<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><br class=""><div><blockquote type="cite" class=""><div class="">On Jul 28, 2016, at 3:11 PM, Vinzenz Feenstra <<a href="mailto:vfeenstr@redhat.com" class="">vfeenstr@redhat.com</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><meta http-equiv="Content-Type" content="text/html charset=utf-8" class=""><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><br class=""><div class=""><blockquote type="cite" class=""><div class="">On Jul 28, 2016, at 11:53 AM, Tadas <<a href="mailto:tadas@ring.lt" class="">tadas@ring.lt</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div class="">Hello,<br class="">still having issues with ovirt SSO and Debian OS.<br class="">Other OSes (Windows/Fedora 24) works just fine.<br class="">Some information:<br class="">OS: Debian 8.5 (jessie)<br class="">I've followed manual on <a href="https://www.ovirt.org/documentation/how-to/gues" class="">https://www.ovirt.org/documentation/how-to/gues</a><br class="">t-agent/install-the-guest-agent-in-debian/ and installed ovirt-agent.<br class="">I can get info via spice socket on hypervisor side, this means that<br class="">agent works fine.<br class="">I've compiled pam-ovirt-cred and copied it into /lib/x86_64-linux-<br class="">gnu/security/<br class=""></div></div></blockquote><div class=""><br class=""></div><div class="">It should be in /lib/security afaik</div><br class=""><blockquote type="cite" class=""><div class=""><div class="">I've configured /etc/pamd/gdm-ovirtcred (just copied from working<br class="">Fedora 24)<br class=""></div></div></blockquote><div class=""><br class=""></div><div class="">replace in that file all occurences of password-auth with passwd</div><div class=""><br class=""></div><br class=""><blockquote type="cite" class=""><div class=""><div class=""><br class="">But still login fails. I can see this in ovirt-agent log file:<br class=""></div></div></blockquote><div class=""><br class=""></div><div class="">It some how fails for me in some cases with this now:</div><div class=""><br class=""></div></div></div></div></blockquote><div><br class=""></div><div>Correction its here:</div><div><a href="https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=794064" class="">https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=794064</a></div><br class=""><blockquote type="cite" class=""><div class=""><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div class=""><div class=""><a href="https://bugs.freedesktop.org/show_bug.cgi?id=71525" class="">https://bugs.freedesktop.org/show_bug.cgi?id=71525</a></div><div class=""><br class=""></div><div class="">There’s not much I can do about that though</div><div class=""><br class=""></div><div class=""><br class=""></div><br class=""><blockquote type="cite" class=""><div class=""><div class=""><br class="">Dummy-2::INFO::2016-07-28<br class="">12:49:51,046::OVirtAgentLogic::270::root::Received an external command:<br class="">login...<br class="">Dummy-2::DEBUG::2016-07-28<br class="">12:49:51,047::OVirtAgentLogic::304::root::User log-in (credentials =<br class="">'\x00\x00\x00\x04test********\x00')<br class="">Dummy-2::INFO::2016-07-28 12:49:51,047::CredServer::207::root::The<br class="">following users are allowed to connect: [0]<br class="">Dummy-2::DEBUG::2016-07-28 12:49:51,047::CredServer::272::root::Token:<br class="">760258<br class="">Dummy-2::INFO::2016-07-28 12:49:51,047::CredServer::273::root::Opening<br class="">credentials channel...<br class="">Dummy-2::INFO::2016-07-28 12:49:51,047::CredServer::132::root::Emitting<br class="">user authenticated signal (760258).<br class="">Dummy-2::INFO::2016-07-28<br class="">12:49:51,178::CredServer::277::root::Credentials channel was closed.<br class=""><br class=""></div></div></blockquote><div class=""><br class=""></div><div class=""><br class=""></div><div class=""><br class=""></div><br class=""><blockquote type="cite" class=""><div class=""><div class="">This looks okay. The error is on pam side (auth.log):<br class=""><br class="">Jul 28 12:49:39 desktop64 gdm-ovirtcred]: pam_succeed_if(gdm-<br class="">ovirtcred:auth): error retrieving user name: Conversation error<br class="">Jul 28 12:49:39 desktop64 gdm-ovirtcred]: pam_ovirt_cred(gdm-<br class="">ovirtcred:auth): Failed to acquire user's credentials<br class=""><br class="">Have no idea, where it fails.<br class="">Would appreciate, if you could help me here a bit.<br class="">Thank you.<br class=""><br class=""><br class="">_______________________________________________<br class="">Users mailing list<br class=""><a href="mailto:Users@ovirt.org" class="">Users@ovirt.org</a><br class=""><a href="http://lists.ovirt.org/mailman/listinfo/users" class="">http://lists.ovirt.org/mailman/listinfo/users</a><br class=""></div></div></blockquote></div><br class=""></div></div></blockquote></div><br class=""></body></html>