[Bug 1742752] Re: system error(4) since latest update on xenial
[Expired for sssd (Ubuntu) because there has been no activity for 60 days.] ** Changed in: sssd (Ubuntu) Status: Incomplete => Expired -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1742752 Title: system error(4) since latest update on xenial To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/sssd/+bug/1742752/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1742752] Re: system error(4) since latest update on xenial
Marking Incomplete pending an answer to comment 12. ** Changed in: sssd (Ubuntu) Status: Triaged => Incomplete -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1742752 Title: system error(4) since latest update on xenial To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/sssd/+bug/1742752/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1742752] Re: system error(4) since latest update on xenial
I think not, that's normal for the first kinit if the client doesn't know that the server requires preauth. It will just adapt and request it again. You may have to bump the logging level, although the manpage doesn't mention this (search for ad_gpo_access_control in https://www.systutorials.com/docs/linux/man/5-sssd-ad/). Try debug_level 3 or 4 in the sssd.conf sections (probably just the ad domain one). -- You received this bug notification because you are a member of Ubuntu Server, which is subscribed to the bug report. https://bugs.launchpad.net/bugs/1742752 Title: system error(4) since latest update on xenial To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/sssd/+bug/1742752/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1742752] Re: system error(4) since latest update on xenial
I think not, that's normal for the first kinit if the client doesn't know that the server requires preauth. It will just adapt and request it again. You may have to bump the logging level, although the manpage doesn't mention this (search for ad_gpo_access_control in https://www.systutorials.com/docs/linux/man/5-sssd-ad/). Try debug_level 3 or 4 in the sssd.conf sections (probably just the ad domain one). -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1742752 Title: system error(4) since latest update on xenial To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/sssd/+bug/1742752/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1742752] Re: system error(4) since latest update on xenial
I only see this line in /var/log/syslog for a recent login. Not sure if related. [sssd[krb5_child[29420]]]: Preauthentication failed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1742752 Title: system error(4) since latest update on xenial To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/sssd/+bug/1742752/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1742752] Re: system error(4) since latest update on xenial
With the new packages and in "permissive" mode, you should be getting log messages about why a certain user would have been denied access. These might land in /var/log/syslog, or perhaps an sssd specific logfile in /var/log/sssd/*. Could you please check? -- You received this bug notification because you are a member of Ubuntu Server, which is subscribed to the bug report. https://bugs.launchpad.net/bugs/1742752 Title: system error(4) since latest update on xenial To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/sssd/+bug/1742752/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1742752] Re: system error(4) since latest update on xenial
With the new packages and in "permissive" mode, you should be getting log messages about why a certain user would have been denied access. These might land in /var/log/syslog, or perhaps an sssd specific logfile in /var/log/sssd/*. Could you please check? -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1742752 Title: system error(4) since latest update on xenial To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/sssd/+bug/1742752/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1742752] Re: system error(4) since latest update on xenial
Just in case it could help. When I used the old packages it worked again but I had problems from time to time so I upgraded to the latest packages and used the "ad_gpo_access_control = permissive" workaround. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1742752 Title: system error(4) since latest update on xenial To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/sssd/+bug/1742752/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1742752] Re: system error(4) since latest update on xenial
Thanks for switching it out of "incomplete". I'm sorry I couldn't get back to it yet, but it's in my list. ** Changed in: sssd (Ubuntu) Status: New => Triaged ** Changed in: sssd (Ubuntu) Importance: Undecided => Medium -- You received this bug notification because you are a member of Ubuntu Server, which is subscribed to sssd in Ubuntu. https://bugs.launchpad.net/bugs/1742752 Title: system error(4) since latest update on xenial To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/sssd/+bug/1742752/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1742752] Re: system error(4) since latest update on xenial
Thanks for switching it out of "incomplete". I'm sorry I couldn't get back to it yet, but it's in my list. ** Changed in: sssd (Ubuntu) Status: New => Triaged ** Changed in: sssd (Ubuntu) Importance: Undecided => Medium -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1742752 Title: system error(4) since latest update on xenial To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/sssd/+bug/1742752/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1742752] Re: system error(4) since latest update on xenial
** Changed in: sssd (Ubuntu) Status: Incomplete => New -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1742752 Title: system error(4) since latest update on xenial To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/sssd/+bug/1742752/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1742752] Re: system error(4) since latest update on xenial
Should this bug report still marked as Incomplete? -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1742752 Title: system error(4) since latest update on xenial To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/sssd/+bug/1742752/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1742752] Re: system error(4) since latest update on xenial
Yes downgrade works. I disabled "ad_gpo_access_control = permissive". Rebooted. Wasn't able to login with a token. Downgraded, rebooted. Was able to login with a token. % dpkg -l | grep 1.13.4-1ubuntu1.9 ii libipa-hbac01.13.4-1ubuntu1.9 amd64FreeIPA HBAC Evaluator library ii libnss-sss:amd641.13.4-1ubuntu1.9 amd64Nss library for the System Security Services Daemon ii libpam-sss:amd641.13.4-1ubuntu1.9 amd64Pam module for the System Security Services Daemon ii libsss-idmap0 1.13.4-1ubuntu1.9 amd64ID mapping library for SSSD ii libsss-nss-idmap0 1.13.4-1ubuntu1.9 amd64SID based lookups library for SSSD ii python-sss 1.13.4-1ubuntu1.9 amd64Python module for the System Security Services Daemon ii sssd1.13.4-1ubuntu1.9 amd64System Security Services Daemon -- metapackage ii sssd-ad 1.13.4-1ubuntu1.9 amd64System Security Services Daemon -- Active Directory back end ii sssd-ad-common 1.13.4-1ubuntu1.9 amd64System Security Services Daemon -- PAC responder ii sssd-common 1.13.4-1ubuntu1.9 amd64System Security Services Daemon -- common files ii sssd-ipa1.13.4-1ubuntu1.9 amd64System Security Services Daemon -- IPA back end ii sssd-krb5 1.13.4-1ubuntu1.9 amd64System Security Services Daemon -- Kerberos back end ii sssd-krb5-common1.13.4-1ubuntu1.9 amd64System Security Services Daemon -- Kerberos helpers ii sssd-ldap 1.13.4-1ubuntu1.9 amd64System Security Services Daemon -- LDAP back end ii sssd-proxy 1.13.4-1ubuntu1.9 amd64System Security Services Daemon -- proxy back end ii sssd-tools 1.13.4-1ubuntu1.9 amd64System Security Services Daemon -- tools -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1742752 Title: system error(4) since latest update on xenial To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/sssd/+bug/1742752/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1742752] Re: system error(4) since latest update on xenial
Thanks for these files. If you downgrade sssd back to the 1.13.4-1ubuntu1.9 version, you can then remove "ad_gpo_access_control = permissive" from sssd.conf and it works? Can you confirm that? -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to sssd in Ubuntu. https://bugs.launchpad.net/bugs/1742752 Title: system error(4) since latest update on xenial To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/sssd/+bug/1742752/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1742752] Re: system error(4) since latest update on xenial
Thanks for these files. If you downgrade sssd back to the 1.13.4-1ubuntu1.9 version, you can then remove "ad_gpo_access_control = permissive" from sssd.conf and it works? Can you confirm that? -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1742752 Title: system error(4) since latest update on xenial To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/sssd/+bug/1742752/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1742752] Re: system error(4) since latest update on xenial
** Attachment added: "history.log" https://bugs.launchpad.net/ubuntu/+source/sssd/+bug/1742752/+attachment/5035331/+files/history.log -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1742752 Title: system error(4) since latest update on xenial To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/sssd/+bug/1742752/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1742752] Re: system error(4) since latest update on xenial
** Attachment added: "term.log" https://bugs.launchpad.net/ubuntu/+source/sssd/+bug/1742752/+attachment/5035329/+files/term.log -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1742752 Title: system error(4) since latest update on xenial To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/sssd/+bug/1742752/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1742752] Re: system error(4) since latest update on xenial
** Attachment added: "dpkg.log" https://bugs.launchpad.net/ubuntu/+source/sssd/+bug/1742752/+attachment/5035332/+files/dpkg.log -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1742752 Title: system error(4) since latest update on xenial To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/sssd/+bug/1742752/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1742752] Re: system error(4) since latest update on xenial
** Attachment added: "sssd.conf" https://bugs.launchpad.net/ubuntu/+source/sssd/+bug/1742752/+attachment/5035330/+files/sssd.conf -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1742752 Title: system error(4) since latest update on xenial To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/sssd/+bug/1742752/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1742752] Re: system error(4) since latest update on xenial
Thanks for filing this bug in Ubuntu. This last update didn't touch AD settings, so you might have been running an even older version. Could you attach to this bug these log files please: - /var/log/dpkg.log - /var/log/apt/term.log - /var/log/apt/history.log Could you also please share your /etc/sssd/sssd.conf file? Feel free to scrub any private data, but please redact it instead of removing the line entirely. Thanks ** Changed in: sssd (Ubuntu) Status: New => Incomplete -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to sssd in Ubuntu. https://bugs.launchpad.net/bugs/1742752 Title: system error(4) since latest update on xenial To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/sssd/+bug/1742752/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1742752] Re: system error(4) since latest update on xenial
Thanks for filing this bug in Ubuntu. This last update didn't touch AD settings, so you might have been running an even older version. Could you attach to this bug these log files please: - /var/log/dpkg.log - /var/log/apt/term.log - /var/log/apt/history.log Could you also please share your /etc/sssd/sssd.conf file? Feel free to scrub any private data, but please redact it instead of removing the line entirely. Thanks ** Changed in: sssd (Ubuntu) Status: New => Incomplete -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1742752 Title: system error(4) since latest update on xenial To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/sssd/+bug/1742752/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs