3:18 p.m.
--Apple-Mail=_1C4D7F46-AE32-42F2-B4FF-982870B65010
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
charset=utf-8
On Jul 28, 2016, at 3:11 PM, Vinzenz Feenstra
<vfeenstr(a)redhat.com> =
wrote:
=20
=20
> On Jul 28, 2016, at 11:53 AM, Tadas <tadas(a)ring.lt =
<mailto:tadas@ring.lt>> wrote:
>=20
> Hello,
> still having issues with ovirt SSO and Debian OS.
> Other OSes (Windows/Fedora 24) works just fine.
> Some information:
> OS: Debian 8.5 (jessie)
> I've followed manual on =
https://www.ovirt.org/documentation/how-to/gues
=
<https://www.ovirt.org/documentation/how-to/gues>
> t-agent/install-the-guest-agent-in-debian/ and installed
ovirt-agent.
> I can get info via spice socket on hypervisor side, this means that
> agent works fine.
> I've compiled pam-ovirt-cred and copied it into /lib/x86_64-linux-
> gnu/security/
=20
It should be in /lib/security afaik
=20
> I've configured /etc/pamd/gdm-ovirtcred (just copied from working
> Fedora 24)
=20
replace in that file all occurences of password-auth with passwd
=20
=20
>=20
> But still login fails. I can see this in ovirt-agent log file:
=20
It some how fails for me in some cases with this now:
=20
Correction its here:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=3D794064 =
<https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=3D794064>
<https://bugs.freedesktop.org/show_bug.cgi?id=3D71525>
=20
There=E2=80=99s not much I can do about that though
=20
=20
=20
>=20
> Dummy-2::INFO::2016-07-28
> 12:49:51,046::OVirtAgentLogic::270::root::Received an external =
command:
> login...
> Dummy-2::DEBUG::2016-07-28
> 12:49:51,047::OVirtAgentLogic::304::root::User log-in (credentials =3D
> '\x00\x00\x00\x04test********\x00')
> Dummy-2::INFO::2016-07-28 12:49:51,047::CredServer::207::root::The
> following users are allowed to connect: [0]
> Dummy-2::DEBUG::2016-07-28 =
12:49:51,047::CredServer::272::root::Token:
> 760258
> Dummy-2::INFO::2016-07-28 =
12:49:51,047::CredServer::273::root::Opening
> credentials channel...
> Dummy-2::INFO::2016-07-28 =
12:49:51,047::CredServer::132::root::Emitting
> user authenticated signal (760258).
> Dummy-2::INFO::2016-07-28
> 12:49:51,178::CredServer::277::root::Credentials channel was closed.
>=20
=20
=20
=20
=20
> This looks okay. The error is on pam side (auth.log):
>=20
> Jul 28 12:49:39 desktop64 gdm-ovirtcred]: pam_succeed_if(gdm-
> ovirtcred:auth): error retrieving user name: Conversation error
> Jul 28 12:49:39 desktop64 gdm-ovirtcred]: pam_ovirt_cred(gdm-
> ovirtcred:auth): Failed to acquire user's credentials
>=20
> Have no idea, where it fails.
> Would appreciate, if you could help me here a bit.
> Thank you.
>=20
>=20
> _______________________________________________
> Users mailing list
> Users(a)ovirt.org <mailto:Users@ovirt.org>
> http://lists.ovirt.org/mailman/listinfo/users
=20
--Apple-Mail=_1C4D7F46-AE32-42F2-B4FF-982870B65010
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html;
charset=utf-8
<html><head><meta http-equiv=3D"Content-Type"
content=3D"text/html =
charset=3Dutf-8"></head><body style=3D"word-wrap: break-word; =
-webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" =
class=3D""><br class=3D""><div><blockquote
type=3D"cite" class=3D""><div =
class=3D"">On Jul 28, 2016, at 3:11 PM, Vinzenz Feenstra <<a =
href=3D"mailto:vfeenstr@redhat.com"
class=3D"">vfeenstr(a)redhat.com</a>&gt;=
wrote:</div><br class=3D"Apple-interchange-newline"><div
class=3D""><meta=
http-equiv=3D"Content-Type" content=3D"text/html charset=3Dutf-8" =
class=3D""><div style=3D"word-wrap: break-word; -webkit-nbsp-mode: =
space; -webkit-line-break: after-white-space;" class=3D""><br =
class=3D""><div class=3D""><blockquote
type=3D"cite" class=3D""><div =
class=3D"">On Jul 28, 2016, at 11:53 AM, Tadas <<a =
href=3D"mailto:tadas@ring.lt"
class=3D"">tadas(a)ring.lt</a>&gt; =
wrote:</div><br class=3D"Apple-interchange-newline"><div
class=3D""><div =
class=3D"">Hello,<br class=3D"">still having issues with
ovirt SSO and =
Debian OS.<br class=3D"">Other OSes (Windows/Fedora 24) works just =
fine.<br class=3D"">Some information:<br class=3D"">OS:
Debian 8.5 =
(jessie)<br class=3D"">I've followed manual on <a =
href=3D"https://www.ovirt.org/documentation/how-to/gues" =
class=3D"">https://www.ovirt.org/documentation/how-to/gues&l... =
class=3D"">t-agent/install-the-guest-agent-in-debian/ and installed
=
ovirt-agent.<br class=3D"">I can get info via spice socket on hypervisor
=
side, this means that<br class=3D"">agent works fine.<br
class=3D"">I've =
compiled pam-ovirt-cred and copied it =
into /lib/x86_64-linux-<br class=3D"">gnu/security/<br =
class=3D""></div></div></blockquote><div
class=3D""><br =
class=3D""></div><div class=3D"">It should be in
/lib/security =
afaik</div><br class=3D""><blockquote type=3D"cite"
class=3D""><div =
class=3D""><div class=3D"">I've configured
/etc/pamd/gdm-ovirtcred (just =
copied from working<br class=3D"">Fedora 24)<br =
class=3D""></div></div></blockquote><div
class=3D""><br =
class=3D""></div><div class=3D"">replace in that file
all occurences of =
password-auth with passwd</div><div class=3D""><br
class=3D""></div><br =
class=3D""><blockquote type=3D"cite"
class=3D""><div class=3D""><div =
class=3D""><br class=3D"">But still login fails. I can see
this in =
ovirt-agent log file:<br
class=3D""></div></div></blockquote><div =
class=3D""><br class=3D""></div><div
class=3D"">It some how fails for me =
in some cases with this now:</div><div class=3D""><br =
class=3D""></div></div></div></div></blockquote><div><br
=
class=3D""></div><div>Correction its
here:</div><div><a =
href=3D"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=3D794064&q... =
class=3D"">https://bugs.debian.org/cgi-bin/bugreport.cgi?bug...
/div><br class=3D""><blockquote type=3D"cite"
class=3D""><div =
class=3D""><div style=3D"word-wrap: break-word; -webkit-nbsp-mode: =
space; -webkit-line-break: after-white-space;" class=3D""><div =
class=3D""><div class=3D""><a =
href=3D"https://bugs.freedesktop.org/show_bug.cgi?id=3D71525" =
class=3D"">https://bugs.freedesktop.org/show_bug.cgi?id=3D71...
div class=3D""><br class=3D""></div><div
class=3D"">There=E2=80=99s not =
much I can do about that though</div><div class=3D""><br =
class=3D""></div><div class=3D""><br
class=3D""></div><br =
class=3D""><blockquote type=3D"cite"
class=3D""><div class=3D""><div =
class=3D""><br class=3D"">Dummy-2::INFO::2016-07-28<br =
class=3D"">12:49:51,046::OVirtAgentLogic::270::root::Received an =
external command:<br class=3D"">login...<br =
class=3D"">Dummy-2::DEBUG::2016-07-28<br =
class=3D"">12:49:51,047::OVirtAgentLogic::304::root::User log-in =
(credentials =3D<br
class=3D"">'\x00\x00\x00\x04test********\x00')<br =
class=3D"">Dummy-2::INFO::2016-07-28 =
12:49:51,047::CredServer::207::root::The<br class=3D"">following users =
are allowed to connect: [0]<br class=3D"">Dummy-2::DEBUG::2016-07-28 =
12:49:51,047::CredServer::272::root::Token:<br class=3D"">760258<br =
class=3D"">Dummy-2::INFO::2016-07-28 =
12:49:51,047::CredServer::273::root::Opening<br class=3D"">credentials =
channel...<br class=3D"">Dummy-2::INFO::2016-07-28 =
12:49:51,047::CredServer::132::root::Emitting<br class=3D"">user =
authenticated signal (760258).<br
class=3D"">Dummy-2::INFO::2016-07-28<br =
class=3D"">12:49:51,178::CredServer::277::root::Credentials channel was =
closed.<br class=3D""><br
class=3D""></div></div></blockquote><div =
class=3D""><br class=3D""></div><div
class=3D""><br class=3D""></div><div =
class=3D""><br class=3D""></div><br
class=3D""><blockquote type=3D"cite" =
class=3D""><div class=3D""><div
class=3D"">This looks okay. The error is =
on pam side (auth.log):<br class=3D""><br class=3D"">Jul
28 12:49:39 =
desktop64 gdm-ovirtcred]: pam_succeed_if(gdm-<br =
class=3D"">ovirtcred:auth): error retrieving user name: Conversation =
error<br class=3D"">Jul 28 12:49:39 desktop64 gdm-ovirtcred]: =
pam_ovirt_cred(gdm-<br class=3D"">ovirtcred:auth): Failed to acquire =
user's credentials<br class=3D""><br class=3D"">Have
no idea, where it =
fails.<br class=3D"">Would appreciate, if you could help me here a =
bit.<br class=3D"">Thank you.<br class=3D""><br
class=3D""><br =
class=3D"">_______________________________________________<br =
class=3D"">Users mailing list<br class=3D""><a =
href=3D"mailto:Users@ovirt.org"
class=3D"">Users(a)ovirt.org</a><br =
class=3D""><a
href=3D"http://lists.ovirt.org/mailman/listinfo/users" =
class=3D"">http://lists.ovirt.org/mailman/listinfo/users<... =
class=3D""></div></div></blockquote></div><br =
class=3D""></div></div></blockquote></div><br
class=3D""></body></html>=
--Apple-Mail=_1C4D7F46-AE32-42F2-B4FF-982870B65010--