Thanks! I followed this manual: https://help.ubuntu.com/lts/serverguide/sssd-ad.html#sssd-ad-mkhomedir
added the line session required pam_mkhomedir.so skel=/etc/skel/ umask=0022 to the file /etc/pam.d/common-session (find attached) On 12-May-17 8:29 AM, Sumit Bose wrote: > On Fri, May 12, 2017 at 12:50:08AM +0200, tuxderlinuxfuch...@gmail.com wrote: >> I have attached the syslog with gdm debug mode enabled >> >> >> On 11-May-17 1:54 PM, Sumit Bose wrote: >>> On Thu, May 11, 2017 at 01:29:33PM +0200, tuxderlinuxfuch...@gmail.com >>> wrote: >>>> Hello, >>>> >>>> I have attached the requested files. >>> The logs indicate that access was granted by SSSD and that gdm even >>> called pam_open_session. >>> >>> Did gdm login worked with the 'allow all' rule? Are there any other >>> hints in the system or gdm logs with gdm might have failed? >>> >>> bye, >>> Sumit >>> >>>> Thanks in advance! >>>> >>>> On 10-May-17 9:42 PM, Sumit Bose wrote: >>>>> On Tue, May 09, 2017 at 11:12:13PM +0200, tuxderlinuxfuch...@gmail.com >>>>> wrote: >>>>>> Hello everyone, >>>>>> >>>>>> I set up my freeIPA instance and it works very well for my client >>>>>> computers (Ubuntu Desktop 16.04.2 LTS), I can login via SSH using a >>>>>> freeIPA managed user account. >>>>>> >>>>>> My own HBAC rule also works for that. I disabled the "allow all" rule >>>>>> and created my own one. Works fine for SSH. >>>>>> >>>>>> But I cannot login to the GNOME 3 Desktop on the client. I used the >>>>>> netinstall ISO image of Ubuntu. During installation, I have chose >>>>>> "Ubuntu GNOME Desktop" as the only desktop. >>>>>> >>>>>> So my display manager is gdm3. >>>>>> >>>>>> I added the "gdm" and "gdm-password" services to my HBAC rule. To be on >>>>>> the safe side, I rebooted the client machine. But I still can't login to >>>>>> the GNOME Desktop with an account that can login via SSH. >>>>>> >>>>>> So the services in my rule are >>>>>> >>>>>> login, gdm, gdm-password >>>>>> >>>>>> If you need any logs or other information, I will provide them. >>>>> Please send sssd_pam.log and sssd_domain.name.log with debug_level=10 in >>>>> the [pam] and [domain/...] section of sssd.conf. >>>>> >>>>> bye, >>>>> Sumit >>>>> >>>>>> Thanks in advance! >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> -- >>>>>> Manage your subscription for the Freeipa-users mailing list: >>>>>> https://www.redhat.com/mailman/listinfo/freeipa-users >>>>>> Go to http://freeipa.org for more info on the project > .... >> May 11 23:41:55 ubugdm /usr/lib/gdm3/gdm-x-session[1741]: (II) This device >> may have been added with another device file. >> May 11 23:41:55 ubugdm gdm-x-session: Running session message bus >> May 11 23:41:55 ubugdm gdm3: GdmManager: trying to register new display >> May 11 23:41:55 ubugdm gdm3: GdmSession: Setting display device: /dev/tty2 >> May 11 23:41:55 ubugdm gdm3: using ut_user vmuser1 >> May 11 23:41:55 ubugdm gdm3: Writing login record >> May 11 23:41:55 ubugdm gdm3: using ut_type USER_PROCESS >> May 11 23:41:55 ubugdm gdm3: using ut_tv time 1494538915 >> May 11 23:41:55 ubugdm gdm3: using ut_pid 1741 >> May 11 23:41:55 ubugdm gdm3: using ut_host :1 >> May 11 23:41:55 ubugdm gdm3: using ut_line tty2 >> May 11 23:41:55 ubugdm gdm3: Writing wtmp session record to /var/log/wtmp >> May 11 23:41:55 ubugdm gdm3: Adding or updating utmp record for login >> May 11 23:41:55 ubugdm gdm3: GdmLocalDisplayFactory: display status changed: >> 2 >> May 11 23:41:55 ubugdm gdm-x-session: Running X session >> May 11 23:41:55 ubugdm gdm-x-session: Trying script /etc/gdm3/Prime/:1 >> May 11 23:41:55 ubugdm gdm-x-session: script /etc/gdm3/Prime/:1 not found; >> skipping >> May 11 23:41:55 ubugdm gdm-x-session: Trying script /etc/gdm3/Prime/Default >> May 11 23:41:55 ubugdm gdm-x-session: Running process: >> /etc/gdm3/Prime/Default >> May 11 23:41:55 ubugdm gdm-x-session: GdmSlave: script environment: >> DISPLAY=:1 >> May 11 23:41:55 ubugdm gdm-x-session: GdmSlave: script environment: >> SHELL=/bin/sh >> May 11 23:41:55 ubugdm gdm-x-session: GdmSlave: script environment: >> XAUTHORITY=/run/user/126400004/gdm/Xauthority >> May 11 23:41:55 ubugdm gdm-x-session: GdmSlave: script environment: >> RUNNING_UNDER_GDM=true >> May 11 23:41:55 ubugdm gdm-x-session: GdmSlave: script environment: HOME=/ >> May 11 23:41:55 ubugdm gdm-x-session: GdmSlave: script environment: PWD=/ >> May 11 23:41:55 ubugdm gdm-x-session: GdmSlave: script environment: >> PATH=/usr/local/bin:/usr/bin:/bin:/usr/games >> May 11 23:41:55 ubugdm gdm-x-session: Process exit status: 0 >> May 11 23:41:55 ubugdm /usr/lib/gdm3/gdm-x-session[1741]: >> /etc/gdm3/Xsession: Beginning session setup... >> May 11 23:41:55 ubugdm /usr/lib/gdm3/gdm-x-session[1741]: >> /etc/gdm3/Xsession: line 41: /dev/stderr: No such device or address >> May 11 23:41:55 ubugdm /usr/lib/gdm3/gdm-x-session[1741]: localuser:vmuser1 >> being added to access control list >> May 11 23:41:55 ubugdm /usr/lib/gdm3/gdm-x-session[1741]: localuser:vmuser1 >> being added to access control list >> May 11 23:41:56 ubugdm /usr/lib/gdm3/gdm-x-session[1741]: Can't create dir >> /home/vmuser1/Desktop >> May 11 23:41:56 ubugdm /usr/lib/gdm3/gdm-x-session[1741]: Can't create dir >> /home/vmuser1/Downloads >> May 11 23:41:56 ubugdm /usr/lib/gdm3/gdm-x-session[1741]: Can't create dir >> /home/vmuser1/Templates >> May 11 23:41:56 ubugdm /usr/lib/gdm3/gdm-x-session[1741]: Can't create dir >> /home/vmuser1/Public >> May 11 23:41:56 ubugdm /usr/lib/gdm3/gdm-x-session[1741]: Can't create dir >> /home/vmuser1/Documents >> May 11 23:41:56 ubugdm /usr/lib/gdm3/gdm-x-session[1741]: Can't create dir >> /home/vmuser1/Music >> May 11 23:41:56 ubugdm /usr/lib/gdm3/gdm-x-session[1741]: Can't create dir >> /home/vmuser1/Pictures >> May 11 23:41:56 ubugdm /usr/lib/gdm3/gdm-x-session[1741]: Can't create dir >> /home/vmuser1/Videos > > ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ > >> May 11 23:41:56 ubugdm /usr/lib/gdm3/gdm-x-session[1741]: openConnection: >> connect: No such file or directory >> May 11 23:41:56 ubugdm /usr/lib/gdm3/gdm-x-session[1741]: cannot connect to >> brltty at :0 >> May 11 23:41:56 ubugdm /usr/lib/gdm3/gdm-x-session[1741]: >> dbus-update-activation-environment: systemd --user not found, ignoring >> --systemd argument >> May 11 23:41:56 ubugdm /usr/lib/gdm3/gdm-x-session[1741]: >> dbus-update-activation-environment: setting CLUTTER_IM_MODULE=xim >> May 11 23:41:56 ubugdm /usr/lib/gdm3/gdm-x-session[1741]: >> dbus-update-activation-environment: setting SHELL=/bin/sh >> May 11 23:41:56 ubugdm /usr/lib/gdm3/gdm-x-session[1741]: >> dbus-update-activation-environment: setting >> QT_LINUX_ACCESSIBILITY_ALWAYS_ON=1 >> May 11 23:41:56 ubugdm /usr/lib/gdm3/gdm-x-session[1741]: >> dbus-update-activation-environment: setting GTK_MODULES=gail:atk-bridge >> May 11 23:41:56 ubugdm /usr/lib/gdm3/gdm-x-session[1741]: >> dbus-update-activation-environment: setting USER=vmuser1 >> May 11 23:41:56 ubugdm /usr/lib/gdm3/gdm-x-session[1741]: >> dbus-update-activation-environment: setting QT_ACCESSIBILITY=1 >> May 11 23:41:56 ubugdm /usr/lib/gdm3/gdm-x-session[1741]: >> dbus-update-activation-environment: setting >> DEFAULTS_PATH=/usr/share/gconf/gnome.default.path >> May 11 23:41:56 ubugdm /usr/lib/gdm3/gdm-x-session[1741]: >> dbus-update-activation-environment: setting USERNAME=vmuser1 >> May 11 23:41:56 ubugdm /usr/lib/gdm3/gdm-x-session[1741]: >> dbus-update-activation-environment: setting >> XDG_CONFIG_DIRS=/etc/xdg/xdg-gnome:/etc/xdg >> May 11 23:41:56 ubugdm /usr/lib/gdm3/gdm-x-session[1741]: >> dbus-update-activation-environment: setting DESKTOP_SESSION=gnome >> May 11 23:41:56 ubugdm /usr/lib/gdm3/gdm-x-session[1741]: >> dbus-update-activation-environment: setting >> PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/usr/local/games:/snap/bin >> May 11 23:41:56 ubugdm /usr/lib/gdm3/gdm-x-session[1741]: >> dbus-update-activation-environment: setting QT_IM_MODULE=ibus >> May 11 23:41:56 ubugdm /usr/lib/gdm3/gdm-x-session[1741]: >> dbus-update-activation-environment: setting PWD=/ >> May 11 23:41:56 ubugdm /usr/lib/gdm3/gdm-x-session[1741]: >> dbus-update-activation-environment: setting XDG_SESSION_TYPE=x11 >> May 11 23:41:56 ubugdm /usr/lib/gdm3/gdm-x-session[1741]: >> dbus-update-activation-environment: setting XMODIFIERS=@im=ibus >> May 11 23:41:56 ubugdm /usr/lib/gdm3/gdm-x-session[1741]: >> dbus-update-activation-environment: setting LANG=en_US.UTF-8 >> May 11 23:41:56 ubugdm /usr/lib/gdm3/gdm-x-session[1741]: >> dbus-update-activation-environment: setting >> MANDATORY_PATH=/usr/share/gconf/gnome.mandatory.path >> May 11 23:41:56 ubugdm /usr/lib/gdm3/gdm-x-session[1741]: >> dbus-update-activation-environment: setting IM_CONFIG_PHASE=1 >> May 11 23:41:56 ubugdm /usr/lib/gdm3/gdm-x-session[1741]: >> dbus-update-activation-environment: setting GDMSESSION=gnome >> May 11 23:41:56 ubugdm /usr/lib/gdm3/gdm-x-session[1741]: >> dbus-update-activation-environment: setting >> KRB5CCNAME=KEYRING:persistent:126400004 >> May 11 23:41:56 ubugdm /usr/lib/gdm3/gdm-x-session[1741]: >> dbus-update-activation-environment: setting SHLVL=1 >> May 11 23:41:56 ubugdm /usr/lib/gdm3/gdm-x-session[1741]: >> dbus-update-activation-environment: setting HOME=/home/vmuser1 >> May 11 23:41:56 ubugdm /usr/lib/gdm3/gdm-x-session[1741]: >> dbus-update-activation-environment: setting XDG_SESSION_DESKTOP=gnome >> May 11 23:41:56 ubugdm /usr/lib/gdm3/gdm-x-session[1741]: >> dbus-update-activation-environment: setting LOGNAME=vmuser1 >> May 11 23:41:56 ubugdm /usr/lib/gdm3/gdm-x-session[1741]: >> dbus-update-activation-environment: setting QT4_IM_MODULE=xim >> May 11 23:41:56 ubugdm /usr/lib/gdm3/gdm-x-session[1741]: >> dbus-update-activation-environment: setting >> XDG_DATA_DIRS=/usr/share/gnome:/usr/local/share/:/usr/share/:/var/lib/snapd/desktop >> May 11 23:41:56 ubugdm /usr/lib/gdm3/gdm-x-session[1741]: >> dbus-update-activation-environment: setting >> DBUS_SESSION_BUS_ADDRESS=unix:abstract=/tmp/dbus-sIl0NbD3YZ,guid=ce7f419f97490ed005e5a7275914daa3 >> May 11 23:41:56 ubugdm /usr/lib/gdm3/gdm-x-session[1741]: >> dbus-update-activation-environment: setting WINDOWPATH=2 >> May 11 23:41:56 ubugdm /usr/lib/gdm3/gdm-x-session[1741]: >> dbus-update-activation-environment: setting DISPLAY=:1 >> May 11 23:41:56 ubugdm /usr/lib/gdm3/gdm-x-session[1741]: >> dbus-update-activation-environment: setting >> XDG_RUNTIME_DIR=/run/user/126400004 >> May 11 23:41:56 ubugdm /usr/lib/gdm3/gdm-x-session[1741]: >> dbus-update-activation-environment: setting GTK_IM_MODULE=ibus >> May 11 23:41:56 ubugdm /usr/lib/gdm3/gdm-x-session[1741]: >> dbus-update-activation-environment: setting XDG_CURRENT_DESKTOP=GNOME >> May 11 23:41:56 ubugdm /usr/lib/gdm3/gdm-x-session[1741]: >> dbus-update-activation-environment: setting >> XAUTHORITY=/run/user/126400004/gdm/Xauthority >> May 11 23:41:56 ubugdm /usr/lib/gdm3/gdm-x-session[1741]: >> dbus-update-activation-environment: setting >> _=/usr/bin/dbus-update-activation-environment >> May 11 23:41:56 ubugdm /usr/lib/gdm3/gdm-x-session[1741]: Activating service >> name='org.a11y.Bus' >> May 11 23:41:56 ubugdm gdm-launch-environment]: AccountsService: >> ActUserManager: sending user-changed signal for user user >> May 11 23:41:56 ubugdm gdm-launch-environment]: AccountsService: >> ActUserManager: sent user-changed signal for user user >> May 11 23:41:56 ubugdm gdm-launch-environment]: AccountsService: >> ActUserManager: updating user user >> May 11 23:41:56 ubugdm gdm-password]: AccountsService: ActUserManager: >> sending user-changed signal for user user >> May 11 23:41:56 ubugdm gdm-password]: AccountsService: ActUserManager: sent >> user-changed signal for user user >> May 11 23:41:56 ubugdm gdm-password]: AccountsService: ActUserManager: >> updating user user >> May 11 23:41:56 ubugdm gdm-launch-environment]: AccountsService: >> ActUserManager: sending user-changed signal for user vmuser1 >> May 11 23:41:56 ubugdm gdm-launch-environment]: AccountsService: >> ActUserManager: sent user-changed signal for user vmuser1 >> May 11 23:41:56 ubugdm gdm-launch-environment]: AccountsService: >> ActUserManager: updating user vmuser1 >> May 11 23:41:56 ubugdm gdm-password]: AccountsService: ActUserManager: >> sending user-changed signal for user vmuser1 >> May 11 23:41:56 ubugdm gdm-password]: AccountsService: ActUserManager: sent >> user-changed signal for user vmuser1 >> May 11 23:41:56 ubugdm gdm-password]: AccountsService: ActUserManager: >> updating user vmuser1 >> May 11 23:41:56 ubugdm /usr/lib/gdm3/gdm-x-session[1741]: Successfully >> activated service 'org.a11y.Bus' >> May 11 23:41:56 ubugdm org.a11y.Bus[1748]: ** (process:1839): WARNING **: >> Failed to register client: >> GDBus.Error:org.freedesktop.DBus.Error.ServiceUnknown: The name >> org.gnome.SessionManager was not provided by any .service files >> May 11 23:41:56 ubugdm org.a11y.Bus[1748]: Activating service >> name='org.a11y.atspi.Registry' >> May 11 23:41:56 ubugdm /usr/lib/gdm3/gdm-x-session[1741]: Activating service >> name='org.gtk.vfs.Daemon' >> May 11 23:41:56 ubugdm org.a11y.Bus[1748]: Successfully activated service >> 'org.a11y.atspi.Registry' >> May 11 23:41:56 ubugdm org.a11y.atspi.Registry[1845]: SpiRegistry daemon is >> running with well-known name - org.a11y.atspi.Registry >> May 11 23:41:56 ubugdm /usr/lib/gdm3/gdm-x-session[1741]: Successfully >> activated service 'org.gtk.vfs.Daemon' >> May 11 23:41:56 ubugdm gnome-session[1751]: gnome-session-is-accelerated: >> llvmpipe detected. >> May 11 23:41:56 ubugdm gnome-session[1751]: gnome-session-binary[1751]: >> WARNING: IceLockAuthFile failed: No such file or directory >> May 11 23:41:56 ubugdm gnome-session-binary[1751]: WARNING: IceLockAuthFile >> failed: No such file or directory > > ^^^^^^^^^^^^^^^^^^^^^^^^^ > > Does the user have a home directory and permissions to write into it? > Maybe you have to add pam_oddjob_mkhomedir.so or similar to your PAM > configuration to create it automatically? > > HTH > > bye, > Sumit > >> May 11 23:41:56 ubugdm gdm-x-session: session exited with status 1 >> May 11 23:41:56 ubugdm org.a11y.atspi.Registry[1845]: XIO: fatal IO error >> 11 (Resource temporarily unavailable) on X server ":1" >> May 11 23:41:56 ubugdm org.a11y.atspi.Registry[1845]: after 21 >> requests (21 known processed) with 0 events remaining. >> May 11 23:41:56 ubugdm /usr/lib/gdm3/gdm-x-session[1741]: (II) evdev: TPPS/2 >> IBM TrackPoint: Close >> May 11 23:41:56 ubugdm org.gtk.vfs.Daemon[1748]: A connection to the bus >> can't be made >> May 11 23:41:56 ubugdm /usr/lib/gdm3/gdm-x-session[1741]: (II) UnloadModule: >> "evdev" >> May 11 23:41:56 ubugdm /usr/lib/gdm3/gdm-x-session[1741]: (II) >> systemd-logind: releasing fd for 13:67 >> May 11 23:41:56 ubugdm /usr/lib/gdm3/gdm-x-session[1741]: (II) evdev: AT >> Translated Set 2 keyboard: Close >> May 11 23:41:56 ubugdm /usr/lib/gdm3/gdm-x-session[1741]: (II) UnloadModule: >> "evdev" >> May 11 23:41:56 ubugdm /usr/lib/gdm3/gdm-x-session[1741]: (II) >> systemd-logind: releasing fd for 13:65 >> May 11 23:41:56 ubugdm /usr/lib/gdm3/gdm-x-session[1741]: (II) evdev: AT >> Translated Set 2 keyboard: Close >> May 11 23:41:56 ubugdm /usr/lib/gdm3/gdm-x-session[1741]: (II) UnloadModule: >> "evdev" >> May 11 23:41:56 ubugdm /usr/lib/gdm3/gdm-x-session[1741]: (II) >> systemd-logind: releasing fd for 13:68 >> May 11 23:41:56 ubugdm /usr/lib/gdm3/gdm-x-session[1741]: (II) evdev: Power >> Button: Close >> May 11 23:41:56 ubugdm /usr/lib/gdm3/gdm-x-session[1741]: (II) UnloadModule: >> "evdev" >> May 11 23:41:56 ubugdm /usr/lib/gdm3/gdm-x-session[1741]: (II) >> systemd-logind: releasing fd for 13:64 >> May 11 23:41:56 ubugdm /usr/lib/gdm3/gdm-x-session[1741]: (II) evdev: >> Microsoft Vmbus HID-compliant Mouse: Close >> May 11 23:41:56 ubugdm /usr/lib/gdm3/gdm-x-session[1741]: (II) UnloadModule: >> "evdev" >> May 11 23:41:56 ubugdm /usr/lib/gdm3/gdm-x-session[1741]: (II) >> systemd-logind: releasing fd for 13:66 >> May 11 23:41:56 ubugdm /usr/lib/gdm3/gdm-x-session[1741]: (II) Server >> terminated successfully (0). Closing log file. >> May 11 23:41:56 ubugdm gdm-password]: GdmSessionWorker: child (pid:1741) >> done (status:1) >> May 11 23:41:56 ubugdm gdm-password]: GdmSessionWorker: uninitializing PAM >> May 11 23:41:56 ubugdm gdm-password]: GdmSessionWorker: jumping to VT 7 >> May 11 23:41:56 ubugdm gdm-password]: GdmSessionWorker: couldn't finalize >> jump to VT 7: Interrupted system call >> May 11 23:41:56 ubugdm /usr/lib/gdm3/gdm-x-session[1194]: >> gnome-session-binary[1204]: DEBUG(+): emitting SessionIsActive >> May 11 23:41:56 ubugdm gdm-password]: GdmSessionWorker: state NONE >> May 11 23:41:56 ubugdm gnome-session-binary[1204]: DEBUG(+): emitting >> SessionIsActive >> May 11 23:41:56 ubugdm gdm3: GdmSession: Emitting 'session-exited' signal >> with exit code '1' >> May 11 23:41:56 ubugdm /usr/lib/gdm3/gdm-x-session[1194]: (II) >> systemd-logind: got resume for 13:68 >> May 11 23:41:56 ubugdm gdm3: GdmManager: session exited with status 1 >> May 11 23:41:57 ubugdm gdm3: Writing logout record >> May 11 23:41:57 ubugdm gdm3: using ut_type DEAD_PROCESS >> May 11 23:41:57 ubugdm gdm3: using ut_tv time 1494538917 >> May 11 23:41:57 ubugdm gdm3: using ut_pid 1741 >> May 11 23:41:57 ubugdm gdm3: using ut_host :1 >> May 11 23:41:57 ubugdm /usr/lib/gdm3/gdm-x-session[1194]: >> (gnome-settings-daemon:1225): color-plugin-WARNING **: unable to get EDID >> for xrandr-default: unable to get EDID for output >> May 11 23:41:57 ubugdm gdm3: using ut_line tty2 >> May 11 23:41:57 ubugdm gdm3: Writing wtmp logout record to /var/log/wtmp >> May 11 23:41:57 ubugdm gdm-password]: Trying script /etc/gdm3/PostSession >> May 11 23:41:57 ubugdm /usr/lib/gdm3/gdm-x-session[1194]: (WW) FBDEV(0): >> FBIOPAN_DISPLAY: Invalid argument >> May 11 23:41:57 ubugdm /usr/lib/gdm3/gdm-x-session[1194]: (II) >> systemd-logind: got resume for 13:67 >> May 11 23:41:57 ubugdm gdm-password]: script /etc/gdm3/PostSession not >> found; skipping >> May 11 23:41:57 ubugdm /usr/lib/gdm3/gdm-x-session[1194]: (II) >> systemd-logind: got resume for 13:66 >> May 11 23:41:57 ubugdm /usr/lib/gdm3/gdm-x-session[1194]: (II) >> systemd-logind: got resume for 13:65 >> May 11 23:41:57 ubugdm /usr/lib/gdm3/gdm-x-session[1194]: (II) >> systemd-logind: got resume for 13:64 >> May 11 23:41:57 ubugdm gdm-password]: Trying script >> /etc/gdm3/PostSession/Default >> May 11 23:41:57 ubugdm gdm-password]: Running process: >> /etc/gdm3/PostSession/Default >> May 11 23:41:57 ubugdm gdm-password]: GdmSlave: script environment: DISPLAY= >> May 11 23:41:57 ubugdm gdm-password]: GdmSlave: script environment: >> HOME=/home/vmuser1 >> May 11 23:41:57 ubugdm gdm-password]: GdmSlave: script environment: >> RUNNING_UNDER_GDM=true >> May 11 23:41:57 ubugdm gdm-password]: GdmSlave: script environment: >> LOGNAME=vmuser1 >> May 11 23:41:57 ubugdm gdm-password]: GdmSlave: script environment: >> XAUTHORITY= >> May 11 23:41:57 ubugdm gdm-password]: GdmSlave: script environment: >> USERNAME=vmuser1 >> May 11 23:41:57 ubugdm gdm-password]: GdmSlave: script environment: >> PWD=/home/vmuser1 >> May 11 23:41:57 ubugdm gdm-password]: GdmSlave: script environment: >> USER=vmuser1 >> May 11 23:41:57 ubugdm gdm-password]: GdmSlave: script environment: >> SHELL=/bin/sh >> May 11 23:41:57 ubugdm gdm-password]: GdmSlave: script environment: >> PATH=/usr/local/bin:/usr/bin:/bin:/usr/games >> May 11 23:41:57 ubugdm gdm3: Adding or updating utmp record for logout >> May 11 23:41:57 ubugdm gdm3: GdmDisplay: unmanage display >> May 11 23:41:57 ubugdm gdm3: GdmDisplay: display lasted 1.615491 seconds >> May 11 23:41:57 ubugdm gdm3: GdmLocalDisplayFactory: display status changed: >> 4 >> May 11 23:41:57 ubugdm gdm3: GdmDisplayStore: Unreffing display: 0x9eb8868 >> May 11 23:41:57 ubugdm gdm3: GdmLocalDisplayFactory: display status changed: >> 3 >> May 11 23:41:57 ubugdm gdm3: GdmDisplay: finish display >> May 11 23:41:57 ubugdm gdm3: GdmSession: Closing session >> May 11 23:41:57 ubugdm gdm3: GdmSession: Stopping all conversations >> May 11 23:41:57 ubugdm gdm3: GdmSessionWorkerJob: Stopping job pid:1731 >> May 11 23:41:57 ubugdm gdm3: GdmCommon: sending signal 15 to process 1731 >> May 11 23:41:57 ubugdm gdm3: GdmSessionWorkerJob: Waiting on process 1731 >> May 11 23:41:57 ubugdm gdm-password]: Process exit status: 0 >> May 11 23:41:57 ubugdm gdm-password]: Worker finished >> May 11 23:41:57 ubugdm gdm3: GdmCommon: process (pid:1731) done (status:0) >> May 11 23:41:57 ubugdm gdm3: GdmSessionWorkerJob: SessionWorkerJob died >> May 11 23:41:57 ubugdm /usr/lib/gdm3/gdm-x-session[1194]: The XKEYBOARD >> keymap compiler (xkbcomp) reports: >> May 11 23:41:57 ubugdm /usr/lib/gdm3/gdm-x-session[1194]: > Warning: >> Type "ONE_LEVEL" has 1 levels, but <RALT> has 2 symbols >> May 11 23:41:57 ubugdm /usr/lib/gdm3/gdm-x-session[1194]: > >> Ignoring extra symbols >> May 11 23:41:57 ubugdm /usr/lib/gdm3/gdm-x-session[1194]: Errors from >> xkbcomp are not fatal to the X server >> May 11 23:41:57 ubugdm /usr/lib/gdm3/gdm-x-session[1194]: The XKEYBOARD >> keymap compiler (xkbcomp) reports: >> May 11 23:41:57 ubugdm /usr/lib/gdm3/gdm-x-session[1194]: > Warning: >> Type "ONE_LEVEL" has 1 levels, but <RALT> has 2 symbols >> May 11 23:41:57 ubugdm /usr/lib/gdm3/gdm-x-session[1194]: > >> Ignoring extra symbols >> May 11 23:41:57 ubugdm /usr/lib/gdm3/gdm-x-session[1194]: Errors from >> xkbcomp are not fatal to the X server >> May 11 23:41:57 ubugdm /usr/lib/gdm3/gdm-x-session[1194]: The XKEYBOARD >> keymap compiler (xkbcomp) reports: >> May 11 23:41:57 ubugdm /usr/lib/gdm3/gdm-x-session[1194]: > Warning: >> Type "ONE_LEVEL" has 1 levels, but <RALT> has 2 symbols >> May 11 23:41:57 ubugdm /usr/lib/gdm3/gdm-x-session[1194]: > >> Ignoring extra symbols >> May 11 23:41:57 ubugdm /usr/lib/gdm3/gdm-x-session[1194]: Errors from >> xkbcomp are not fatal to the X server >> May 11 23:41:57 ubugdm gdm3: GdmManager: trying to open new session >> May 11 23:41:57 ubugdm gdm3: GdmDBusServer: new connection 0x9e9bad8 >> May 11 23:41:57 ubugdm gdm3: GdmSession: Handling new connection from outside >> May 11 23:41:57 ubugdm gdm3: GdmManager: client connected >> May 11 23:41:57 ubugdm gdm3: GdmDisplay: Got timed login details for >> display: 0 >> May 11 23:41:57 ubugdm gdm-launch-environment]: AccountsService: >> ActUserManager: sending user-changed signal for user user >> May 11 23:41:57 ubugdm gdm-launch-environment]: AccountsService: >> ActUserManager: sent user-changed signal for user user >> May 11 23:41:57 ubugdm gdm-launch-environment]: AccountsService: >> ActUserManager: updating user user >> May 11 23:41:57 ubugdm gdm-launch-environment]: AccountsService: >> ActUserManager: sending user-changed signal for user vmuser1 >> May 11 23:41:57 ubugdm gdm-launch-environment]: AccountsService: >> ActUserManager: sent user-changed signal for user vmuser1 >> May 11 23:41:57 ubugdm gdm-launch-environment]: AccountsService: >> ActUserManager: updating user vmuser1 >> May 11 23:41:59 ubugdm systemd[1]: Time has been changed >> May 11 23:41:59 ubugdm systemd[1]: snapd.refresh.timer: Adding 5h 14min >> 24.101040s random time. >> May 11 23:41:59 ubugdm systemd[1]: snapd.refresh.timer: Adding 1h 49min >> 37.111737s random time. >> May 11 23:41:59 ubugdm systemd[1]: apt-daily.timer: Adding 41min 17.722076s >> random time. >> May 11 23:41:59 ubugdm systemd[1387]: Time has been changed >> May 11 23:41:59 ubugdm systemd[1189]: Time has been changed >> May 11 23:42:00 ubugdm /usr/lib/gdm3/gdm-x-session[1194]: >> gnome-session-binary[1204]: DEBUG(+): emitting SessionIsActive >> May 11 23:42:00 ubugdm gnome-session-binary[1204]: DEBUG(+): emitting >> SessionIsActive >> May 11 23:42:00 ubugdm /usr/lib/gdm3/gdm-x-session[1194]: >> (gnome-shell:1243): Clutter-CRITICAL **: clutter_input_device_get_device_id: >> assertion 'CLUTTER_IS_INPUT_DEVICE (device)' failed >> May 11 23:42:00 ubugdm /usr/lib/gdm3/gdm-x-session[1194]: >> (gnome-shell:1243): Clutter-CRITICAL **: clutter_input_device_get_device_id: >> assertion 'CLUTTER_IS_INPUT_DEVICE (device)' failed >> May 11 23:42:00 ubugdm /usr/lib/gdm3/gdm-x-session[1194]: (II) >> systemd-logind: got pause for 13:68 >> May 11 23:42:00 ubugdm /usr/lib/gdm3/gdm-x-session[1194]: (II) >> systemd-logind: got pause for 13:67 >> May 11 23:42:00 ubugdm /usr/lib/gdm3/gdm-x-session[1194]: (II) >> systemd-logind: got pause for 13:66 >> May 11 23:42:00 ubugdm /usr/lib/gdm3/gdm-x-session[1194]: (II) >> systemd-logind: got pause for 13:65 >> May 11 23:42:00 ubugdm /usr/lib/gdm3/gdm-x-session[1194]: (II) >> systemd-logind: got pause for 13:64 >> May 11 23:42:00 ubugdm /usr/lib/gdm3/gdm-x-session[1194]: >> (gnome-shell:1243): Clutter-CRITICAL **: clutter_input_device_get_device_id: >> assertion 'CLUTTER_IS_INPUT_DEVICE (device)' failed >> May 11 23:42:04 ubugdm systemd[1189]: Time has been changed >> May 11 23:42:04 ubugdm systemd[1387]: Time has been changed >> May 11 23:42:04 ubugdm systemd[1]: Time has been changed >> May 11 23:42:04 ubugdm systemd[1]: snapd.refresh.timer: Adding 1h 1min >> 38.593189s random time. >> May 11 23:42:04 ubugdm systemd[1]: snapd.refresh.timer: Adding 5h 41min >> 21.874821s random time. >> May 11 23:42:04 ubugdm systemd[1]: apt-daily.timer: Adding 5h 39min >> 55.997378s random time. >> May 11 23:42:09 ubugdm systemd[1]: Time has been changed >> May 11 23:42:09 ubugdm systemd[1]: snapd.refresh.timer: Adding 2h 33min >> 11.994432s random time. >> May 11 23:42:09 ubugdm systemd[1]: snapd.refresh.timer: Adding 4h 23min >> 50.841896s random time. >> May 11 23:42:09 ubugdm systemd[1]: apt-daily.timer: Adding 3h 23min >> 33.465902s random time. >> May 11 23:42:09 ubugdm systemd[1387]: Time has been changed >> May 11 23:42:09 ubugdm systemd[1189]: Time has been changed >> -- >> Manage your subscription for the Freeipa-users mailing list: >> https://www.redhat.com/mailman/listinfo/freeipa-users >> Go to http://freeipa.org for more info on the project
# # /etc/pam.d/common-session - session-related modules common to all services # # This file is included from other service-specific PAM config files, # and should contain a list of modules that define tasks to be performed # at the start and end of sessions of *any* kind (both interactive and # non-interactive). # # As of pam 1.0.1-6, this file is managed by pam-auth-update by default. # To take advantage of this, it is recommended that you configure any # local modules either before or after the default block, and use # pam-auth-update to manage selection of other modules. See # pam-auth-update(8) for details. # here are the per-package modules (the "Primary" block) session [default=1] pam_permit.so # here's the fallback if no module succeeds session requisite pam_deny.so # prime the stack with a positive return value if there isn't one already; # this avoids us returning an error just because nothing sets a success code # since the modules above will each just jump around session required pam_permit.so # The pam_umask module will set the umask according to the system default in # /etc/login.defs and user settings, solving the problem of different # umask settings with different shells, display managers, remote sessions etc. # See "man pam_umask". session optional pam_umask.so # and here are more per-package modules (the "Additional" block) session required pam_unix.so ##################################################################################### #Added the line below session required pam_mkhomedir.so skel=/etc/skel/ umask=0022 session optional pam_sss.so session optional pam_systemd.so session optional pam_ecryptfs.so unwrap # end of pam-auth-update config
-- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project