3:11 p.m.
--Apple-Mail=_2BEC4A84-59D3-4B6A-B632-9DB0CBDB92D0
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
charset=utf-8
On Jul 28, 2016, at 11:53 AM, Tadas <tadas(a)ring.lt> wrote:
=20
Hello,
still having issues with ovirt SSO and Debian OS.
Other OSes (Windows/Fedora 24) works just fine.
Some information:
OS: Debian 8.5 (jessie)
I've followed manual on =
https://www.ovirt.org/documentation/how-to/gues
t-agent/install-the-guest-agent-in-debian/ and installed
ovirt-agent.
I can get info via spice socket on hypervisor side, this means that
agent works fine.
I've compiled pam-ovirt-cred and copied it into /lib/x86_64-linux-
gnu/security/
It should be in /lib/security afaik
I've configured /etc/pamd/gdm-ovirtcred (just copied from
working
Fedora 24)
replace in that file all occurences of password-auth with passwd
=20
But still login fails. I can see this in ovirt-agent log file:
It some how fails for me in some cases with this now:
https://bugs.freedesktop.org/show_bug.cgi?id=3D71525 =
<https://bugs.freedesktop.org/show_bug.cgi?id=3D71525>
There=E2=80=99s not much I can do about that though
=20
Dummy-2::INFO::2016-07-28
12:49:51,046::OVirtAgentLogic::270::root::Received an external =
command:
login...
Dummy-2::DEBUG::2016-07-28
12:49:51,047::OVirtAgentLogic::304::root::User log-in (credentials =3D
'\x00\x00\x00\x04test********\x00')
Dummy-2::INFO::2016-07-28 12:49:51,047::CredServer::207::root::The
following users are allowed to connect: [0]
Dummy-2::DEBUG::2016-07-28 12:49:51,047::CredServer::272::root::Token:
760258
Dummy-2::INFO::2016-07-28 12:49:51,047::CredServer::273::root::Opening
credentials channel...
Dummy-2::INFO::2016-07-28 =
12:49:51,047::CredServer::132::root::Emitting
user authenticated signal (760258).
Dummy-2::INFO::2016-07-28
12:49:51,178::CredServer::277::root::Credentials channel was closed.
=20
This looks okay. The error is on pam side (auth.log):
=20
Jul 28 12:49:39 desktop64 gdm-ovirtcred]: pam_succeed_if(gdm-
ovirtcred:auth): error retrieving user name: Conversation error
Jul 28 12:49:39 desktop64 gdm-ovirtcred]: pam_ovirt_cred(gdm-
ovirtcred:auth): Failed to acquire user's credentials
=20
Have no idea, where it fails.
Would appreciate, if you could help me here a bit.
Thank you.
=20
=20
_______________________________________________
Users mailing list
Users(a)ovirt.org
http://lists.ovirt.org/mailman/listinfo/users
--Apple-Mail=_2BEC4A84-59D3-4B6A-B632-9DB0CBDB92D0
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html;
charset=utf-8
<html><head><meta http-equiv=3D"Content-Type"
content=3D"text/html =
charset=3Dutf-8"></head><body style=3D"word-wrap: break-word; =
-webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" =
class=3D""><br class=3D""><div><blockquote
type=3D"cite" class=3D""><div =
class=3D"">On Jul 28, 2016, at 11:53 AM, Tadas <<a =
href=3D"mailto:tadas@ring.lt"
class=3D"">tadas(a)ring.lt</a>&gt; =
wrote:</div><br class=3D"Apple-interchange-newline"><div
class=3D""><div =
class=3D"">Hello,<br class=3D"">still having issues with
ovirt SSO and =
Debian OS.<br class=3D"">Other OSes (Windows/Fedora 24) works just =
fine.<br class=3D"">Some information:<br class=3D"">OS:
Debian 8.5 =
(jessie)<br class=3D"">I've followed manual on <a =
href=3D"https://www.ovirt.org/documentation/how-to/gues" =
class=3D"">https://www.ovirt.org/documentation/how-to/gues&l... =
class=3D"">t-agent/install-the-guest-agent-in-debian/ and installed
=
ovirt-agent.<br class=3D"">I can get info via spice socket on hypervisor
=
side, this means that<br class=3D"">agent works fine.<br
class=3D"">I've =
compiled pam-ovirt-cred and copied it =
into /lib/x86_64-linux-<br class=3D"">gnu/security/<br =
class=3D""></div></div></blockquote><div><br
class=3D""></div><div>It =
should be in /lib/security afaik</div><br class=3D""><blockquote
=
type=3D"cite" class=3D""><div class=3D""><div
class=3D"">I've configured =
/etc/pamd/gdm-ovirtcred (just copied from working<br class=3D"">Fedora =
24)<br
class=3D""></div></div></blockquote><div><br =
class=3D""></div><div>replace in that file all occurences of =
password-auth with passwd</div><div><br
class=3D""></div><br =
class=3D""><blockquote type=3D"cite"
class=3D""><div class=3D""><div =
class=3D""><br class=3D"">But still login fails. I can see
this in =
ovirt-agent log file:<br
class=3D""></div></div></blockquote><div><br =
class=3D""></div><div>It some how fails for me in some cases with
this =
now:</div><div><br class=3D""></div><div><a =
href=3D"https://bugs.freedesktop.org/show_bug.cgi?id=3D71525" =
class=3D"">https://bugs.freedesktop.org/show_bug.cgi?id=3D71...
div><br class=3D""></div><div>There=E2=80=99s not much I
can do about =
that though</div><div><br
class=3D""></div><div><br
class=3D""></div><br =
class=3D""><blockquote type=3D"cite"
class=3D""><div class=3D""><div =
class=3D""><br class=3D"">Dummy-2::INFO::2016-07-28<br =
class=3D"">12:49:51,046::OVirtAgentLogic::270::root::Received an =
external command:<br class=3D"">login...<br =
class=3D"">Dummy-2::DEBUG::2016-07-28<br =
class=3D"">12:49:51,047::OVirtAgentLogic::304::root::User log-in =
(credentials =3D<br
class=3D"">'\x00\x00\x00\x04test********\x00')<br =
class=3D"">Dummy-2::INFO::2016-07-28 =
12:49:51,047::CredServer::207::root::The<br class=3D"">following users =
are allowed to connect: [0]<br class=3D"">Dummy-2::DEBUG::2016-07-28 =
12:49:51,047::CredServer::272::root::Token:<br class=3D"">760258<br =
class=3D"">Dummy-2::INFO::2016-07-28 =
12:49:51,047::CredServer::273::root::Opening<br class=3D"">credentials =
channel...<br class=3D"">Dummy-2::INFO::2016-07-28 =
12:49:51,047::CredServer::132::root::Emitting<br class=3D"">user =
authenticated signal (760258).<br
class=3D"">Dummy-2::INFO::2016-07-28<br =
class=3D"">12:49:51,178::CredServer::277::root::Credentials channel was =
closed.<br class=3D""><br
class=3D""></div></div></blockquote><div><br =
class=3D""></div><div><br
class=3D""></div><div><br
class=3D""></div><br =
class=3D""><blockquote type=3D"cite"
class=3D""><div class=3D""><div =
class=3D"">This looks okay. The error is on pam side (auth.log):<br =
class=3D""><br class=3D"">Jul 28 12:49:39 desktop64
gdm-ovirtcred]: =
pam_succeed_if(gdm-<br class=3D"">ovirtcred:auth): error retrieving user
=
name: Conversation error<br class=3D"">Jul 28 12:49:39 desktop64 =
gdm-ovirtcred]: pam_ovirt_cred(gdm-<br class=3D"">ovirtcred:auth): =
Failed to acquire user's credentials<br class=3D""><br
class=3D"">Have =
no idea, where it fails.<br class=3D"">Would appreciate, if you could =
help me here a bit.<br class=3D"">Thank you.<br
class=3D""><br =
class=3D""><br =
class=3D"">_______________________________________________<br =
class=3D"">Users mailing list<br class=3D""><a =
href=3D"mailto:Users@ovirt.org"
class=3D"">Users(a)ovirt.org</a><br =
class=3D"">http://lists.ovirt.org/mailman/listinfo/users<br =
class=3D""></div></div></blockquote></div><br
class=3D""></body></html>=
--Apple-Mail=_2BEC4A84-59D3-4B6A-B632-9DB0CBDB92D0--