<div dir="ltr"><div><div><div><div><div><div><div><div><div>Hi list<br><br></div>Following to my softupdate (and dumb cp error) I continued the setup.<br></div>Everything was OK until the workstation01 has been successfully deployed (I skipped workstation00)<br>
<br></div>The client didn't resolved the mainserver's IP and I had the following error in the logs<br>rpc.gssd ERROR unable to resolve 10.10.12.10 to hostname<br></div>(I changed the SERVER_A ip to suit my network's needs)<br>
</div>It has been worked around by modifying client's /etc/hosts file with<br></div>10.10.12.10 mainserver.intern<br><br></div>Then, the logon worked. Though, the session closes automatically and I don't find anything relevant in the logs. Some errors are well found underneath but as I don't get the whole authentication process yet, it's quite difficult to trace the right cause. Is the pan_gnome_keyring a mandatory module?<br>
<br></div><div>- NTP seems OK on both mainserver and workstation01<br></div><div>- ssh login on workstation01 with test user is ok<br></div><div>- krb preauth is not ok (but I'm new to this topic) though, reverse lookup is fine.<br>
</div><div>- test user is well known within kerberos <br>e.g.: kadmin -p admin -q "list_principals"<br>returns:<br> trober@INTERN )<br></div><div>- test user's home dir is not created (user made from Gosa "default user" template. When logging in by ssh, home path is ok /srv/nfsv4/home0/trober, but directory "disappear"<br>
</div><div>- user created without Gosa template - same issue (logon ok, but session closes immediately)<br></div><div>- user created with debian-lan adduser - ibid.<br><br></div><div>The whole configuration looks very promising and I'm interested in integrating samba afterwards, so I really want it to run seamlessly!<br>
</div><div>Thanks for all the work Andy.<br></div><div><br><br><br></div><div>auth.log:<br><br></div>Apr 19 16:30:11 workstation01 lightdm: pam_krb5(lightdm:auth): user trober authenticated as trober@INTERN<br>Apr 19 16:30:11 workstation01 lightdm: pam_unix(lightdm:session): session closed for user lightdm<br>
Apr 19 16:30:11 workstation01 lightdm: pam_unix(lightdm:session): session opened for user trober by (uid=0)<br>Apr 19 16:30:11 workstation01 gnome-keyring-daemon[5039]: couldn't create socket directory: No such file or directory<br>
Apr 19 16:30:11 workstation01 gnome-keyring-daemon[5039]: couldn't bind to control socket: /lan/mainserver/home0/trober/.cache/keyring-SAbqan/control: No such file or directory<br>Apr 19 16:30:11 workstation01 lightdm: pam_unix(lightdm:session): session opened for user lightdm by (uid=0)<br>
Apr 19 16:30:12 workstation01 dbus[2201]: [system] Rejected send message, 2 matched rules; type="method_call", sender=":1.39" (uid=106 pid=5077 comm="/usr/sbin/lightdm-gtk-greeter ") interface="org.freedesktop.DBus.Properties" member="GetAll" error name="(unset)" requested_reply="0" destination=":1.4" (uid=0 pid=2762 comm="/usr/sbin/console-kit-daemon --no-daemon ")<br>
<br></div><div>kdc.log<br><br>Apr 19 16:30:10 mainserver krb5kdc[3195](info): AS_REQ (4 etypes {18 17 16 23}) <a href="http://10.10.12.51">10.10.12.51</a>: NEEDED_PREAUTH: trober@INTERN for krbtgt/INTERN@INTERN, Additional pre-authentication required<br>
Apr 19 16:30:10 mainserver krb5kdc[3195](info): AS_REQ (4 etypes {18 17 16 23}) <a href="http://10.10.12.51">10.10.12.51</a>: ISSUE: authtime 1366381810, etypes {rep=18 tkt=18 ses=18}, trober@INTERN for krbtgt/INTERN@INTERN<br>
Apr 19 16:30:10 mainserver krb5kdc[3195](info): TGS_REQ (4 etypes {18 17 16 23}) <a href="http://10.10.12.51">10.10.12.51</a>: ISSUE: authtime 1366381810, etypes {rep=18 tkt=18 ses=18}, trober@INTERN for host/workstation01.intern@INTERN<br>
<br>daemon.log<br>Apr 19 16:38:24 mainserver nslcd[3164]: [efd79f] <passwd="nfs/workstation01.intern"> request denied by validnames option<br><br></div><div>kern.log<br>Apr 19 16:19:32 mainserver kernel: [ 1629.454832] sha1_ssse3: Using AVX optimized SHA-1 implementation<br>
Apr 19 16:19:32 workstation01 kernel: [ 167.952990] sha1_ssse3: Neither AVX nor SSSE3 is available/usable.<br><br></div><div><br>Thanks for any advice and sorry to bother list with that.<br><br></div><div>Julien<br></div>
</div><div class="gmail_extra"><br><br><div class="gmail_quote">On Thu, Apr 18, 2013 at 11:49 PM, Julien Lambot <span dir="ltr"><<a href="mailto:jlambot@gmail.com" target="_blank">jlambot@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div><div><div>Well<br>Sorry<br></div>Retested once again and no issue. I can't figure out why it failed before<br>
</div>Please ignore my previous comment.<br><br></div>Regards<br></div><div class="HOEnZb"><div class="h5"><div class="gmail_extra">
<br><br><div class="gmail_quote">On Thu, Apr 18, 2013 at 11:21 PM, Julien Lambot <span dir="ltr"><<a href="mailto:jlambot@gmail.com" target="_blank">jlambot@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="ltr"><div><div>Hi Andi<br></div></div><div class="gmail_extra"><div class="gmail_quote">><br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div>
> mkdir /srv/fai/cd /tmp/git clone<div><br>
> git://<a href="http://git.debian.org/git/collab-maint/debian-lan" target="_blank">git.debian.org/git/collab-maint/debian-lan</a><br>> cp -r /tmp/debian-lan/fai/ /srv/fai/<br></div></div></blockquote><div><br></div>
<div>Just re-tested and it was only missing a trailing slash after "config"<br>
<br>cp -r /tmp/debian-lan/fai/config/ /srv/fai/<br><br>e.g.:<br>root@mainserver:/tmp# ls -l /srv/fai/<br>total 4<br>drwxr-xr-x 10 root root 4096 Apr 18 23:08 config<br><br><br></div><div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
Hm, strange, it seems to work fine here. What is the difference when<br>
using the recipe in the wiki compared to your approach?<br>
<div><br>
<br></div></blockquote></div><div>Here is an example when following the wiki:<br><br>root@mainserver:/tmp# cp -r /tmp/debian-lan/fai /srv/fai/<br>root@mainserver:/tmp# ls /srv/fai/<br>fai<br><br></div>Now, it's ok.<br>
<br>
</div><div class="gmail_quote">Regards<span><font color="#888888"><br><br></font></span></div><span><font color="#888888"><div class="gmail_quote">Julien<br></div><div class="gmail_quote"><br>
</div></font></span></div></div>
</blockquote></div><br></div>
</div></div></blockquote></div><br></div>