← Back to team overview

group.of.nepali.translators team mailing list archive

[Bug 1579092] Re: sssd user can't login and ssh to server

 

apparmor is not enforced, the failure here is most likely that gpo_cache
directory is not created by the package.

Please test by just creating that directory and check if sssd then is
able to create the domain subdir.

** Also affects: sssd (Ubuntu Xenial)
   Importance: Undecided
       Status: New

** Changed in: sssd (Ubuntu Xenial)
       Status: New => Incomplete

** Changed in: sssd (Ubuntu Xenial)
     Assignee: (unassigned) => Timo Aaltonen (tjaalton)

-- 
You received this bug notification because you are a member of नेपाली
भाषा समायोजकहरुको समूह, which is subscribed to Xenial.
Matching subscriptions: Ubuntu 16.04 Bugs
https://bugs.launchpad.net/bugs/1579092

Title:
  sssd user can't login and ssh to server

Status in sssd package in Ubuntu:
  New
Status in sssd source package in Xenial:
  Incomplete

Bug description:
  Hello,

  User can't login to machine or ssh to it using domain account. User is
  immediately kicked off from login or disconnected from ssh.

  excerpt from auth.log
  May  6 14:59:06 openmanage sshd[3967]: Connection closed by 10.10.254.254 port 51913 [preauth]
  May  6 14:59:17 openmanage sshd[3970]: pam_sss(sshd:account): Access denied for user xxx: 4 (System error)
  May  6 14:59:17 openmanage sshd[3970]: fatal: Access denied for user xxx by PAM account configuration [preauth]
  May  6 14:59:49 openmanage sshd[3976]: pam_sss(sshd:account): Access denied for user xxx: 4 (System error)
  May  6 14:59:49 openmanage sshd[3976]: fatal: Access denied for user xxx by PAM account configuration [preauth]

  cat gpo_child.log
  (Fri May  6 15:05:25 2016) [[sssd[gpo_child[627]]]] [prepare_gpo_cache] (0x0400): Storing GPOs in /var/lib/sss/gpo_cache/MY_AD_DOMAIN
  (Fri May  6 15:05:25 2016) [[sssd[gpo_child[627]]]] [prepare_gpo_cache] (0x0020): mkdir(/var/lib/sss/gpo_cache/ad.lib.cam.ac.uk) failed: 2
  (Fri May  6 15:05:25 2016) [[sssd[gpo_child[627]]]] [gpo_cache_store_file] (0x0020): prepare_gpo_cache failed [2][No such file or directory]
  (Fri May  6 15:05:25 2016) [[sssd[gpo_child[627]]]] [gpo_cache_store_file] (0x0020): Error encountered: 2.
  (Fri May  6 15:05:25 2016) [[sssd[gpo_child[627]]]] [copy_smb_file_to_gpo_cache] (0x0020): gpo_cache_store_file failed [2][No such file or directory]
  (Fri May  6 15:05:25 2016) [[sssd[gpo_child[627]]]] [perform_smb_operations] (0x0020): copy_smb_file_to_gpo_cache failed [2][No such file or directory]
  (Fri May  6 15:05:25 2016) [[sssd[gpo_child[627]]]] [main] (0x0020): perform_smb_operations failed.[2][No such file or directory].

  
  workaround:

  to fix it run:
  mkdir -pv /var/lib/sss/gpo_cache/name_of_joined_domain
  chown -R sssd. /var/lib/sss/gpo_cache
  systemctl restart sssd

  cheers
  Woj

  ProblemType: Bug
  DistroRelease: Ubuntu 16.04
  Package: sssd 1.13.4-1ubuntu1
  ProcVersionSignature: Ubuntu 4.4.0-21.37-generic 4.4.6
  Uname: Linux 4.4.0-21-generic x86_64
  ApportVersion: 2.20.1-0ubuntu2
  Architecture: amd64
  Date: Fri May  6 15:08:26 2016
  ProcEnviron:
   TERM=xterm
   PATH=(custom, no user)
   LANG=en_GB.UTF-8
   SHELL=/bin/bash
  SourcePackage: sssd
  UpgradeStatus: No upgrade log present (probably fresh install)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/sssd/+bug/1579092/+subscriptions