Linux video camera UVC driver with multiple cameras
by Steve Underwood
Hi,
The Linux UVC driver for USB video cameras names devices according to
the product name it gets from the USB device itself. This is fine if you
have different models of camera, as each gets a different name. However,
if you have, say, 3 Logitech C920 cameras, the device list in video
applications shows you have many devices called "HD Pro Webcam C920",
and you can't tell which is which. I looked in the driver source code to
see if there is a way to tag the cameras with unique names, but there
doesn't seem to be. Does anyone know if I missed something?
Regards,
Steve
2 years, 3 months
- 2
- 1
Re: Help configuring internal network
by R. G. Newbury
On 2022-03-20 8:00 a.m.,
Tim <ignored_mailbox(a)yahoo.com.au> wrote
>> R. G. Newbury wrote:
>> Controlling an hdhr with a dhcp served IP address is basically
>> impossible as it is hard to find that address and remember it for use
>> in your program. Control of the unit with most digital tv programs
>> requires a static IP address. Mythtv for instance will not work if
>> the IP address is changed, external to the mythtv program.
> DHCP does not equal random new addresses each time. On a home network,
> you're extremely likely to get assigned the same address each time.
> But you can ensure that by configuring the DHCP server to work that way.
'Configuring the DHCP server to work that way', is to set it to deliver
a static address. With a dhcp server, the problem is that any change in
the network, or the items connecting to it, can cause the dhcp server to
deliver a different address to a unit, while a static address, once set
as a static address, will not change. Moreover, a static address setting
is tied to the MAC of the unit, not its FQDN.
> For many things on a home LAN, configuring a DHCP server is going to be
> the easiest way to set fixed IPs for every device (unless you like
> manually configuring your TV, your printer, your PC, your laptop, your
> smart gadgets, your internet fridge, and partridge in a pear tree.
No wonder I can never get the partridges to connect properly!
2 years, 3 months
- 4
- 4
Message during dnf update
by Robert McBroom
The following message was sent to the terminal just before the verifying
step on a dnf update.
Creating group sgx with gid 106.
Creating group users with gid 100.
Creating group systemd-oom with gid 951.
Creating user systemd-oom (systemd Userspace OOM Killer) with uid 951
and gid 951.
/etc/gshadow: Group "users" already exists.
Failed to write files: File exists
No such entries are in /etc/group. /etc/gshadow has permissions of 000,
with last update of may 20,2021. Do these setting need to be changed?
2 years, 3 months
- 2
- 1
Connecting Evolution to an Exchange 2010 server
by Frederic Muller
Hi!
Long story short, my wife needs to connect to an Evolution server which
webmail no longer works due to some SSL certif configuration (now only
works with Explorer or Edge if I'm not mistaken).
I read (a few) the manual and installed evolution, evolution-mapi and
evolution-ews (seems I didn't need that one). Unfortunately in the email
settings I do not see Microsoft Exchange in server type. I've tried a
few things but nothing works.
Any idea or suggestion on what I could try to make it work, with F35?
Thank you.
Fred
2 years, 3 months
- 4
- 18
Kinda OT: Email clients and Email Management
by fedora＠cwm030.com
Hi Ya'll,
I know that there are, to me, seems like A LOT of email clients for the
linux world.
And It's getting harder and harder for me to hop around and try new
email clients out when they come out being a..........GET READY TO
CRINGE..... POP3 user.
Last week I tried TDE ( Trinity Desktop ) on Debian. and decided to give
KMAIL a try... Big mistake... Importing my email into KMAIL caused the
emails names to be changed from numbers ( because I used Claws before)
to this weird string of letters and numbers. Therefore, I could not
import my email back to CLAWS since I gave up and returned to Fedora and
Gnome 3.
I plan on staying with Fedora and Gnome 3.
I thought about making the change to IMAP, but old habits die hard. I
find myself when I set up or try a new email client, I wind up setting
it up as POP3...
So I am just curious if there is any POP users still out there
And what are some pros and cons switching to IMAP?
And what program do you use on Fedora for your email?
Thanks,
Chris
2 years, 3 months
- 19
- 100
suspend on lid closed doesn't work
by Paolo Galtieri
Folks,
I have 2 laptops, one running F31 the other F34. When I close the
lid on the F31 system it suspends as it is supposed to. I can ping the
system and I get no response. On the F34 system I close the lid and the
system continues running. I can still login to the system from the
external monitor. The power management configuration says suspend on
lid closed on both systems. I discovered that the reason it doesn't
suspend on the F34 system is the external monitor. My systems share an
external monitor via a kvm switch. Depending on which system the
external monitor is connected to that system will not suspend on lid
closure. I verified the same thing happens with the F31 system. There
is nothing in the power management configuration that says anything
about an external devices.
Is there any way to actually suspend a laptop when the lid is closed
regardless of any external devices?
One thing I should mention is that the external monitor is directly
connected to the F34 system via an HDMI cable, it's only the keyboard
and mouse that go through the kvm switch. If I directly connect the
monitor to the F31 system, also via HDMI, then it also fails to suspend
on lid closure.
Any help is appreciated.
Paolo
2 years, 3 months
- 7
- 12
Cannot ssh to servers with ldap_access_order = host
by Александр Махов
Hi,
I have a problem with access to RHEL 8 servers by SSH. I want to allow access to hosts allowed on the host attribute of the LDAP..
For instance:
$ ldapsearch -LLL -Q -Z uid=a-testuser host
dn: uid=a-testuser,ou=People,dc=old,dc=domain,dc=net
host: rhel801.network.lan
$ ldapsearch -LLL -Q -Z uid=a-admin host
dn: uid=a-makhov,ou=People,dc=old,dc=domain,dc=net
host: *
So a-testuser has access to the rhel801 server only and a-admin has access to all servers.
But when I try to log in with the a-testuser I get the error:
$ ssh a-testuser@rhel801
Password:
Connection closed by 10.1.129.99 port 22
a-admin can connect without any issues.
The full logs of a-testuser connection are below:
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sbus_dispatch] (0x4000): Dispatching.
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sbus_dispatch] (0x4000): Dispatching.
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sbus_method_handler] (0x2000): Received D-Bus method sssd.dataprovider.getAccountInfo on /sssd
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sbus_senders_lookup] (0x2000): Looking for identity of sender [sssd.pam]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [dp_get_account_info_send] (0x0200): Got request for [0x3][BE_REQ_INITGROUPS][name=a-testuser(a)old.domain.net]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sss_domain_get_state] (0x1000): Domain OLD.DOMAIN.NET is Active
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [dp_attach_req] (0x0400): [RID#10] DP Request [Initgroups #10]: REQ_TRACE: New request. [sssd.pam CID #4] Flags [0x0001].
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [dp_attach_req] (0x0400): [RID#10] Number of active DP request: 1
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sss_domain_get_state] (0x1000): [RID#10] Domain OLD.DOMAIN.NET is Active
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_id_op_connect_step] (0x4000): [RID#10] reusing cached connection
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_initgr_send] (0x4000): [RID#10] Retrieving info for initgroups call
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_id_op_connect_step] (0x4000): [RID#10] reusing cached connection
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_initgr_next_base] (0x0400): [RID#10] Searching for users with base [dc=old,dc=domain,dc=net]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_print_server] (0x2000): [RID#10] Searching 10.204.55.12:389
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_ext_step] (0x0400): [RID#10] calling ldap_search_ext with [(&(uid=a-testuser)(objectclass=posixAccount)(&(uidNumber=*)(!(uidNumber=0))))][dc=old,dc=do
main,dc=net].
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_ext_step] (0x1000): [RID#10] Requesting attrs: [objectClass]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_ext_step] (0x1000): [RID#10] Requesting attrs: [uid]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_ext_step] (0x1000): [RID#10] Requesting attrs: [userPassword]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_ext_step] (0x1000): [RID#10] Requesting attrs: [uidNumber]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_ext_step] (0x1000): [RID#10] Requesting attrs: [gidNumber]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_ext_step] (0x1000): [RID#10] Requesting attrs: [gecos]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_ext_step] (0x1000): [RID#10] Requesting attrs: [homeDirectory]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_ext_step] (0x1000): [RID#10] Requesting attrs: [loginShell]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_ext_step] (0x1000): [RID#10] Requesting attrs: [krbPrincipalName]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_ext_step] (0x1000): [RID#10] Requesting attrs: [cn]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_ext_step] (0x1000): [RID#10] Requesting attrs: [modifyTimestamp]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_ext_step] (0x1000): [RID#10] Requesting attrs: [modifyTimestamp]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_ext_step] (0x1000): [RID#10] Requesting attrs: [shadowLastChange]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_ext_step] (0x1000): [RID#10] Requesting attrs: [shadowMin]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_ext_step] (0x1000): [RID#10] Requesting attrs: [shadowMax]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_ext_step] (0x1000): [RID#10] Requesting attrs: [shadowWarning]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_ext_step] (0x1000): [RID#10] Requesting attrs: [shadowInactive]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_ext_step] (0x1000): [RID#10] Requesting attrs: [shadowExpire]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_ext_step] (0x1000): [RID#10] Requesting attrs: [shadowFlag]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_ext_step] (0x1000): [RID#10] Requesting attrs: [krbLastPwdChange]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_ext_step] (0x1000): [RID#10] Requesting attrs: [krbPasswordExpiration]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_ext_step] (0x1000): [RID#10] Requesting attrs: [pwdAttribute]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_ext_step] (0x1000): [RID#10] Requesting attrs: [authorizedService]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_ext_step] (0x1000): [RID#10] Requesting attrs: [accountExpires]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_ext_step] (0x1000): [RID#10] Requesting attrs: [userAccountControl]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_ext_step] (0x1000): [RID#10] Requesting attrs: [nsAccountLock]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_ext_step] (0x1000): [RID#10] Requesting attrs: [host]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_ext_step] (0x1000): [RID#10] Requesting attrs: [rhost]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_ext_step] (0x1000): [RID#10] Requesting attrs: [loginDisabled]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_ext_step] (0x1000): [RID#10] Requesting attrs: [loginExpirationTime]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_ext_step] (0x1000): [RID#10] Requesting attrs: [loginAllowedTimeMap]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_ext_step] (0x1000): [RID#10] Requesting attrs: [sshPublicKey]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_ext_step] (0x1000): [RID#10] Requesting attrs: [userCertificate;binary]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_ext_step] (0x1000): [RID#10] Requesting attrs: [mail]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_ext_step] (0x2000): [RID#10] ldap_search_ext called, msgid = 13
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_op_add] (0x2000): [RID#10] New operation 13 timeout 6
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_process_result] (0x2000): Trace: sh[0x559ddcff2330], connected[1], ops[0x559ddd0b6020], ldap[0x559ddd04d220]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_process_message] (0x4000): [RID#10] Message type: [LDAP_RES_SEARCH_ENTRY]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_parse_entry] (0x1000): [RID#10] OriginalDN: [uid=a-testuser,ou=People,dc=old,dc=domain,dc=net].
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_parse_range] (0x2000): [RID#10] No sub-attributes for [objectClass]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_parse_range] (0x2000): [RID#10] No sub-attributes for [cn]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_parse_range] (0x2000): [RID#10] No sub-attributes for [loginShell]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_parse_range] (0x2000): [RID#10] No sub-attributes for [homeDirectory]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_parse_range] (0x2000): [RID#10] No sub-attributes for [uid]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_parse_range] (0x2000): [RID#10] No sub-attributes for [mail]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_parse_range] (0x2000): [RID#10] No sub-attributes for [uidNumber]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_parse_range] (0x2000): [RID#10] No sub-attributes for [gidNumber]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_parse_range] (0x2000): [RID#10] No sub-attributes for [host]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_parse_range] (0x2000): [RID#10] No sub-attributes for [modifyTimestamp]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_process_result] (0x2000): Trace: sh[0x559ddcff2330], connected[1], ops[0x559ddd0b6020], ldap[0x559ddd04d220]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_process_message] (0x4000): [RID#10] Message type: [LDAP_RES_SEARCH_RESULT]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_op_finished] (0x0400): [RID#10] Search result: Success(0), no errmsg set
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_op_destructor] (0x2000): [RID#10] Operation 13 finished
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_initgr_user] (0x4000): [RID#10] Receiving info for the user
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_initgr_user] (0x4000): [RID#10] Storing the user
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_save_user] (0x0400): [RID#10] Save user
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_attrs_get_sid_str] (0x1000): [RID#10] No [objectSID] attribute. [0][Success]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_save_user] (0x4000): [RID#10] objectSID: not available for user
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_save_user] (0x4000): [RID#10] Failed to retrieve UUID [2][No such file or directory].
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_primary_name] (0x0400): [RID#10] Processing object a-testuser
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_save_user] (0x0400): [RID#10] Processing user a-testuser(a)old.domain.net
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_save_user] (0x2000): [RID#10] Adding originalDN [uid=a-testuser,ou=People,dc=old,dc=domain,dc=net] to attributes of [a-testuser(a)old.domain.net].
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_save_user] (0x0400): [RID#10] Original memberOf is not available for [a-testuser(a)old.domain.net].
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_attrs_add_ldap_attr] (0x2000): [RID#10] Adding original mod-Timestamp [20220317130050Z] to attributes of [a-testuser(a)old.domain.net].
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_save_user] (0x0400): [RID#10] User principal is not available for [a-testuser(a)old.domain.net].
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_attrs_add_ldap_attr] (0x2000): [RID#10] shadowLastChange is not available for [a-testuser(a)old.domain.net].
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_attrs_add_ldap_attr] (0x2000): [RID#10] shadowMin is not available for [a-testuser(a)old.domain.net].
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_attrs_add_ldap_attr] (0x2000): [RID#10] shadowMax is not available for [a-testuser(a)old.domain.net].
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_attrs_add_ldap_attr] (0x2000): [RID#10] shadowWarning is not available for [a-testuser(a)old.domain.net].
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_attrs_add_ldap_attr] (0x2000): [RID#10] shadowInactive is not available for [a-testuser(a)old.domain.net].
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_attrs_add_ldap_attr] (0x2000): [RID#10] shadowExpire is not available for [a-testuser(a)old.domain.net].
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_attrs_add_ldap_attr] (0x2000): [RID#10] shadowFlag is not available for [a-testuser(a)old.domain.net].
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_attrs_add_ldap_attr] (0x2000): [RID#10] krbLastPwdChange is not available for [a-testuser(a)old.domain.net].
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_attrs_add_ldap_attr] (0x2000): [RID#10] krbPasswordExpiration is not available for [a-testuser(a)old.domain.net].
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_attrs_add_ldap_attr] (0x2000): [RID#10] pwdAttribute is not available for [a-testuser(a)old.domain.net].
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_attrs_add_ldap_attr] (0x2000): [RID#10] authorizedService is not available for [a-testuser(a)old.domain.net].
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_attrs_add_ldap_attr] (0x2000): [RID#10] adAccountExpires is not available for [a-testuser(a)old.domain.net].
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_attrs_add_ldap_attr] (0x2000): [RID#10] adUserAccountControl is not available for [a-testuser(a)old.domain.net].
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_attrs_add_ldap_attr] (0x2000): [RID#10] nsAccountLock is not available for [a-testuser(a)old.domain.net].
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_attrs_add_ldap_attr] (0x2000): [RID#10] Adding authorizedHost [nlud-rhel801.network.lan] to attributes of [a-testuser(a)old.domain.net].
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_attrs_add_ldap_attr] (0x2000): [RID#10] authorizedRHost is not available for [a-testuser(a)old.domain.net].
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_attrs_add_ldap_attr] (0x2000): [RID#10] ndsLoginDisabled is not available for [a-testuser(a)old.domain.net].
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_attrs_add_ldap_attr] (0x2000): [RID#10] ndsLoginExpirationTime is not available for [a-testuser(a)old.domain.net].
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_attrs_add_ldap_attr] (0x2000): [RID#10] ndsLoginAllowedTimeMap is not available for [a-testuser(a)old.domain.net].
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_attrs_add_ldap_attr] (0x2000): [RID#10] sshPublicKey is not available for [a-testuser(a)old.domain.net].
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_attrs_add_ldap_attr] (0x2000): [RID#10] authType is not available for [a-testuser(a)old.domain.net].
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_attrs_add_ldap_attr] (0x2000): [RID#10] userCertificate is not available for [a-testuser(a)old.domain.net].
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_attrs_add_ldap_attr] (0x2000): [RID#10] Adding mail [aleksandr.makhov(a)t-mobile.nl] to attributes of [a-testuser(a)old.domain.net].
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_save_user] (0x0400): [RID#10] Storing info for user a-testuser(a)old.domain.net
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sysdb_set_entry_attr] (0x0200): [RID#10] Entry [name=a-testuser(a)old.domain.net,cn=users,cn=OLD.DOMAIN.NET,cn=sysdb] has set [ts_cache] attrs.
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sysdb_remove_attrs] (0x2000): [RID#10] Removing attribute [userPassword] from [a-testuser(a)old.domain.net]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sysdb_remove_attrs] (0x2000): [RID#10] Removing attribute [userPrincipalName] from [a-testuser(a)old.domain.net]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sysdb_remove_attrs] (0x2000): [RID#10] Removing attribute [shadowLastChange] from [a-testuser(a)old.domain.net]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sysdb_remove_attrs] (0x2000): [RID#10] Removing attribute [shadowMin] from [a-testuser(a)old.domain.net]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sysdb_remove_attrs] (0x2000): [RID#10] Removing attribute [shadowMax] from [a-testuser(a)old.domain.net]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sysdb_remove_attrs] (0x2000): [RID#10] Removing attribute [shadowWarning] from [a-testuser(a)old.domain.net]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sysdb_remove_attrs] (0x2000): [RID#10] Removing attribute [shadowInactive] from [a-testuser(a)old.domain.net]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sysdb_remove_attrs] (0x2000): [RID#10] Removing attribute [shadowExpire] from [a-testuser(a)old.domain.net]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sysdb_remove_attrs] (0x2000): [RID#10] Removing attribute [shadowFlag] from [a-testuser(a)old.domain.net]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sysdb_remove_attrs] (0x2000): [RID#10] Removing attribute [krbLastPwdChange] from [a-testuser(a)old.domain.net]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sysdb_remove_attrs] (0x2000): [RID#10] Removing attribute [krbPasswordExpiration] from [a-testuser(a)old.domain.net]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sysdb_remove_attrs] (0x2000): [RID#10] Removing attribute [pwdAttribute] from [a-testuser(a)old.domain.net]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sysdb_remove_attrs] (0x2000): [RID#10] Removing attribute [authorizedService] from [a-testuser(a)old.domain.net]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sysdb_remove_attrs] (0x2000): [RID#10] Removing attribute [adAccountExpires] from [a-testuser(a)old.domain.net]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sysdb_remove_attrs] (0x2000): [RID#10] Removing attribute [adUserAccountControl] from [a-testuser(a)old.domain.net]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sysdb_remove_attrs] (0x2000): [RID#10] Removing attribute [nsAccountLock] from [a-testuser(a)old.domain.net]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sysdb_remove_attrs] (0x2000): [RID#10] Removing attribute [authorizedRHost] from [a-testuser(a)old.domain.net]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sysdb_remove_attrs] (0x2000): [RID#10] Removing attribute [ndsLoginDisabled] from [a-testuser(a)old.domain.net]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sysdb_remove_attrs] (0x2000): [RID#10] Removing attribute [ndsLoginExpirationTime] from [a-testuser(a)old.domain.net]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sysdb_remove_attrs] (0x2000): [RID#10] Removing attribute [ndsLoginAllowedTimeMap] from [a-testuser(a)old.domain.net]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sysdb_remove_attrs] (0x2000): [RID#10] Removing attribute [sshPublicKey] from [a-testuser(a)old.domain.net]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sysdb_remove_attrs] (0x2000): [RID#10] Removing attribute [userCertificate] from [a-testuser(a)old.domain.net]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sysdb_store_user] (0x0400): [RID#10] User "a-testuser(a)old.domain.net" has been stored
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_initgr_user] (0x4000): [RID#10] Commit change
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_initgr_user] (0x4000): [RID#10] Process user's groups
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_initgr_rfc2307_next_base] (0x0400): [RID#10] Searching for groups with base [dc=old,dc=domain,dc=net]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_print_server] (0x2000): [RID#10] Searching 10.204.55.12:389
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_ext_step] (0x0400): [RID#10] calling ldap_search_ext with [(&(memberuid=a-testuser)(objectClass=posixGroup)(cn=*)(&(gidNumber=*)(!(gidNumber=0))))][dc
=old,dc=domain,dc=net].
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_ext_step] (0x1000): [RID#10] Requesting attrs: [objectClass]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_ext_step] (0x1000): [RID#10] Requesting attrs: [cn]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_ext_step] (0x1000): [RID#10] Requesting attrs: [userPassword]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_ext_step] (0x1000): [RID#10] Requesting attrs: [gidNumber]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_ext_step] (0x1000): [RID#10] Requesting attrs: [modifyTimestamp]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_ext_step] (0x1000): [RID#10] Requesting attrs: [modifyTimestamp]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_ext_step] (0x2000): [RID#10] ldap_search_ext called, msgid = 14
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_op_add] (0x2000): [RID#10] New operation 14 timeout 6
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_process_result] (0x2000): Trace: sh[0x559ddcff2330], connected[1], ops[0x559ddd0c34c0], ldap[0x559ddd04d220]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_process_result] (0x2000): Trace: end of ldap_result list
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_process_result] (0x2000): Trace: sh[0x559ddcff2330], connected[1], ops[0x559ddd0c34c0], ldap[0x559ddd04d220]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_process_message] (0x4000): [RID#10] Message type: [LDAP_RES_SEARCH_RESULT]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_op_finished] (0x0400): [RID#10] Search result: Success(0), no errmsg set
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_op_destructor] (0x2000): [RID#10] Operation 14 finished
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_initgr_common_store] (0x2000): [RID#10] Updating memberships for a-testuser(a)old.domain.net
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_initgr_done] (0x4000): [RID#10] Initgroups done
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_initgr_done] (0x0400): [RID#10] Primary group already cached, nothing to do.
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_initgr_done] (0x4000): [RID#10] No need to check for domain local group memberships.
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_id_op_destroy] (0x4000): [RID#10] releasing operation connection
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_id_op_done] (0x4000): [RID#10] releasing operation connection
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [dp_req_done] (0x0400): [RID#10] DP Request [Initgroups #10]: Request handler finished [0]: Success
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [_dp_req_recv] (0x0400): [RID#10] DP Request [Initgroups #10]: Receiving request data.
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [dp_req_destructor] (0x0400): [RID#10] DP Request [Initgroups #10]: Request removed.
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [dp_req_destructor] (0x0400): [RID#10] Number of active DP request: 0
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [dp_get_account_info_initgroups_step] (0x0400): [RID#10] Ordering NSS responder to update memory cache
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sysdb_set_entry_attr] (0x0200): [RID#10] Entry [name=a-testuser(a)old.domain.net,cn=users,cn=OLD.DOMAIN.NET,cn=sysdb] has set [ts_cache] attrs.
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_process_result] (0x2000): Trace: sh[0x559ddcff2330], connected[1], ops[(nil)], ldap[0x559ddd04d220]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_process_result] (0x2000): Trace: end of ldap_result list
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sbus_dispatch] (0x4000): Dispatching.
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sbus_dispatch] (0x4000): Dispatching.
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sbus_dispatch] (0x4000): Dispatching.
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [dp_req_reply_std] (0x1000): DP Request [Initgroups #10]: Returning [Success]: 0,0,Success
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sbus_issue_request_done] (0x0400): sssd.dataprovider.getAccountInfo: Success
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sbus_dispatch] (0x4000): Dispatching.
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sbus_dispatch] (0x4000): Dispatching.
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sbus_dispatch] (0x4000): Dispatching.
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sbus_method_handler] (0x2000): Received D-Bus method sssd.dataprovider.pamHandler on /sssd
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sbus_senders_lookup] (0x2000): Looking for identity of sender [sssd.pam]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [dp_pam_handler_send] (0x0100): Got request with the following data
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [pam_print_data] (0x0100): [CID #4] command: SSS_PAM_AUTHENTICATE
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [pam_print_data] (0x0100): [CID #4] domain: OLD.DOMAIN.NET
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [pam_print_data] (0x0100): [CID #4] user: a-testuser(a)old.domain.net
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [pam_print_data] (0x0100): [CID #4] service: sshd
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [pam_print_data] (0x0100): [CID #4] tty: ssh
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [pam_print_data] (0x0100): [CID #4] ruser:
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [pam_print_data] (0x0100): [CID #4] rhost: 10.204.55.199
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [pam_print_data] (0x0100): [CID #4] authtok type: 1 (Password)
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [pam_print_data] (0x0100): [CID #4] newauthtok type: 0 (No authentication token available)
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [pam_print_data] (0x0100): [CID #4] priv: 1
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [pam_print_data] (0x0100): [CID #4] cli_pid: 864553
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [pam_print_data] (0x0100): [CID #4] logon name: not set
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [pam_print_data] (0x0100): [CID #4] flags: 0
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [dp_attach_req] (0x0400): [RID#11] DP Request [PAM Authenticate #11]: REQ_TRACE: New request. [sssd.pam CID #4] Flags [0000].
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [dp_attach_req] (0x0400): [RID#11] Number of active DP request: 1
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sss_domain_get_state] (0x1000): [RID#11] Domain OLD.DOMAIN.NET is Active
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [krb5_auth_queue_send] (0x1000): [RID#11] Wait queue of user [a-testuser(a)old.domain.net] is empty, running request [0x559ddd0abb00] immediately.
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [krb5_setup] (0x4000): [RID#11] No mapping for: a-testuser(a)old.domain.net
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [krb5_get_simple_upn] (0x4000): [RID#11] Using simple UPN [a-testuser(a)OLD.DOMAIN.NET].
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [check_ccache_re] (0x1000): [RID#11] Ccache directory name [/tmp] does not contain illegal patterns.
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [check_ccache_re] (0x1000): [RID#11] Ccache directory name [FILE:/tmp/krb5cc_21496_XXXXXX] does not contain illegal patterns.
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [fo_resolve_service_send] (0x0100): [RID#11] Trying to resolve service 'KERBEROS'
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [get_server_status] (0x1000): [RID#11] Status of server 'krb01.network.lan' is 'working'
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [get_port_status] (0x1000): [RID#11] Port status of port 88 for server 'krb01.network.lan' is 'working'
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [fo_resolve_service_activate_timeout] (0x2000): [RID#11] Resolve timeout [dns_resolver_timeout] set to 6 seconds
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [get_server_status] (0x1000): [RID#11] Status of server 'krb01.network.lan' is 'working'
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [be_resolve_server_process] (0x1000): [RID#11] Saving the first resolved server
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [be_resolve_server_process] (0x0200): [RID#11] Found address for server krb01.network.lan: [10.204.55.12] TTL 2921
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [krb5_add_krb5info_offline_callback] (0x4000): [RID#11] Removal callback already available for service [KERBEROS].
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [unique_filename_destructor] (0x2000): [RID#11] Unlinking [/var/lib/sss/pubconf/.krb5info_dummy_u2fDad]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [unlink_dbg] (0x2000): [RID#11] File already removed: [/var/lib/sss/pubconf/.krb5info_dummy_u2fDad]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [krb5_add_krb5info_offline_callback] (0x4000): [RID#11] Removal callback already available for service [KERBEROS].
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [unique_filename_destructor] (0x2000): [RID#11] Unlinking [/var/lib/sss/pubconf/.krb5info_dummy_lLSbah]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [unlink_dbg] (0x2000): [RID#11] File already removed: [/var/lib/sss/pubconf/.krb5info_dummy_lLSbah]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sss_domain_get_state] (0x1000): [RID#11] Domain OLD.DOMAIN.NET is Active
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [child_handler_setup] (0x2000): [RID#11] Setting up signal handler up for pid [864575]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [child_handler_setup] (0x2000): [RID#11] Signal handler set up for pid [864575]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [write_pipe_handler] (0x0400): [RID#11] All data has been sent!
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [child_sig_handler] (0x1000): [RID#11] Waiting for child [864575].
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [child_sig_handler] (0x0100): [RID#11] child [864575] finished successfully.
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [read_pipe_handler] (0x0400): [RID#11] EOF received, client finished
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [parse_krb5_child_response] (0x1000): [RID#11] child response: status code: 0 (Success), msg type: 3 (Env variable to be set with pam_putenv(3)), len: 41
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [parse_krb5_child_response] (0x1000): [RID#11] child response: status code: 0 (Success), msg type: -1073741822 (UPN info), len: 28
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [parse_krb5_child_response] (0x1000): [RID#11] child response: status code: 0 (Success), msg type: -1073741823 (TGT lifetime info), len: 32
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [parse_krb5_child_response] (0x1000): [RID#11] TGT times are [1647865464][1647865464][1647951864][1647865464].
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [parse_krb5_child_response] (0x1000): [RID#11] child response: status code: 0 (Success), msg type: 6 (Message to be displayed to the user), len: 8
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [_be_fo_set_port_status] (0x8000): [RID#11] Setting status: PORT_WORKING. Called from: src/providers/krb5/krb5_auth.c: krb5_auth_done: 1087
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [fo_set_port_status] (0x0100): [RID#11] Marking port 88 of server 'krb01.network.lan' as 'working'
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [set_server_common_status] (0x0100): [RID#11] Marking server 'krb01.network.lan' as 'working'
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [fo_set_port_status] (0x0400): [RID#11] Marking port 88 of duplicate server 'krb01.network.lan' as 'working'
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [krb5_mod_ccname] (0x4000): [RID#11] Save ccname [FILE:/tmp/krb5cc_21496_kNHZbi] for user [a-testuser(a)old.domain.net].
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sysdb_ldb_msg_difference] (0x2000): [RID#11] Replaced/extended attr [ccacheFile] of entry [name=a-testuser(a)old.domain.net,cn=users,cn=OLD.DOMAIN.NET,cn=sysdb]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sysdb_set_entry_attr] (0x0200): [RID#11] Entry [name=a-testuser(a)old.domain.net,cn=users,cn=OLD.DOMAIN.NET,cn=sysdb] has set [cache, ts_cache] attrs.
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sysdb_ldb_msg_difference] (0x2000): [RID#11] Replaced/extended attr [cachedPassword] of entry [name=a-testuser(a)old.domain.net,cn=users,cn=OLD.DOMAIN.NET,cn=sysdb]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sysdb_set_entry_attr] (0x0200): [RID#11] Entry [name=a-testuser(a)old.domain.net,cn=users,cn=OLD.DOMAIN.NET,cn=sysdb] has set [cache, ts_cache] attrs.
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [check_wait_queue] (0x1000): [RID#11] Wait queue for user [a-testuser(a)old.domain.net] is empty.
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [krb5_auth_queue_done] (0x1000): [RID#11] krb5_auth_queue request [0x559ddd0abb00] done.
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [dp_req_done] (0x0400): [RID#11] DP Request [PAM Authenticate #11]: Request handler finished [0]: Success
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [_dp_req_recv] (0x0400): [RID#11] DP Request [PAM Authenticate #11]: Receiving request data.
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [dp_req_destructor] (0x0400): [RID#11] DP Request [PAM Authenticate #11]: Request removed.
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [dp_req_destructor] (0x0400): [RID#11] Number of active DP request: 0
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [dp_method_enabled] (0x0400): [RID#11] Target selinux is not configured
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sbus_issue_request_done] (0x0400): sssd.dataprovider.pamHandler: Success
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sbus_dispatch] (0x4000): Dispatching.
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sbus_dispatch] (0x4000): Dispatching.
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sbus_dispatch] (0x4000): Dispatching.
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sbus_method_handler] (0x2000): Received D-Bus method sssd.dataprovider.pamHandler on /sssd
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sbus_senders_lookup] (0x2000): Looking for identity of sender [sssd.pam]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [dp_pam_handler_send] (0x0100): Got request with the following data
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [pam_print_data] (0x0100): [CID #4] command: SSS_PAM_ACCT_MGMT
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [pam_print_data] (0x0100): [CID #4] domain: OLD.DOMAIN.NET
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [pam_print_data] (0x0100): [CID #4] user: a-testuser(a)old.domain.net
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [pam_print_data] (0x0100): [CID #4] service: sshd
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [pam_print_data] (0x0100): [CID #4] tty: ssh
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [pam_print_data] (0x0100): [CID #4] ruser:
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [pam_print_data] (0x0100): [CID #4] rhost: 10.204.55.199
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [pam_print_data] (0x0100): [CID #4] authtok type: 0 (No authentication token available)
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [pam_print_data] (0x0100): [CID #4] newauthtok type: 0 (No authentication token available)
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [pam_print_data] (0x0100): [CID #4] priv: 1
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [pam_print_data] (0x0100): [CID #4] cli_pid: 864553
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [pam_print_data] (0x0100): [CID #4] logon name: not set
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [pam_print_data] (0x0100): [CID #4] flags: 0
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [dp_attach_req] (0x0400): [RID#12] DP Request [PAM Account #12]: REQ_TRACE: New request. [sssd.pam CID #4] Flags [0000].
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [dp_attach_req] (0x0400): [RID#12] Number of active DP request: 1
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sss_domain_get_state] (0x1000): [RID#12] Domain OLD.DOMAIN.NET is Active
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_access_send] (0x0400): [RID#12] Performing access check for user [a-testuser(a)old.domain.net]
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_access_host] (0x0100): [RID#12] No matching host rule found
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [dp_req_done] (0x0400): [RID#12] DP Request [PAM Account #12]: Request handler finished [0]: Success
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [_dp_req_recv] (0x0400): [RID#12] DP Request [PAM Account #12]: Receiving request data.
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [dp_req_destructor] (0x0400): [RID#12] DP Request [PAM Account #12]: Request removed.
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [dp_req_destructor] (0x0400): [RID#12] Number of active DP request: 0
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [dp_method_enabled] (0x0400): [RID#12] Target selinux is not configured
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sbus_issue_request_done] (0x0400): sssd.dataprovider.pamHandler: Success
(2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sbus_dispatch] (0x4000): Dispatching.
So, I see in logs the line "Adding authorizedHost [nlud-rhel801.itservices.lan] to attributes of [a-testuser(a)dcn.versatel.net].". but it doesn't relp to ssh there.
sssd.conf:
[sssd]
domains = OLD.DOMAIN.NET, NETWORK.LAN
config_file_version = 2
services = nss, pam
[domain/OLD.DOMAIN.NET]
krb5_server = krb01.network.lan:88, krb02.network.lan:88, krb03.network.lan:88, krb04.network.lan
krb5_realm = OLD.DOMAIN.NET
krb5_keytab = /etc/krb5.keytab
krb5_renewable_lifetime = 24h
krb5_lifetime = 24h
krb5_canonicalize = true
cache_credentials = true
id_provider = ldap
auth_provider = krb5
access_provider = ldap
debug_level = 9
ldap_id_use_start_tls = true
ldap_uri = ldap://ldap01.network.lan, ldap://ldap02.network.lan, ldap://ldap03.network.lan
ldap_search_base = dc=old,dc=domain,dc=net
ldap_tls_reqcert = demand
ldap_tls_cacert = /etc/ssl/certs/it-hosting-and-network-ca.pem
ldap_network_timeout = 20
ldap_sasl_mech = GSSAPI
ldap_access_order = host
ldap_user_authorized_host = host
If I change ldap_access_order to filter, and hardcode the host name in the ldap_access_filter parameter, I can log in with ssh,
ldap_access_filter = (&(objectClass=posixAccount)(host=rhel801.network.lan))
but it's not a solition, because diffrent users have different allowed hosts.
Do you have emy idea how to fix the problem?
Software versions:
Red Hat Enterprise Linux release 8.5 (Ootpa)
sssd-client-2.5.2-2.el8_5.4.x86_64
sssd-ad-2.5.2-2.el8_5.4.x86_64
sssd-kcm-2.5.2-2.el8_5.4.x86_64
sssd-common-2.5.2-2.el8_5.4.x86_64
sssd-nfs-idmap-2.5.2-2.el8_5.4.x86_64
sssd-krb5-common-2.5.2-2.el8_5.4.x86_64
sssd-krb5-2.5.2-2.el8_5.4.x86_64
python3-sssdconfig-2.5.2-2.el8_5.4.noarch
sssd-common-pac-2.5.2-2.el8_5.4.x86_64
sssd-ldap-2.5.2-2.el8_5.4.x86_64
sssd-2.5.2-2.el8_5.4.x86_64
sssd-proxy-2.5.2-2.el8_5.4.x86_64
sssd-ipa-2.5.2-2.el8_5.4.x86_64
krb5-workstation-1.18.2-14.el8.x86_64
krb5-libs-1.18.2-14.el8.x86_64
Thank you inm advance.
2 years, 3 months
- 1
- 0
Re: Help configuring internal network
by R. G. Newbury
On 2022-03-20 10:11 a.m.,
> Tim<ignored_mailbox(a)yahoo.com.au> wrote:
> If you want a predictable LAN, then I really only see two ways to
> manage that without major pain:
>
> 1. Run a DHCP server with a DNS server...
>
> 2. Manually configure each device to have a fixed IP.
I think you left out a third method, which uses part of your version 1.
3. Use a router and set static addresses for each device. Today, all
routers act as DHCP servers, and setting a static address/MAC address
pair in the router setup ensures that any listed device will get the
same address every time. The router does not have to act as a DNS server
for internal devices: it passes external name calls to the gateway.
You only need to access the router setup when there is a new physical
device being added, such as a new phone. You can give it the same old IP
but that will now be paired to the new MAC. And then the /etc/hosts file
is merely a memorandum file to keep track of things.
Geoff
2 years, 3 months
- 2
- 1
reinstalling fedora 35
by Angelo Moreschini
Hi
upgrading fedora to version 35 I decided to install the OS completely from
zero again, instead of doing the normal upgrade.
I have a laptop with two HDDs: / dev / sda (on which windows is installed)
and / dev / sdb (on which fedora 33 was previously installed).
Of course I will install Fedora 35 on the ADD / dev / sdb .., but I would
like to completely clean up the old installation by formatting the old data
using gparted.
I would like to ask for help about to choose the pertizioni to leave and
those to format .. starting from the current situation that I transcribe
below:
*Partition*
*Name*
*File System*
*Mount Point*
*Size*
*Used*
*Unused*
*Flags*
*/dev/*sdb1
EFI System Partition
Fat 32
*/boot/*efi
600.00 MiB
21.58 Mib
578 MiB
Boot,esp
*/dev/*sdb2
ext4
/boot
1.00 GiB
295.10 MiB
728 MiB
*/dev/*sdb3
lvm2 pv
fedora_localhost-live
929.93 GiB
929.93 GiB
0.00 GiB
lvm
2 years, 3 months
- 4
- 5
Re: Help configuring internal network
by R. G. Newbury
On 2022-03-19 7:46 p.m., Geoffrey Leach wrote
>
> F35, fresh install. I have an ethernet-connected device (HDHomerun, fwiw)
> newly re-compiled on the newly-installed F35 xfce4 workstation. As far as I
> can tell from trying every network analysis I can find, the connection is
> good (exception, no response to ping) The interface was configured with the
> NetworkManager app, that assigned the device eno1.
eno1 is your internal network port. Not the hdhomerun unit. My hdhr
units (I have 2 therefor 4 tuners) respond to ping. But it sounds like
your computer does not know where the hdhr is (ie its IP address). It
won't show up unless you know what that is.
> I could really use some help.
You are working from the wrong end, so to speak. It is highly likely
that your hdhomerun is working perfectly but nor receiving the ping.
First: edit your /etc/hosts file to give the hdhomerun unit a fixed IP
address. Your computer should have a static address too. The line in my
hosts file looks like this:
192.168.1.80 hdhomerun1 # 00:18:DD:04:67:E1 "10467E14"
(All tuners of a 2 or 4 tuner hdhr are at the same IP address).
Plug a network Cat5 cable from the hdhr to your router, and another from
your computer to your router. It should work if you have a direct
connection but then how are you going to talk to the world?
You can also fix static IP addresses for the computer and the hdhr in
your router. You *should* have a static IP address, so that it does not
change on reboot. Mythtv and most other digital tv programs *require*
this. Once your computer and router know where the hdhr is, reboot.
During your install of the hdhomerun you should have received/installed
a program hdhomerun_config and/or hdhomerun_config_gui. If the hdhr
'address' is not posted on the back of the unit, use
hdhomerun_config discover
to discover that address/id. You will see something like this:
hdhomerun device 10467E14 found at 192.168.1.80
You need the id to test the unit. Using hdhomerun_config you can scan
and set options, including the channelmap (us-bcast), and actually watch
programs.
This is incredibly clunky however, so I presume that you will have
something like mythtv or vlc installed to control the unit, and to watch
on. Those programs can control the hdhr unit, and will receive and store
the digital stream for later viewing.
There is lots of stuff on the silicon dust website (the manufacturer)
and lots on the mythtv wiki (mythtv.org/wiki) including specific pages
for the various types of hdhr boxes. Basic setup of a hdhr on mythtv is
described here:
https://www.mythtv.org/wiki/Silicondust_HDHomeRun_setup
HTH
Geoffrey (also!)
2 years, 3 months
- 5
- 5