<HTML><HEAD>
<META content="text/html charset=utf-8" http-equiv=Content-Type></HEAD>
<BODY
style="WORD-WRAP: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space"
dir=ltr>
<DIV dir=ltr>
<DIV style="FONT-SIZE: 12pt; FONT-FAMILY: 'Calibri'; COLOR: #000000">
<DIV>Thank you for your reply.</DIV>
<DIV>Strange, but i do not see any errors in gdm debug log, just this:</DIV>
<DIV><A title=http://paste.ubuntu.com/21275558/
href="http://paste.ubuntu.com/21275558/">http://paste.ubuntu.com/21275558/</A></DIV>
<DIV> </DIV>
<DIV>I will try installing debian unstable and several ubuntu versions
tomorrow.</DIV>
<DIV
style='FONT-SIZE: small; TEXT-DECORATION: none; FONT-FAMILY: "Calibri"; FONT-WEIGHT: normal; COLOR: #000000; FONT-STYLE: normal; DISPLAY: inline'>
<DIV style="FONT: 10pt tahoma">
<DIV><FONT size=3 face=Calibri></FONT> </DIV>
<DIV style="BACKGROUND: #f5f5f5">
<DIV style="font-color: black"><B>From:</B> <A title=vfeenstr@redhat.com
href="mailto:vfeenstr@redhat.com">Vinzenz Feenstra</A> </DIV>
<DIV><B>Sent:</B> Thursday, July 28, 2016 4:18 PM</DIV>
<DIV><B>To:</B> <A title=tadas@ring.lt
href="mailto:tadas@ring.lt">tadas@ring.lt</A> </DIV>
<DIV><B>Cc:</B> <A title=users@ovirt.org href="mailto:users@ovirt.org">users</A>
</DIV>
<DIV><B>Subject:</B> Re: [ovirt-users] Debian - based OS and
SSO</DIV></DIV></DIV>
<DIV> </DIV></DIV>
<DIV
style='FONT-SIZE: small; TEXT-DECORATION: none; FONT-FAMILY: "Calibri"; FONT-WEIGHT: normal; COLOR: #000000; FONT-STYLE: normal; DISPLAY: inline'>
<DIV> </DIV>
<DIV>
<BLOCKQUOTE type="cite">
<DIV>On Jul 28, 2016, at 3:11 PM, Vinzenz Feenstra <<A
href="mailto:vfeenstr@redhat.com">vfeenstr@redhat.com</A>> wrote:</DIV>
<DIV> </DIV>
<DIV>
<DIV
style="WORD-WRAP: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space">
<DIV> </DIV>
<DIV>
<BLOCKQUOTE type="cite">
<DIV>On Jul 28, 2016, at 11:53 AM, Tadas <<A
href="mailto:tadas@ring.lt">tadas@ring.lt</A>> wrote:</DIV>
<DIV> </DIV>
<DIV>
<DIV>Hello,<BR>still having issues with ovirt SSO and Debian OS.<BR>Other
OSes (Windows/Fedora 24) works just fine.<BR>Some information:<BR>OS: Debian
8.5 (jessie)<BR>I've followed manual on <A
href="https://www.ovirt.org/documentation/how-to/gues">https://www.ovirt.org/documentation/how-to/gues</A><BR>t-agent/install-the-guest-agent-in-debian/
and installed ovirt-agent.<BR>I can get info via spice socket on hypervisor
side, this means that<BR>agent works fine.<BR>I've compiled pam-ovirt-cred
and copied it into
/lib/x86_64-linux-<BR>gnu/security/<BR></DIV></DIV></BLOCKQUOTE>
<DIV> </DIV>
<DIV>It should be in /lib/security afaik</DIV><BR>
<BLOCKQUOTE type="cite">
<DIV>
<DIV>I've configured /etc/pamd/gdm-ovirtcred (just copied from
working<BR>Fedora 24)<BR></DIV></DIV></BLOCKQUOTE>
<DIV> </DIV>
<DIV>replace in that file all occurences of password-auth with passwd</DIV>
<DIV> </DIV><BR>
<BLOCKQUOTE type="cite">
<DIV>
<DIV><BR>But still login fails. I can see this in ovirt-agent log
file:<BR></DIV></DIV></BLOCKQUOTE>
<DIV> </DIV>
<DIV>It some how fails for me in some cases with this now:</DIV>
<DIV> </DIV></DIV></DIV></DIV></BLOCKQUOTE>
<DIV> </DIV>
<DIV>Correction its here:</DIV>
<DIV><A
href="https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=794064">https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=794064</A></DIV><BR>
<BLOCKQUOTE type="cite">
<DIV>
<DIV
style="WORD-WRAP: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space">
<DIV>
<DIV><A
href="https://bugs.freedesktop.org/show_bug.cgi?id=71525">https://bugs.freedesktop.org/show_bug.cgi?id=71525</A></DIV>
<DIV> </DIV>
<DIV>There’s not much I can do about that though</DIV>
<DIV> </DIV>
<DIV> </DIV><BR>
<BLOCKQUOTE type="cite">
<DIV>
<DIV><BR>Dummy-2::INFO::2016-07-28<BR>12:49:51,046::OVirtAgentLogic::270::root::Received
an external
command:<BR>login...<BR>Dummy-2::DEBUG::2016-07-28<BR>12:49:51,047::OVirtAgentLogic::304::root::User
log-in (credentials
=<BR>'\x00\x00\x00\x04test********\x00')<BR>Dummy-2::INFO::2016-07-28
12:49:51,047::CredServer::207::root::The<BR>following users are allowed to
connect: [0]<BR>Dummy-2::DEBUG::2016-07-28
12:49:51,047::CredServer::272::root::Token:<BR>760258<BR>Dummy-2::INFO::2016-07-28
12:49:51,047::CredServer::273::root::Opening<BR>credentials
channel...<BR>Dummy-2::INFO::2016-07-28
12:49:51,047::CredServer::132::root::Emitting<BR>user authenticated signal
(760258).<BR>Dummy-2::INFO::2016-07-28<BR>12:49:51,178::CredServer::277::root::Credentials
channel was closed.<BR><BR></DIV></DIV></BLOCKQUOTE>
<DIV> </DIV>
<DIV> </DIV>
<DIV> </DIV><BR>
<BLOCKQUOTE type="cite">
<DIV>
<DIV>This looks okay. The error is on pam side (auth.log):<BR><BR>Jul 28
12:49:39 desktop64 gdm-ovirtcred]: pam_succeed_if(gdm-<BR>ovirtcred:auth):
error retrieving user name: Conversation error<BR>Jul 28 12:49:39 desktop64
gdm-ovirtcred]: pam_ovirt_cred(gdm-<BR>ovirtcred:auth): Failed to acquire
user's credentials<BR><BR>Have no idea, where it fails.<BR>Would appreciate,
if you could help me here a bit.<BR>Thank
you.<BR><BR><BR>_______________________________________________<BR>Users
mailing list<BR><A href="mailto:Users@ovirt.org">Users@ovirt.org</A><BR><A
href="http://lists.ovirt.org/mailman/listinfo/users">http://lists.ovirt.org/mailman/listinfo/users</A><BR></DIV></DIV></BLOCKQUOTE></DIV>
<DIV> </DIV></DIV></DIV></BLOCKQUOTE></DIV>
<DIV> </DIV></DIV></DIV></DIV></BODY></HTML>