[PATCH] IPA: Add ipa_parse_search_base()
by Stephen Gallagher
Previously, we were using sdap_parse_search_base() for setting up
the search_base objects for use in IPA. However, this was
generating unfriendly log messages about unknown search base
types. This patch creates a new common_parse_search_base() routine
that can be used with either LDAP or IPA providers.
Fixes https://fedorahosted.org/sssd/ticket/1151
12 years, 2 months
- 2
- 2
unable to connect to ldap using sssd (1.7.0/1.6.x), openldapclient >=2.4.28
by Vlad
Hello,
I'm having troubles using sssd (1.7.0/1.6.x) with openldapclient
>=2.4.28, though it works with openldapclient 2.4.24 and 2.4.25. As
we discussed on on #freeipa, below is the log file with debug level 5.
Regards,
Vlad.
Thu Feb 23 11:46:24:618609 2012) [sssd] [check_file] (0x0020): lstat
for [/var/run/nscd/socket] failed: [2][No such file or directory].
(Thu Feb 23 11:46:24:620079 2012) [sssd] [ldb] (0x0400):
server_sort:Unable to register control with rootdse!
(Thu Feb 23 11:46:24:620218 2012) [sssd] [confdb_get_domain_internal]
(0x0020): No enumeration for [LDAP]!
(Thu Feb 23 11:46:24:620347 2012) [sssd] [ldb] (0x0400):
server_sort:Unable to register control with rootdse!
(Thu Feb 23 11:46:24 2012) [sssd] [server_setup] (0x0080): CONFDB:
/var/lib/sss/db/config.ldb
(Thu Feb 23 11:46:24 2012) [sssd] [sysdb_domain_init_internal]
(0x0200): DB File for LDAP: /var/lib/sss/db/cache_LDAP.ldb
(Thu Feb 23 11:46:24 2012) [sssd] [ldb] (0x0400): asq: Unable to
register control with rootdse!
(Thu Feb 23 11:46:24 2012) [sssd] [sbus_new_server] (0x0080): D-BUS
Server listening on
unix:path=/var/lib/sss/pipes/private/sbus-monitor,guid=521f64b5ecd741301c4525d30004337a
(Thu Feb 23 11:46:24 2012) [sssd] [start_service] (0x0100): Queueing
service LDAP for startup
(Thu Feb 23 11:46:24:623542 2012) [sssd[be[LDAP]]] [ldb] (0x0400):
server_sort:Unable to register control with rootdse!
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [server_setup] (0x0080):
CONFDB: /var/lib/sss/db/config.ldb
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [recreate_ares_channel]
(0x0100): Initializing new c-ares channel
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [resolv_get_family_order]
(0x1000): Lookup order: ipv4_first
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [fo_context_init]
(0x0080): Created new fail over context, retry timeout is 30
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]]
[confdb_get_domain_internal] (0x0020): No enumeration for [LDAP]!
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]]
[sysdb_domain_init_internal] (0x0200): DB File for LDAP:
/var/lib/sss/db/cache_LDAP.ldb
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [ldb] (0x0400): asq:
Unable to register control with rootdse!
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [sbus_init_connection]
(0x0200): (Thu Feb 23 11:46:24 2012) [sssd]
[sbus_server_init_new_connection] (0x0200): Entering.
(Thu Feb 23 11:46:24 2012) [sssd] [sbus_server_init_new_connection]
(0x0200): Adding connection 0x247bee0.
(Thu Feb 23 11:46:24 2012) [sssd] [sbus_init_connection] (0x0200):
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [monitor_common_send_id]
(0x0100): Sending ID: (%BE_LDAP,1)
(Thu Feb 23 11:46:24 2012) [sssd] [sbus_server_init_new_connection]
(0x0200): Got a connection
(Thu Feb 23 11:46:24 2012) [sssd] [monitor_service_init] (0x0080):
Initializing D-BUS Service
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [create_socket_symlink]
(0x1000): Symlinking the dbus path
/var/lib/sss/pipes/private/sbus-dp_LDAP.7227 to a link
/var/lib/sss/pipes/private/sbus-dp_LDAP
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [sbus_new_server]
(0x0080): D-BUS Server listening on
unix:path=/var/lib/sss/pipes/private/sbus-dp_LDAP.7227,guid=84618cd3c6ab44497aa670de0004337a
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [load_backend_module]
(0x1000): Loading backend [ldap] with path
[/usr/lib64/sssd/libsss_ldap.so].
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [dp_get_options] (0x0400):
Option ldap_uri has value ldaps://srv1.net.home,ldaps://srv2.net.home
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [dp_get_options] (0x0400):
Option ldap_search_base has value dc=net,dc=home
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [dp_get_options] (0x0400):
Option ldap_default_bind_dn has value (null)
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [dp_get_options] (0x0400):
Option ldap_default_authtok_type has value password
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [dp_get_options] (0x0400):
Option ldap_default_authtok has no binary value.
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [dp_get_options] (0x0400):
Option ldap_search_timeout has value 6
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [dp_get_options] (0x0400):
Option ldap_network_timeout has value 6
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [dp_get_options] (0x0400):
Option ldap_opt_timeout has value 6
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [dp_get_options] (0x0400):
Option ldap_tls_reqcert has value hard
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [dp_get_options] (0x0400):
Option ldap_user_search_base has value (null)
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [dp_get_options] (0x0400):
Option ldap_user_search_scope has value sub
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [dp_get_options] (0x0400):
Option ldap_user_search_filter has value (null)
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [dp_get_options] (0x0400):
Option ldap_group_search_base has value (null)
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [dp_get_options] (0x0400):
Option ldap_group_search_scope has value sub
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [dp_get_options] (0x0400):
Option ldap_group_search_filter has value (null)
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [dp_get_options] (0x0400):
Option ldap_sudo_search_base has value (null)
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [dp_get_options] (0x0400):
Option ldap_schema has value rfc2307
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [dp_get_options] (0x0400):
Option ldap_offline_timeout has value 60
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [dp_get_options] (0x0400):
Option ldap_force_upper_case_realm is FALSE
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [dp_get_options] (0x0400):
Option ldap_enumeration_refresh_timeout has value 300
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [dp_get_options] (0x0400):
Option ldap_purge_cache_timeout has value 10800
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [dp_get_options] (0x0400):
Option entry_cache_timeout has value 5400
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [dp_get_options] (0x0400):
Option ldap_tls_cacert has value /etc/ssl/cacert.pem
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [dp_get_options] (0x0400):
Option ldap_tls_cacertdir has value (null)
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [dp_get_options] (0x0400):
Option ldap_tls_cert has value (null)
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [dp_get_options] (0x0400):
Option ldap_tls_key has value (null)
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [dp_get_options] (0x0400):
Option ldap_tls_cipher_suite has value (null)
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [dp_get_options] (0x0400):
Option ldap_id_use_start_tls is FALSE
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [dp_get_options] (0x0400):
Option ldap_sasl_mech has value (null)
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [dp_get_options] (0x0400):
Option ldap_sasl_authid has value (null)
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [dp_get_options] (0x0400):
Option ldap_sasl_realm has value (null)
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [dp_get_options] (0x0400):
Option ldap_sasl_minssf has value -1
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [dp_get_options] (0x0400):
Option ldap_krb5_keytab has value (null)
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [dp_get_options] (0x0400):
Option ldap_krb5_init_creds is TRUE
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [dp_get_options] (0x0400):
Option krb5_server has value srv2.net.home,srv1.net.home
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [dp_get_options] (0x0400):
Option krb5_realm has value NET.HOME
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [dp_get_options] (0x0400):
Option krb5_canonicalize is TRUE
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [dp_get_options] (0x0400):
Option ldap_pwd_policy has value none
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [dp_get_options] (0x0400):
Option ldap_referrals is TRUE
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [dp_get_options] (0x0400):
Option account_cache_expiration has value 0
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [dp_get_options] (0x0400):
Option ldap_dns_service_name has value ldap
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [dp_get_options] (0x0400):
Option ldap_krb5_ticket_lifetime has value 86400
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [dp_get_options] (0x0400):
Option ldap_access_filter has value (null)
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [dp_get_options] (0x0400):
Option ldap_netgroup_search_base has value (null)
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [dp_get_options] (0x0400):
Option ldap_group_nesting_level has value 2
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [dp_get_options] (0x0400):
Option ldap_deref has value (null)
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [dp_get_options] (0x0400):
Option ldap_account_expire_policy has value (null)
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [dp_get_options] (0x0400):
Option ldap_access_order has value filter
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [dp_get_options] (0x0400):
Option ldap_chpass_uri has value (null)
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [dp_get_options] (0x0400):
Option ldap_chpass_dns_service_name has value (null)
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [dp_get_options] (0x0400):
Option ldap_enumeration_search_timeout has value 60
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [dp_get_options] (0x0400):
Option ldap_auth_disable_tls_never_use_in_production is FALSE
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [dp_get_options] (0x0400):
Option ldap_page_size has value 1000
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [dp_get_options] (0x0400):
Option ldap_deref_threshold has value 10
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [dp_get_options] (0x0400):
Option ldap_sasl_canonicalize is FALSE
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [dp_get_options] (0x0400):
Option ldap_connection_expire_timeout has value 900
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [ldap_get_options]
(0x0400): Option ldap_user_search_base set to dc=net,dc=home
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [ldap_get_options]
(0x0400): Option ldap_group_search_base set to dc=net,dc=home
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [ldap_get_options]
(0x0400): Option ldap_netgroup_search_base set to dc=net,dc=home
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [sdap_parse_search_base]
(0x0100): Search base added: [DEFAULT][dc=net,dc=home][SUBTREE][]
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [sdap_parse_search_base]
(0x0100): Search base added: [USER][dc=net,dc=home][SUBTREE][]
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [sdap_parse_search_base]
(0x0100): Search base added: [GROUP][dc=net,dc=home][SUBTREE][]
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [sdap_parse_search_base]
(0x0100): Search base added: [NETGROUP][dc=net,dc=home][SUBTREE][]
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [sdap_get_map] (0x0200):
Option ldap_entry_usn has value (null)
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [sdap_get_map] (0x0200):
Option ldap_rootdse_last_usn has value (null)
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [sdap_get_map] (0x0200):
Option ldap_user_object_class has value posixAccount
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [sdap_get_map] (0x0200):
Option ldap_user_name has value uid
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [sdap_get_map] (0x0200):
Option ldap_user_pwd has value userPassword
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [sdap_get_map] (0x0200):
Option ldap_user_uid_number has value uidNumber
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [sdap_get_map] (0x0200):
Option ldap_user_gid_number has value gidNumber
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [sdap_get_map] (0x0200):
Option ldap_user_gecos has value gecos
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [sdap_get_map] (0x0200):
Option ldap_user_home_directory has value homeDirectory
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [sdap_get_map] (0x0200):
Option ldap_user_shell has value loginShell
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [sdap_get_map] (0x0200):
Option ldap_user_principal has value krbPrincipalName
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [sdap_get_map] (0x0200):
Option ldap_user_fullname has value cn
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [sdap_get_map] (0x0200):
Option ldap_user_member_of has value (null)
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [sdap_get_map] (0x0200):
Option ldap_user_uuid has value (null)
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [sdap_get_map] (0x0200):
Option ldap_user_modify_timestamp has value modifyTimestamp
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [sdap_get_map] (0x0200):
Option ldap_user_entry_usn has value (null)
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [sdap_get_map] (0x0200):
Option ldap_user_shadow_last_change has value shadowLastChange
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [sdap_get_map] (0x0200):
Option ldap_user_shadow_min has value shadowMin
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [sdap_get_map] (0x0200):
Option ldap_user_shadow_max has value shadowMax
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [sdap_get_map] (0x0200):
Option ldap_user_shadow_warning has value shadowWarning
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [sdap_get_map] (0x0200):
Option ldap_user_shadow_inactive has value shadowInactive
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [sdap_get_map] (0x0200):
Option ldap_user_shadow_expire has value shadowExpire
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [sdap_get_map] (0x0200):
Option ldap_user_shadow_flag has value shadowFlag
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [sdap_get_map] (0x0200):
Option ldap_user_krb_last_pwd_change has value krbLastPwdChange
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [sdap_get_map] (0x0200):
Option ldap_user_krb_password_expiration has value krbPasswordExpiration
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [sdap_get_map] (0x0200):
Option ldap_pwd_attribute has value pwdAttribute
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [sdap_get_map] (0x0200):
Option ldap_user_authorized_service has value authorizedService
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [sdap_get_map] (0x0200):
Option ldap_user_ad_account_expires has value accountExpires
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [sdap_get_map] (0x0200):
Option ldap_user_ad_user_account_control has value userAccountControl
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [sdap_get_map] (0x0200):
Option ldap_ns_account_lock has value nsAccountLock
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [sdap_get_map] (0x0200):
Option ldap_user_authorized_host has value host
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [sdap_get_map] (0x0200):
Option ldap_user_nds_login_disabled has value loginDisabled
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [sdap_get_map] (0x0200):
Option ldap_user_nds_login_expiration_time has value loginExpirationTime
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [sdap_get_map] (0x0200):
Option ldap_user_nds_login_allowed_time_map has value
loginAllowedTimeMap
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [sdap_get_map] (0x0200):
Option ldap_group_object_class has value posixGroup
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [sdap_get_map] (0x0200):
Option ldap_group_name has value cn
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [sdap_get_map] (0x0200):
Option ldap_group_pwd has value userPassword
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [sdap_get_map] (0x0200):
Option ldap_group_gid_number has value gidNumber
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [sdap_get_map] (0x0200):
Option ldap_group_member has value memberuid
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [sdap_get_map] (0x0200):
Option ldap_group_uuid has value (null)
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [sdap_get_map] (0x0200):
Option ldap_group_modify_timestamp has value modifyTimestamp
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [sdap_get_map] (0x0200):
Option ldap_group_entry_usn has value (null)
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [sdap_get_map] (0x0200):
Option ldap_netgroup_object_class has value nisNetgroup
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [sdap_get_map] (0x0200):
Option ldap_netgroup_name has value cn
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [sdap_get_map] (0x0200):
Option ldap_netgroup_member has value memberNisNetgroup
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [sdap_get_map] (0x0200):
Option ldap_netgroup_triple has value nisNetgroupTriple
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [sdap_get_map] (0x0200):
Option ldap_netgroup_uuid has value nsUniqueId
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [sdap_get_map] (0x0200):
Option ldap_netgroup_modify_timestamp has value modifyTimestamp
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [sssm_ldap_id_init]
(0x1000): Service name for discovery set to ldap
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [fo_new_service] (0x0080):
Creating new service 'LDAP'
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [sdap_service_init]
(0x0400): Added URI ldaps://srv1.net.home
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [fo_add_server] (0x0080):
Adding new server 'srv1.net.home', to service 'LDAP'
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [sdap_service_init]
(0x0400): Added URI ldaps://srv2.net.home
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [fo_add_server] (0x0080):
Adding new server 'srv2.net.home', to service 'LDAP'
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]]
[ldap_id_cleanup_set_timer] (0x0400): Scheduling next cleanup at
1329993994.632259
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [load_backend_module]
(0x1000): Loading backend [krb5] with path
[/usr/lib64/sssd/libsss_krb5.so].
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [dp_get_options] (0x0400):
Option krb5_server has value srv2.net.home,srv1.net.home
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [dp_get_options] (0x0400):
Option krb5_realm has value NET.HOME
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [dp_get_options] (0x0400):
Option krb5_ccachedir has value /tmp
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [dp_get_options] (0x0400):
Option krb5_ccname_template has value FILE:%d/krb5cc_%U_XXXXXX
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [dp_get_options] (0x0400):
Option krb5_auth_timeout has value 15
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [dp_get_options] (0x0400):
Option krb5_keytab has value /etc/krb5.keytab
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [dp_get_options] (0x0400):
Option krb5_validate is FALSE
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [dp_get_options] (0x0400):
Option krb5_kpasswd has value srv2.net.home
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [dp_get_options] (0x0400):
Option krb5_store_password_if_offline is FALSE
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [dp_get_options] (0x0400):
Option krb5_renewable_lifetime has value 5d
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [dp_get_options] (0x0400):
Option krb5_lifetime has value 24h
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [dp_get_options] (0x0400):
Option krb5_renew_interval has value 0
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [dp_get_options] (0x0400):
Option krb5_use_fast has value (null)
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [dp_get_options] (0x0400):
Option krb5_fast_principal has value (null)
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [dp_get_options] (0x0400):
Option krb5_canonicalize is FALSE
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [fo_new_service] (0x0080):
Creating new service 'KERBEROS'
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [fo_add_server] (0x0080):
Adding new server 'srv2.net.home', to service 'KERBEROS'
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [krb5_service_init]
(0x0400): Added Server srv2.net.home
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [fo_add_server] (0x0080):
Adding new server 'srv1.net.home', to service 'KERBEROS'
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [krb5_service_init]
(0x0400): Added Server srv1.net.home
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [fo_new_service] (0x0080):
Creating new service 'KPASSWD'
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [fo_add_server] (0x0080):
Adding new server 'srv2.net.home', to service 'KPASSWD'
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [krb5_service_init]
(0x0400): Added Server srv2.net.home
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [load_backend_module]
(0x0200): no module name found in confdb, using [permit].
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [load_backend_module]
(0x0200): no module name found in confdb, using [krb5].
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [load_backend_module]
(0x1000): Backend [krb5] already loaded.
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [load_backend_module]
(0x0200): no module name found in confdb, using [ldap].
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [load_backend_module]
(0x1000): Backend [ldap] already loaded.
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [main] (0x0020): Backend
provider (LDAP) started!
(Thu Feb 23 11:46:24 2012) [sssd] [client_registration] (0x0100):
Received ID registration: (%BE_LDAP,1)
(Thu Feb 23 11:46:24 2012) [sssd] [mark_service_as_started] (0x0200):
Marking LDAP as started.
(Thu Feb 23 11:46:24 2012) [sssd] [mark_service_as_started] (0x0100):
Now starting services!
(Thu Feb 23 11:46:24 2012) [sssd] [start_service] (0x0100): Queueing
service nss for startup
(Thu Feb 23 11:46:24 2012) [sssd] [start_service] (0x0100): Queueing
service pam for startup
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [id_callback] (0x0100):
Got id ack and version (1) from Monitor
(Thu Feb 23 11:46:24:636885 2012) [sssd[nss]] [ldb] (0x0400):
server_sort:Unable to register control with rootdse!
(Thu Feb 23 11:46:24 2012) [sssd[nss]] [server_setup] (0x0080):
CONFDB: /var/lib/sss/db/config.ldb
(Thu Feb 23 11:46:24 2012) [sssd[pam]] [confdb_get_domain_internal]
(0x0020): No enumeration for [LDAP]!
(Thu Feb 23 11:46:24 2012) [sssd[nss]] [confdb_get_domain_internal]
(0x0020): No enumeration for [LDAP]!
(Thu Feb 23 11:46:24 2012) [sssd[nss]] [sbus_init_connection]
(0x0200): Adding connection 1822520
(Thu Feb 23 11:46:24 2012) [sssd[nss]] [monitor_common_send_id]
(0x0100): Sending ID: (nss,1)
(Thu Feb 23 11:46:24 2012) [sssd] [sbus_server_init_new_connection]
(0x0200): Entering.
(Thu Feb 23 11:46:24 2012) [sssd] [sbus_server_init_new_connection]
(0x0200): Adding connection 0x247d190.
(Thu Feb 23 11:46:24 2012) [sssd] [sbus_init_connection] (0x0200):
Adding connection 247D190
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [sbus_init_connection]
(0x0200): Adding connection 1541D30
(Thu Feb 23 11:46:24 2012) [sssd] [sbus_server_init_new_connection]
(0x0200): Got a connection
(Thu Feb 23 11:46:24 2012) [sssd] [monitor_service_init] (0x0080):
Initializing D-BUS Service
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [be_client_init] (0x0100):
Set-up Backend ID timeout [0x15429b0]
(Thu Feb 23 11:46:24 2012) [sssd] [sbus_server_init_new_connection]
(0x0200): Entering.
(Thu Feb 23 11:46:24 2012) [sssd[pam]] [sbus_init_connection]
(0x0200): Adding connection 222EC90
(Thu Feb 23 11:46:24 2012) [sssd] [sbus_init_connection] (0x0200):
Adding connection 247F4D0
(Thu Feb 23 11:46:24 2012) [sssd[pam]] [dp_common_send_id] (0x0100):
Sending ID to DP: (1,PAM)
[sssd] [sbus_server_init_new_connection] (0x0200): Got a connection
(Thu Feb 23 11:46:24 2012) [sssd] [monitor_service_init] (0x0080):
Initializing D-BUS Service
(Thu Feb 23 11:46:24 2012) [sssd[nss]] [sbus_init_connection]
(0x0200): Adding connection 1824B90
(Thu Feb 23 11:46:24 2012) [sssd[nss]] [dp_common_send_id] (0x0100):
Sending ID to DP: (1,NSS)
(Thu Feb 23 11:46:24 2012) [sssd[nss]] [sysdb_domain_init_internal]
(0x0200): DB File for LDAP: /var/lib/sss/db/cache_LDAP.ldb
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]]
[sbus_server_init_new_connection] (0x0200): Entering.
(Thu Feb 23 11:46:24 2012) [sssd[nss]] [ldb] (0x0400): asq: Unable to
register control with rootdse!
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]]
[sbus_server_init_new_connection] (0x0200): Adding connection 0x1549580.
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [sbus_init_connection]
(0x0200): Adding connection 1549580
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]]
[sbus_server_init_new_connection] (0x0200): Got a connection
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [be_client_init] (0x0100):
Set-up Backend ID timeout [0x1549db0]
(Thu Feb 23 11:46:24 2012) [sssd[pam]] [sysdb_domain_init_internal]
(0x0200): DB File for LDAP: /var/lib/sss/db/cache_LDAP.ldb
(Thu Feb 23 11:46:24 2012) [sssd[nss]] [sss_process_init] (0x0020):
Responder Initialization complete
(Thu Feb 23 11:46:24 2012) [sssd[pam]] [ldb] (0x0400): asq: Unable to
register control with rootdse!
(Thu Feb 23 11:46:24 2012) [sssd[nss]] [sss_ncache_set_str] (0x0400):
Adding [NCE/USER/LDAP/root] to negative cache permanently
(Thu Feb 23 11:46:24 2012) [sssd[nss]] [sss_ncache_set_str] (0x0400):
Adding [NCE/USER/LDAP/ldap] to negative cache permanently
(Thu Feb 23 11:46:24 2012) [sssd[nss]] [sss_ncache_set_str] (0x0400):
Adding [NCE/USER/LDAP/cron] to negative cache permanently
(Thu Feb 23 11:46:24 2012) [sssd[pam]] [sss_process_init] (0x0020):
(Thu Feb 23 11:46:24 2012) [sssd[nss]] [sss_ncache_set_str] (0x0400):
Adding [NCE/USER/LDAP/portage] to negative cache permanently
(Thu Feb 23 11:46:24 2012) [sssd[nss]] [sss_ncache_set_str] (0x0400):
Adding [NCE/USER/LDAP/messagebus] to negative cache permanently
(Thu Feb 23 11:46:24 2012) [sssd[nss]] [sss_ncache_set_str] (0x0400):
Adding [NCE/USER/LDAP/nobody] to negative cache permanently
(Thu Feb 23 11:46:24 2012) [sssd[nss]] [sss_ncache_set_str] (0x0400):
Adding [NCE/USER/LDAP/haldaemon] to negative cache permanently
(Thu Feb 23 11:46:24 2012) [sssd[nss]] [sss_ncache_set_str] (0x0400):
Adding [NCE/USER/LDAP/ntp] to negative cache permanently
(Thu Feb 23 11:46:24 2012) [sssd[pam]] [sss_ncache_set_str] (0x0400):
Adding [NCE/USER/LDAP/root] to negative cache permanently
(Thu Feb 23 11:46:24 2012) [sssd[nss]] [sss_ncache_set_str] (0x0400):
Adding [NCE/GROUP/LDAP/root] to negative cache permanently
(Thu Feb 23 11:46:24 2012) [sssd[pam]] [sss_ncache_set_str] (0x0400):
Adding [NCE/USER/LDAP/ldap] to negative cache permanently
(Thu Feb 23 11:46:24 2012) [sssd[pam]] [sss_ncache_set_str] (0x0400):
Adding [NCE/USER/LDAP/cron] to negative cache permanently
(Thu Feb 23 11:46:24 2012) [sssd[pam]] [sss_ncache_set_str] (0x0400):
Adding [NCE/USER/LDAP/portage] to negative cache permanently
(Thu Feb 23 11:46:24 2012) [sssd[pam]] [sss_ncache_set_str] (0x0400):
Adding [NCE/USER/LDAP/messagebus] to negative cache permanently
(Thu Feb 23 11:46:24 2012) [sssd[pam]] [sss_ncache_set_str] (0x0400):
Adding [NCE/USER/LDAP/nobody] to negative cache permanently
(Thu Feb 23 11:46:24 2012) [sssd[pam]] [sss_ncache_set_str] (0x0400):
Adding [NCE/USER/LDAP/haldaemon] to negative cache permanently
(Thu Feb 23 11:46:24 2012) [sssd[nss]] [nss_get_etc_shells] (0x0400):
Found shell /bin/csh in /etc/shells
(Thu Feb 23 11:46:24 2012) [sssd[pam]] [sss_ncache_set_str] (0x0400):
Adding [NCE/USER/LDAP/ntp] to negative cache permanently
(Thu Feb 23 11:46:24 2012) [sssd[nss]] [nss_get_etc_shells] (0x0400):
Found shell /bin/esh in /etc/shells
(Thu Feb 23 11:46:24 2012) [sssd[nss]] [nss_get_etc_shells] (0x0400):
Found shell /bin/fish in /etc/shells
(Thu Feb 23 11:46:24 2012) [sssd[nss]] [nss_get_etc_shells] (0x0400):
Found shell /bin/ksh in /etc/shells
(Thu Feb 23 11:46:24 2012) [sssd[nss]] [nss_get_etc_shells] (0x0400):
Found shell /bin/sash in /etc/shells
(Thu Feb 23 11:46:24 2012) [sssd[nss]] [nss_get_etc_shells] (0x0400):
Found shell /bin/sh in /etc/shells
(Thu Feb 23 11:46:24 2012) [sssd[pam]] [sss_ncache_set_str] (0x0400):
(Thu Feb 23 11:46:24 2012) [sssd[nss]] [nss_get_etc_shells] (0x0400):
Found shell /bin/tcsh in /etc/shells
(Thu Feb 23 11:46:24 2012) [sssd[nss]] [nss_get_etc_shells] (0x0400):
Found shell /bin/zsh in /etc/shells
(Thu Feb 23 11:46:24 2012) [sssd[nss]] [nss_process_init] (0x0020):
NSS Initialization complete
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [client_registration]
(0x0100): Cancel DP ID timeout [0x15429b0]
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [client_registration]
(0x0100): Added Frontend client [PAM]
(Thu Feb 23 11:46:24 2012) [sssd] [client_registration] (0x0100):
Received ID registration: (nss,1)
(Thu Feb 23 11:46:24 2012) [sssd] [mark_service_as_started] (0x0200):
Marking nss as started.
(Thu Feb 23 11:46:24 2012) [sssd[pam]] [dp_id_callback] (0x0100): Got
id ack and version (1) from DP
(Thu Feb 23 11:46:24 2012) [sssd[nss]] [id_callback] (0x0100): Got id
ack and version (1) from Monitor
(Thu Feb 23 11:46:24 2012) [sssd[be[LDAP]]] [client_registration]
(0x0100): Cancel DP ID timeout [0x1549db0]
[client_registration] (0x0100): Received ID registration: (pam,1)
(Thu Feb 23 11:46:24 2012) [sssd] [mark_service_as_started] (0x0200):
Marking pam as started.
(Thu Feb 23 11:46:24 2012) [sssd[nss]] [dp_id_callback] (0x0100GotGot
id ack and version (1) from DP
(Thu Feb 23 11:46:29 2012) [sssd] [services_startup_timeout] (0x0400):
Handling timeout
(Thu Feb 23 11:46:34 2012) [sssd] [service_send_ping] (0x0100): Pinging LDAP
(Thu Feb 23 11:46:34 2012) [sssd] [service_send_ping] (0x0100): Pinging nss
(Thu Feb 23 11:46:34 2012) [sssd] [service_send_ping] (0x0100): Pinging pam
(Thu Feb 23 11:46:34 2012) [sssd] [ping_check] (0x0100): Service LDAP
replied to ping
(Thu Feb 23 11:46:34 2012) [sssd] [ping_check] (0x0100): Service nss
replied to ping
(Thu Feb 23 11:46:34 2012) [sssd] [ping_check] (0x0100): Service pam
replied to ping
(Thu Feb 23 11:46:34 2012) [sssd[be[LDAP]]] [sysdb_search_users]
(0x0400): Search users with filter:
(&(objectclass=user)(&(!(dataExpireTimestamp=0))(dataExpireTimestamp<=1329993994)(!(lastLogin=*))))
(Thu Feb 23 11:46:34 2012) [sssd[be[LDAP]]] [cleanup_users] (0x0100):
Found 1 expired user entries!
(Thu Feb 23 11:46:34 2012) [sssd[be[LDAP]]] [cleanup_users] (0x0200):
User mpd is still logged in or a dummy entry, keeping data
(Thu Feb 23 11:46:34 2012) [sssd[be[LDAP]]] [sysdb_search_groups]
(0x0400): Search groups with filter:
(&(objectclass=group)(&(!(dataExpireTimestamp=0))(dataExpireTimestamp<=1329993994)))
(Thu Feb 23 11:46:34 2012) [sssd[be[LDAP]]] [cleanup_groups] (0x0100):
Found 16 expired group entries!
(Thu Feb 23 11:46:34 2012) [sssd[be[LDAP]]] [sysdb_search_users]
(0x0400): Search users with filter:
(&(objectclass=user)(|(memberOf=name=pulse-access,cn=groups,cn=LDAP,cn=sysdb)(gidNumber=152)))
(Thu Feb 23 11:46:34 2012) [sssd[be[LDAP]]] [sysdb_search_users]
(0x0400): Search users with filter:
(&(objectclass=user)(|(memberOf=name=vboxusers,cn=groups,cn=LDAP,cn=sysdb)(gidNumber=446)))
(Thu Feb 23 11:46:34 2012) [sssd[be[LDAP]]] [sysdb_search_users]
(0x0400): Search users with filter:
(&(objectclass=user)(|(memberOf=name=plugdev,cn=groups,cn=LDAP,cn=sysdb)(gidNumber=444)))
(Thu Feb 23 11:46:34 2012) [sssd[be[LDAP]]] [sysdb_search_users]
(0x0400): Search users with filter:
(&(objectclass=user)(|(memberOf=name=portage,cn=groups,cn=LDAP,cn=sysdb)(gidNumber=250)))
(Thu Feb 23 11:46:34 2012) [sssd[be[LDAP]]] [sysdb_search_users]
(0x0400): Search users with filter:
(&(objectclass=user)(|(memberOf=name=scanner,cn=groups,cn=LDAP,cn=sysdb)(gidNumber=441)))
(Thu Feb 23 11:46:34 2012) [sssd[be[LDAP]]] [sysdb_search_users]
(0x0400): Search users with filter:
(&(objectclass=user)(|(memberOf=name=audio,cn=groups,cn=LDAP,cn=sysdb)(gidNumber=18)))
(Thu Feb 23 11:46:34 2012) [sssd[be[LDAP]]] [sysdb_search_users]
(0x0400): Search users with filter:
(&(objectclass=user)(|(memberOf=name=cdemu,cn=groups,cn=LDAP,cn=sysdb)(gidNumber=449)))
(Thu Feb 23 11:46:34 2012) [sssd[be[LDAP]]] [sysdb_search_users]
(0x0400): Search users with filter:
(&(objectclass=user)(|(memberOf=name=cdrom,cn=groups,cn=LDAP,cn=sysdb)(gidNumber=19)))
(Thu Feb 23 11:46:34 2012) [sssd[be[LDAP]]] [sysdb_search_users]
(0x0400): Search users with filter:
(&(objectclass=user)(|(memberOf=name=games,cn=groups,cn=LDAP,cn=sysdb)(gidNumber=35)))
(Thu Feb 23 11:46:34 2012) [sssd[be[LDAP]]] [sysdb_search_users]
(0x0400): Search users with filter:
(&(objectclass=user)(|(memberOf=name=pulse,cn=groups,cn=LDAP,cn=sysdb)(gidNumber=153)))
(Thu Feb 23 11:46:34 2012) [sssd[be[LDAP]]] [sysdb_search_users]
(0x0400): Search users with filter:
(&(objectclass=user)(|(memberOf=name=users,cn=groups,cn=LDAP,cn=sysdb)(gidNumber=100)))
(Thu Feb 23 11:46:34 2012) [sssd[be[LDAP]]] [sysdb_search_users]
(0x0400): Search users with filter:
(&(objectclass=user)(|(memberOf=name=video,cn=groups,cn=LDAP,cn=sysdb)(gidNumber=27)))
(Thu Feb 23 11:46:34 2012) [sssd[be[LDAP]]] [sysdb_search_users]
(0x0400): Search users with filter:
(&(objectclass=user)(|(memberOf=name=wheel,cn=groups,cn=LDAP,cn=sysdb)(gidNumber=10)))
(Thu Feb 23 11:46:34 2012) [sssd[be[LDAP]]] [sysdb_search_users]
(0x0400): Search users with filter:
(&(objectclass=user)(|(memberOf=name=cdrw,cn=groups,cn=LDAP,cn=sysdb)(gidNumber=80)))
(Thu Feb 23 11:46:34 2012) [sssd[be[LDAP]]] [sysdb_search_users]
(0x0400): Search users with filter:
(&(objectclass=user)(|(memberOf=name=kvm,cn=groups,cn=LDAP,cn=sysdb)(gidNumber=450)))
(Thu Feb 23 11:46:34 2012) [sssd[be[LDAP]]] [sysdb_search_users]
(0x0400): Search users with filter:
(&(objectclass=user)(|(memberOf=name=usb,cn=groups,cn=LDAP,cn=sysdb)(gidNumber=85)))
(Thu Feb 23 11:46:34 2012) [sssd[be[LDAP]]]
[ldap_id_cleanup_set_timer] (0x0400): Scheduling next cleanup at
1330004794.633702
(Thu Feb 23 11:46:35 2012) [sssd[nss]] [accept_fd_handler] (0x0100):
Client connected!
(Thu Feb 23 11:46:35 2012) [sssd[nss]] [sss_cmd_get_version] (0x0200):
Received client version [1].
(Thu Feb 23 11:46:35 2012) [sssd[nss]] [sss_cmd_get_version] (0x0200):
Offered version [1].
(Thu Feb 23 11:46:35 2012) [sssd[nss]] [nss_cmd_initgroups] (0x0100):
Requesting info for [test] from [<ALL>]
(Thu Feb 23 11:46:35 2012) [sssd[nss]] [nss_cmd_initgroups_search]
(0x0100): Requesting info for [test@LDAP]
(Thu Feb 23 11:46:35 2012) [sssd[nss]] [nss_cmd_initgroups_search]
(0x0400): Initgroups for [test@LDAP] completed
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [accept_fd_handler] (0x0100):
Client connected to privileged pipe!
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [sss_cmd_get_version] (0x0200):
Received client version [3].
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [sss_cmd_get_version] (0x0200):
Offered version [3].
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_cmd_authenticate]
(0x0100): entering pam_cmd_authenticate
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
command: PAM_AUTHENTICATE
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
domain: (null)
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100): user: test
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
service: sshd
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100): tty: ssh
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
ruser: (null)
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
rhost: srv1.net.home
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
authtok type: 1
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
authtok size: 8
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
newauthtok type: 0
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
newauthtok size: 0
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100): priv: 1
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
cli_pid: 7236
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [sss_dp_get_account_int_send]
(0x0400): Sending request for [LDAP][3][1][name=test]
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [be_get_account_info]
(0x0100): Got request for [3][1][name=test]
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [fo_resolve_service_send]
(0x0100): Trying to resolve service 'LDAP'
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [get_server_status]
(0x1000): Status of server 'srv1.net.home' is 'name not resolved'
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [get_port_status]
(0x1000): Port status of port 636 for server 'srv1.net.home' is
'neutral'
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [get_server_status]
(0x1000): Status of server 'srv1.net.home' is 'name not resolved'
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]]
[resolv_gethostbyname_files_send] (0x0100): Trying to resolve A record
of 'srv1.net.home' in files
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [set_server_common_status]
(0x0100): Marking server 'srv1.net.home' as 'resolving name'
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]]
[resolv_gethostbyname_files_send] (0x0100): Trying to resolve AAAA
record of 'srv1.net.home' in files
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]]
[resolv_gethostbyname_next] (0x0200): No more address families to retry
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]]
[resolv_gethostbyname_dns_query] (0x0100): Trying to resolve A record
of 'srv1.net.home' in DNS
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]]
[resolv_gethostbyname_dns_parse] (0x1000): Parsing an A reply
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [request_watch_destructor]
(0x0400): Deleting request watch
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [set_server_common_status]
(0x0100): Marking server 'srv1.net.home' as 'name resolved'
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [be_resolve_server_done]
(0x0100): Found address for server srv1.net.home: [192.168.1.201] TTL
86400
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [sdap_uri_callback]
(0x0400): Constructed uri 'ldaps://srv1.net.home'
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [sss_ldap_init_send]
(0x0400): Setting 6 seconds timeout for connecting
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]]
[sdap_ldap_connect_callback_add] (0x1000): New LDAP connection to
[ldaps://srv1.net.home:636/??base] with fd [18].
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]]
[sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with
[(objectclass=*)][].
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]]
[sdap_get_generic_ext_step] (0x1000): Requesting attrs: [*]
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]]
[sdap_get_generic_ext_step] (0x1000): Requesting attrs: [altServer]
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]]
[sdap_get_generic_ext_step] (0x1000): Requesting attrs: [namingContexts]
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]]
[sdap_get_generic_ext_step] (0x1000): Requesting attrs:
[supportedControl]
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]]
[sdap_get_generic_ext_step] (0x1000): Requesting attrs:
[supportedExtension]
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]]
[sdap_get_generic_ext_step] (0x1000): Requesting attrs:
[supportedFeatures]
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]]
[sdap_get_generic_ext_step] (0x1000): Requesting attrs:
[supportedLDAPVersion]
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]]
[sdap_get_generic_ext_step] (0x1000): Requesting attrs:
[supportedSASLMechanisms]
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]]
[sdap_get_generic_ext_step] (0x1000): Requesting attrs:
[defaultNamingContext]
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]]
[sdap_get_generic_ext_step] (0x1000): Requesting attrs: [lastUSN]
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]]
[sdap_get_generic_ext_step] (0x1000): Requesting attrs:
[highestCommittedUSN]
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [sdap_process_result]
(0x0100): ldap_result gave -1, something bad happend!
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [sdap_get_generic_done]
(0x0100): sdap_get_generic_ext_recv failed [5]: Input/output error
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [fo_set_port_status]
(0x0100): Marking port 636 of server 'srv1.net.home' as 'not working'
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [fo_resolve_service_send]
(0x0100): Trying to resolve service 'LDAP'
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [get_server_status]
(0x1000): Status of server 'srv2.net.home' is 'name not resolved'
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [get_port_status]
(0x1000): Port status of port 636 for server 'srv2.net.home' is
'neutral'
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [get_server_status]
(0x1000): Status of server 'srv2.net.home' is 'name not resolved'
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]]
[resolv_gethostbyname_files_send] (0x0100): Trying to resolve A record
of 'srv2.net.home' in files
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [set_server_common_status]
(0x0100): Marking server 'srv2.net.home' as 'resolving name'
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]]
[resolv_gethostbyname_files_send] (0x0100): Trying to resolve AAAA
record of 'srv2.net.home' in files
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]]
[resolv_gethostbyname_next] (0x0200): No more address families to retry
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]]
[resolv_gethostbyname_dns_query] (0x0100): Trying to resolve A record
of 'srv2.net.home' in DNS
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]]
[resolv_gethostbyname_dns_parse] (0x1000): Parsing an A reply
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [request_watch_destructor]
(0x0400): Deleting request watch
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [set_server_common_status]
(0x0100): Marking server 'srv2.net.home' as 'name resolved'
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [be_resolve_server_done]
(0x0100): Found address for server srv2.net.home: [192.168.1.202] TTL
86400
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [sdap_uri_callback]
(0x0400): Constructed uri 'ldaps://srv2.net.home'
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [sss_ldap_init_send]
(0x0400): Setting 6 seconds timeout for connecting
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]]
[sdap_ldap_connect_callback_add] (0x1000): New LDAP connection to
[ldaps://srv2.net.home:636/??base] with fd [19].
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]]
[sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with
[(objectclass=*)][].
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]]
[sdap_get_generic_ext_step] (0x1000): Requesting attrs: [*]
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]]
[sdap_get_generic_ext_step] (0x1000): Requesting attrs: [altServer]
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]]
[sdap_get_generic_ext_step] (0x1000): Requesting attrs: [namingContexts]
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]]
[sdap_get_generic_ext_step] (0x1000): Requesting attrs:
[supportedControl]
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]]
[sdap_get_generic_ext_step] (0x1000): Requesting attrs:
[supportedExtension]
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]]
[sdap_get_generic_ext_step] (0x1000): Requesting attrs:
[supportedFeatures]
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]]
[sdap_get_generic_ext_step] (0x1000): Requesting attrs:
[supportedLDAPVersion]
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]]
[sdap_get_generic_ext_step] (0x1000): Requesting attrs:
[supportedSASLMechanisms]
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]]
[sdap_get_generic_ext_step] (0x1000): Requesting attrs:
[defaultNamingContext]
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]]
[sdap_get_generic_ext_step] (0x1000): Requesting attrs: [lastUSN]
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]]
[sdap_get_generic_ext_step] (0x1000): Requesting attrs:
[highestCommittedUSN]
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [sdap_process_result]
(0x0100): ldap_result gave -1, something bad happend!
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [sdap_get_generic_done]
(0x0100): sdap_get_generic_ext_recv failed [5]: Input/output error
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [fo_set_port_status]
(0x0100): Marking port 636 of server 'srv2.net.home' as 'not working'
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [fo_resolve_service_send]
(0x0100): Trying to resolve service 'LDAP'
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [get_server_status]
(0x1000): Status of server 'srv1.net.home' is 'name resolved'
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [get_port_status]
(0x1000): Port status of port 636 for server 'srv1.net.home' is 'not
working'
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [get_server_status]
(0x1000): Status of server 'srv2.net.home' is 'name resolved'
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [get_port_status]
(0x1000): Port status of port 636 for server 'srv2.net.home' is 'not
working'
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [fo_resolve_service_send]
(0x0020): No available servers for service 'LDAP'
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [sdap_id_op_connect_done]
(0x0020): Failed to connect, going offline (5 [Input/output error])
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [be_run_offline_cb]
(0x0080): Going offline. Running callbacks.
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [acctinfo_callback]
(0x0100): Request processed. Returned 1,11,Offline
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [sss_dp_get_reply] (0x0100):
Got reply (1, 11, Offline) from Data Provider
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_check_user_dp_callback]
(0x0040): Unable to get information from Data Provider
Error: 1, 11, Offline
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_check_user_search]
(0x0100): Requesting info for [test@LDAP]
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_check_user_search]
(0x0400): Returning info for user [test@LDAP]
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_dp_send_req] (0x0100):
Sending request with the following data:
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
command: PAM_AUTHENTICATE
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100): domain: LDAP
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100): user: test
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
service: sshd
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100): tty: ssh
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
ruser: (null)
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
rhost: srv1.net.home
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
authtok type: 1
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
authtok size: 8
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
newauthtok type: 0
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
newauthtok size: 0
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100): priv: 1
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
cli_pid: 7236
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_dom_forwarder] (0x0100):
pam_dp_send_req returned 0
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [be_pam_handler] (0x0100):
Got request with the following data
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100):
command: PAM_AUTHENTICATE
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100):
domain: LDAP
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100):
user: test
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100):
service: sshd
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100):
tty: ssh
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100): ruser:
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100):
rhost: srv1.net.home
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100):
authtok type: 1
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100):
authtok size: 8
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100):
newauthtok type: 0
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100):
newauthtok size: 0
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100): priv: 1
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100):
cli_pid: 7236
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [krb5_pam_handler]
(0x1000): Wait queue of user [test] is empty, running request
immediately.
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [check_for_valid_tgt]
(0x1000): TGT end time [1330078391].
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [check_for_valid_tgt]
(0x0080): TGT is valid.
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [fo_resolve_service_send]
(0x0100): Trying to resolve service 'KERBEROS'
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [get_server_status]
(0x1000): Status of server 'srv2.net.home' is 'name resolved'
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [get_port_status]
(0x1000): Port status of port 0 for server 'srv2.net.home' is 'neutral'
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [get_server_status]
(0x1000): Status of server 'srv2.net.home' is 'name resolved'
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [be_resolve_server_done]
(0x0100): Found address for server srv2.net.home: [192.168.1.202] TTL
86400
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [fo_resolve_service_send]
(0x0100): Trying to resolve service 'KPASSWD'
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [get_server_status]
(0x1000): Status of server 'srv2.net.home' is 'name resolved'
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [get_port_status]
(0x1000): Port status of port 0 for server 'srv2.net.home' is 'neutral'
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [get_server_status]
(0x1000): Status of server 'srv2.net.home' is 'name resolved'
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [be_resolve_server_done]
(0x0100): Found address for server srv2.net.home: [192.168.1.202] TTL
86400
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [check_wait_queue]
(0x1000): Wait queue for user [test] is empty.
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [be_pam_handler_callback]
(0x0100): Backend returned: (1, 9, <NULL>) [Provider is Offline
(Authentication service cannot retrieve authentication info)]
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [be_pam_handler_callback]
(0x0100): Sending result [9][LDAP]
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [be_pam_handler_callback]
(0x0100): Sent result [9][LDAP]
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_dp_process_reply]
(0x0100): received: [9][LDAP]
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_reply] (0x0100): pam_reply
get called.
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [sysdb_cache_auth] (0x0100):
Hashes do match!
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_reply] (0x0100): pam_reply
get called.
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_reply] (0x0100): blen: 89
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_cmd_acct_mgmt] (0x0100):
entering pam_cmd_acct_mgmt
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
command: PAM_ACCT_MGMT
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
domain: (null)
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100): user: test
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
service: sshd
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100): tty: ssh
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
ruser: (null)
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
rhost: srv1.net.home
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
authtok type: 0
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
authtok size: 0
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
newauthtok type: 0
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
newauthtok size: 0
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100): priv: 1
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
cli_pid: 7236
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_check_user_search]
(0x0100): Requesting info for [test@LDAP]
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_check_user_search]
(0x0400): Returning info for user [test@LDAP]
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_dp_send_req] (0x0100):
Sending request with the following data:
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
command: PAM_ACCT_MGMT
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100): domain: LDAP
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100): user: test
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
service: sshd
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100): tty: ssh
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
ruser: (null)
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
rhost: srv1.net.home
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
authtok type: 0
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
authtok size: 0
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
newauthtok type: 0
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
newauthtok size: 0
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100): priv: 1
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
cli_pid: 7236
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_dom_forwarder] (0x0100):
pam_dp_send_req returned 0
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [be_pam_handler] (0x0100):
Got request with the following data
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100):
command: PAM_ACCT_MGMT
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100):
domain: LDAP
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100):
user: test
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100):
service: sshd
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100):
tty: ssh
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100): ruser:
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100):
rhost: srv1.net.home
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100):
authtok type: 0
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100):
authtok size: 0
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100):
newauthtok type: 0
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100):
newauthtok size: 0
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100): priv: 1
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100):
cli_pid: 7236
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [be_pam_handler_callback]
(0x0100): Backend returned: (0, 0, <NULL>) [Success]
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [be_pam_handler_callback]
(0x0100): Sending result [0][LDAP]
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [be_pam_handler_callback]
(0x0100): Sent result [0][LDAP]
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_dp_process_reply]
(0x0100): received: [0][LDAP]
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_reply] (0x0100): pam_reply
get called.
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_reply] (0x0100): blen: 21
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [client_recv] (0x0200): Client
disconnected!
(Thu Feb 23 11:46:35 2012) [sssd[nss]] [client_recv] (0x0200): Client
disconnected!
(Thu Feb 23 11:46:35 2012) [sssd[nss]] [accept_fd_handler] (0x0100):
Client connected!
(Thu Feb 23 11:46:35 2012) [sssd[nss]] [sss_cmd_get_version] (0x0200):
Received client version [1].
(Thu Feb 23 11:46:35 2012) [sssd[nss]] [sss_cmd_get_version] (0x0200):
Offered version [1].
(Thu Feb 23 11:46:35 2012) [sssd[nss]] [nss_cmd_initgroups] (0x0100):
Requesting info for [test] from [<ALL>]
(Thu Feb 23 11:46:35 2012) [sssd[nss]] [nss_cmd_initgroups_search]
(0x0100): Requesting info for [test@LDAP]
(Thu Feb 23 11:46:35 2012) [sssd[nss]] [nss_cmd_initgroups_search]
(0x0400): Initgroups for [test@LDAP] completed
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [accept_fd_handler] (0x0100):
Client connected to privileged pipe!
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [sss_cmd_get_version] (0x0200):
Received client version [3].
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [sss_cmd_get_version] (0x0200):
Offered version [3].
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_cmd_setcred] (0x0100):
entering pam_cmd_setcred
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
command: PAM_SETCRED
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
domain: (null)
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100): user: test
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
service: sshd
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100): tty: ssh
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
ruser: (null)
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
rhost: srv1.net.home
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
authtok type: 0
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
authtok size: 0
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
newauthtok type: 0
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
newauthtok size: 0
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100): priv: 1
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
cli_pid: 7232
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_check_user_search]
(0x0100): Requesting info for [test@LDAP]
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_check_user_search]
(0x0400): Returning info for user [test@LDAP]
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_dp_send_req] (0x0100):
Sending request with the following data:
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
command: PAM_SETCRED
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100): domain: LDAP
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100): user: test
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
service: sshd
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100): tty: ssh
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
ruser: (null)
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
rhost: srv1.net.home
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
authtok type: 0
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
authtok size: 0
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
newauthtok type: 0
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
newauthtok size: 0
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100): priv: 1
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
cli_pid: 7232
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_dom_forwarder] (0x0100):
pam_dp_send_req returned 0
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [be_pam_handler] (0x0100):
Got request with the following data
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100):
command: PAM_SETCRED
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100):
domain: LDAP
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100):
user: test
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100):
service: sshd
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100):
tty: ssh
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100): ruser:
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100):
rhost: srv1.net.home
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100):
authtok type: 0
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100):
authtok size: 0
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100):
newauthtok type: 0
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100):
newauthtok size: 0
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100): priv: 1
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100):
cli_pid: 7232
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [be_pam_handler] (0x0100):
Sending result [0][LDAP]
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_dp_process_reply]
(0x0100): received: [0][LDAP]
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_reply] (0x0100): pam_reply
get called.
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_reply] (0x0100): blen: 21
(Thu Feb 23 11:46:35 2012) [sssd[nss]] [nss_cmd_initgroups] (0x0100):
Requesting info for [test] from [<ALL>]
(Thu Feb 23 11:46:35 2012) [sssd[nss]] [nss_cmd_initgroups_search]
(0x0100): Requesting info for [test@LDAP]
(Thu Feb 23 11:46:35 2012) [sssd[nss]] [nss_cmd_initgroups_search]
(0x0400): Initgroups for [test@LDAP] completed
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_cmd_open_session]
(0x0100): entering pam_cmd_open_session
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
command: PAM_OPEN_SESSION
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
domain: (null)
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100): user: test
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
service: sshd
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100): tty: ssh
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
ruser: (null)
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
rhost: srv1.net.home
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
authtok type: 0
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
authtok size: 0
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
newauthtok type: 0
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
newauthtok size: 0
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100): priv: 1
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
cli_pid: 7232
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_check_user_search]
(0x0100): Requesting info for [test@LDAP]
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_check_user_search]
(0x0400): Returning info for user [test@LDAP]
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_dp_send_req] (0x0100):
Sending request with the following data:
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
command: PAM_OPEN_SESSION
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100): domain: LDAP
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100): user: test
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
service: sshd
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100): tty: ssh
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
ruser: (null)
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
rhost: srv1.net.home
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
authtok type: 0
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
authtok size: 0
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
newauthtok type: 0
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
newauthtok size: 0
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100): priv: 1
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
cli_pid: 7232
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_dom_forwarder] (0x0100):
pam_dp_send_req returned 0
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [be_pam_handler] (0x0100):
Got request with the following data
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100):
command: PAM_OPEN_SESSION
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100):
domain: LDAP
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100):
user: test
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100):
service: sshd
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100):
tty: ssh
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100): ruser:
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100):
rhost: srv1.net.home
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100):
authtok type: 0
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100):
authtok size: 0
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100):
newauthtok type: 0
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100):
newauthtok size: 0
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100): priv: 1
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100):
cli_pid: 7232
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [be_pam_handler] (0x0100):
Sending result [0][LDAP]
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_dp_process_reply]
(0x0100): received: [0][LDAP]
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_reply] (0x0100): pam_reply
get called.
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_reply] (0x0100): blen: 21
(Thu Feb 23 11:46:35 2012) [sssd[nss]] [accept_fd_handler] (0x0100):
Client connected!
(Thu Feb 23 11:46:35 2012) [sssd[nss]] [sss_cmd_get_version] (0x0200):
Received client version [1].
(Thu Feb 23 11:46:35 2012) [sssd[nss]] [sss_cmd_get_version] (0x0200):
Offered version [1].
(Thu Feb 23 11:46:35 2012) [sssd[nss]] [nss_cmd_initgroups] (0x0100):
Requesting info for [test] from [<ALL>]
(Thu Feb 23 11:46:35 2012) [sssd[nss]] [nss_cmd_initgroups_search]
(0x0100): Requesting info for [test@LDAP]
(Thu Feb 23 11:46:35 2012) [sssd[nss]] [nss_cmd_initgroups_search]
(0x0400): Initgroups for [test@LDAP] completed
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [accept_fd_handler] (0x0100):
Client connected!
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [sss_cmd_get_version] (0x0200):
Received client version [3].
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [sss_cmd_get_version] (0x0200):
Offered version [3].
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_cmd_setcred] (0x0100):
entering pam_cmd_setcred
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
command: PAM_SETCRED
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
domain: (null)
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100): user: test
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
service: sshd
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100): tty: ssh
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
ruser: (null)
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
rhost: srv1.net.home
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
authtok type: 0
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
authtok size: 0
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
newauthtok type: 0
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
newauthtok size: 0
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100): priv: 0
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
cli_pid: 7245
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_check_user_search]
(0x0100): Requesting info for [test@LDAP]
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_check_user_search]
(0x0400): Returning info for user [test@LDAP]
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_dp_send_req] (0x0100):
Sending request with the following data:
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
command: PAM_SETCRED
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100): domain: LDAP
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100): user: test
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
service: sshd
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100): tty: ssh
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
ruser: (null)
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
rhost: srv1.net.home
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
authtok type: 0
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
authtok size: 0
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
newauthtok type: 0
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
newauthtok size: 0
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100): priv: 0
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_print_data] (0x0100):
cli_pid: 7245
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_dom_forwarder] (0x0100):
pam_dp_send_req returned 0
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [be_pam_handler] (0x0100):
Got request with the following data
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100):
command: PAM_SETCRED
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100):
domain: LDAP
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100):
user: test
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100):
service: sshd
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100):
tty: ssh
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100): ruser:
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100):
rhost: srv1.net.home
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100):
authtok type: 0
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100):
authtok size: 0
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100):
newauthtok type: 0
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100):
newauthtok size: 0
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100): priv: 0
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100):
cli_pid: 7245
(Thu Feb 23 11:46:35 2012) [sssd[be[LDAP]]] [be_pam_handler] (0x0100):
Sending result [0][LDAP]
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_dp_process_reply]
(0x0100): received: [0][LDAP]
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_reply] (0x0100): pam_reply
get called.
(Thu Feb 23 11:46:35 2012) [sssd[pam]] [pam_reply] (0x0100): blen: 21
(Thu Feb 23 11:46:36 2012) [sssd[nss]] [nss_cmd_initgroups] (0xClient
disconnected!
(Thu Feb 23 11:46:36 2012) [sssd[pam]] [pam_cmd_close_session]
(0x0100): entering pam_cmd_close_session
(Thu Feb 23 11:46:36 2012) [sssd[pam]] [pam_print_data] (0x0100):
command: PAM_CLOSE_SESSION
(Thu Feb 23 11:46:36 2012) [sssd[pam]] [pam_print_data] (0x0100):
domain: (null)
(Thu Feb 23 11:46:36 2012) [sssd[pam]] [pam_print_data] (0x0100): user: test
(Thu Feb 23 11:46:36 2012) [sssd[pam]] [pam_print_data] (0x0100):
service: sshd
(Thu Feb 23 11:46:36 2012) [sssd[pam]] [pam_print_data] (0x0100): tty: ssh
(Thu Feb 23 11:46:36 2012) [sssd[pam]] [pam_print_data] (0x0100):
ruser: (null)
(Thu Feb 23 11:46:36 2012) [sssd[pam]] [pam_print_data] (0x0100):
rhost: srv1.net.home
(Thu Feb 23 11:46:36 2012) [sssd[pam]] [pam_print_data] (0x0100):
authtok type: 0
(Thu Feb 23 11:46:36 2012) [sssd[pam]] [pam_print_data] (0x0100):
authtok size: 0
(Thu Feb 23 11:46:36 2012) [sssd[pam]] [pam_print_data] (0x0100):
newauthtok type: 0
(Thu Feb 23 11:46:36 2012) [sssd[pam]] [pam_print_data] (0x0100):
newauthtok size: 0
(Thu Feb 23 11:46:36 2012) [sssd[pam]] [pam_print_data] (0x0100): priv: 1
(Thu Feb 23 11:46:36 2012) [sssd[pam]] [pam_print_data] (0x0100):
cli_pid: 7232
(Thu Feb 23 11:46:36 2012) [sssd[pam]] [pam_check_user_search]
(0x0100): Requesting info for [test@LDAP]
(Thu Feb 23 11:46:36 2012) [sssd[pam]] [pam_check_user_search]
(0x0400): Returning info for user [test@LDAP]
(Thu Feb 23 11:46:36 2012) [sssd[pam]] [pam_dp_send_req] (0x0100):
Sending request with the following data:
(Thu Feb 23 11:46:36 2012) [sssd[pam]] [pam_print_data] (0x0100):
command: PAM_CLOSE_SESSION
(Thu Feb 23 11:46:36 2012) [sssd[pam]] [pam_print_data] (0x0100): domain: LDAP
(Thu Feb 23 11:46:36 2012) [sssd[pam]] [pam_print_data] (0x0100): user: test
(Thu Feb 23 11:46:36 2012) [sssd[pam]] [pam_print_data] (0x0100):
service: sshd
(Thu Feb 23 11:46:36 2012) [sssd[pam]] [pam_print_data] (0x0100): tty: ssh
(Thu Feb 23 11:46:36 2012) [sssd[pam]] [pam_print_data] (0x0100):
ruser: (null)
(Thu Feb 23 11:46:36 2012) [sssd[pam]] [pam_print_data] (0x0100):
rhost: srv1.net.home
(Thu Feb 23 11:46:36 2012) [sssd[pam]] [pam_print_data] (0x0100):
authtok type: 0
(Thu Feb 23 11:46:36 2012) [sssd[pam]] [pam_print_data] (0x0100):
authtok size: 0
(Thu Feb 23 11:46:36 2012) [sssd[pam]] [pam_print_data] (0x0100):
newauthtok type: 0
(Thu Feb 23 11:46:36 2012) [sssd[pam]] [pam_print_data] (0x0100):
newauthtok size: 0
(Thu Feb 23 11:46:36 2012) [sssd[pam]] [pam_print_data] (0x0100): priv: 1
(Thu Feb 23 11:46:36 2012) [sssd[pam]] [pam_print_data] (0x0100):
cli_pid: 7232
(Thu Feb 23 11:46:36 2012) [sssd[pam]] [pam_dom_forwarder] (0x0100):
pam_dp_send_req returned 0
(Thu Feb 23 11:46:36 2012) [sssd[be[LDAP]]] [be_pam_handler] (0x0100):
Got request with the following data
(Thu Feb 23 11:46:36 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100):
command: PAM_CLOSE_SESSION
(Thu Feb 23 11:46:36 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100):
domain: LDAP
(Thu Feb 23 11:46:36 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100):
user: test
(Thu Feb 23 11:46:36 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100):
service: sshd
(Thu Feb 23 11:46:36 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100):
tty: ssh
(Thu Feb 23 11:46:36 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100): ruser:
(Thu Feb 23 11:46:36 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100):
rhost: srv1.net.home
(Thu Feb 23 11:46:36 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100):
authtok type: 0
(Thu Feb 23 11:46:36 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100):
authtok size: 0
(Thu Feb 23 11:46:36 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100):
newauthtok type: 0
(Thu Feb 23 11:46:36 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100):
newauthtok size: 0
(Thu Feb 23 11:46:36 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100): priv: 1
(Thu Feb 23 11:46:36 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100):
cli_pid: 7232
(Thu Feb 23 11:46:36 2012) [sssd[be[LDAP]]] [be_pam_handler] (0x0100):
Sending result [0][LDAP]
(Thu Feb 23 11:46:36 2012) [sssd[pam]] [pam_dp_process_reply]
(0x0100): received: [0][LDAP]
(Thu Feb 23 11:46:36 2012) [sssd[pam]] [pam_reply] (0x0100): pam_reply
get called.
(Thu Feb 23 11:46:36 2012) [sssd[pam]] [pam_reply] (0x0100): blen: 21
(Thu Feb 23 11:46:36 2012) [sssd[pam]] [pam_cmd_setcred] (0x0100):
entering pam_cmd_setcred
(Thu Feb 23 11:46:36 2012) [sssd[pam]] [pam_print_data] (0x0100):
command: PAM_SETCRED
(Thu Feb 23 11:46:36 2012) [sssd[pam]] [pam_print_data] (0x0100):
domain: (null)
(Thu Feb 23 11:46:36 2012) [sssd[pam]] [pam_print_data] (0x0100): user: test
(Thu Feb 23 11:46:36 2012) [sssd[pam]] [pam_print_data] (0x0100):
service: sshd
(Thu Feb 23 11:46:36 2012) [sssd[pam]] [pam_print_data] (0x0100): tty: ssh
(Thu Feb 23 11:46:36 2012) [sssd[pam]] [pam_print_data] (0x0100):
ruser: (null)
(Thu Feb 23 11:46:36 2012) [sssd[pam]] [pam_print_data] (0x0100):
rhost: srv1.net.home
(Thu Feb 23 11:46:36 2012) [sssd[pam]] [pam_print_data] (0x0100):
authtok type: 0
(Thu Feb 23 11:46:36 2012) [sssd[pam]] [pam_print_data] (0x0100):
authtok size: 0
(Thu Feb 23 11:46:36 2012) [sssd[pam]] [pam_print_data] (0x0100):
newauthtok type: 0
(Thu Feb 23 11:46:36 2012) [sssd[pam]] [pam_print_data] (0x0100):
newauthtok size: 0
(Thu Feb 23 11:46:36 2012) [sssd[pam]] [pam_print_data] (0x0100): priv: 1
(Thu Feb 23 11:46:36 2012) [sssd[pam]] [pam_print_data] (0x0100):
cli_pid: 7232
(Thu Feb 23 11:46:36 2012) [sssd[pam]] [pam_check_user_search]
(0x0100): Requesting info for [test@LDAP]
(Thu Feb 23 11:46:36 2012) [sssd[pam]] [pam_check_user_search]
(0x0400): Returning info for user [test@LDAP]
(Thu Feb 23 11:46:36 2012) [sssd[pam]] [pam_dp_send_req] (0x0100):
Sending request with the following data:
(Thu Feb 23 11:46:36 2012) [sssd[pam]] [pam_print_data] (0x0100):
command: PAM_SETCRED
(Thu Feb 23 11:46:36 2012) [sssd[pam]] [pam_print_data] (0x0100): domain: LDAP
(Thu Feb 23 11:46:36 2012) [sssd[pam]] [pam_print_data] (0x0100): user: test
(Thu Feb 23 11:46:36 2012) [sssd[pam]] [pam_print_data] (0x0100):
service: sshd
(Thu Feb 23 11:46:36 2012) [sssd[pam]] [pam_print_data] (0x0100): tty: ssh
(Thu Feb 23 11:46:36 2012) [sssd[pam]] [pam_print_data] (0x0100):
ruser: (null)
(Thu Feb 23 11:46:36 2012) [sssd[pam]] [pam_print_data] (0x0100):
rhost: srv1.net.home
(Thu Feb 23 11:46:36 2012) [sssd[pam]] [pam_print_data] (0x0100):
authtok type: 0
(Thu Feb 23 11:46:36 2012) [sssd[pam]] [pam_print_data] (0x0100):
authtok size: 0
(Thu Feb 23 11:46:36 2012) [sssd[pam]] [pam_print_data] (0x0100):
newauthtok type: 0
(Thu Feb 23 11:46:36 2012) [sssd[pam]] [pam_print_data] (0x0100):
newauthtok size: 0
(Thu Feb 23 11:46:36 2012) [sssd[pam]] [pam_print_data] (0x0100): priv: 1
(Thu Feb 23 11:46:36 2012) [sssd[pam]] [pam_print_data] (0x0100):
cli_pid: 7232
(Thu Feb 23 11:46:36 2012) [sssd[pam]] [pam_dom_forwarder] (0x0100):
pam_dp_send_req returned 0
(Thu Feb 23 11:46:36 2012) [sssd[be[LDAP]]] [be_pam_handler] (0x0100):
Got request with the following data
(Thu Feb 23 11:46:36 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100):
command: PAM_SETCRED
(Thu Feb 23 11:46:36 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100):
domain: LDAP
(Thu Feb 23 11:46:36 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100):
user: test
(Thu Feb 23 11:46:36 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100):
service: sshd
(Thu Feb 23 11:46:36 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100):
tty: ssh
(Thu Feb 23 11:46:36 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100): ruser:
(Thu Feb 23 11:46:36 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100):
rhost: srv1.net.home
(Thu Feb 23 11:46:36 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100):
authtok type: 0
(Thu Feb 23 11:46:36 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100):
authtok size: 0
(Thu Feb 23 11:46:36 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100):
newauthtok type: 0
(Thu Feb 23 11:46:36 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100):
newauthtok size: 0
(Thu Feb 23 11:46:36 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100): priv: 1
(Thu Feb 23 11:46:36 2012) [sssd[be[LDAP]]] [pam_print_data] (0x0100):
cli_pid: 7232
(Thu Feb 23 11:46:36 2012) [sssd[be[LDAP]]] [be_pam_handler] (0x0100):
Sending result [0][LDAP]
(Thu Feb 23 11:46:36 2012) [sssd[pam]] [pam_dp_process_reply]
(0x0100): received: [0][LDAP]
(Thu Feb 23 11:46:36 2012) [sssd[pam]] [pam_reply] (0x0100): pam_reply
get called.
(Thu Feb 23 11:46:36 2012) [sssd[pam]] [pam_reply] (0x0100): blen: 21
(Thu Feb 23 11:46:36 2012) [sssd[pam]] [client_recv] (0x0200): Client
disconnected!
(Thu Feb 23 11:46:36 2012) [sssd[nss]] [client_recv] (0x0200): Client
disconnected!
(Thu Feb 23 11:46:39 2012) [sssd] [monitor_quit] (0x0010): Monitor
received Interrupt: terminating children
(Thu Feb 23 11:46:39 2012) [sssd] [monitor_quit] (0x0020): Terminating
[pam][7229]
(Thu Feb 23 11:46:39 2012) [sssd] [monitor_quit] (0x0020): Child [pam]
exited gracefully
(Thu Feb 23 11:46:39 2012) [sssd] [monitor_quit] (0x0020): Terminating
[nss][7228]
(Thu Feb 23 11:46:39 2012) [sssd[be[LDAP]]] [sbus_dispatch] (0x0080):
Connection is not open for dispatching.
(Thu Feb 23 11:46:39 2012) [sssd[be[LDAP]]] [be_client_destructor]
(0x0100): Removed PAM client
(Thu Feb 23 11:46:39 2012) [sssd] [monitor_quit] (0x0020): Child [nss]
exited gracefully
(Thu Feb 23 11:46:39 2012) [sssd] [monitor_quit] (0x0020): Terminating
[LDAP][7227]
(Thu Feb 23 11:46:39 2012) [sssd[be[LDAP]]] [remove_krb5_info_files]
(0x0200): Could not remove [/var/lib/sss/pubconf/kdcinfo.NET.HOME],
[2][No such file or directory]
(Thu Feb 23 11:46:39 2012) [sssd[be[LDAP]]] [remove_krb5_info_files]
(0x0200): Could not remove
[/var/lib/sss/pubconf/kpasswdinfo.NET.HOME], [2][No such file or
directory]
(Thu Feb 23 11:46:39 2012) [sssd[be[LDAP]]] [be_client_destructor]
(0x0100): Removed NSS client
(Thu Feb 23 11:46:39 2012) [sssd] [monitor_quit] (0x0020): Child
[LDAP] exited gracefully
12 years, 2 months
- 2
- 1
[PATCH] FEDORA: Change Kerberos credential cache default location
by Stephen Gallagher
On Fedora, we need to default to using /run/user/%u for credential
caches for improved security and to simplify rpc.gssd locating the
cache for use with NFS.
This patch will not go upstream, but I wanted to submit it for review in
order to raise awareness about these changes for any other distributions
that might wish to make the same choices.
With recent Fedora distributions, we now have available
the /run/user/<username> directory. This is a tmpfs location that is
guaranteed (by filesystem permissions and SELinux rules) to be
accessible only by <username>. With this available, we can move the
default credential cache location here and guarantee two things:
1) The location is now well-known to be /run/user/<username>/krb5cc
2) An attacker (or laptop-thief) cannot boot to single-user mode and
gain access to valid credentials to impersonate the user.
12 years, 2 months
- 2
- 1
[PATCH] Add tool to convert debug levels
by Stephen Gallagher
Older versions of SSSD (1.5 and earlier) would take a debug_level
value set in the [sssd] section as authoritative for all other
sections where not explicitly overridden. We changed this so that
all sections need to set it if they want debug logs set.
This script can be run to make the new version continue to produce
the same logs as the old versions did, by explicitly adding
debug_level to all domains and services that did not have it set
already.
Bugzilla https://bugzilla.redhat.com/show_bug.cgi?id=753763
12 years, 2 months
- 2
- 2
[PATCH] End request if ldap_parse_result fails
by Jakub Hrozek
Hi,
I think we're not handling the case where ldap_parse_result() fails
correctly and later we simply mark the request as done after checking for
more LDAP_CONTROL_PAGEDRESULTS. I'm not entirely sure that the attached
patch fixes the problem I was seeing, though. Let me explain:
I wasn't able to log in with cached credentials today. After some
investigation, I found that the cachedPassword attribute was missing
completely. Apparently the user entry was removed after a search returned
ENOENT and a new one without the cachedPassword attribute was saved
afterwards. I referenced the createTimestamp attribute of the sysdb entry
with logs and I saw this:
(Sat Feb 18 23:32:02 2012) [sssd[be[redhat.com]]] [sdap_get_generic_ext_done]
(0x0400): Search result: Server is unwilling to perform(53), Simple
Paged Results Search already in progress on this connection
(Sat Feb 18 23:32:02 2012) [sssd[be[redhat.com]]] [sdap_get_generic_ext_done]
(0x0040): Unexpected result from ldap: Server is unwilling to perform(53),
Simple Paged Results Search already in progress on this connection
(Sat Feb 18 23:32:02 2012) [sssd[be[redhat.com]]] [sdap_get_users_process]
(0x0400): Search for users, returned 0 results.
>From the log it seems clear that the request was marked as done after it found
no users, otherwise there would be another error message from
sdap_get_generic_done().
I'm not sure how the paging control is supposed to work and whether we
should also retry the next page if there is one even in the case when
ldap_parse_result() fails. Review comments are appreciated.
12 years, 2 months
- 3
- 2
[PATCH] Don't give memory context in confdb where not needed
by Jan Zelený
This will make confdb coherent with changes made in sysdb. Not using context
hierarchy will help detecting memory leaks if there are some.
Jan
12 years, 2 months
- 3
- 9
Re: [SSSD] New sssd question
by Stephen Gallagher
On Mon, 2012-02-20 at 16:37 +0000, Pascal.Schneider(a)swisslife.ch wrote:
> Hi Stephen
...
> So, the bad news:
>
> No we just updated to sssd-1.5.1-44 on RHEL 5 and 1.5.1-66 on RHEL 6.
>
>
>
> When we now update 1 of the AD Servers and ask immediately for the
> change, we get for a long time the wrong answer (not updated yet). I
> think the default behaviour is 5400 min.
>
> How can I force sssd to catch the info faster!
>
> We tried to manage it over:
>
> [nss]
>
> entry_cache_timeout = 30
>
>
>
> But I had no success!
>
>
>
> Extra infos: we use 4 AD Server 2008R2 with direct connection over
> sssd (no samba, no winbind)
>
>
When we cache the data, we set the expiration time as a literal value,
not an offset from the lastUpdate time. (We're considering changing this
in an upcoming release, possibly 1.9 upstream). There were good reasons
for this originally, but I think they've slowly become irrelevant.
So once an entry is cached, its expiration is already set. Changing the
value in sssd.conf only affects new entries being saved. So you'll still
need to wait for the original entry to expire before it gets updated
with a newer timeout value.
In upstream SSSD 1.6.0 we added a new command-line utility to be able to
forcibly expire specific (or all) entries. But that's coming in RHEL
6.3.
One trick you could do would be to set
entry_cache_nowait_percentage = 1
This option is designed to avoid cache-miss waiting by telling the SSSD
to update the user entry in the background when a request comes in that
is past a percentage of the expiration time. In SSSD 1.8.0 we enabled
this by default at 50%. If you set the option above, what will happen is
that once the entry is past 1% (aka 54 seconds), we will look it up in
the background. So this will get your entries up-to-date quickly, then
you can turn this back off (or set it to something more reasonable, like
50%).
Also, in the future, please direct queries like this at
sssd-devel(a)lists.fedorahosted.org so that other people can gain the
benefits of the answers.
12 years, 2 months
- 1
- 0
Announcing SSSD 1.8.0 beta 3
by Stephen Gallagher
Several regressions were discovered in the 1.8.0 betas (and one that had
also been a regression in 1.7.0). Today we are releasing 1.8.0 beta 3 in
our ongoing march towards the 1.8.0 long-term maintenance release.
As always, you can download the source at https://fedorahosted.org/sssd
Packages for Fedora 17 and Rawhide coming later today.
== Highlights ==
* Fixed a regression in group enumeration since 1.7.0
* Fixed several memory-corruption bugs
* Finalized the ABI for the autofs support
* Fixed a regression in the proxy provider
== Detailed Changelog ==
Jakub Hrozek (5):
* Fix group enumeration
* Only fetch SELinux string if the user is found
* Remove setent structure when callback is called
* Allocate setent structure on state, not on the client context
* Fix memory hierarchy when processing nested group memberships
Jan Cholasta (4):
* Add methods for activating and deactivating services to SSSDConfig
* Add ssh service to sssd.api.conf
* SSH: Verify that names received from client are valid UTF-8 in
responder
* SSH: Build man pages conditionally
Jan Zeleny (1):
* Fixed issue with netgroup update in IPA provider
Pavel Březina (3):
* Improve debug messages in sysdb_sudo_check_time()
* SUDO responder: check if the input is a UTF-8 string
* Refactor sss_result into sss_sudo_result
Stephen Gallagher (13):
* Remove dead code
* Fix missing NULL check after malloc
* Avoid uninitialized value comparison
* Add missing breaks to switch statements
* Fix uninitialized in_transaction
* Fix bad failure handling in be_sudo_handler()
* Check for failure in sss_packet_grow()
* Fix uninitialized value error in proxy provider
* Ensure NULL-termination in get_uid_from_pid()
* Move sss_ssh_* binaries to the main 'sssd' package
* Always include all manpage XML files in the distribution tarball
* Bumping version to 1.7.93 for beta 3
* Fix missing %endif in sssd.spec.in
Sumit Bose (1):
* Use curly braces in pkgconfig metadata file
12 years, 2 months
- 3
- 7
12 years, 2 months
- 1
- 1