefined backend target. (Tue Apr 23 12:50:40 2013) [sssd[be[default]]] [sbus_dispatch] (0x4000): dbus conn: 14A0B80 (Tue Apr 23 12:50:40 2013) [sssd[be[default]]] [sbus_dispatch] (0x4000): Dispatching. (Tue Apr 23 12:50:40 2013) [sssd[be[default]]] [sbus_message_handler] (0x4000): Received SBUS method [getAccountInfo] (Tue Apr 23 12:50:40 2013) [sssd[be[default]]] [be_get_account_info] (0x0100): Got request for [4097][1][name=testuser] (Tue Apr 23 12:50:40 2013) [sssd[be[default]]] [sdap_id_op_connect_step] (0x4000): beginning to connect (Tue Apr 23 12:50:40 2013) [sssd[be[default]]] [fo_resolve_service_send] (0x0100): Trying to resolve service 'LDAP' (Tue Apr 23 12:50:40 2013) [sssd[be[default]]] [get_server_status] (0x1000): Status of server 'xx.xx.xx.xx' is 'name not resolved' (Tue Apr 23 12:50:40 2013) [sssd[be[default]]] [get_port_status] (0x1000): Port status of port <port> for server 'xx.xx.xx.xx' is 'neutral' (Tue Apr 23 12:50:40 2013) [sssd[be[default]]] [fo_resolve_service_activate_timeout] (0x2000): Resolve timeout set to 10 seconds (Tue Apr 23 12:50:40 2013) [sssd[be[default]]] [get_server_status] (0x1000): Status of server 'xx.xx.xx.xx' is 'name not resolved' (Tue Apr 23 12:50:40 2013) [sssd[be[default]]] [set_server_common_status] (0x0100): Marking server 'xx.xx.xx.xx' as 'resolving name' (Tue Apr 23 12:50:40 2013) [sssd[be[default]]] [set_server_common_status] (0x0100): Marking server 'xx.xx.xx.xx' as 'name resolved' (Tue Apr 23 12:50:40 2013) [sssd[be[default]]] [be_resolve_server_process] (0x1000): Saving the first resolved server (Tue Apr 23 12:50:40 2013) [sssd[be[default]]] [be_resolve_server_process] (0x0200): Found address for server xx.xx.xx.xx: [xx.xx.xx.xx] TTL 7200 (Tue Apr 23 12:50:40 2013) [sssd[be[default]]] [sdap_uri_callback] (0x0400): Constructed uri 'ldaps://xx.xx.xx.xx:<port>/' (Tue Apr 23 12:50:40 2013) [sssd[be[default]]] [sss_ldap_init_send] (0x4000): Using file descriptor [20] for LDAP connection. (Tue Apr 23 12:50:40 2013) [sssd[be[default]]] [sss_ldap_init_send] (0x0400): Setting 6 seconds timeout for connecting (Tue Apr 23 12:51:29 2013) [sssd[be[default]]] [sdap_ldap_connect_callback_add] (0x1000): New LDAP connection to [ldaps://xx.xx.xx.xx:<port>/??base] with fd [20]. (Tue Apr 23 12:51:29 2013) [sssd[be[default]]] [sdap_get_rootdse_send] (0x4000): Getting rootdse (Tue Apr 23 12:51:29 2013) [sssd[be[default]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(objectclass=*)][]. (Tue Apr 23 12:51:29 2013) [sssd[be[default]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [*] (Tue Apr 23 12:51:29 2013) [sssd[be[default]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [altServer] (Tue Apr 23 12:51:29 2013) [sssd[be[default]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [namingContexts] (Tue Apr 23 12:51:29 2013) [sssd[be[default]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [supportedControl] (Tue Apr 23 12:51:29 2013) [sssd[be[default]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [supportedExtension] (Tue Apr 23 12:51:29 2013) [sssd[be[default]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [supportedFeatures] (Tue Apr 23 12:51:29 2013) [sssd[be[default]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [supportedLDAPVersion] (Tue Apr 23 12:51:29 2013) [sssd[be[default]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [supportedSASLMechanisms] (Tue Apr 23 12:51:29 2013) [sssd[be[default]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [domainControllerFunctionality] (Tue Apr 23 12:51:29 2013) [sssd[be[default]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [defaultNamingContext] (Tue Apr 23 12:51:29 2013) [sssd[be[default]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [lastUSN] (Tue Apr 23 12:51:29 2013) [sssd[be[default]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [highestCommittedUSN] ---------------------------------------------------------------------------
To me it looks like its searching but not finding for some reason
any help would be much appreciated.
-Brandon
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
On Tue 23 Apr 2013 12:55:19 PM EDT, Brandon Foster wrote:
hey all, Im new to sssd and ldap so be gentle =)
I've followed some guides on how to set up sssd ldap client authentication on Centos 6.3 but mine doesnt seem to be working here is my sssd.conf
----- [sssd] config_file_version = 2 services = nss, pam domains = default
[nss] filter_users = root,ldap,named,avahi,haldaemon,dbus,radiusd,news,nscd
[pam]
[domain/default] auth_provider = ldap debug_level = 9 enumerate = True cache_credentials = True chpass_provider = ldap entry_cache_timeout = 600 krb5_realm = EXAMPLE.COM krb5_server = kerberos.example.com ldap_chpass_uri = ldaps://xx.xx.xx.xx:<PORT>/ ldap_force_upper_case_realm = True id_provider = ldap ldap_group_member = uniquemember ldap_group_object_class = group ldap_id_use_start_tls = False ldap_pwd_policy = none ldap_search_base = ou=organizationunit3,ou=organizationunit2,ou=organizationunit1,o=example
ldap_schema = rfc2307bis
ldap_tls_cacertdir = /etc/openldap/cacerts ldap_tls_reqcert = never ldap_uri = ldaps://xx.xx.xx.xx:<PORT>/ ldap_user_gecos = displayName ldap_user_home_directory = unixHomeDirectory ldap_user_name = cn ldap_user_object_class = user
ldapsearcg -z 'cn=username' comes back with all the information about the user
but id username takes a really long time and then returns no such user.
here is a piece of the log:
...
(Tue Apr 23 12:51:29 2013) [sssd[be[default]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [defaultNamingContext] (Tue Apr 23 12:51:29 2013) [sssd[be[default]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [lastUSN] (Tue Apr 23 12:51:29 2013) [sssd[be[default]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [highestCommittedUSN]
To me it looks like its searching but not finding for some reason
any help would be much appreciated.
You truncated the log too early. It is only showing the connection to the LDAP server (and the determination of server capabilities). Please include the actual user search that should follow that.
I'm guessing your user might be missing something important, like uidNumber or gidNumber (or it's stored in a non-standard attribute name).
On Tue, Apr 23, 2013 at 10:00 AM, Stephen Gallagher sgallagh@redhat.com wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
On Tue 23 Apr 2013 12:55:19 PM EDT, Brandon Foster wrote:
hey all, Im new to sssd and ldap so be gentle =)
I've followed some guides on how to set up sssd ldap client authentication on Centos 6.3 but mine doesnt seem to be working here is my sssd.conf
----- [sssd] config_file_version = 2 services = nss, pam domains = default
[nss] filter_users = root,ldap,named,avahi,haldaemon,dbus,radiusd,news,nscd
[pam]
[domain/default] auth_provider = ldap debug_level = 9 enumerate = True cache_credentials = True chpass_provider = ldap entry_cache_timeout = 600 krb5_realm = EXAMPLE.COM krb5_server = kerberos.example.com ldap_chpass_uri = ldaps://xx.xx.xx.xx:<PORT>/ ldap_force_upper_case_realm = True id_provider = ldap ldap_group_member = uniquemember ldap_group_object_class = group ldap_id_use_start_tls = False ldap_pwd_policy = none ldap_search_base = ou=organizationunit3,ou=organizationunit2,ou=organizationunit1,o=example
ldap_schema = rfc2307bis
ldap_tls_cacertdir = /etc/openldap/cacerts ldap_tls_reqcert = never ldap_uri = ldaps://xx.xx.xx.xx:<PORT>/ ldap_user_gecos = displayName ldap_user_home_directory = unixHomeDirectory ldap_user_name = cn ldap_user_object_class = user
ldapsearcg -z 'cn=username' comes back with all the information about the user
but id username takes a really long time and then returns no such user.
here is a piece of the log:
...
(Tue Apr 23 12:51:29 2013) [sssd[be[default]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [defaultNamingContext] (Tue Apr 23 12:51:29 2013) [sssd[be[default]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [lastUSN] (Tue Apr 23 12:51:29 2013) [sssd[be[default]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [highestCommittedUSN]
To me it looks like its searching but not finding for some reason
any help would be much appreciated.
You truncated the log too early. It is only showing the connection to the LDAP server (and the determination of server capabilities). Please include the actual user search that should follow that.
I'm guessing your user might be missing something important, like uidNumber or gidNumber (or it's stored in a non-standard attribute name). -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.13 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
iEYEARECAAYFAlF2vhMACgkQeiVVYja6o6MhFwCgq5BD+hVyPfOiTZxCJ/Hyw79U OaAAnjc9WncvDw+IofzaQUTQgtlGZcVS =VeAV -----END PGP SIGNATURE----- _______________________________________________ sssd-users mailing list sssd-users@lists.fedorahosted.org https://lists.fedorahosted.org/mailman/listinfo/sssd-users
hey thanks for the quick reply.
that is the end of the log after the user search has finish. the next line after that is:
------------------- (Tue Apr 23 12:52:29 2013) [sssd[be[default]]] [server_setup] (0x0400): CONFDB: /var/lib/sss/db/config.ldb (Tue Apr 23 12:52:29 2013) [sssd[be[default]]] [recreate_ares_channel] (0x0100): Initializing new c-ares channel (Tue Apr 23 12:52:29 2013) [sssd[be[default]]] [resolv_get_family_order] (0x1000): Lookup order: ipv4_first (Tue Apr 23 12:52:29 2013) [sssd[be[default]]] [fo_context_init] (0x0400): Created new fail over context, retry timeout is 30 (Tue Apr 23 12:52:29 2013) [sssd[be[default]]] [confdb_get_domain_internal] (0x1000): pwd_expiration_warning is -1 (Tue Apr 23 12:52:29 2013) [sssd[be[default]]] [sysdb_domain_init_internal] (0x0200): DB File for default: /var/lib/sss/db/cache_default.ldb (Tue Apr 23 12:52:29 2013) [sssd[be[default]]] [ldb] (0x4000): Added timed event "ltdb_callback": 0x10e98c0
(Tue Apr 23 12:52:29 2013) [sssd[be[default]]] [ldb] (0x4000): Added timed event "ltdb_timeout": 0x10ff4d0 .... --------------- which is the same as the very beginning of the log.
the start of the user search is in there near the end, but that is where the log ends when taken after the id search has failed.
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
On 04/23/2013 01:44 PM, Brandon Foster wrote:
hey thanks for the quick reply.
that is the end of the log after the user search has finish. the next line after that is:
------------------- (Tue Apr 23 12:52:29 2013) [sssd[be[default]]] [server_setup] (0x0400): CONFDB: /var/lib/sss/db/config.ldb (Tue Apr 23 12:52:29 2013) [sssd[be[default]]] [recreate_ares_channel] (0x0100): Initializing new c-ares channel (Tue Apr 23 12:52:29 2013) [sssd[be[default]]] [resolv_get_family_order] (0x1000): Lookup order: ipv4_first (Tue Apr 23 12:52:29 2013) [sssd[be[default]]] [fo_context_init] (0x0400): Created new fail over context, retry timeout is 30 (Tue Apr 23 12:52:29 2013) [sssd[be[default]]] [confdb_get_domain_internal] (0x1000): pwd_expiration_warning is -1 (Tue Apr 23 12:52:29 2013) [sssd[be[default]]] [sysdb_domain_init_internal] (0x0200): DB File for default: /var/lib/sss/db/cache_default.ldb (Tue Apr 23 12:52:29 2013) [sssd[be[default]]] [ldb] (0x4000): Added timed event "ltdb_callback": 0x10e98c0
(Tue Apr 23 12:52:29 2013) [sssd[be[default]]] [ldb] (0x4000): Added timed event "ltdb_timeout": 0x10ff4d0 .... --------------- which is the same as the very beginning of the log.
the start of the user search is in there near the end, but that is where the log ends when taken after the id search has failed.
Well, that tells us something. It tells us that apparently you experienced a crash and the SSSD was forced to restart the provider daemon.
Would you mind trying out the SSSD from CentOS 6.4 to see if this particular crash has already been fixed there? If not, please try to get a backtrace (of the 6.4 version of SSSD) with GDB. You will need to take the following steps:
yum install gdb debuginfo-install sssd gdb -p $(pidof sssd_be)
At the gdb prompt, type "continue".
When it eventually crashes and returns you to the prompt, type 'bt full' and copy all of the backtrace data into a text file (and attach it to an email).
On Tue, Apr 23, 2013 at 03:20:45PM -0400, Stephen Gallagher wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
On 04/23/2013 01:44 PM, Brandon Foster wrote:
hey thanks for the quick reply.
that is the end of the log after the user search has finish. the next line after that is:
------------------- (Tue Apr 23 12:52:29 2013) [sssd[be[default]]] [server_setup] (0x0400): CONFDB: /var/lib/sss/db/config.ldb (Tue Apr 23 12:52:29 2013) [sssd[be[default]]] [recreate_ares_channel] (0x0100): Initializing new c-ares channel (Tue Apr 23 12:52:29 2013) [sssd[be[default]]] [resolv_get_family_order] (0x1000): Lookup order: ipv4_first (Tue Apr 23 12:52:29 2013) [sssd[be[default]]] [fo_context_init] (0x0400): Created new fail over context, retry timeout is 30 (Tue Apr 23 12:52:29 2013) [sssd[be[default]]] [confdb_get_domain_internal] (0x1000): pwd_expiration_warning is -1 (Tue Apr 23 12:52:29 2013) [sssd[be[default]]] [sysdb_domain_init_internal] (0x0200): DB File for default: /var/lib/sss/db/cache_default.ldb (Tue Apr 23 12:52:29 2013) [sssd[be[default]]] [ldb] (0x4000): Added timed event "ltdb_callback": 0x10e98c0
(Tue Apr 23 12:52:29 2013) [sssd[be[default]]] [ldb] (0x4000): Added timed event "ltdb_timeout": 0x10ff4d0 .... --------------- which is the same as the very beginning of the log.
the start of the user search is in there near the end, but that is where the log ends when taken after the id search has failed.
Well, that tells us something. It tells us that apparently you experienced a crash and the SSSD was forced to restart the provider daemon.
Yes, I agree. The crash occurs while retrieving the rootDSE and I remember we had a number of issues with that in 6.3, especially if the server on the other end was Novell eDirectory.
There are currently no known SSSD crasher bugs related to rootDSE, so I believe the issue would be fixed when you upgrade.
Would you mind trying out the SSSD from CentOS 6.4 to see if this particular crash has already been fixed there? If not, please try to get a backtrace (of the 6.4 version of SSSD) with GDB. You will need to take the following steps:
yum install gdb debuginfo-install sssd gdb -p $(pidof sssd_be)
At the gdb prompt, type "continue".
When it eventually crashes and returns you to the prompt, type 'bt full' and copy all of the backtrace data into a text file (and attach it to an email).
On Wed, Apr 24, 2013 at 2:53 AM, Jakub Hrozek jhrozek@redhat.com wrote:
On Tue, Apr 23, 2013 at 03:20:45PM -0400, Stephen Gallagher wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
On 04/23/2013 01:44 PM, Brandon Foster wrote:
hey thanks for the quick reply.
that is the end of the log after the user search has finish. the next line after that is:
------------------- (Tue Apr 23 12:52:29 2013) [sssd[be[default]]] [server_setup] (0x0400): CONFDB: /var/lib/sss/db/config.ldb (Tue Apr 23 12:52:29 2013) [sssd[be[default]]] [recreate_ares_channel] (0x0100): Initializing new c-ares channel (Tue Apr 23 12:52:29 2013) [sssd[be[default]]] [resolv_get_family_order] (0x1000): Lookup order: ipv4_first (Tue Apr 23 12:52:29 2013) [sssd[be[default]]] [fo_context_init] (0x0400): Created new fail over context, retry timeout is 30 (Tue Apr 23 12:52:29 2013) [sssd[be[default]]] [confdb_get_domain_internal] (0x1000): pwd_expiration_warning is -1 (Tue Apr 23 12:52:29 2013) [sssd[be[default]]] [sysdb_domain_init_internal] (0x0200): DB File for default: /var/lib/sss/db/cache_default.ldb (Tue Apr 23 12:52:29 2013) [sssd[be[default]]] [ldb] (0x4000): Added timed event "ltdb_callback": 0x10e98c0
(Tue Apr 23 12:52:29 2013) [sssd[be[default]]] [ldb] (0x4000): Added timed event "ltdb_timeout": 0x10ff4d0 .... --------------- which is the same as the very beginning of the log.
the start of the user search is in there near the end, but that is where the log ends when taken after the id search has failed.
Well, that tells us something. It tells us that apparently you experienced a crash and the SSSD was forced to restart the provider daemon.
Yes, I agree. The crash occurs while retrieving the rootDSE and I remember we had a number of issues with that in 6.3, especially if the server on the other end was Novell eDirectory.
There are currently no known SSSD crasher bugs related to rootDSE, so I believe the issue would be fixed when you upgrade.
Would you mind trying out the SSSD from CentOS 6.4 to see if this particular crash has already been fixed there? If not, please try to get a backtrace (of the 6.4 version of SSSD) with GDB. You will need to take the following steps:
yum install gdb debuginfo-install sssd gdb -p $(pidof sssd_be)
At the gdb prompt, type "continue".
When it eventually crashes and returns you to the prompt, type 'bt full' and copy all of the backtrace data into a text file (and attach it to an email).
sssd-users mailing list sssd-users@lists.fedorahosted.org https://lists.fedorahosted.org/mailman/listinfo/sssd-users
sorry for the delay got pulled away for a bit. I can confirm that I have updated to 6.4 and all of my packages are up to date.
i'll do the debuginfo shortly
Yep On Apr 24, 2013 8:27 AM, "Jakub Hrozek" jhrozek@redhat.com wrote:
On Wed, Apr 24, 2013 at 07:06:27AM -0700, Brandon Foster wrote:
sorry for the delay got pulled away for a bit. I can confirm that I have updated to 6.4 and all of my packages are up
to date.
i'll do the debuginfo shortly
So you're seeing the same problem even with 6.4? _______________________________________________ sssd-users mailing list sssd-users@lists.fedorahosted.org https://lists.fedorahosted.org/mailman/listinfo/sssd-users
On Tue, Apr 23, 2013 at 12:20 PM, Stephen Gallagher sgallagh@redhat.com wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
On 04/23/2013 01:44 PM, Brandon Foster wrote:
hey thanks for the quick reply.
that is the end of the log after the user search has finish. the next line after that is:
------------------- (Tue Apr 23 12:52:29 2013) [sssd[be[default]]] [server_setup] (0x0400): CONFDB: /var/lib/sss/db/config.ldb (Tue Apr 23 12:52:29 2013) [sssd[be[default]]] [recreate_ares_channel] (0x0100): Initializing new c-ares channel (Tue Apr 23 12:52:29 2013) [sssd[be[default]]] [resolv_get_family_order] (0x1000): Lookup order: ipv4_first (Tue Apr 23 12:52:29 2013) [sssd[be[default]]] [fo_context_init] (0x0400): Created new fail over context, retry timeout is 30 (Tue Apr 23 12:52:29 2013) [sssd[be[default]]] [confdb_get_domain_internal] (0x1000): pwd_expiration_warning is -1 (Tue Apr 23 12:52:29 2013) [sssd[be[default]]] [sysdb_domain_init_internal] (0x0200): DB File for default: /var/lib/sss/db/cache_default.ldb (Tue Apr 23 12:52:29 2013) [sssd[be[default]]] [ldb] (0x4000): Added timed event "ltdb_callback": 0x10e98c0
(Tue Apr 23 12:52:29 2013) [sssd[be[default]]] [ldb] (0x4000): Added timed event "ltdb_timeout": 0x10ff4d0 .... --------------- which is the same as the very beginning of the log.
the start of the user search is in there near the end, but that is where the log ends when taken after the id search has failed.
Well, that tells us something. It tells us that apparently you experienced a crash and the SSSD was forced to restart the provider daemon.
Would you mind trying out the SSSD from CentOS 6.4 to see if this particular crash has already been fixed there? If not, please try to get a backtrace (of the 6.4 version of SSSD) with GDB. You will need to take the following steps:
yum install gdb debuginfo-install sssd gdb -p $(pidof sssd_be)
At the gdb prompt, type "continue".
When it eventually crashes and returns you to the prompt, type 'bt full' and copy all of the backtrace data into a text file (and attach it to an email). -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.13 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
iEYEARECAAYFAlF23w0ACgkQeiVVYja6o6N9dACgnwRKWy8pGI2tET581g7juEO2 v2MAn0QySN3yKm6KhYw/lQLadfkqChqa =2Vmd -----END PGP SIGNATURE----- _______________________________________________ sssd-users mailing list sssd-users@lists.fedorahosted.org https://lists.fedorahosted.org/mailman/listinfo/sssd-users
ok.
i've updated to centos 6.4 root@virt-vm-99:~/lpm> cat /etc/*release CentOS release 6.4 (Final)
everything is up to date
problem is persisting.
here is the gdb info
--------------------------- Attaching to process 1670 Reading symbols from /usr/libexec/sssd/sssd_be...(no debugging symbols found)...done. Reading symbols from /lib64/libpam.so.0...(no debugging symbols found)...done. Loaded symbols for /lib64/libpam.so.0 Reading symbols from /usr/lib64/libcares.so.2...(no debugging symbols found)...done. Loaded symbols for /usr/lib64/libcares.so.2 Reading symbols from /usr/lib64/libtevent.so.0...(no debugging symbols found)...done. Loaded symbols for /usr/lib64/libtevent.so.0 Reading symbols from /usr/lib64/libtalloc.so.2...(no debugging symbols found)...done. Loaded symbols for /usr/lib64/libtalloc.so.2 Reading symbols from /lib64/libpopt.so.0...(no debugging symbols found)...done. Loaded symbols for /lib64/libpopt.so.0 Reading symbols from /usr/lib64/libldb.so.1...(no debugging symbols found)...done. Loaded symbols for /usr/lib64/libldb.so.1 Reading symbols from /lib64/libdbus-1.so.3...(no debugging symbols found)...done. Loaded symbols for /lib64/libdbus-1.so.3 Reading symbols from /lib64/librt.so.1...(no debugging symbols found)...done. Loaded symbols for /lib64/librt.so.1 Reading symbols from /lib64/libpcre.so.0...(no debugging symbols found)...done. Loaded symbols for /lib64/libpcre.so.0 Reading symbols from /usr/lib64/libini_config.so.2...(no debugging symbols found)...done. Loaded symbols for /usr/lib64/libini_config.so.2 Reading symbols from /usr/lib64/libcollection.so.2...(no debugging symbols found)...done. Loaded symbols for /usr/lib64/libcollection.so.2 Reading symbols from /usr/lib64/libdhash.so.1...(no debugging symbols found)...done. Loaded symbols for /usr/lib64/libdhash.so.1 Reading symbols from /lib64/liblber-2.4.so.2...(no debugging symbols found)...done. Loaded symbols for /lib64/liblber-2.4.so.2 Reading symbols from /lib64/libldap-2.4.so.2...(no debugging symbols found)...done. Loaded symbols for /lib64/libldap-2.4.so.2 Reading symbols from /usr/lib64/libtdb.so.1...(no debugging symbols found)...done. Loaded symbols for /usr/lib64/libtdb.so.1 Reading symbols from /lib64/libglib-2.0.so.0...(no debugging symbols found)...done. Loaded symbols for /lib64/libglib-2.0.so.0 Reading symbols from /usr/lib64/libssl3.so...(no debugging symbols found)...done. Loaded symbols for /usr/lib64/libssl3.so Reading symbols from /usr/lib64/libsmime3.so...(no debugging symbols found)...done. Loaded symbols for /usr/lib64/libsmime3.so Reading symbols from /usr/lib64/libnss3.so...(no debugging symbols found)...done. Loaded symbols for /usr/lib64/libnss3.so Reading symbols from /usr/lib64/libnssutil3.so...(no debugging symbols found)...done. Loaded symbols for /usr/lib64/libnssutil3.so Reading symbols from /lib64/libplds4.so...(no debugging symbols found)...done. Loaded symbols for /lib64/libplds4.so Reading symbols from /lib64/libplc4.so...(no debugging symbols found)...done. Loaded symbols for /lib64/libplc4.so Reading symbols from /lib64/libnspr4.so...(no debugging symbols found)...done. Loaded symbols for /lib64/libnspr4.so Reading symbols from /lib64/libpthread.so.0...(no debugging symbols found)...done. [Thread debugging using libthread_db enabled] Loaded symbols for /lib64/libpthread.so.0 Reading symbols from /lib64/libdl.so.2...(no debugging symbols found)...done. Loaded symbols for /lib64/libdl.so.2 Reading symbols from /lib64/libc.so.6...(no debugging symbols found)...done. Loaded symbols for /lib64/libc.so.6 Reading symbols from /lib64/libaudit.so.1...(no debugging symbols found)...done. Loaded symbols for /lib64/libaudit.so.1 Reading symbols from /lib64/libcrypt.so.1...(no debugging symbols found)...done. Loaded symbols for /lib64/libcrypt.so.1 Reading symbols from /lib64/ld-linux-x86-64.so.2...(no debugging symbols found)...done. Loaded symbols for /lib64/ld-linux-x86-64.so.2 Reading symbols from /usr/lib64/libpath_utils.so.1...(no debugging symbols found)...done. Loaded symbols for /usr/lib64/libpath_utils.so.1 Reading symbols from /usr/lib64/libref_array.so.1...(no debugging symbols found)...done. Loaded symbols for /usr/lib64/libref_array.so.1 Reading symbols from /lib64/libresolv.so.2...(no debugging symbols found)...done. Loaded symbols for /lib64/libresolv.so.2 Reading symbols from /usr/lib64/libsasl2.so.2...(no debugging symbols found)...done. Loaded symbols for /usr/lib64/libsasl2.so.2 Reading symbols from /lib64/libz.so.1...(no debugging symbols found)...done. Loaded symbols for /lib64/libz.so.1 Reading symbols from /lib64/libfreebl3.so...(no debugging symbols found)...done. Loaded symbols for /lib64/libfreebl3.so Reading symbols from /usr/lib64/ldb/modules/ldb/asq.so...(no debugging symbols found)...done. Loaded symbols for /usr/lib64/ldb/modules/ldb/asq.so Reading symbols from /usr/lib64/ldb/modules/ldb/memberof.so...(no debugging symbols found)...done. Loaded symbols for /usr/lib64/ldb/modules/ldb/memberof.so Reading symbols from /usr/lib64/ldb/modules/ldb/paged_results.so...(no debugging symbols found)...done. Loaded symbols for /usr/lib64/ldb/modules/ldb/paged_results.so Reading symbols from /usr/lib64/ldb/modules/ldb/paged_searches.so...(no debugging symbols found)...done. Loaded symbols for /usr/lib64/ldb/modules/ldb/paged_searches.so Reading symbols from /usr/lib64/ldb/modules/ldb/rdn_name.so...(no debugging symbols found)...done. Loaded symbols for /usr/lib64/ldb/modules/ldb/rdn_name.so Reading symbols from /usr/lib64/ldb/modules/ldb/sample.so...(no debugging symbols found)...done. Loaded symbols for /usr/lib64/ldb/modules/ldb/sample.so Reading symbols from /usr/lib64/ldb/modules/ldb/server_sort.so...(no debugging symbols found)...done. Loaded symbols for /usr/lib64/ldb/modules/ldb/server_sort.so Reading symbols from /usr/lib64/ldb/modules/ldb/skel.so...(no debugging symbols found)...done. Loaded symbols for /usr/lib64/ldb/modules/ldb/skel.so Reading symbols from /usr/lib64/ldb/modules/ldb/tdb.so...(no debugging symbols found)...done. Loaded symbols for /usr/lib64/ldb/modules/ldb/tdb.so Reading symbols from /usr/lib64/sssd/libsss_ldap.so...(no debugging symbols found)...done. Loaded symbols for /usr/lib64/sssd/libsss_ldap.so Reading symbols from /lib64/libkrb5.so.3...(no debugging symbols found)...done. Loaded symbols for /lib64/libkrb5.so.3 Reading symbols from /lib64/libk5crypto.so.3...(no debugging symbols found)...done. Loaded symbols for /lib64/libk5crypto.so.3 Reading symbols from /lib64/libcom_err.so.2...(no debugging symbols found)...done. Loaded symbols for /lib64/libcom_err.so.2 Reading symbols from /usr/lib64/libsss_idmap.so.0...(no debugging symbols found)...done. Loaded symbols for /usr/lib64/libsss_idmap.so.0 Reading symbols from /lib64/libkrb5support.so.0...(no debugging symbols found)...done. Loaded symbols for /lib64/libkrb5support.so.0 Reading symbols from /lib64/libkeyutils.so.1...(no debugging symbols found)...done. Loaded symbols for /lib64/libkeyutils.so.1 Reading symbols from /lib64/libselinux.so.1...(no debugging symbols found)...done. Loaded symbols for /lib64/libselinux.so.1 Reading symbols from /lib64/libnss_files.so.2...(no debugging symbols found)...done. Loaded symbols for /lib64/libnss_files.so.2 Reading symbols from /usr/lib64/libsoftokn3.so...(no debugging symbols found)...done. Loaded symbols for /usr/lib64/libsoftokn3.so Reading symbols from /usr/lib64/libsqlite3.so.0...(no debugging symbols found)...done. Loaded symbols for /usr/lib64/libsqlite3.so.0 Reading symbols from /usr/lib64/libnsspem.so...(no debugging symbols found)...done. Loaded symbols for /usr/lib64/libnsspem.so
warning: no loadable sections found in added symbol-file system-supplied DSO at 0x7ffffe330000 0x00007f3b02233530 in __read_nocancel () from /lib64/libpthread.so.0 Missing separate debuginfos, use: debuginfo-install sssd-1.9.2-82.4.el6_4.x86_64 (gdb) continue Continuing.
Program received signal SIGTERM, Terminated. 0x00007f3b02233530 in __read_nocancel () from /lib64/libpthread.so.0 (gdb) bt full #0 0x00007f3b02233530 in __read_nocancel () from /lib64/libpthread.so.0 No symbol table info available. #1 0x00007f3b03b9cb0c in ?? () from /lib64/liblber-2.4.so.2 No symbol table info available. #2 0x00007f3b0397b604 in ?? () from /lib64/libldap-2.4.so.2 No symbol table info available. #3 0x00007f3b032351ed in ?? () from /usr/lib64/libssl3.so No symbol table info available. #4 0x00007f3b03230480 in ?? () from /usr/lib64/libssl3.so No symbol table info available. #5 0x00007f3b03232ed2 in ?? () from /usr/lib64/libssl3.so No symbol table info available. #6 0x00007f3b03239135 in ?? () from /usr/lib64/libssl3.so No symbol table info available. #7 0x00007f3b0323a96f in SSL_ForceHandshake () from /usr/lib64/libssl3.so No symbol table info available. #8 0x00007f3b0397b34f in ?? () from /lib64/libldap-2.4.so.2 No symbol table info available. #9 0x00007f3b03979e7a in ?? () from /lib64/libldap-2.4.so.2 No symbol table info available. #10 0x00007f3b0397a0f8 in ldap_int_tls_start () from /lib64/libldap-2.4.so.2 No symbol table info available. #11 0x00007f3aff502eb9 in ?? () from /usr/lib64/sssd/libsss_ldap.so No symbol table info available. #12 0x00007f3aff5028f7 in ?? () from /usr/lib64/sssd/libsss_ldap.so No symbol table info available. #13 0x00007f3b050743ff in ?? () from /usr/lib64/libtevent.so.0 No symbol table info available. #14 0x00007f3b050708f0 in _tevent_loop_once () from /usr/lib64/libtevent.so.0 No symbol table info available. #15 0x00007f3b0507095b in tevent_common_loop_wait () from /usr/lib64/libtevent.so.0 No symbol table info available. #16 0x0000000000451973 in server_loop () No symbol table info available. #17 0x000000000041a066 in main () No symbol table info available. (gdb) ____________________
i've also attached it in a text file
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
On 04/24/2013 12:49 PM, Brandon Foster wrote:
On Tue, Apr 23, 2013 at 12:20 PM, Stephen Gallagher sgallagh@redhat.com wrote:
...
Would you mind trying out the SSSD from CentOS 6.4 to see if this particular crash has already been fixed there? If not, please try to get a backtrace (of the 6.4 version of SSSD) with GDB. You will need to take the following steps:
yum install gdb debuginfo-install sssd gdb -p $(pidof sssd_be)
...
Missing separate debuginfos, use: debuginfo-install sssd-1.9.2-82.4.el6_4.x86_64
Spot the mistake? :)
Please run the debuginfo-install command above. Otherwise, the backtrace output is not human-readable.
On Wed, Apr 24, 2013 at 9:53 AM, Stephen Gallagher sgallagh@redhat.com wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
On 04/24/2013 12:49 PM, Brandon Foster wrote:
On Tue, Apr 23, 2013 at 12:20 PM, Stephen Gallagher sgallagh@redhat.com wrote:
...
Would you mind trying out the SSSD from CentOS 6.4 to see if this particular crash has already been fixed there? If not, please try to get a backtrace (of the 6.4 version of SSSD) with GDB. You will need to take the following steps:
yum install gdb debuginfo-install sssd gdb -p $(pidof sssd_be)
...
Missing separate debuginfos, use: debuginfo-install sssd-1.9.2-82.4.el6_4.x86_64
Spot the mistake? :)
Please run the debuginfo-install command above. Otherwise, the backtrace output is not human-readable. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.13 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
iEYEARECAAYFAlF4DhcACgkQeiVVYja6o6OGwgCgmPZ6fXHA30fEPNzZXvViuUPv ZekAn2RxpJQiwvPB6/pK48eKasSGMge3 =Dzyo -----END PGP SIGNATURE----- _______________________________________________ sssd-users mailing list sssd-users@lists.fedorahosted.org https://lists.fedorahosted.org/mailman/listinfo/sssd-users
I dont seem to be able to install all of the debuginfo packages it is requiring. when i run gdb it says i need packages, but when I try to install them they are either already installed or are not in the centos.debuginfo repo. any ideas?
it is giving some info still, but I cant really understand it.
On Wed, Apr 24, 2013 at 10:30 AM, Brandon Foster brandon.foster@liferay.com wrote:
On Wed, Apr 24, 2013 at 9:53 AM, Stephen Gallagher sgallagh@redhat.com wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
On 04/24/2013 12:49 PM, Brandon Foster wrote:
On Tue, Apr 23, 2013 at 12:20 PM, Stephen Gallagher sgallagh@redhat.com wrote:
...
Would you mind trying out the SSSD from CentOS 6.4 to see if this particular crash has already been fixed there? If not, please try to get a backtrace (of the 6.4 version of SSSD) with GDB. You will need to take the following steps:
yum install gdb debuginfo-install sssd gdb -p $(pidof sssd_be)
...
Missing separate debuginfos, use: debuginfo-install sssd-1.9.2-82.4.el6_4.x86_64
Spot the mistake? :)
Please run the debuginfo-install command above. Otherwise, the backtrace output is not human-readable. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.13 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
iEYEARECAAYFAlF4DhcACgkQeiVVYja6o6OGwgCgmPZ6fXHA30fEPNzZXvViuUPv ZekAn2RxpJQiwvPB6/pK48eKasSGMge3 =Dzyo -----END PGP SIGNATURE----- _______________________________________________ sssd-users mailing list sssd-users@lists.fedorahosted.org https://lists.fedorahosted.org/mailman/listinfo/sssd-users
I dont seem to be able to install all of the debuginfo packages it is requiring. when i run gdb it says i need packages, but when I try to install them they are either already installed or are not in the centos.debuginfo repo. any ideas?
it is giving some info still, but I cant really understand it.
attached is the new debug info.
I cant seem to get sqlite3 or libsoftokn3 packages installed. tried with the debug repo, with various rpm's nothing.
maybe this bt full is all you need, i dont know. it just says no stack.
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
On Wed 24 Apr 2013 02:15:51 PM EDT, Brandon Foster wrote:
forgot to attach *facepalm
Ah, sorry. I forgot to tell you to set 'timeout = 5400' in the [domain/DOMAINNAME] section of sssd.conf. By default, the SSSD will forcibly kill off the unresponsive sssd_be process after 30s (which makes debugging hard). This gives you 90 minutes to get the results.
That should report a backtrace now.
On Wed, Apr 24, 2013 at 11:20 AM, Stephen Gallagher sgallagh@redhat.com wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
On Wed 24 Apr 2013 02:15:51 PM EDT, Brandon Foster wrote:
forgot to attach *facepalm
Ah, sorry. I forgot to tell you to set 'timeout = 5400' in the [domain/DOMAINNAME] section of sssd.conf. By default, the SSSD will forcibly kill off the unresponsive sssd_be process after 30s (which makes debugging hard). This gives you 90 minutes to get the results.
That should report a backtrace now. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.13 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
iEYEARECAAYFAlF4Il8ACgkQeiVVYja6o6PmhACgkH5DpKo/Hdix0A2gjsvo70zs YJsAoJGn+u8YYTV3twEfT6tVT/OSJAv4 =tO9L -----END PGP SIGNATURE-----
Attached is my output from gdb. not sure if its what you are looking for.
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
On Thu 25 Apr 2013 02:02:56 PM EDT, Brandon Foster wrote:
On Wed, Apr 24, 2013 at 11:20 AM, Stephen Gallagher sgallagh@redhat.com wrote:
********* *BEGIN ENCRYPTED or SIGNED PART* *********
On Wed 24 Apr 2013 02:15:51 PM EDT, Brandon Foster wrote:
forgot to attach *facepalm
Ah, sorry. I forgot to tell you to set 'timeout = 5400' in the [domain/DOMAINNAME] section of sssd.conf. By default, the SSSD will forcibly kill off the unresponsive sssd_be process after 30s (which makes debugging hard). This gives you 90 minutes to get the results.
That should report a backtrace now.
********** *END ENCRYPTED or SIGNED PART* **********
Attached is my output from gdb. not sure if its what you are looking for.
This looks like you started SSSD and then shut it down without trying to log in in the middle. Did you leave that part out?
sssd-users@lists.fedorahosted.org
-
Brandon Foster -
Jakub Hrozek -
Stephen Gallagher