https://bugzilla.redhat.com/show_bug.cgi?id=2016992
--- Comment #14 from Ankur Sinha (FranciscoD) <sanjay.ankur(a)gmail.com> ---
Created attachment 1836922
-->
https://bugzilla.redhat.com/attachment.cgi?id=1836922&action=edit
sssd_kcm log file from machine 2 (kdestroy on 2.5, upgrade, kinit on 2.6)
On the second machine: kdestroy on 2.5, upgrade, and then kinit does not work,
unfortunately:
(ins)[asinha@ankur ~]$ klist
Ticket cache: KCM:1000
Default principal: ankursinha(a)FEDORAPROJECT.ORG
Valid starting Expires Service principal
25/10/21 09:01:35 26/10/21 07:56:18 HTTP/koji.fedoraproject.org@
renew until 01/11/21 06:56:18
Ticket server: HTTP/koji.fedoraproject.org(a)FEDORAPROJECT.ORG
25/10/21 07:56:18 26/10/21 07:56:18
krbtgt/FEDORAPROJECT.ORG(a)FEDORAPROJECT.ORG
renew until 01/11/21 06:56:18
25/10/21 12:21:57 26/10/21 07:56:18 HTTP/id.fedoraproject.org@
renew until 01/11/21 06:56:18
Ticket server: HTTP/id.fedoraproject.org(a)FEDORAPROJECT.ORG
(ins)[asinha@ankur ~]$ kdestroy
(ins)[asinha@ankur ~]$ klist
klist: Credentials cache 'KCM:1000' not found
(ins)[asinha@ankur ~]$ sudo dnf update sssd\*
[sudo] password for asinha:
Last metadata expiration check: 0:46:30 ago on Mon 25 Oct 2021 15:36:31 BST.
Dependencies resolved.
========================================================================================================================================
Package Architecture Version
Repository Size
========================================================================================================================================
Upgrading:
libipa_hbac x86_64 2.6.0-1.fc35
updates-testing 33 k
libsss_certmap x86_64 2.6.0-1.fc35
updates-testing 76 k
libsss_idmap x86_64 2.6.0-1.fc35
updates-testing 39 k
libsss_nss_idmap x86_64 2.6.0-1.fc35
updates-testing 41 k
sssd x86_64 2.6.0-1.fc35
updates-testing 25 k
sssd-ad x86_64 2.6.0-1.fc35
updates-testing 203 k
sssd-client x86_64 2.6.0-1.fc35
updates-testing 141 k
sssd-common x86_64 2.6.0-1.fc35
updates-testing 1.5 M
sssd-common-pac x86_64 2.6.0-1.fc35
updates-testing 89 k
sssd-ipa x86_64 2.6.0-1.fc35
updates-testing 269 k
sssd-kcm x86_64 2.6.0-1.fc35
updates-testing 104 k
sssd-krb5 x86_64 2.6.0-1.fc35
updates-testing 76 k
sssd-krb5-common x86_64 2.6.0-1.fc35
updates-testing 82 k
sssd-ldap x86_64 2.6.0-1.fc35
updates-testing 153 k
sssd-nfs-idmap x86_64 2.6.0-1.fc35
updates-testing 36 k
sssd-proxy x86_64 2.6.0-1.fc35
updates-testing 66 k
Transaction Summary
========================================================================================================================================
Upgrade 16 Packages
Total download size: 2.9 M
Is this ok [y/N]: y
Downloading Packages:
(1/16): libipa_hbac-2.6.0-1.fc35.x86_64.rpm
355 kB/s | 33 kB 00:00
(2/16): libsss_idmap-2.6.0-1.fc35.x86_64.rpm
400 kB/s | 39 kB 00:00
(3/16): libsss_nss_idmap-2.6.0-1.fc35.x86_64.rpm
1.0 MB/s | 41 kB 00:00
(4/16): libsss_certmap-2.6.0-1.fc35.x86_64.rpm
550 kB/s | 76 kB 00:00
(5/16): sssd-2.6.0-1.fc35.x86_64.rpm
568 kB/s | 25 kB 00:00
(6/16): sssd-client-2.6.0-1.fc35.x86_64.rpm
1.5 MB/s | 141 kB 00:00
(7/16): sssd-ad-2.6.0-1.fc35.x86_64.rpm
1.7 MB/s | 203 kB 00:00
(8/16): sssd-common-pac-2.6.0-1.fc35.x86_64.rpm
1.9 MB/s | 89 kB 00:00
(9/16): sssd-kcm-2.6.0-1.fc35.x86_64.rpm
1.2 MB/s | 104 kB 00:00
(10/16): sssd-ipa-2.6.0-1.fc35.x86_64.rpm
1.6 MB/s | 269 kB 00:00
(11/16): sssd-krb5-2.6.0-1.fc35.x86_64.rpm
1.3 MB/s | 76 kB 00:00
(12/16): sssd-krb5-common-2.6.0-1.fc35.x86_64.rpm
1.6 MB/s | 82 kB 00:00
(13/16): sssd-nfs-idmap-2.6.0-1.fc35.x86_64.rpm
1.0 MB/s | 36 kB 00:00
(14/16): sssd-ldap-2.6.0-1.fc35.x86_64.rpm
1.2 MB/s | 153 kB 00:00
(15/16): sssd-proxy-2.6.0-1.fc35.x86_64.rpm
1.4 MB/s | 66 kB 00:00
(16/16): sssd-common-2.6.0-1.fc35.x86_64.rpm
1.4 MB/s | 1.5 MB 00:01
----------------------------------------------------------------------------------------------------------------------------------------
Total
1.8 MB/s | 2.9 MB 00:01
Running transaction check
Transaction check succeeded.
Running transaction test
Transaction test succeeded.
Running transaction
Preparing :
1/1
Upgrading : libsss_idmap-2.6.0-1.fc35.x86_64
1/32
Upgrading : libsss_certmap-2.6.0-1.fc35.x86_64
2/32
Upgrading : sssd-nfs-idmap-2.6.0-1.fc35.x86_64
3/32
Upgrading : libsss_nss_idmap-2.6.0-1.fc35.x86_64
4/32
Upgrading : sssd-client-2.6.0-1.fc35.x86_64
5/32
Running scriptlet: sssd-client-2.6.0-1.fc35.x86_64
5/32
Upgrading : sssd-common-2.6.0-1.fc35.x86_64
6/32
Running scriptlet: sssd-common-2.6.0-1.fc35.x86_64
6/32
Upgrading : sssd-krb5-common-2.6.0-1.fc35.x86_64
7/32
Upgrading : sssd-common-pac-2.6.0-1.fc35.x86_64
8/32
Upgrading : sssd-ad-2.6.0-1.fc35.x86_64
9/32
Upgrading : sssd-krb5-2.6.0-1.fc35.x86_64
10/32
Upgrading : sssd-ldap-2.6.0-1.fc35.x86_64
11/32
Upgrading : sssd-proxy-2.6.0-1.fc35.x86_64
12/32
Upgrading : libipa_hbac-2.6.0-1.fc35.x86_64
13/32
Upgrading : sssd-ipa-2.6.0-1.fc35.x86_64
14/32
Upgrading : sssd-2.6.0-1.fc35.x86_64
15/32
Upgrading : sssd-kcm-2.6.0-1.fc35.x86_64
16/32
Running scriptlet: sssd-kcm-2.6.0-1.fc35.x86_64
16/32
Cleanup : sssd-2.5.2-5.fc35.x86_64
17/32
Cleanup : sssd-ipa-2.5.2-5.fc35.x86_64
18/32
Cleanup : sssd-ad-2.5.2-5.fc35.x86_64
19/32
Cleanup : sssd-ldap-2.5.2-5.fc35.x86_64
20/32
Cleanup : sssd-common-pac-2.5.2-5.fc35.x86_64
21/32
Cleanup : sssd-krb5-2.5.2-5.fc35.x86_64
22/32
Cleanup : sssd-proxy-2.5.2-5.fc35.x86_64
23/32
Running scriptlet: sssd-kcm-2.5.2-5.fc35.x86_64
24/32
Cleanup : sssd-kcm-2.5.2-5.fc35.x86_64
24/32
Running scriptlet: sssd-kcm-2.5.2-5.fc35.x86_64
24/32
Cleanup : sssd-krb5-common-2.5.2-5.fc35.x86_64
25/32
Running scriptlet: sssd-common-2.5.2-5.fc35.x86_64
26/32
Cleanup : sssd-common-2.5.2-5.fc35.x86_64
26/32
Running scriptlet: sssd-common-2.5.2-5.fc35.x86_64
26/32
Running scriptlet: sssd-client-2.5.2-5.fc35.x86_64
27/32
Cleanup : sssd-client-2.5.2-5.fc35.x86_64
27/32
Cleanup : libsss_idmap-2.5.2-5.fc35.x86_64
28/32
Cleanup : libsss_nss_idmap-2.5.2-5.fc35.x86_64
29/32
Cleanup : libsss_certmap-2.5.2-5.fc35.x86_64
30/32
Cleanup : sssd-nfs-idmap-2.5.2-5.fc35.x86_64
31/32
Cleanup : libipa_hbac-2.5.2-5.fc35.x86_64
32/32
Running scriptlet: sssd-common-2.6.0-1.fc35.x86_64
32/32
Running scriptlet: libipa_hbac-2.5.2-5.fc35.x86_64
32/32
Verifying : libipa_hbac-2.6.0-1.fc35.x86_64
1/32
Verifying : libipa_hbac-2.5.2-5.fc35.x86_64
2/32
Verifying : libsss_certmap-2.6.0-1.fc35.x86_64
3/32
Verifying : libsss_certmap-2.5.2-5.fc35.x86_64
4/32
Verifying : libsss_idmap-2.6.0-1.fc35.x86_64
5/32
Verifying : libsss_idmap-2.5.2-5.fc35.x86_64
6/32
Verifying : libsss_nss_idmap-2.6.0-1.fc35.x86_64
7/32
Verifying : libsss_nss_idmap-2.5.2-5.fc35.x86_64
8/32
Verifying : sssd-2.6.0-1.fc35.x86_64
9/32
Verifying : sssd-2.5.2-5.fc35.x86_64
10/32
Verifying : sssd-ad-2.6.0-1.fc35.x86_64
11/32
Verifying : sssd-ad-2.5.2-5.fc35.x86_64
12/32
Verifying : sssd-client-2.6.0-1.fc35.x86_64
13/32
Verifying : sssd-client-2.5.2-5.fc35.x86_64
14/32
Verifying : sssd-common-2.6.0-1.fc35.x86_64
15/32
Verifying : sssd-common-2.5.2-5.fc35.x86_64
16/32
Verifying : sssd-common-pac-2.6.0-1.fc35.x86_64
17/32
Verifying : sssd-common-pac-2.5.2-5.fc35.x86_64
18/32
Verifying : sssd-ipa-2.6.0-1.fc35.x86_64
19/32
Verifying : sssd-ipa-2.5.2-5.fc35.x86_64
20/32
Verifying : sssd-kcm-2.6.0-1.fc35.x86_64
21/32
Verifying : sssd-kcm-2.5.2-5.fc35.x86_64
22/32
Verifying : sssd-krb5-2.6.0-1.fc35.x86_64
23/32
Verifying : sssd-krb5-2.5.2-5.fc35.x86_64
24/32
Verifying : sssd-krb5-common-2.6.0-1.fc35.x86_64
25/32
Verifying : sssd-krb5-common-2.5.2-5.fc35.x86_64
26/32
Verifying : sssd-ldap-2.6.0-1.fc35.x86_64
27/32
Verifying : sssd-ldap-2.5.2-5.fc35.x86_64
28/32
Verifying : sssd-nfs-idmap-2.6.0-1.fc35.x86_64
29/32
Verifying : sssd-nfs-idmap-2.5.2-5.fc35.x86_64
30/32
Verifying : sssd-proxy-2.6.0-1.fc35.x86_64
31/32
Verifying : sssd-proxy-2.5.2-5.fc35.x86_64
32/32
You should restart:
<snipped>
For more information run:
sudo tracer -iat 1635175380.9097939
Upgraded:
libipa_hbac-2.6.0-1.fc35.x86_64
libsss_certmap-2.6.0-1.fc35.x86_64 libsss_idmap-2.6.0-1.fc35.x86_64
libsss_nss_idmap-2.6.0-1.fc35.x86_64 sssd-2.6.0-1.fc35.x86_64
sssd-ad-2.6.0-1.fc35.x86_64
sssd-client-2.6.0-1.fc35.x86_64 sssd-common-2.6.0-1.fc35.x86_64
sssd-common-pac-2.6.0-1.fc35.x86_64
sssd-ipa-2.6.0-1.fc35.x86_64 sssd-kcm-2.6.0-1.fc35.x86_64
sssd-krb5-2.6.0-1.fc35.x86_64
sssd-krb5-common-2.6.0-1.fc35.x86_64 sssd-ldap-2.6.0-1.fc35.x86_64
sssd-nfs-idmap-2.6.0-1.fc35.x86_64
sssd-proxy-2.6.0-1.fc35.x86_64
Complete!
# enable kcm logging
(ins)[asinha@ankur ~]$ sudo vi /etc/sssd/sssd.conf
# check permissions
(ins)[asinha@ankur ~]$ sudo ls -lash /etc/sssd/sssd.conf
4.0K -rw-r--r--. 1 root root 23 Oct 25 16:25 /etc/sssd/sssd.conf
# restart services
(ins)[asinha@ankur ~]$ sudo systemctl restart sssd\*
# check services
(ins)[asinha@ankur ~]$ sudo systemctl status sssd\*
● sssd-kcm.service - SSSD Kerberos Cache Manager
Loaded: loaded (/usr/lib/systemd/system/sssd-kcm.service; indirect; vendor
preset: disabled)
Active: active (running) since Mon 2021-10-25 16:25:26 BST; 6s ago
TriggeredBy: ● sssd-kcm.socket
Docs: man:sssd-kcm(5)
Process: 3707345 ExecStartPre=/usr/sbin/sssd --genconf-section=kcm
(code=exited, status=4)
Main PID: 3707346 (sssd_kcm)
Tasks: 1 (limit: 38003)
Memory: 1.2M
CPU: 16ms
CGroup: /system.slice/sssd-kcm.service
└─3707346 /usr/libexec/sssd/sssd_kcm --uid 0 --gid 0
--logger=files
Oct 25 16:25:26 ankur.workstation systemd[1]: Starting SSSD Kerberos Cache
Manager...
Oct 25 16:25:26 ankur.workstation sssd[3707345]: [sssd]
[sss_ini_read_sssd_conf] (0x0020): Permission check on config file failed.
Oct 25 16:25:26 ankur.workstation sssd[3707345]: [sssd] [confdb_init_db]
(0x0020): Cannot convert INI to LDIF [1432158318]: [File owner>
Oct 25 16:25:26 ankur.workstation sssd[3707345]: [sssd] [confdb_setup]
(0x0010): ConfDB initialization has failed [1432158318]: File ow>
Oct 25 16:25:26 ankur.workstation sssd[3707345]: [sssd] [load_configuration]
(0x0010): Unable to setup ConfDB [1432158318]: File owners>
Oct 25 16:25:26 ankur.workstation sssd[3707345]: [sssd] [main] (0x0010): SSSD
couldn't load the configuration database.
Oct 25 16:25:26 ankur.workstation sssd[3707345]: SSSD couldn't load the
configuration database [1432158318]: Unknown error 1432158318.
Oct 25 16:25:26 ankur.workstation systemd[1]: Started SSSD Kerberos Cache
Manager.
Oct 25 16:25:26 ankur.workstation sssd_kcm[3707346]: Starting up
● sssd-kcm.socket - SSSD Kerberos Cache Manager responder socket
Loaded: loaded (/usr/lib/systemd/system/sssd-kcm.socket; enabled; vendor
preset: enabled)
Active: active (running) since Mon 2021-10-25 16:25:26 BST; 6s ago
Triggers: ● sssd-kcm.service
Docs: man:sssd-kcm(8)
Listen: /run/.heim_org.h5l.kcm-socket (Stream)
CPU: 0
CGroup: /system.slice/sssd-kcm.socket
Oct 25 16:25:26 ankur.workstation systemd[1]: Listening on SSSD Kerberos Cache
Manager responder socket.
# restart again (just to be sure)
(ins)[asinha@ankur ~]$ sudo systemctl restart sssd-kcm.s*
# check services again
(ins)[asinha@ankur ~]$ sudo systemctl status sssd-kcm.s*
● sssd-kcm.service - SSSD Kerberos Cache Manager
● sssd-kcm.service - SSSD Kerberos Cache Manager
Loaded: loaded (/usr/lib/systemd/system/sssd-kcm.service; indirect; vendor
preset: disabled)
Active: active (running) since Mon 2021-10-25 16:26:01 BST; 3s ago
TriggeredBy: ● sssd-kcm.socket
Docs: man:sssd-kcm(5)
Process: 3708783 ExecStartPre=/usr/sbin/sssd --genconf-section=kcm
(code=exited, status=4)
Main PID: 3708784 (sssd_kcm)
Tasks: 1 (limit: 38003)
Memory: 1.2M
CPU: 22ms
CGroup: /system.slice/sssd-kcm.service
└─3708784 /usr/libexec/sssd/sssd_kcm --uid 0 --gid 0
--logger=files
Oct 25 16:26:01 ankur.workstation systemd[1]: Starting SSSD Kerberos Cache
Manager...
Oct 25 16:26:01 ankur.workstation sssd[3708783]: [sssd]
[sss_ini_read_sssd_conf] (0x0020): Permission check on config file failed.
Oct 25 16:26:01 ankur.workstation sssd[3708783]: [sssd] [confdb_init_db]
(0x0020): Cannot convert INI to LDIF [1432158318]: [File owner>
Oct 25 16:26:01 ankur.workstation sssd[3708783]: [sssd] [confdb_setup]
(0x0010): ConfDB initialization has failed [1432158318]: File ow>
Oct 25 16:26:01 ankur.workstation sssd[3708783]: [sssd] [load_configuration]
(0x0010): Unable to setup ConfDB [1432158318]: File owners>
Oct 25 16:26:01 ankur.workstation sssd[3708783]: [sssd] [main] (0x0010): SSSD
couldn't load the configuration database.
Oct 25 16:26:01 ankur.workstation sssd[3708783]: SSSD couldn't load the
configuration database [1432158318]: Unknown error 1432158318.
Oct 25 16:26:01 ankur.workstation systemd[1]: Started SSSD Kerberos Cache
Manager.
Oct 25 16:26:01 ankur.workstation sssd_kcm[3708784]: Starting up
● sssd-kcm.socket - SSSD Kerberos Cache Manager responder socket
Loaded: loaded (/usr/lib/systemd/system/sssd-kcm.socket; enabled; vendor
preset: enabled)
Active: active (running) since Mon 2021-10-25 16:26:01 BST; 3s ago
Triggers: ● sssd-kcm.service
Docs: man:sssd-kcm(8)
Listen: /run/.heim_org.h5l.kcm-socket (Stream)
CPU: 0
CGroup: /system.slice/sssd-kcm.socket
# test
(ins)[asinha@ankur ~]$ klist
klist: Credentials cache I/O operation failed while resolving ccache
# with date for logs
(ins)[asinha@ankur ~]$ date
Mon 25 Oct 16:30:39 BST 2021
(ins)[asinha@ankur ~]$ klist
klist: Credentials cache I/O operation failed while resolving ccache
(ins)[asinha@ankur ~]$ kinit ankursinha(a)FEDORAPROJECT.ORG
kinit: Credentials cache I/O operation failed while getting default ccache
(ins)[asinha@ankur ~]$
Log attached
--
You are receiving this mail because:
You are on the CC list for the bug.
You are the assignee for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2016992