[ovirt-users] Debian - based OS and SSO

[Vinzenz Feenstra]

> On Jul 28, 2016, at 3:11 PM, Vinzenz Feenstra <vfeenstr at redhat.com> wrote:
> 
> 
>> On Jul 28, 2016, at 11:53 AM, Tadas <tadas at ring.lt <mailto:tadas at ring.lt>> wrote:
>> 
>> Hello,
>> still having issues with ovirt SSO and Debian OS.
>> Other OSes (Windows/Fedora 24) works just fine.
>> Some information:
>> OS: Debian 8.5 (jessie)
>> I've followed manual on https://www.ovirt.org/documentation/how-to/gues <https://www.ovirt.org/documentation/how-to/gues>
>> t-agent/install-the-guest-agent-in-debian/ and installed ovirt-agent.
>> I can get info via spice socket on hypervisor side, this means that
>> agent works fine.
>> I've compiled pam-ovirt-cred and copied it into /lib/x86_64-linux-
>> gnu/security/
> 
> It should be in /lib/security afaik
> 
>> I've configured /etc/pamd/gdm-ovirtcred (just copied from working
>> Fedora 24)
> 
> replace in that file all occurences of password-auth with passwd
> 
> 
>> 
>> But still login fails. I can see this in ovirt-agent log file:
> 
> It some how fails for me in some cases with this now:
> 

Correction its here:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=794064 <https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=794064>
> https://bugs.freedesktop.org/show_bug.cgi?id=71525 <https://bugs.freedesktop.org/show_bug.cgi?id=71525>
> 
> There’s not much I can do about that though
> 
> 
> 
>> 
>> Dummy-2::INFO::2016-07-28
>> 12:49:51,046::OVirtAgentLogic::270::root::Received an external command:
>> login...
>> Dummy-2::DEBUG::2016-07-28
>> 12:49:51,047::OVirtAgentLogic::304::root::User log-in (credentials =
>> '\x00\x00\x00\x04test********\x00')
>> Dummy-2::INFO::2016-07-28 12:49:51,047::CredServer::207::root::The
>> following users are allowed to connect: [0]
>> Dummy-2::DEBUG::2016-07-28 12:49:51,047::CredServer::272::root::Token:
>> 760258
>> Dummy-2::INFO::2016-07-28 12:49:51,047::CredServer::273::root::Opening
>> credentials channel...
>> Dummy-2::INFO::2016-07-28 12:49:51,047::CredServer::132::root::Emitting
>> user authenticated signal (760258).
>> Dummy-2::INFO::2016-07-28
>> 12:49:51,178::CredServer::277::root::Credentials channel was closed.
>> 
> 
> 
> 
> 
>> This looks okay. The error is on pam side (auth.log):
>> 
>> Jul 28 12:49:39 desktop64 gdm-ovirtcred]: pam_succeed_if(gdm-
>> ovirtcred:auth): error retrieving user name: Conversation error
>> Jul 28 12:49:39 desktop64 gdm-ovirtcred]: pam_ovirt_cred(gdm-
>> ovirtcred:auth): Failed to acquire user's credentials
>> 
>> Have no idea, where it fails.
>> Would appreciate, if you could help me here a bit.
>> Thank you.
>> 
>> 
>> _______________________________________________
>> Users mailing list
>> Users at ovirt.org <mailto:Users at ovirt.org>
>> http://lists.ovirt.org/mailman/listinfo/users
> 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ovirt.org/pipermail/users/attachments/20160728/67b516f3/attachment-0001.html>