users March 2022

users@lists.fedoraproject.org

78 participants
83 discussions

Linux video camera UVC driver with multiple cameras
by Steve Underwood 22 Mar '22

22 Mar '22

Hi, The Linux UVC driver for USB video cameras names devices according to the product name it gets from the USB device itself. This is fine if you have different models of camera, as each gets a different name. However, if you have, say, 3 Logitech C920 cameras, the device list in video applications shows you have many devices called "HD Pro Webcam C920", and you can't tell which is which. I looked in the driver source code to see if there is a way to tag the cameras with unique names, but there doesn't seem to be. Does anyone know if I missed something? Regards, Steve

2 1

Re: Help configuring internal network
by R. G. Newbury 22 Mar '22

22 Mar '22

On 2022-03-20 8:00 a.m., Tim <ignored_mailbox(a)yahoo.com.au> wrote >> R. G. Newbury wrote: >> Controlling an hdhr with a dhcp served IP address is basically >> impossible as it is hard to find that address and remember it for use >> in your program. Control of the unit with most digital tv programs >> requires a static IP address. Mythtv for instance will not work if >> the IP address is changed, external to the mythtv program. > DHCP does not equal random new addresses each time. On a home network, > you're extremely likely to get assigned the same address each time. > But you can ensure that by configuring the DHCP server to work that way. 'Configuring the DHCP server to work that way', is to set it to deliver a static address. With a dhcp server, the problem is that any change in the network, or the items connecting to it, can cause the dhcp server to deliver a different address to a unit, while a static address, once set as a static address, will not change. Moreover, a static address setting is tied to the MAC of the unit, not its FQDN. > For many things on a home LAN, configuring a DHCP server is going to be > the easiest way to set fixed IPs for every device (unless you like > manually configuring your TV, your printer, your PC, your laptop, your > smart gadgets, your internet fridge, and partridge in a pear tree. No wonder I can never get the partridges to connect properly!

4 4

Message during dnf update
by Robert McBroom 22 Mar '22

22 Mar '22

The following message was sent to the terminal just before the verifying step on a dnf update. Creating group sgx with gid 106. Creating group users with gid 100. Creating group systemd-oom with gid 951. Creating user systemd-oom (systemd Userspace OOM Killer) with uid 951 and gid 951. /etc/gshadow: Group "users" already exists. Failed to write files: File exists No such entries are in /etc/group. /etc/gshadow has permissions of 000, with last update of may 20,2021. Do these setting need to be changed?

2 1

Connecting Evolution to an Exchange 2010 server
by Frederic Muller 22 Mar '22

22 Mar '22

Hi! Long story short, my wife needs to connect to an Evolution server which webmail no longer works due to some SSL certif configuration (now only works with Explorer or Edge if I'm not mistaken). I read (a few) the manual and installed evolution, evolution-mapi and evolution-ews (seems I didn't need that one). Unfortunately in the email settings I do not see Microsoft Exchange in server type. I've tried a few things but nothing works. Any idea or suggestion on what I could try to make it work, with F35? Thank you. Fred

4 18

Kinda OT: Email clients and Email Management
by fedora＠cwm030.com 22 Mar '22

22 Mar '22

Hi Ya'll, I know that there are, to me, seems like A LOT of email clients for the linux world. And It's getting harder and harder for me to hop around and try new email clients out when they come out being a..........GET READY TO CRINGE..... POP3 user. Last week I tried TDE ( Trinity Desktop ) on Debian. and decided to give KMAIL a try... Big mistake... Importing my email into KMAIL caused the emails names to be changed from numbers ( because I used Claws before) to this weird string of letters and numbers. Therefore, I could not import my email back to CLAWS since I gave up and returned to Fedora and Gnome 3. I plan on staying with Fedora and Gnome 3. I thought about making the change to IMAP, but old habits die hard. I find myself when I set up or try a new email client, I wind up setting it up as POP3... So I am just curious if there is any POP users still out there And what are some pros and cons switching to IMAP? And what program do you use on Fedora for your email? Thanks, Chris

19 100

suspend on lid closed doesn't work
by Paolo Galtieri 21 Mar '22

21 Mar '22

Folks, I have 2 laptops, one running F31 the other F34. When I close the lid on the F31 system it suspends as it is supposed to. I can ping the system and I get no response. On the F34 system I close the lid and the system continues running. I can still login to the system from the external monitor. The power management configuration says suspend on lid closed on both systems. I discovered that the reason it doesn't suspend on the F34 system is the external monitor. My systems share an external monitor via a kvm switch. Depending on which system the external monitor is connected to that system will not suspend on lid closure. I verified the same thing happens with the F31 system. There is nothing in the power management configuration that says anything about an external devices. Is there any way to actually suspend a laptop when the lid is closed regardless of any external devices? One thing I should mention is that the external monitor is directly connected to the F34 system via an HDMI cable, it's only the keyboard and mouse that go through the kvm switch. If I directly connect the monitor to the F31 system, also via HDMI, then it also fails to suspend on lid closure. Any help is appreciated. Paolo

7 12

Cannot ssh to servers with ldap_access_order = host
by Александр Махов 21 Mar '22

21 Mar '22

Hi, I have a problem with access to RHEL 8 servers by SSH. I want to allow access to hosts allowed on the host attribute of the LDAP.. For instance: $ ldapsearch -LLL -Q -Z uid=a-testuser host dn: uid=a-testuser,ou=People,dc=old,dc=domain,dc=net host: rhel801.network.lan $ ldapsearch -LLL -Q -Z uid=a-admin host dn: uid=a-makhov,ou=People,dc=old,dc=domain,dc=net host: * So a-testuser has access to the rhel801 server only and a-admin has access to all servers. But when I try to log in with the a-testuser I get the error: $ ssh a-testuser@rhel801 Password: Connection closed by 10.1.129.99 port 22 a-admin can connect without any issues. The full logs of a-testuser connection are below: (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sbus_dispatch] (0x4000): Dispatching. (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sbus_dispatch] (0x4000): Dispatching. (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sbus_method_handler] (0x2000): Received D-Bus method sssd.dataprovider.getAccountInfo on /sssd (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sbus_senders_lookup] (0x2000): Looking for identity of sender [sssd.pam] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [dp_get_account_info_send] (0x0200): Got request for [0x3][BE_REQ_INITGROUPS][name=a-testuser(a)old.domain.net] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sss_domain_get_state] (0x1000): Domain OLD.DOMAIN.NET is Active (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [dp_attach_req] (0x0400): [RID#10] DP Request [Initgroups #10]: REQ_TRACE: New request. [sssd.pam CID #4] Flags [0x0001]. (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [dp_attach_req] (0x0400): [RID#10] Number of active DP request: 1 (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sss_domain_get_state] (0x1000): [RID#10] Domain OLD.DOMAIN.NET is Active (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_id_op_connect_step] (0x4000): [RID#10] reusing cached connection (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_initgr_send] (0x4000): [RID#10] Retrieving info for initgroups call (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_id_op_connect_step] (0x4000): [RID#10] reusing cached connection (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_initgr_next_base] (0x0400): [RID#10] Searching for users with base [dc=old,dc=domain,dc=net] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_print_server] (0x2000): [RID#10] Searching 10.204.55.12:389 (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_ext_step] (0x0400): [RID#10] calling ldap_search_ext with [(&(uid=a-testuser)(objectclass=posixAccount)(&(uidNumber=*)(!(uidNumber=0))))][dc=old,dc=do main,dc=net]. (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_ext_step] (0x1000): [RID#10] Requesting attrs: [objectClass] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_ext_step] (0x1000): [RID#10] Requesting attrs: [uid] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_ext_step] (0x1000): [RID#10] Requesting attrs: [userPassword] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_ext_step] (0x1000): [RID#10] Requesting attrs: [uidNumber] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_ext_step] (0x1000): [RID#10] Requesting attrs: [gidNumber] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_ext_step] (0x1000): [RID#10] Requesting attrs: [gecos] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_ext_step] (0x1000): [RID#10] Requesting attrs: [homeDirectory] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_ext_step] (0x1000): [RID#10] Requesting attrs: [loginShell] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_ext_step] (0x1000): [RID#10] Requesting attrs: [krbPrincipalName] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_ext_step] (0x1000): [RID#10] Requesting attrs: [cn] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_ext_step] (0x1000): [RID#10] Requesting attrs: [modifyTimestamp] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_ext_step] (0x1000): [RID#10] Requesting attrs: [modifyTimestamp] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_ext_step] (0x1000): [RID#10] Requesting attrs: [shadowLastChange] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_ext_step] (0x1000): [RID#10] Requesting attrs: [shadowMin] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_ext_step] (0x1000): [RID#10] Requesting attrs: [shadowMax] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_ext_step] (0x1000): [RID#10] Requesting attrs: [shadowWarning] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_ext_step] (0x1000): [RID#10] Requesting attrs: [shadowInactive] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_ext_step] (0x1000): [RID#10] Requesting attrs: [shadowExpire] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_ext_step] (0x1000): [RID#10] Requesting attrs: [shadowFlag] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_ext_step] (0x1000): [RID#10] Requesting attrs: [krbLastPwdChange] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_ext_step] (0x1000): [RID#10] Requesting attrs: [krbPasswordExpiration] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_ext_step] (0x1000): [RID#10] Requesting attrs: [pwdAttribute] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_ext_step] (0x1000): [RID#10] Requesting attrs: [authorizedService] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_ext_step] (0x1000): [RID#10] Requesting attrs: [accountExpires] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_ext_step] (0x1000): [RID#10] Requesting attrs: [userAccountControl] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_ext_step] (0x1000): [RID#10] Requesting attrs: [nsAccountLock] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_ext_step] (0x1000): [RID#10] Requesting attrs: [host] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_ext_step] (0x1000): [RID#10] Requesting attrs: [rhost] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_ext_step] (0x1000): [RID#10] Requesting attrs: [loginDisabled] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_ext_step] (0x1000): [RID#10] Requesting attrs: [loginExpirationTime] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_ext_step] (0x1000): [RID#10] Requesting attrs: [loginAllowedTimeMap] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_ext_step] (0x1000): [RID#10] Requesting attrs: [sshPublicKey] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_ext_step] (0x1000): [RID#10] Requesting attrs: [userCertificate;binary] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_ext_step] (0x1000): [RID#10] Requesting attrs: [mail] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_ext_step] (0x2000): [RID#10] ldap_search_ext called, msgid = 13 (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_op_add] (0x2000): [RID#10] New operation 13 timeout 6 (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_process_result] (0x2000): Trace: sh[0x559ddcff2330], connected[1], ops[0x559ddd0b6020], ldap[0x559ddd04d220] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_process_message] (0x4000): [RID#10] Message type: [LDAP_RES_SEARCH_ENTRY] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_parse_entry] (0x1000): [RID#10] OriginalDN: [uid=a-testuser,ou=People,dc=old,dc=domain,dc=net]. (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_parse_range] (0x2000): [RID#10] No sub-attributes for [objectClass] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_parse_range] (0x2000): [RID#10] No sub-attributes for [cn] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_parse_range] (0x2000): [RID#10] No sub-attributes for [loginShell] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_parse_range] (0x2000): [RID#10] No sub-attributes for [homeDirectory] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_parse_range] (0x2000): [RID#10] No sub-attributes for [uid] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_parse_range] (0x2000): [RID#10] No sub-attributes for [mail] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_parse_range] (0x2000): [RID#10] No sub-attributes for [uidNumber] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_parse_range] (0x2000): [RID#10] No sub-attributes for [gidNumber] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_parse_range] (0x2000): [RID#10] No sub-attributes for [host] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_parse_range] (0x2000): [RID#10] No sub-attributes for [modifyTimestamp] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_process_result] (0x2000): Trace: sh[0x559ddcff2330], connected[1], ops[0x559ddd0b6020], ldap[0x559ddd04d220] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_process_message] (0x4000): [RID#10] Message type: [LDAP_RES_SEARCH_RESULT] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_op_finished] (0x0400): [RID#10] Search result: Success(0), no errmsg set (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_op_destructor] (0x2000): [RID#10] Operation 13 finished (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_initgr_user] (0x4000): [RID#10] Receiving info for the user (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_initgr_user] (0x4000): [RID#10] Storing the user (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_save_user] (0x0400): [RID#10] Save user (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_attrs_get_sid_str] (0x1000): [RID#10] No [objectSID] attribute. [0][Success] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_save_user] (0x4000): [RID#10] objectSID: not available for user (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_save_user] (0x4000): [RID#10] Failed to retrieve UUID [2][No such file or directory]. (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_primary_name] (0x0400): [RID#10] Processing object a-testuser (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_save_user] (0x0400): [RID#10] Processing user a-testuser(a)old.domain.net (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_save_user] (0x2000): [RID#10] Adding originalDN [uid=a-testuser,ou=People,dc=old,dc=domain,dc=net] to attributes of [a-testuser(a)old.domain.net] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_save_user] (0x0400): [RID#10] Original memberOf is not available for [a-testuser(a)old.domain.net] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_attrs_add_ldap_attr] (0x2000): [RID#10] Adding original mod-Timestamp [20220317130050Z] to attributes of [a-testuser(a)old.domain.net] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_save_user] (0x0400): [RID#10] User principal is not available for [a-testuser(a)old.domain.net] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_attrs_add_ldap_attr] (0x2000): [RID#10] shadowLastChange is not available for [a-testuser(a)old.domain.net] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_attrs_add_ldap_attr] (0x2000): [RID#10] shadowMin is not available for [a-testuser(a)old.domain.net] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_attrs_add_ldap_attr] (0x2000): [RID#10] shadowMax is not available for [a-testuser(a)old.domain.net] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_attrs_add_ldap_attr] (0x2000): [RID#10] shadowWarning is not available for [a-testuser(a)old.domain.net] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_attrs_add_ldap_attr] (0x2000): [RID#10] shadowInactive is not available for [a-testuser(a)old.domain.net] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_attrs_add_ldap_attr] (0x2000): [RID#10] shadowExpire is not available for [a-testuser(a)old.domain.net] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_attrs_add_ldap_attr] (0x2000): [RID#10] shadowFlag is not available for [a-testuser(a)old.domain.net] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_attrs_add_ldap_attr] (0x2000): [RID#10] krbLastPwdChange is not available for [a-testuser(a)old.domain.net] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_attrs_add_ldap_attr] (0x2000): [RID#10] krbPasswordExpiration is not available for [a-testuser(a)old.domain.net] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_attrs_add_ldap_attr] (0x2000): [RID#10] pwdAttribute is not available for [a-testuser(a)old.domain.net] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_attrs_add_ldap_attr] (0x2000): [RID#10] authorizedService is not available for [a-testuser(a)old.domain.net] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_attrs_add_ldap_attr] (0x2000): [RID#10] adAccountExpires is not available for [a-testuser(a)old.domain.net] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_attrs_add_ldap_attr] (0x2000): [RID#10] adUserAccountControl is not available for [a-testuser(a)old.domain.net] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_attrs_add_ldap_attr] (0x2000): [RID#10] nsAccountLock is not available for [a-testuser(a)old.domain.net] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_attrs_add_ldap_attr] (0x2000): [RID#10] Adding authorizedHost [nlud-rhel801.network.lan] to attributes of [a-testuser(a)old.domain.net] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_attrs_add_ldap_attr] (0x2000): [RID#10] authorizedRHost is not available for [a-testuser(a)old.domain.net] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_attrs_add_ldap_attr] (0x2000): [RID#10] ndsLoginDisabled is not available for [a-testuser(a)old.domain.net] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_attrs_add_ldap_attr] (0x2000): [RID#10] ndsLoginExpirationTime is not available for [a-testuser(a)old.domain.net] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_attrs_add_ldap_attr] (0x2000): [RID#10] ndsLoginAllowedTimeMap is not available for [a-testuser(a)old.domain.net] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_attrs_add_ldap_attr] (0x2000): [RID#10] sshPublicKey is not available for [a-testuser(a)old.domain.net] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_attrs_add_ldap_attr] (0x2000): [RID#10] authType is not available for [a-testuser(a)old.domain.net] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_attrs_add_ldap_attr] (0x2000): [RID#10] userCertificate is not available for [a-testuser(a)old.domain.net] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_attrs_add_ldap_attr] (0x2000): [RID#10] Adding mail [aleksandr.makhov(a)t-mobile.nl] to attributes of [a-testuser(a)old.domain.net] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_save_user] (0x0400): [RID#10] Storing info for user a-testuser(a)old.domain.net (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sysdb_set_entry_attr] (0x0200): [RID#10] Entry [name=a-testuser(a)old.domain.net,cn=users,cn=OLD.DOMAIN.NET,cn=sysdb] has set [ts_cache] attrs. (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sysdb_remove_attrs] (0x2000): [RID#10] Removing attribute [userPassword] from [a-testuser(a)old.domain.net] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sysdb_remove_attrs] (0x2000): [RID#10] Removing attribute [userPrincipalName] from [a-testuser(a)old.domain.net] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sysdb_remove_attrs] (0x2000): [RID#10] Removing attribute [shadowLastChange] from [a-testuser(a)old.domain.net] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sysdb_remove_attrs] (0x2000): [RID#10] Removing attribute [shadowMin] from [a-testuser(a)old.domain.net] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sysdb_remove_attrs] (0x2000): [RID#10] Removing attribute [shadowMax] from [a-testuser(a)old.domain.net] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sysdb_remove_attrs] (0x2000): [RID#10] Removing attribute [shadowWarning] from [a-testuser(a)old.domain.net] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sysdb_remove_attrs] (0x2000): [RID#10] Removing attribute [shadowInactive] from [a-testuser(a)old.domain.net] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sysdb_remove_attrs] (0x2000): [RID#10] Removing attribute [shadowExpire] from [a-testuser(a)old.domain.net] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sysdb_remove_attrs] (0x2000): [RID#10] Removing attribute [shadowFlag] from [a-testuser(a)old.domain.net] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sysdb_remove_attrs] (0x2000): [RID#10] Removing attribute [krbLastPwdChange] from [a-testuser(a)old.domain.net] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sysdb_remove_attrs] (0x2000): [RID#10] Removing attribute [krbPasswordExpiration] from [a-testuser(a)old.domain.net] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sysdb_remove_attrs] (0x2000): [RID#10] Removing attribute [pwdAttribute] from [a-testuser(a)old.domain.net] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sysdb_remove_attrs] (0x2000): [RID#10] Removing attribute [authorizedService] from [a-testuser(a)old.domain.net] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sysdb_remove_attrs] (0x2000): [RID#10] Removing attribute [adAccountExpires] from [a-testuser(a)old.domain.net] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sysdb_remove_attrs] (0x2000): [RID#10] Removing attribute [adUserAccountControl] from [a-testuser(a)old.domain.net] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sysdb_remove_attrs] (0x2000): [RID#10] Removing attribute [nsAccountLock] from [a-testuser(a)old.domain.net] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sysdb_remove_attrs] (0x2000): [RID#10] Removing attribute [authorizedRHost] from [a-testuser(a)old.domain.net] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sysdb_remove_attrs] (0x2000): [RID#10] Removing attribute [ndsLoginDisabled] from [a-testuser(a)old.domain.net] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sysdb_remove_attrs] (0x2000): [RID#10] Removing attribute [ndsLoginExpirationTime] from [a-testuser(a)old.domain.net] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sysdb_remove_attrs] (0x2000): [RID#10] Removing attribute [ndsLoginAllowedTimeMap] from [a-testuser(a)old.domain.net] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sysdb_remove_attrs] (0x2000): [RID#10] Removing attribute [sshPublicKey] from [a-testuser(a)old.domain.net] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sysdb_remove_attrs] (0x2000): [RID#10] Removing attribute [userCertificate] from [a-testuser(a)old.domain.net] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sysdb_store_user] (0x0400): [RID#10] User "a-testuser(a)old.domain.net" has been stored (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_initgr_user] (0x4000): [RID#10] Commit change (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_initgr_user] (0x4000): [RID#10] Process user's groups (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_initgr_rfc2307_next_base] (0x0400): [RID#10] Searching for groups with base [dc=old,dc=domain,dc=net] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_print_server] (0x2000): [RID#10] Searching 10.204.55.12:389 (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_ext_step] (0x0400): [RID#10] calling ldap_search_ext with [(&(memberuid=a-testuser)(objectClass=posixGroup)(cn=*)(&(gidNumber=*)(!(gidNumber=0))))][dc =old,dc=domain,dc=net]. (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_ext_step] (0x1000): [RID#10] Requesting attrs: [objectClass] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_ext_step] (0x1000): [RID#10] Requesting attrs: [cn] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_ext_step] (0x1000): [RID#10] Requesting attrs: [userPassword] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_ext_step] (0x1000): [RID#10] Requesting attrs: [gidNumber] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_ext_step] (0x1000): [RID#10] Requesting attrs: [modifyTimestamp] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_ext_step] (0x1000): [RID#10] Requesting attrs: [modifyTimestamp] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_ext_step] (0x2000): [RID#10] ldap_search_ext called, msgid = 14 (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_op_add] (0x2000): [RID#10] New operation 14 timeout 6 (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_process_result] (0x2000): Trace: sh[0x559ddcff2330], connected[1], ops[0x559ddd0c34c0], ldap[0x559ddd04d220] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_process_result] (0x2000): Trace: end of ldap_result list (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_process_result] (0x2000): Trace: sh[0x559ddcff2330], connected[1], ops[0x559ddd0c34c0], ldap[0x559ddd04d220] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_process_message] (0x4000): [RID#10] Message type: [LDAP_RES_SEARCH_RESULT] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_generic_op_finished] (0x0400): [RID#10] Search result: Success(0), no errmsg set (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_op_destructor] (0x2000): [RID#10] Operation 14 finished (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_initgr_common_store] (0x2000): [RID#10] Updating memberships for a-testuser(a)old.domain.net (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_initgr_done] (0x4000): [RID#10] Initgroups done (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_initgr_done] (0x0400): [RID#10] Primary group already cached, nothing to do. (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_get_initgr_done] (0x4000): [RID#10] No need to check for domain local group memberships. (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_id_op_destroy] (0x4000): [RID#10] releasing operation connection (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_id_op_done] (0x4000): [RID#10] releasing operation connection (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [dp_req_done] (0x0400): [RID#10] DP Request [Initgroups #10]: Request handler finished [0]: Success (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [_dp_req_recv] (0x0400): [RID#10] DP Request [Initgroups #10]: Receiving request data. (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [dp_req_destructor] (0x0400): [RID#10] DP Request [Initgroups #10]: Request removed. (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [dp_req_destructor] (0x0400): [RID#10] Number of active DP request: 0 (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [dp_get_account_info_initgroups_step] (0x0400): [RID#10] Ordering NSS responder to update memory cache (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sysdb_set_entry_attr] (0x0200): [RID#10] Entry [name=a-testuser(a)old.domain.net,cn=users,cn=OLD.DOMAIN.NET,cn=sysdb] has set [ts_cache] attrs. (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_process_result] (0x2000): Trace: sh[0x559ddcff2330], connected[1], ops[(nil)], ldap[0x559ddd04d220] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_process_result] (0x2000): Trace: end of ldap_result list (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sbus_dispatch] (0x4000): Dispatching. (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sbus_dispatch] (0x4000): Dispatching. (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sbus_dispatch] (0x4000): Dispatching. (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [dp_req_reply_std] (0x1000): DP Request [Initgroups #10]: Returning [Success]: 0,0,Success (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sbus_issue_request_done] (0x0400): sssd.dataprovider.getAccountInfo: Success (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sbus_dispatch] (0x4000): Dispatching. (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sbus_dispatch] (0x4000): Dispatching. (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sbus_dispatch] (0x4000): Dispatching. (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sbus_method_handler] (0x2000): Received D-Bus method sssd.dataprovider.pamHandler on /sssd (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sbus_senders_lookup] (0x2000): Looking for identity of sender [sssd.pam] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [dp_pam_handler_send] (0x0100): Got request with the following data (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [pam_print_data] (0x0100): [CID #4] command: SSS_PAM_AUTHENTICATE (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [pam_print_data] (0x0100): [CID #4] domain: OLD.DOMAIN.NET (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [pam_print_data] (0x0100): [CID #4] user: a-testuser(a)old.domain.net (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [pam_print_data] (0x0100): [CID #4] service: sshd (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [pam_print_data] (0x0100): [CID #4] tty: ssh (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [pam_print_data] (0x0100): [CID #4] ruser: (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [pam_print_data] (0x0100): [CID #4] rhost: 10.204.55.199 (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [pam_print_data] (0x0100): [CID #4] authtok type: 1 (Password) (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [pam_print_data] (0x0100): [CID #4] newauthtok type: 0 (No authentication token available) (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [pam_print_data] (0x0100): [CID #4] priv: 1 (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [pam_print_data] (0x0100): [CID #4] cli_pid: 864553 (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [pam_print_data] (0x0100): [CID #4] logon name: not set (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [pam_print_data] (0x0100): [CID #4] flags: 0 (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [dp_attach_req] (0x0400): [RID#11] DP Request [PAM Authenticate #11]: REQ_TRACE: New request. [sssd.pam CID #4] Flags [0000]. (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [dp_attach_req] (0x0400): [RID#11] Number of active DP request: 1 (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sss_domain_get_state] (0x1000): [RID#11] Domain OLD.DOMAIN.NET is Active (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [krb5_auth_queue_send] (0x1000): [RID#11] Wait queue of user [a-testuser(a)old.domain.net] is empty, running request [0x559ddd0abb00] immediately. (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [krb5_setup] (0x4000): [RID#11] No mapping for: a-testuser(a)old.domain.net (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [krb5_get_simple_upn] (0x4000): [RID#11] Using simple UPN [a-testuser(a)OLD.DOMAIN.NET] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [check_ccache_re] (0x1000): [RID#11] Ccache directory name [/tmp] does not contain illegal patterns. (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [check_ccache_re] (0x1000): [RID#11] Ccache directory name [FILE:/tmp/krb5cc_21496_XXXXXX] does not contain illegal patterns. (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [fo_resolve_service_send] (0x0100): [RID#11] Trying to resolve service 'KERBEROS' (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [get_server_status] (0x1000): [RID#11] Status of server 'krb01.network.lan' is 'working' (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [get_port_status] (0x1000): [RID#11] Port status of port 88 for server 'krb01.network.lan' is 'working' (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [fo_resolve_service_activate_timeout] (0x2000): [RID#11] Resolve timeout [dns_resolver_timeout] set to 6 seconds (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [get_server_status] (0x1000): [RID#11] Status of server 'krb01.network.lan' is 'working' (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [be_resolve_server_process] (0x1000): [RID#11] Saving the first resolved server (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [be_resolve_server_process] (0x0200): [RID#11] Found address for server krb01.network.lan: [10.204.55.12] TTL 2921 (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [krb5_add_krb5info_offline_callback] (0x4000): [RID#11] Removal callback already available for service [KERBEROS]. (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [unique_filename_destructor] (0x2000): [RID#11] Unlinking [/var/lib/sss/pubconf/.krb5info_dummy_u2fDad] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [unlink_dbg] (0x2000): [RID#11] File already removed: [/var/lib/sss/pubconf/.krb5info_dummy_u2fDad] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [krb5_add_krb5info_offline_callback] (0x4000): [RID#11] Removal callback already available for service [KERBEROS]. (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [unique_filename_destructor] (0x2000): [RID#11] Unlinking [/var/lib/sss/pubconf/.krb5info_dummy_lLSbah] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [unlink_dbg] (0x2000): [RID#11] File already removed: [/var/lib/sss/pubconf/.krb5info_dummy_lLSbah] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sss_domain_get_state] (0x1000): [RID#11] Domain OLD.DOMAIN.NET is Active (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [child_handler_setup] (0x2000): [RID#11] Setting up signal handler up for pid [864575] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [child_handler_setup] (0x2000): [RID#11] Signal handler set up for pid [864575] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [write_pipe_handler] (0x0400): [RID#11] All data has been sent! (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [child_sig_handler] (0x1000): [RID#11] Waiting for child [864575]. (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [child_sig_handler] (0x0100): [RID#11] child [864575] finished successfully. (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [read_pipe_handler] (0x0400): [RID#11] EOF received, client finished (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [parse_krb5_child_response] (0x1000): [RID#11] child response: status code: 0 (Success), msg type: 3 (Env variable to be set with pam_putenv(3)), len: 41 (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [parse_krb5_child_response] (0x1000): [RID#11] child response: status code: 0 (Success), msg type: -1073741822 (UPN info), len: 28 (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [parse_krb5_child_response] (0x1000): [RID#11] child response: status code: 0 (Success), msg type: -1073741823 (TGT lifetime info), len: 32 (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [parse_krb5_child_response] (0x1000): [RID#11] TGT times are [1647865464][1647865464][1647951864][1647865464]. (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [parse_krb5_child_response] (0x1000): [RID#11] child response: status code: 0 (Success), msg type: 6 (Message to be displayed to the user), len: 8 (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [_be_fo_set_port_status] (0x8000): [RID#11] Setting status: PORT_WORKING. Called from: src/providers/krb5/krb5_auth.c: krb5_auth_done: 1087 (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [fo_set_port_status] (0x0100): [RID#11] Marking port 88 of server 'krb01.network.lan' as 'working' (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [set_server_common_status] (0x0100): [RID#11] Marking server 'krb01.network.lan' as 'working' (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [fo_set_port_status] (0x0400): [RID#11] Marking port 88 of duplicate server 'krb01.network.lan' as 'working' (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [krb5_mod_ccname] (0x4000): [RID#11] Save ccname [FILE:/tmp/krb5cc_21496_kNHZbi] for user [a-testuser(a)old.domain.net] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sysdb_ldb_msg_difference] (0x2000): [RID#11] Replaced/extended attr [ccacheFile] of entry [name=a-testuser(a)old.domain.net,cn=users,cn=OLD.DOMAIN.NET,cn=sysdb] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sysdb_set_entry_attr] (0x0200): [RID#11] Entry [name=a-testuser(a)old.domain.net,cn=users,cn=OLD.DOMAIN.NET,cn=sysdb] has set [cache, ts_cache] attrs. (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sysdb_ldb_msg_difference] (0x2000): [RID#11] Replaced/extended attr [cachedPassword] of entry [name=a-testuser(a)old.domain.net,cn=users,cn=OLD.DOMAIN.NET,cn=sysdb] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sysdb_set_entry_attr] (0x0200): [RID#11] Entry [name=a-testuser(a)old.domain.net,cn=users,cn=OLD.DOMAIN.NET,cn=sysdb] has set [cache, ts_cache] attrs. (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [check_wait_queue] (0x1000): [RID#11] Wait queue for user [a-testuser(a)old.domain.net] is empty. (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [krb5_auth_queue_done] (0x1000): [RID#11] krb5_auth_queue request [0x559ddd0abb00] done. (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [dp_req_done] (0x0400): [RID#11] DP Request [PAM Authenticate #11]: Request handler finished [0]: Success (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [_dp_req_recv] (0x0400): [RID#11] DP Request [PAM Authenticate #11]: Receiving request data. (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [dp_req_destructor] (0x0400): [RID#11] DP Request [PAM Authenticate #11]: Request removed. (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [dp_req_destructor] (0x0400): [RID#11] Number of active DP request: 0 (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [dp_method_enabled] (0x0400): [RID#11] Target selinux is not configured (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sbus_issue_request_done] (0x0400): sssd.dataprovider.pamHandler: Success (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sbus_dispatch] (0x4000): Dispatching. (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sbus_dispatch] (0x4000): Dispatching. (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sbus_dispatch] (0x4000): Dispatching. (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sbus_method_handler] (0x2000): Received D-Bus method sssd.dataprovider.pamHandler on /sssd (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sbus_senders_lookup] (0x2000): Looking for identity of sender [sssd.pam] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [dp_pam_handler_send] (0x0100): Got request with the following data (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [pam_print_data] (0x0100): [CID #4] command: SSS_PAM_ACCT_MGMT (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [pam_print_data] (0x0100): [CID #4] domain: OLD.DOMAIN.NET (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [pam_print_data] (0x0100): [CID #4] user: a-testuser(a)old.domain.net (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [pam_print_data] (0x0100): [CID #4] service: sshd (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [pam_print_data] (0x0100): [CID #4] tty: ssh (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [pam_print_data] (0x0100): [CID #4] ruser: (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [pam_print_data] (0x0100): [CID #4] rhost: 10.204.55.199 (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [pam_print_data] (0x0100): [CID #4] authtok type: 0 (No authentication token available) (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [pam_print_data] (0x0100): [CID #4] newauthtok type: 0 (No authentication token available) (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [pam_print_data] (0x0100): [CID #4] priv: 1 (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [pam_print_data] (0x0100): [CID #4] cli_pid: 864553 (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [pam_print_data] (0x0100): [CID #4] logon name: not set (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [pam_print_data] (0x0100): [CID #4] flags: 0 (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [dp_attach_req] (0x0400): [RID#12] DP Request [PAM Account #12]: REQ_TRACE: New request. [sssd.pam CID #4] Flags [0000]. (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [dp_attach_req] (0x0400): [RID#12] Number of active DP request: 1 (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sss_domain_get_state] (0x1000): [RID#12] Domain OLD.DOMAIN.NET is Active (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_access_send] (0x0400): [RID#12] Performing access check for user [a-testuser(a)old.domain.net] (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sdap_access_host] (0x0100): [RID#12] No matching host rule found (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [dp_req_done] (0x0400): [RID#12] DP Request [PAM Account #12]: Request handler finished [0]: Success (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [_dp_req_recv] (0x0400): [RID#12] DP Request [PAM Account #12]: Receiving request data. (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [dp_req_destructor] (0x0400): [RID#12] DP Request [PAM Account #12]: Request removed. (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [dp_req_destructor] (0x0400): [RID#12] Number of active DP request: 0 (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [dp_method_enabled] (0x0400): [RID#12] Target selinux is not configured (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sbus_issue_request_done] (0x0400): sssd.dataprovider.pamHandler: Success (2022-03-21 13:24:24): [be[OLD.DOMAIN.NET]] [sbus_dispatch] (0x4000): Dispatching. So, I see in logs the line "Adding authorizedHost [nlud-rhel801.itservices.lan] to attributes of [a-testuser(a)dcn.versatel.net]". but it doesn't relp to ssh there. sssd.conf: [sssd] domains = OLD.DOMAIN.NET, NETWORK.LAN config_file_version = 2 services = nss, pam [domain/OLD.DOMAIN.NET] krb5_server = krb01.network.lan:88, krb02.network.lan:88, krb03.network.lan:88, krb04.network.lan krb5_realm = OLD.DOMAIN.NET krb5_keytab = /etc/krb5.keytab krb5_renewable_lifetime = 24h krb5_lifetime = 24h krb5_canonicalize = true cache_credentials = true id_provider = ldap auth_provider = krb5 access_provider = ldap debug_level = 9 ldap_id_use_start_tls = true ldap_uri = ldap://ldap01.network.lan, ldap://ldap02.network.lan, ldap://ldap03.network.lan ldap_search_base = dc=old,dc=domain,dc=net ldap_tls_reqcert = demand ldap_tls_cacert = /etc/ssl/certs/it-hosting-and-network-ca.pem ldap_network_timeout = 20 ldap_sasl_mech = GSSAPI ldap_access_order = host ldap_user_authorized_host = host If I change ldap_access_order to filter, and hardcode the host name in the ldap_access_filter parameter, I can log in with ssh, ldap_access_filter = (&(objectClass=posixAccount)(host=rhel801.network.lan)) but it's not a solition, because diffrent users have different allowed hosts. Do you have emy idea how to fix the problem? Software versions: Red Hat Enterprise Linux release 8.5 (Ootpa) sssd-client-2.5.2-2.el8_5.4.x86_64 sssd-ad-2.5.2-2.el8_5.4.x86_64 sssd-kcm-2.5.2-2.el8_5.4.x86_64 sssd-common-2.5.2-2.el8_5.4.x86_64 sssd-nfs-idmap-2.5.2-2.el8_5.4.x86_64 sssd-krb5-common-2.5.2-2.el8_5.4.x86_64 sssd-krb5-2.5.2-2.el8_5.4.x86_64 python3-sssdconfig-2.5.2-2.el8_5.4.noarch sssd-common-pac-2.5.2-2.el8_5.4.x86_64 sssd-ldap-2.5.2-2.el8_5.4.x86_64 sssd-2.5.2-2.el8_5.4.x86_64 sssd-proxy-2.5.2-2.el8_5.4.x86_64 sssd-ipa-2.5.2-2.el8_5.4.x86_64 krb5-workstation-1.18.2-14.el8.x86_64 krb5-libs-1.18.2-14.el8.x86_64 Thank you inm advance.

1 0

Re: Help configuring internal network
by R. G. Newbury 20 Mar '22

20 Mar '22

On 2022-03-20 10:11 a.m., > Tim<ignored_mailbox(a)yahoo.com.au> wrote: > If you want a predictable LAN, then I really only see two ways to > manage that without major pain: > > 1. Run a DHCP server with a DNS server... > > 2. Manually configure each device to have a fixed IP. I think you left out a third method, which uses part of your version 1. 3. Use a router and set static addresses for each device. Today, all routers act as DHCP servers, and setting a static address/MAC address pair in the router setup ensures that any listed device will get the same address every time. The router does not have to act as a DNS server for internal devices: it passes external name calls to the gateway. You only need to access the router setup when there is a new physical device being added, such as a new phone. You can give it the same old IP but that will now be paired to the new MAC. And then the /etc/hosts file is merely a memorandum file to keep track of things. Geoff

2 1

reinstalling fedora 35
by Angelo Moreschini 20 Mar '22

20 Mar '22

Hi upgrading fedora to version 35 I decided to install the OS completely from zero again, instead of doing the normal upgrade. I have a laptop with two HDDs: / dev / sda (on which windows is installed) and / dev / sdb (on which fedora 33 was previously installed). Of course I will install Fedora 35 on the ADD / dev / sdb .., but I would like to completely clean up the old installation by formatting the old data using gparted. I would like to ask for help about to choose the pertizioni to leave and those to format .. starting from the current situation that I transcribe below: *Partition* *Name* *File System* *Mount Point* *Size* *Used* *Unused* *Flags* */dev/*sdb1 EFI System Partition Fat 32 */boot/*efi 600.00 MiB 21.58 Mib 578 MiB Boot,esp */dev/*sdb2 ext4 /boot 1.00 GiB 295.10 MiB 728 MiB */dev/*sdb3 lvm2 pv fedora_localhost-live 929.93 GiB 929.93 GiB 0.00 GiB lvm

4 5

Re: Help configuring internal network
by R. G. Newbury 20 Mar '22

20 Mar '22

On 2022-03-19 7:46 p.m., Geoffrey Leach wrote > > F35, fresh install. I have an ethernet-connected device (HDHomerun, fwiw) > newly re-compiled on the newly-installed F35 xfce4 workstation. As far as I > can tell from trying every network analysis I can find, the connection is > good (exception, no response to ping) The interface was configured with the > NetworkManager app, that assigned the device eno1. eno1 is your internal network port. Not the hdhomerun unit. My hdhr units (I have 2 therefor 4 tuners) respond to ping. But it sounds like your computer does not know where the hdhr is (ie its IP address). It won't show up unless you know what that is. > I could really use some help. You are working from the wrong end, so to speak. It is highly likely that your hdhomerun is working perfectly but nor receiving the ping. First: edit your /etc/hosts file to give the hdhomerun unit a fixed IP address. Your computer should have a static address too. The line in my hosts file looks like this: 192.168.1.80 hdhomerun1 # 00:18:DD:04:67:E1 "10467E14" (All tuners of a 2 or 4 tuner hdhr are at the same IP address). Plug a network Cat5 cable from the hdhr to your router, and another from your computer to your router. It should work if you have a direct connection but then how are you going to talk to the world? You can also fix static IP addresses for the computer and the hdhr in your router. You *should* have a static IP address, so that it does not change on reboot. Mythtv and most other digital tv programs *require* this. Once your computer and router know where the hdhr is, reboot. During your install of the hdhomerun you should have received/installed a program hdhomerun_config and/or hdhomerun_config_gui. If the hdhr 'address' is not posted on the back of the unit, use hdhomerun_config discover to discover that address/id. You will see something like this: hdhomerun device 10467E14 found at 192.168.1.80 You need the id to test the unit. Using hdhomerun_config you can scan and set options, including the channelmap (us-bcast), and actually watch programs. This is incredibly clunky however, so I presume that you will have something like mythtv or vlc installed to control the unit, and to watch on. Those programs can control the hdhr unit, and will receive and store the digital stream for later viewing. There is lots of stuff on the silicon dust website (the manufacturer) and lots on the mythtv wiki (mythtv.org/wiki) including specific pages for the various types of hdhr boxes. Basic setup of a hdhr on mythtv is described here: https://www.mythtv.org/wiki/Silicondust_HDHomeRun_setup HTH Geoffrey (also!)

5 5

← Newer
1
2
3
4
5
6
7
8
9
Older →