[ovirt-users] Debian - based OS and SSO

[Vinzenz Feenstra]

> On Jul 28, 2016, at 4:11 PM, Tadas <tadas at ring.lt> wrote:
> 
> Thank you for your reply.
> Strange, but i do not see any errors in gdm debug log, just this:
> http://paste.ubuntu.com/21275558/ <http://paste.ubuntu.com/21275558/>
Well if it works for you, the better. It didn’t work for me though


>  
> I will try installing debian unstable and several ubuntu versions tomorrow.
>  
> From: Vinzenz Feenstra <mailto:vfeenstr at redhat.com>
> Sent: Thursday, July 28, 2016 4:18 PM
> To: tadas at ring.lt <mailto:tadas at ring.lt>
> Cc: users <mailto:users at ovirt.org>
> Subject: Re: [ovirt-users] Debian - based OS and SSO
>  
>  
>> On Jul 28, 2016, at 3:11 PM, Vinzenz Feenstra <vfeenstr at redhat.com <mailto:vfeenstr at redhat.com>> wrote:
>>  
>>  
>>> On Jul 28, 2016, at 11:53 AM, Tadas <tadas at ring.lt <mailto:tadas at ring.lt>> wrote:
>>>  
>>> Hello,
>>> still having issues with ovirt SSO and Debian OS.
>>> Other OSes (Windows/Fedora 24) works just fine.
>>> Some information:
>>> OS: Debian 8.5 (jessie)
>>> I've followed manual on https://www.ovirt.org/documentation/how-to/gues <https://www.ovirt.org/documentation/how-to/gues>
>>> t-agent/install-the-guest-agent-in-debian/ and installed ovirt-agent.
>>> I can get info via spice socket on hypervisor side, this means that
>>> agent works fine.
>>> I've compiled pam-ovirt-cred and copied it into /lib/x86_64-linux-
>>> gnu/security/
>>  
>> It should be in /lib/security afaik
>> 
>>> I've configured /etc/pamd/gdm-ovirtcred (just copied from working
>>> Fedora 24)
>>  
>> replace in that file all occurences of password-auth with passwd
>>  
>> 
>>> 
>>> But still login fails. I can see this in ovirt-agent log file:
>>  
>> It some how fails for me in some cases with this now:
>>  
>  
> Correction its here:
> https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=794064 <https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=794064>
>> https://bugs.freedesktop.org/show_bug.cgi?id=71525 <https://bugs.freedesktop.org/show_bug.cgi?id=71525>
>>  
>> There’s not much I can do about that though
>>  
>>  
>> 
>>> 
>>> Dummy-2::INFO::2016-07-28
>>> 12:49:51,046::OVirtAgentLogic::270::root::Received an external command:
>>> login...
>>> Dummy-2::DEBUG::2016-07-28
>>> 12:49:51,047::OVirtAgentLogic::304::root::User log-in (credentials =
>>> '\x00\x00\x00\x04test********\x00')
>>> Dummy-2::INFO::2016-07-28 12:49:51,047::CredServer::207::root::The
>>> following users are allowed to connect: [0]
>>> Dummy-2::DEBUG::2016-07-28 12:49:51,047::CredServer::272::root::Token:
>>> 760258
>>> Dummy-2::INFO::2016-07-28 12:49:51,047::CredServer::273::root::Opening
>>> credentials channel...
>>> Dummy-2::INFO::2016-07-28 12:49:51,047::CredServer::132::root::Emitting
>>> user authenticated signal (760258).
>>> Dummy-2::INFO::2016-07-28
>>> 12:49:51,178::CredServer::277::root::Credentials channel was closed.
>>> 
>>  
>>  
>>  
>> 
>>> This looks okay. The error is on pam side (auth.log):
>>> 
>>> Jul 28 12:49:39 desktop64 gdm-ovirtcred]: pam_succeed_if(gdm-
>>> ovirtcred:auth): error retrieving user name: Conversation error
>>> Jul 28 12:49:39 desktop64 gdm-ovirtcred]: pam_ovirt_cred(gdm-
>>> ovirtcred:auth): Failed to acquire user's credentials
>>> 
>>> Have no idea, where it fails.
>>> Would appreciate, if you could help me here a bit.
>>> Thank you.
>>> 
>>> 
>>> _______________________________________________
>>> Users mailing list
>>> Users at ovirt.org <mailto:Users at ovirt.org>
>>> http://lists.ovirt.org/mailman/listinfo/users <http://lists.ovirt.org/mailman/listinfo/users>
>> 
>>  
> 
>  
> _______________________________________________
> Users mailing list
> Users at ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ovirt.org/pipermail/users/attachments/20160729/e3eec8a0/attachment-0001.html>