--Apple-Mail=_1C4D7F46-AE32-42F2-B4FF-982870B65010 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8
On Jul 28, 2016, at 3:11 PM, Vinzenz Feenstra <vfeenstr@redhat.com> = wrote: =20 =20
On Jul 28, 2016, at 11:53 AM, Tadas <tadas@ring.lt = <mailto:tadas@ring.lt>> wrote: =20 Hello, still having issues with ovirt SSO and Debian OS. Other OSes (Windows/Fedora 24) works just fine. Some information: OS: Debian 8.5 (jessie) I've followed manual on = https://www.ovirt.org/documentation/how-to/gues = <https://www.ovirt.org/documentation/how-to/gues> t-agent/install-the-guest-agent-in-debian/ and installed ovirt-agent. I can get info via spice socket on hypervisor side, this means that agent works fine. I've compiled pam-ovirt-cred and copied it into /lib/x86_64-linux- gnu/security/ =20 It should be in /lib/security afaik =20 I've configured /etc/pamd/gdm-ovirtcred (just copied from working Fedora 24) =20 replace in that file all occurences of password-auth with passwd =20 =20 =20 But still login fails. I can see this in ovirt-agent log file: =20 It some how fails for me in some cases with this now: =20
Correction its here: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=3D794064 = <https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=3D794064>
https://bugs.freedesktop.org/show_bug.cgi?id=3D71525 = <https://bugs.freedesktop.org/show_bug.cgi?id=3D71525> =20 There=E2=80=99s not much I can do about that though =20 =20 =20
=20 Dummy-2::INFO::2016-07-28 12:49:51,046::OVirtAgentLogic::270::root::Received an external = command: login... Dummy-2::DEBUG::2016-07-28 12:49:51,047::OVirtAgentLogic::304::root::User log-in (credentials =3D '\x00\x00\x00\x04test********\x00') Dummy-2::INFO::2016-07-28 12:49:51,047::CredServer::207::root::The following users are allowed to connect: [0] Dummy-2::DEBUG::2016-07-28 = 12:49:51,047::CredServer::272::root::Token: 760258 Dummy-2::INFO::2016-07-28 = 12:49:51,047::CredServer::273::root::Opening credentials channel... Dummy-2::INFO::2016-07-28 = 12:49:51,047::CredServer::132::root::Emitting user authenticated signal (760258). Dummy-2::INFO::2016-07-28 12:49:51,178::CredServer::277::root::Credentials channel was closed. =20 =20 =20 =20 =20 This looks okay. The error is on pam side (auth.log): =20 Jul 28 12:49:39 desktop64 gdm-ovirtcred]: pam_succeed_if(gdm- ovirtcred:auth): error retrieving user name: Conversation error Jul 28 12:49:39 desktop64 gdm-ovirtcred]: pam_ovirt_cred(gdm- ovirtcred:auth): Failed to acquire user's credentials =20 Have no idea, where it fails. Would appreciate, if you could help me here a bit. Thank you. =20 =20 _______________________________________________ Users mailing list Users@ovirt.org <mailto:Users@ovirt.org> http://lists.ovirt.org/mailman/listinfo/users =20
--Apple-Mail=_1C4D7F46-AE32-42F2-B4FF-982870B65010 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 <html><head><meta http-equiv=3D"Content-Type" content=3D"text/html = charset=3Dutf-8"></head><body style=3D"word-wrap: break-word; = -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" = class=3D""><br class=3D""><div><blockquote type=3D"cite" class=3D""><div = class=3D"">On Jul 28, 2016, at 3:11 PM, Vinzenz Feenstra <<a = href=3D"mailto:vfeenstr@redhat.com" class=3D"">vfeenstr@redhat.com</a>>= wrote:</div><br class=3D"Apple-interchange-newline"><div class=3D""><meta= http-equiv=3D"Content-Type" content=3D"text/html charset=3Dutf-8" = class=3D""><div style=3D"word-wrap: break-word; -webkit-nbsp-mode: = space; -webkit-line-break: after-white-space;" class=3D""><br = class=3D""><div class=3D""><blockquote type=3D"cite" class=3D""><div = class=3D"">On Jul 28, 2016, at 11:53 AM, Tadas <<a = href=3D"mailto:tadas@ring.lt" class=3D"">tadas@ring.lt</a>> = wrote:</div><br class=3D"Apple-interchange-newline"><div class=3D""><div = class=3D"">Hello,<br class=3D"">still having issues with ovirt SSO and = Debian OS.<br class=3D"">Other OSes (Windows/Fedora 24) works just = fine.<br class=3D"">Some information:<br class=3D"">OS: Debian 8.5 = (jessie)<br class=3D"">I've followed manual on <a = href=3D"https://www.ovirt.org/documentation/how-to/gues" = class=3D"">https://www.ovirt.org/documentation/how-to/gues</a><br = class=3D"">t-agent/install-the-guest-agent-in-debian/ and installed = ovirt-agent.<br class=3D"">I can get info via spice socket on hypervisor = side, this means that<br class=3D"">agent works fine.<br class=3D"">I've = compiled pam-ovirt-cred and copied it = into /lib/x86_64-linux-<br class=3D"">gnu/security/<br = class=3D""></div></div></blockquote><div class=3D""><br = class=3D""></div><div class=3D"">It should be in /lib/security = afaik</div><br class=3D""><blockquote type=3D"cite" class=3D""><div = class=3D""><div class=3D"">I've configured /etc/pamd/gdm-ovirtcred (just = copied from working<br class=3D"">Fedora 24)<br = class=3D""></div></div></blockquote><div class=3D""><br = class=3D""></div><div class=3D"">replace in that file all occurences of = password-auth with passwd</div><div class=3D""><br class=3D""></div><br = class=3D""><blockquote type=3D"cite" class=3D""><div class=3D""><div = class=3D""><br class=3D"">But still login fails. I can see this in = ovirt-agent log file:<br class=3D""></div></div></blockquote><div = class=3D""><br class=3D""></div><div class=3D"">It some how fails for me = in some cases with this now:</div><div class=3D""><br = class=3D""></div></div></div></div></blockquote><div><br = class=3D""></div><div>Correction its here:</div><div><a = href=3D"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=3D794064" = class=3D"">https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=3D794064</a><= /div><br class=3D""><blockquote type=3D"cite" class=3D""><div = class=3D""><div style=3D"word-wrap: break-word; -webkit-nbsp-mode: = space; -webkit-line-break: after-white-space;" class=3D""><div = class=3D""><div class=3D""><a = href=3D"https://bugs.freedesktop.org/show_bug.cgi?id=3D71525" = class=3D"">https://bugs.freedesktop.org/show_bug.cgi?id=3D71525</a></div><= div class=3D""><br class=3D""></div><div class=3D"">There=E2=80=99s not = much I can do about that though</div><div class=3D""><br = class=3D""></div><div class=3D""><br class=3D""></div><br = class=3D""><blockquote type=3D"cite" class=3D""><div class=3D""><div = class=3D""><br class=3D"">Dummy-2::INFO::2016-07-28<br = class=3D"">12:49:51,046::OVirtAgentLogic::270::root::Received an = external command:<br class=3D"">login...<br = class=3D"">Dummy-2::DEBUG::2016-07-28<br = class=3D"">12:49:51,047::OVirtAgentLogic::304::root::User log-in = (credentials =3D<br class=3D"">'\x00\x00\x00\x04test********\x00')<br = class=3D"">Dummy-2::INFO::2016-07-28 = 12:49:51,047::CredServer::207::root::The<br class=3D"">following users = are allowed to connect: [0]<br class=3D"">Dummy-2::DEBUG::2016-07-28 = 12:49:51,047::CredServer::272::root::Token:<br class=3D"">760258<br = class=3D"">Dummy-2::INFO::2016-07-28 = 12:49:51,047::CredServer::273::root::Opening<br class=3D"">credentials = channel...<br class=3D"">Dummy-2::INFO::2016-07-28 = 12:49:51,047::CredServer::132::root::Emitting<br class=3D"">user = authenticated signal (760258).<br class=3D"">Dummy-2::INFO::2016-07-28<br = class=3D"">12:49:51,178::CredServer::277::root::Credentials channel was = closed.<br class=3D""><br class=3D""></div></div></blockquote><div = class=3D""><br class=3D""></div><div class=3D""><br class=3D""></div><div = class=3D""><br class=3D""></div><br class=3D""><blockquote type=3D"cite" = class=3D""><div class=3D""><div class=3D"">This looks okay. The error is = on pam side (auth.log):<br class=3D""><br class=3D"">Jul 28 12:49:39 = desktop64 gdm-ovirtcred]: pam_succeed_if(gdm-<br = class=3D"">ovirtcred:auth): error retrieving user name: Conversation = error<br class=3D"">Jul 28 12:49:39 desktop64 gdm-ovirtcred]: = pam_ovirt_cred(gdm-<br class=3D"">ovirtcred:auth): Failed to acquire = user's credentials<br class=3D""><br class=3D"">Have no idea, where it = fails.<br class=3D"">Would appreciate, if you could help me here a = bit.<br class=3D"">Thank you.<br class=3D""><br class=3D""><br = class=3D"">_______________________________________________<br = class=3D"">Users mailing list<br class=3D""><a = href=3D"mailto:Users@ovirt.org" class=3D"">Users@ovirt.org</a><br = class=3D""><a href=3D"http://lists.ovirt.org/mailman/listinfo/users" = class=3D"">http://lists.ovirt.org/mailman/listinfo/users</a><br = class=3D""></div></div></blockquote></div><br = class=3D""></div></div></blockquote></div><br class=3D""></body></html>= --Apple-Mail=_1C4D7F46-AE32-42F2-B4FF-982870B65010--