sorry wrong thread! On Sat, 3 Apr 2021 at 10:52, Calvin Chiang <[email protected]> wrote:
> Hi Sam > > Thanks for the input here! i'll be testing this again on Tuesday. > I "think" GSSAPI means the machine has to be domain joined. which i wanted > to avoid as it was a container that would be disappearing pretty often. > But these logs are looking very handy in any case thanks! > > Cheers > > Calvin > > On Thu, 1 Apr 2021 at 14:57, Sam Morris <[email protected]> wrote: > >> Whoops, I forgot to include the sudo output! >> >> pam_sss_gss: Initializing GSSAPI authentication with SSSD >> pam_sss_gss: Switching euid from 0 to 123456789 >> pam_sss_gss: Trying to establish security context >> pam_sss_gss: SSSD User name: [email protected] >> pam_sss_gss: User domain: example.net >> pam_sss_gss: User principal: [email protected] >> pam_sss_gss: Target name: [email protected] >> pam_sss_gss: Using ccache: FILE:/run/user/123456789/krb5cc >> pam_sss_gss: Acquiring credentials for principal [[email protected]] >> pam_sss_gss: Communication error [3, 32]: Error in service module; Broken >> pipe >> pam_sss_gss: Switching euid from 123456789 to 0 >> pam_sss_gss: System error [32]: Broken pipe >> [sudo] password for [email protected]: ^C >> >> If I run 'klist' at this point, I can see that I've picked up tickets for >> krb5tgt/[email protected] and host/ >> [email protected]; so I think the PAM module is >> working, but sssd_pam doesn't like what it sends and closes the connection >> down. >> >> -- >> Sam Morris <https://robots.org.uk/> >> PGP: rsa4096/CAAA AA1A CA69 A83A 892B 1855 D20B 4202 5CDA 27B9 >> _______________________________________________ >> sssd-users mailing list -- [email protected] >> To unsubscribe send an email to [email protected] >> Fedora Code of Conduct: >> https://docs.fedoraproject.org/en-US/project/code-of-conduct/ >> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines >> List Archives: >> https://lists.fedorahosted.org/archives/list/[email protected] >> Do not reply to spam on the list, report it: >> https://pagure.io/fedora-infrastructure >> >
_______________________________________________ sssd-users mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/[email protected] Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
