Upgrading rc2 to rc3: (Samba AD) "Account provider error: invalid credentials (49)"

gerald_FS · December 18, 2016, 4:52pm

This is clear that in the future an update must work!

It was “only” for me that the error occurred also with other persons.

Now mistakes can happen as we work with an RC.

GG_jr · December 18, 2016, 4:54pm

For this RCs are released!

GG_jr · December 18, 2016, 4:59pm

I saw in Gerald’s post ( Again Problems after Updates) that maybe are some clues in secure log.

So, a fragment for that time (around 17:00):

Dec 18 16:48:10 pdc-ad sudo: srvmgr : TTY=unknown ;
PWD=/usr/share/nethesis/nethserver-manager ; USER=root ;
COMMAND=/usr/libexec/nethserver/pkginfo check-update
Dec 18 16:48:13 pdc-ad sudo: srvmgr : TTY=unknown ; PWD=/ ; USER=root ;
COMMAND=/usr/libexec/nethserver/pkgaction --update *
Dec 18 16:48:59 pdc-ad sshd[27485]: pam_unix(sshd:session): session
opened for user root by (uid=0)
Dec 18 16:51:09 pdc-ad useradd[27768]: failed adding user ‘dbus’, exit
code: 9
Dec 18 16:51:16 pdc-ad polkitd[27784]: Loading rules from directory
/etc/polkit-1/rules.d
Dec 18 16:51:16 pdc-ad polkitd[27784]: Loading rules from directory
/usr/share/polkit-1/rules.d
Dec 18 16:51:16 pdc-ad polkitd[27784]: Finished loading, compiling and
executing 2 rules
Dec 18 16:51:16 pdc-ad polkitd[27784]: Acquired the name
org.freedesktop.PolicyKit1 on the system bus
Dec 18 16:52:03 pdc-ad useradd[27887]: failed adding user ‘apache’, exit
code: 9
Dec 18 16:53:10 pdc-ad useradd[28035]: failed adding user ‘mysql’, exit
code: 9
Dec 18 16:56:01 pdc-ad polkitd[17263]: Loading rules from directory
/etc/polkit-1/rules.d
Dec 18 16:56:01 pdc-ad polkitd[17263]: Loading rules from directory
/usr/share/polkit-1/rules.d
Dec 18 16:56:01 pdc-ad polkitd[17263]: Finished loading, compiling and
executing 2 rules
Dec 18 16:56:01 pdc-ad polkitd[17263]: Acquired the name
org.freedesktop.PolicyKit1 on the system bus
Dec 18 16:59:17 pdc-ad sudo: srvmgr : TTY=unknown ;
PWD=/usr/share/nethesis/nethserver-manager ; USER=root ;
COMMAND=/usr/libexec/nethserver/pkginfo compsdump
Dec 18 16:59:17 pdc-ad sudo: srvmgr : TTY=unknown ;
PWD=/usr/share/nethesis/nethserver-manager ; USER=root ;
COMMAND=/usr/libexec/nethserver/pkginfo check-update
Dec 18 16:59:19 pdc-ad sudo: srvmgr : TTY=unknown ;
PWD=/usr/share/nethesis/nethserver-manager ; USER=root ;
COMMAND=/usr/libexec/nethserver/admin-todos
Dec 18 16:59:31 pdc-ad sudo: srvmgr : TTY=unknown ;
PWD=/usr/share/nethesis/nethserver-manager ; USER=root ;
COMMAND=/usr/libexec/nethserver/admin-todos
Dec 18 16:59:34 pdc-ad sudo: srvmgr : TTY=unknown ;
PWD=/usr/share/nethesis/nethserver-manager ; USER=root ;
COMMAND=/usr/libexec/nethserver/pkginfo compsdump
Dec 18 16:59:34 pdc-ad sudo: srvmgr : TTY=unknown ;
PWD=/usr/share/nethesis/nethserver-manager ; USER=root ;
COMMAND=/usr/libexec/nethserver/pkginfo check-update
Dec 18 16:59:37 pdc-ad sudo: srvmgr : TTY=unknown ;
PWD=/usr/share/nethesis/nethserver-manager ; USER=root ;
COMMAND=/usr/libexec/nethserver/admin-todos
Dec 18 16:59:56 pdc-ad sudo: srvmgr : TTY=unknown ;
PWD=/usr/share/nethesis/nethserver-manager ; USER=root ;
COMMAND=/usr/libexec/nethserver/nic-info
Dec 18 16:59:56 pdc-ad sudo: srvmgr : TTY=unknown ;
PWD=/usr/share/nethesis/nethserver-manager ; USER=root ;
COMMAND=/usr/libexec/nethserver/count-accounts -t 1
Dec 18 16:59:57 pdc-ad sudo: srvmgr : TTY=unknown ;
PWD=/usr/share/nethesis/nethserver-manager ; USER=root ;
COMMAND=/usr/libexec/nethserver/admin-todos
Dec 18 17:00:17 pdc-ad polkitd[17263]: Registered Authentication Agent
for unix-process:29882:320543105 (system bus name :1.2775
[/usr/bin/pkttyagent --notify-fd 5 --fallback], object path
/org/freedesktop/PolicyKit1/AuthenticationAgent, locale en_US.utf8)
Dec 18 17:00:17 pdc-ad polkitd[17263]: Unregistered Authentication Agent
for unix-process:29882:320543105 (system bus name :1.2775, object path
/org/freedesktop/PolicyKit1/AuthenticationAgent, locale en_US.utf8)
(disconnected from bus)
Dec 18 17:00:18 pdc-ad polkitd[17263]: Registered Authentication Agent
for unix-process:29905:320543201 (system bus name :1.2778
[/usr/bin/pkttyagent --notify-fd 11 --fallback], object path
/org/freedesktop/PolicyKit1/AuthenticationAgent, locale en_US.utf8)
Dec 18 17:00:18 pdc-ad polkitd[17263]: Unregistered Authentication Agent
for unix-process:29905:320543201 (system bus name :1.2778, object path
/org/freedesktop/PolicyKit1/AuthenticationAgent, locale en_US.utf8)
(disconnected from bus)
Dec 18 17:00:28 pdc-ad polkitd[17263]: Registered Authentication Agent
for unix-process:29980:320544161 (system bus name :1.2782
[/usr/bin/pkttyagent --notify-fd 5 --fallback], object path
/org/freedesktop/PolicyKit1/AuthenticationAgent, locale en_US.UTF-8)
Dec 18 17:01:46 pdc-ad polkitd[752]: Loading rules from directory
/etc/polkit-1/rules.d
Dec 18 17:01:46 pdc-ad polkitd[752]: Loading rules from directory
/usr/share/polkit-1/rules.d
Dec 18 17:01:46 pdc-ad polkitd[752]: Finished loading, compiling and
executing 2 rules
Dec 18 17:01:46 pdc-ad polkitd[752]: Acquired the name
org.freedesktop.PolicyKit1 on the system bus
Dec 18 17:02:10 pdc-ad sshd[2083]: pam_unix(sshd:session): session
opened for user root by (uid=0)
Dec 18 17:02:54 pdc-ad sudo: srvmgr : TTY=unknown ;
PWD=/usr/share/nethesis/nethserver-manager ; USER=root ;
COMMAND=/usr/libexec/nethserver/nic-info
Dec 18 17:02:55 pdc-ad sudo: srvmgr : TTY=unknown ;
PWD=/usr/share/nethesis/nethserver-manager ; USER=root ;
COMMAND=/usr/libexec/nethserver/count-accounts -t 1
Dec 18 17:02:58 pdc-ad sudo: srvmgr : TTY=unknown ;
PWD=/usr/share/nethesis/nethserver-manager ; USER=root ;
COMMAND=/usr/libexec/nethserver/admin-todos
Dec 18 17:03:05 pdc-ad sudo: srvmgr : TTY=unknown ;
PWD=/usr/share/nethesis/nethserver-manager ; USER=root ;
COMMAND=/usr/libexec/nethserver/nic-info
Dec 18 17:03:05 pdc-ad sudo: srvmgr : TTY=unknown ;
PWD=/usr/share/nethesis/nethserver-manager ; USER=root ;
COMMAND=/usr/libexec/nethserver/count-accounts -t 1
Dec 18 17:03:07 pdc-ad sudo: srvmgr : TTY=unknown ;
PWD=/usr/share/nethesis/nethserver-manager ; USER=root ;
COMMAND=/usr/libexec/nethserver/admin-todos
Dec 18 17:03:26 pdc-ad sudo: srvmgr : TTY=unknown ;
PWD=/usr/share/nethesis/nethserver-manager ; USER=root ;
COMMAND=/sbin/e-smith/pam-authenticate-pw
Dec 18 17:03:26 pdc-ad sudo: srvmgr : TTY=unknown ;
PWD=/usr/share/nethesis/nethserver-manager ; USER=root ;
COMMAND=/usr/libexec/nethserver/list-user-membership -t 5 -s root
Dec 18 17:03:27 pdc-ad sudo: srvmgr : TTY=unknown ;
PWD=/usr/share/nethesis/nethserver-manager ; USER=root ;
COMMAND=/usr/libexec/nethserver/nic-info
Dec 18 17:03:27 pdc-ad sudo: srvmgr : TTY=unknown ;
PWD=/usr/share/nethesis/nethserver-manager ; USER=root ;
COMMAND=/usr/libexec/nethserver/count-accounts -t 1
Dec 18 17:03:28 pdc-ad sudo: srvmgr : TTY=unknown ;
PWD=/usr/share/nethesis/nethserver-manager ; USER=root ;
COMMAND=/usr/libexec/nethserver/admin-todos
Dec 18 17:03:35 pdc-ad sudo: srvmgr : TTY=unknown ;
PWD=/usr/share/nethesis/nethserver-manager ; USER=root ;
COMMAND=/usr/libexec/nethserver/nic-info
Dec 18 17:03:36 pdc-ad sudo: srvmgr : TTY=unknown ;
PWD=/usr/share/nethesis/nethserver-manager ; USER=root ;
COMMAND=/usr/libexec/nethserver/count-accounts -t 1
Dec 18 17:03:37 pdc-ad sudo: srvmgr : TTY=unknown ;
PWD=/usr/share/nethesis/nethserver-manager ; USER=root ;
COMMAND=/usr/libexec/nethserver/admin-todos
Dec 18 17:03:54 pdc-ad sudo: srvmgr : TTY=unknown ;
PWD=/usr/share/nethesis/nethserver-manager ; USER=root ;
COMMAND=/usr/libexec/nethserver/sssd-defaults -d ad
Dec 18 17:03:55 pdc-ad sudo: srvmgr : TTY=unknown ;
PWD=/usr/share/nethesis/nethserver-manager ; USER=root ;
COMMAND=/usr/libexec/nethserver/count-accounts -t 5
Dec 18 17:03:57 pdc-ad sudo: srvmgr : TTY=unknown ;
PWD=/usr/share/nethesis/nethserver-manager ; USER=root ;
COMMAND=/usr/libexec/nethserver/admin-todos
Dec 18 17:04:18 pdc-ad sudo: srvmgr : TTY=unknown ;
PWD=/usr/share/nethesis/nethserver-manager ; USER=root ;
COMMAND=/usr/libexec/nethserver/list-users
Dec 18 17:04:18 pdc-ad sudo: srvmgr : TTY=unknown ;
PWD=/usr/share/nethesis/nethserver-manager ; USER=root ;
COMMAND=/usr/libexec/nethserver/list-groups
Dec 18 17:04:32 pdc-ad sudo: srvmgr : TTY=unknown ;
PWD=/usr/share/nethesis/nethserver-manager ; USER=root ;
COMMAND=/usr/bin/net ads info
Dec 18 17:04:33 pdc-ad sudo: srvmgr : TTY=unknown ;
PWD=/usr/share/nethesis/nethserver-manager ; USER=root ;
COMMAND=/usr/bin/net ads testjoin
Dec 18 17:04:33 pdc-ad sudo: srvmgr : TTY=unknown ;
PWD=/usr/share/nethesis/nethserver-manager ; USER=root ;
COMMAND=/bin/net ads search -P
(&(sAMAccountName=pdc-ad$)(objectCategory=computer)) name
sAMAccountName distinguishedName servicePrincipalName objectSid
dNSHostName pwdLastSet lastLogon whenCreated whenChanged accountExpires
Dec 18 17:05:03 pdc-ad sudo: srvmgr : TTY=unknown ;
PWD=/usr/share/nethesis/nethserver-manager ; USER=root ;
COMMAND=/usr/libexec/nethserver/list-users
Dec 18 17:05:04 pdc-ad sudo: srvmgr : TTY=unknown ;
PWD=/usr/share/nethesis/nethserver-manager ; USER=root ;
COMMAND=/usr/libexec/nethserver/list-groups
Dec 18 17:05:10 pdc-ad sudo: srvmgr : TTY=unknown ;
PWD=/usr/share/nethesis/nethserver-manager ; USER=root ;
COMMAND=/usr/libexec/nethserver/nic-info
Dec 18 17:05:10 pdc-ad sudo: srvmgr : TTY=unknown ;
PWD=/usr/share/nethesis/nethserver-manager ; USER=root ;
COMMAND=/usr/libexec/nethserver/count-accounts -t 1
Dec 18 17:05:12 pdc-ad sudo: srvmgr : TTY=unknown ;
PWD=/usr/share/nethesis/nethserver-manager ; USER=root ;
COMMAND=/usr/libexec/nethserver/admin-todos
Dec 18 17:33:39 pdc-ad sudo: srvmgr : TTY=unknown ;
PWD=/usr/share/nethesis/nethserver-manager ; USER=root ;
COMMAND=/usr/libexec/nethserver/admin-todos

GG_jr · December 18, 2016, 5:14pm

Today updates:

Nov 16 08:57:56 Updated: nethserver-collectd-3.0.4-1.ns7.noarch
Nov 28 08:12:31 Updated: python-simplejson-3.5.3-1.el7.x86_64
Dec 18 16:49:17 Updated: libgcc-4.8.5-11.el7.x86_64
Dec 18 16:49:18 Updated: centos-release-7-3.1611.el7.centos.x86_64
Dec 18 16:49:18 Updated: setup-2.8.71-7.el7.noarch
Dec 18 16:49:21 Updated: filesystem-3.2-21.el7.x86_64
Dec 18 16:49:21 Updated: 32:bind-license-9.9.4-38.el7_3.noarch
Dec 18 16:49:22 Updated: kbd-misc-1.15.5-12.el7.noarch
Dec 18 16:49:23 Updated: kbd-legacy-1.15.5-12.el7.noarch
Dec 18 16:49:26 Updated: tzdata-2016j-1.el7.noarch
Dec 18 16:49:26 Updated: nss-softokn-freebl-3.16.2.3-14.4.el7.x86_64
Dec 18 16:49:34 Updated: glibc-common-2.17-157.el7_3.1.x86_64
Dec 18 16:49:36 Updated: glibc-2.17-157.el7_3.1.x86_64
Dec 18 16:49:37 Updated: bash-4.2.46-21.el7_3.x86_64
Dec 18 16:49:37 Updated: libsepol-2.5-6.el7.x86_64
Dec 18 16:49:38 Updated: libselinux-2.5-6.el7.x86_64
Dec 18 16:49:38 Updated: zlib-1.2.7-17.el7.x86_64
Dec 18 16:49:39 Updated: libcom_err-1.42.9-9.el7.x86_64
Dec 18 16:49:39 Updated: nss-util-3.21.3-1.1.el7_3.x86_64
Dec 18 16:49:39 Updated: libtalloc-2.1.6-1.el7.x86_64
Dec 18 16:49:40 Updated: 4:perl-libs-5.16.3-291.el7.x86_64
Dec 18 16:49:40 Updated: perl-Socket-2.010-4.el7.x86_64
Dec 18 16:49:41 Updated: 4:perl-macros-5.16.3-291.el7.x86_64
Dec 18 16:49:45 Updated: 4:perl-5.16.3-291.el7.x86_64
Dec 18 16:49:45 Updated: chkconfig-1.7.2-1.el7.x86_64
Dec 18 16:49:46 Updated: libtevent-0.9.28-1.el7.x86_64
Dec 18 16:49:46 Updated: libuuid-2.23.2-33.el7.x86_64
Dec 18 16:49:47 Updated: audit-libs-2.6.5-3.el7.x86_64
Dec 18 16:49:47 Updated: xz-libs-5.2.2-1.el7.x86_64
Dec 18 16:49:47 Updated: 1:dbus-libs-1.6.12-17.el7.x86_64
Dec 18 16:49:48 Updated: expat-2.1.0-10.el7_3.x86_64
Dec 18 16:49:48 Updated: libldb-1.1.26-1.el7.x86_64
Dec 18 16:49:49 Updated: libstdc+±4.8.5-11.el7.x86_64
Dec 18 16:49:49 Updated: libref_array-0.1.5-27.el7.x86_64
Dec 18 16:49:50 Updated: libcollection-0.6.2-27.el7.x86_64
Dec 18 16:49:50 Updated: libbasicobjects-0.1.1-27.el7.x86_64
Dec 18 16:49:51 Updated: libdhash-0.4.3-27.el7.x86_64
Dec 18 16:49:51 Updated: elfutils-libelf-0.166-2.el7.x86_64
Dec 18 16:49:52 Updated: libsss_idmap-1.14.0-43.el7_3.4.x86_64
Dec 18 16:49:52 Updated: libsemanage-2.5-4.el7.x86_64
Dec 18 16:49:53 Updated: libgcrypt-1.5.3-13.el7_3.1.x86_64
Dec 18 16:49:53 Updated: lua-5.1.4-15.el7.x86_64
Dec 18 16:49:53 Updated: elfutils-libs-0.166-2.el7.x86_64
Dec 18 16:49:54 Installed: jansson-2.4-6.el7.x86_64
Dec 18 16:49:56 Updated: file-libs-5.11-33.el7.x86_64
Dec 18 16:49:56 Installed: GeoIP-1.5.0-11.el7.x86_64
Dec 18 16:49:57 Updated: freetype-2.4.11-12.el7.x86_64
Dec 18 16:49:57 Updated: libffi-3.0.13-18.el7.x86_64
Dec 18 16:49:59 Updated: glib2-2.46.2-4.el7.x86_64
Dec 18 16:49:59 Updated: pciutils-libs-3.5.1-1.el7.x86_64
Dec 18 16:50:00 Updated: libnl3-3.2.28-2.el7.x86_64
Dec 18 16:50:01 Updated: file-5.11-33.el7.x86_64
Dec 18 16:50:01 Updated: avahi-libs-0.6.31-17.el7.x86_64
Dec 18 16:50:01 Updated: kmod-libs-20-9.el7.x86_64
Dec 18 16:50:02 Updated: xz-5.2.2-1.el7.x86_64
Dec 18 16:50:02 Updated: nss-softokn-3.16.2.3-14.4.el7.x86_64
Dec 18 16:50:03 Updated: e2fsprogs-libs-1.42.9-9.el7.x86_64
Dec 18 16:50:03 Updated: libss-1.42.9-9.el7.x86_64
Dec 18 16:50:04 Updated: mesa-libglapi-11.2.2-2.20160614.el7.x86_64
Dec 18 16:50:04 Updated: iptables-1.4.21-17.el7.x86_64
Dec 18 16:50:06 Updated: iproute-3.10.0-74.el7.x86_64
Dec 18 16:50:09 Updated: libsss_nss_idmap-1.14.0-43.el7_3.4.x86_64
Dec 18 16:50:10 Updated: 2:ethtool-4.5-3.el7.x86_64
Dec 18 16:50:10 Updated: sssd-libwbclient-1.14.0-43.el7_3.4.x86_64
Dec 18 16:50:10 Updated: libipa_hbac-1.14.0-43.el7_3.4.x86_64
Dec 18 16:50:11 Updated: libsoup-2.48.1-6.el7.x86_64
Dec 18 16:50:14 Updated: mozjs17-17.0.0-19.el7.x86_64
Dec 18 16:50:14 Updated: device-mapper-persistent-data-0.6.3-1.el7.x86_64
Dec 18 16:50:14 Updated: pinentry-0.8.1-17.el7.x86_64
Dec 18 16:50:15 Updated: 2:tar-1.26-31.el7.x86_64
Dec 18 16:50:16 Updated: libselinux-utils-2.5-6.el7.x86_64
Dec 18 16:50:16 Updated: 1:make-3.82-23.el7.x86_64
Dec 18 16:50:16 Updated: nethserver-release-7-0.6.ns7.noarch
Dec 18 16:50:17 Updated: nettle-2.7.1-8.el7.x86_64
Dec 18 16:50:20 Updated: ca-certificates-2015.2.6-73.el7.noarch
Dec 18 16:50:21 Updated: 1:openssl-libs-1.0.1e-60.el7.x86_64
Dec 18 16:50:23 Updated: coreutils-8.22-18.el7.x86_64
Dec 18 16:50:24 Updated: krb5-libs-1.14.1-27.el7_3.x86_64
Dec 18 16:50:25 Updated: pam-1.1.8-18.el7.x86_64
Dec 18 16:50:25 Updated: systemd-libs-219-30.el7_3.6.x86_64
Dec 18 16:50:26 Updated: 2:shadow-utils-4.1.5.1-24.el7.x86_64
Dec 18 16:50:27 Updated: libblkid-2.23.2-33.el7.x86_64
Dec 18 16:50:31 Updated: python-libs-2.7.5-48.el7.x86_64
Dec 18 16:50:31 Updated: python-2.7.5-48.el7.x86_64
Dec 18 16:50:31 Updated: libgudev1-219-30.el7_3.6.x86_64
Dec 18 16:50:32 Updated: 1:openssl-1.0.1e-60.el7.x86_64
Dec 18 16:50:33 Updated: 1:mariadb-libs-5.5.52-1.el7.x86_64
Dec 18 16:50:34 Updated: libmount-2.23.2-33.el7.x86_64
Dec 18 16:50:36 Updated: util-linux-2.23.2-33.el7.x86_64
Dec 18 16:50:36 Updated: procps-ng-3.3.10-10.el7.x86_64
Dec 18 16:50:37 Updated: python-perf-3.10.0-514.2.2.el7.x86_64
Dec 18 16:50:38 Updated: pytalloc-2.1.6-1.el7.x86_64
Dec 18 16:50:38 Updated: python-cffi-1.6.0-5.el7.x86_64
Dec 18 16:50:39 Installed: python-idna-2.0-1.el7.noarch
Dec 18 16:50:40 Updated: python-sssdconfig-1.14.0-43.el7_3.4.noarch
Dec 18 16:50:40 Installed: python2-pyasn1-0.1.9-7.el7.noarch
Dec 18 16:50:41 Installed: python-ipaddress-1.0.16-2.el7.noarch
Dec 18 16:50:41 Updated: grubby-8.28-18.el7.x86_64
Dec 18 16:50:43 Updated: plymouth-core-libs-0.8.9-0.26.20140113.el7.centos.x86_64
Dec 18 16:50:44 Updated: sssd-client-1.14.0-43.el7_3.4.x86_64
Dec 18 16:50:45 Updated: 32:bind-libs-lite-9.9.4-38.el7_3.x86_64
Dec 18 16:50:46 Installed: libkadm5-1.14.1-27.el7_3.x86_64
Dec 18 16:50:46 Updated: krb5-workstation-1.14.1-27.el7_3.x86_64
Dec 18 16:50:47 Updated: 1:cups-libs-1.6.3-26.el7.x86_64
Dec 18 16:50:48 Updated: 32:bind-libs-9.9.4-38.el7_3.x86_64
Dec 18 16:50:48 Updated: 32:bind-utils-9.9.4-38.el7_3.x86_64
Dec 18 16:50:50 Updated: binutils-2.25.1-22.base.el7.x86_64
Dec 18 16:50:51 Updated: logrotate-3.8.6-12.el7.x86_64
Dec 18 16:50:52 Updated: alsa-lib-1.1.1-1.el7.x86_64
Dec 18 16:50:52 Updated: nss-3.21.3-2.el7_3.x86_64
Dec 18 16:50:53 Updated: nss-sysinit-3.21.3-2.el7_3.x86_64
Dec 18 16:50:53 Updated: 1:NetworkManager-libnm-1.4.0-13.el7_3.x86_64
Dec 18 16:50:54 Updated: nss-tools-3.21.3-2.el7_3.x86_64
Dec 18 16:50:56 Updated: libcurl-7.29.0-35.el7.centos.x86_64
Dec 18 16:50:57 Updated: curl-7.29.0-35.el7.centos.x86_64
Dec 18 16:50:57 Updated: rpm-libs-4.11.3-21.el7.x86_64
Dec 18 16:50:58 Updated: rpm-4.11.3-21.el7.x86_64
Dec 18 16:50:59 Updated: openldap-2.4.40-13.el7.x86_64
Dec 18 16:50:59 Updated: kpartx-0.4.9-99.el7.x86_64
Dec 18 16:51:00 Updated: 7:device-mapper-1.02.135-1.el7_3.1.x86_64
Dec 18 16:51:00 Updated: 7:device-mapper-libs-1.02.135-1.el7_3.1.x86_64
Dec 18 16:51:02 Updated: cryptsetup-libs-1.7.2-1.el7.x86_64
Dec 18 16:51:03 Updated: dracut-033-463.el7.x86_64
Dec 18 16:51:04 Updated: kmod-20-9.el7.x86_64
Dec 18 16:51:08 Updated: systemd-219-30.el7_3.6.x86_64
Dec 18 16:51:09 Updated: 1:dbus-1.6.12-17.el7.x86_64
Dec 18 16:51:10 Updated: php-common-5.4.16-42.el7.x86_64
Dec 18 16:51:10 Updated: samba-common-4.4.4-9.el7.noarch
Dec 18 16:51:11 Updated: libwbclient-4.4.4-9.el7.x86_64
Dec 18 16:51:15 Updated: samba-client-libs-4.4.4-9.el7.x86_64
Dec 18 16:51:15 Updated: libdrm-2.4.67-3.el7.x86_64
Dec 18 16:51:16 Updated: polkit-0.112-9.el7.x86_64
Dec 18 16:51:16 Updated: systemd-sysv-219-30.el7_3.6.x86_64
Dec 18 16:51:17 Updated: iputils-20160308-8.el7.x86_64
Dec 18 16:51:19 Updated: initscripts-9.49.37-1.el7.x86_64
Dec 18 16:51:19 Updated: 7:device-mapper-event-libs-1.02.135-1.el7_3.1.x86_64
Dec 18 16:51:20 Updated: policycoreutils-2.5-9.el7.x86_64
Dec 18 16:51:21 Updated: 1:wpa_supplicant-2.0-20.el7.x86_64
Dec 18 16:51:23 Updated: samba-libs-4.4.4-9.el7.x86_64
Dec 18 16:51:23 Updated: samba-common-libs-4.4.4-9.el7.x86_64
Dec 18 16:51:24 Updated: samba-common-tools-4.4.4-9.el7.x86_64
Dec 18 16:51:24 Updated: os-prober-1.58-9.el7.x86_64
Dec 18 16:51:25 Updated: 12:dhcp-libs-4.2.5-47.el7.centos.x86_64
Dec 18 16:51:26 Updated: sudo-1.8.6p7-21.el7_3.x86_64
Dec 18 16:51:26 Updated: openssh-6.6.1p1-31.el7.x86_64
Dec 18 16:51:27 Updated: 12:dhcp-common-4.2.5-47.el7.centos.x86_64
Dec 18 16:51:28 Updated: 12:dhclient-4.2.5-47.el7.centos.x86_64
Dec 18 16:51:28 Updated: dracut-network-033-463.el7.x86_64
Dec 18 16:51:30 Updated: 1:grub2-tools-2.02-0.44.el7.centos.x86_64
Dec 18 16:51:31 Updated: samba-4.4.4-9.el7.x86_64
Dec 18 16:51:32 Updated: authconfig-6.2.8-14.el7.x86_64
Dec 18 16:51:33 Updated: realmd-0.16.1-9.el7.x86_64
Dec 18 16:51:34 Updated: selinux-policy-3.13.1-102.el7_3.7.noarch
Dec 18 16:51:34 Updated: 7:device-mapper-event-1.02.135-1.el7_3.1.x86_64
Dec 18 16:51:35 Updated: 7:lvm2-libs-2.02.166-1.el7_3.1.x86_64
Dec 18 16:51:35 Updated: plymouth-scripts-0.8.9-0.26.20140113.el7.centos.x86_64
Dec 18 16:51:36 Updated: plymouth-0.8.9-0.26.20140113.el7.centos.x86_64
Dec 18 16:51:37 Updated: dnsmasq-2.66-21.el7.x86_64
Dec 18 16:51:38 Updated: mesa-libgbm-11.2.2-2.20160614.el7.x86_64
Dec 18 16:51:39 Updated: libsmbclient-4.4.4-9.el7.x86_64
Dec 18 16:51:39 Updated: php-xml-5.4.16-42.el7.x86_64
Dec 18 16:51:40 Updated: php-pdo-5.4.16-42.el7.x86_64
Dec 18 16:51:40 Updated: php-intl-5.4.16-42.el7.x86_64
Dec 18 16:51:44 Updated: php-cli-5.4.16-42.el7.x86_64
Dec 18 16:51:47 Updated: 1:mariadb-5.5.52-1.el7.x86_64
Dec 18 16:51:49 Updated: hwdata-0.252-8.4.el7.x86_64
Dec 18 16:51:50 Updated: 1:smartmontools-6.2-7.el7.x86_64
Dec 18 16:51:51 Updated: gnupg2-2.0.22-4.el7.x86_64
Dec 18 16:51:52 Updated: rpm-build-libs-4.11.3-21.el7.x86_64
Dec 18 16:51:53 Updated: rpm-python-4.11.3-21.el7.x86_64
Dec 18 16:51:54 Updated: libnfsidmap-0.25-15.el7.x86_64
Dec 18 16:51:55 Updated: adcli-0.8.1-3.el7.x86_64
Dec 18 16:51:56 Updated: python-pycurl-7.19.0-19.el7.x86_64
Dec 18 16:51:56 Updated: python-urlgrabber-3.10-8.el7.noarch
Dec 18 16:51:57 Updated: yum-plugin-fastestmirror-1.1.31-40.el7.noarch
Dec 18 16:51:58 Updated: yum-3.4.3-150.el7.centos.noarch
Dec 18 16:51:59 Updated: yum-plugin-changelog-1.1.31-40.el7.noarch
Dec 18 16:52:00 Updated: nethserver-base-3.0.12-1.ns7.noarch
Dec 18 16:52:01 Updated: perl-Net-SSLeay-1.55-4.el7.x86_64
Dec 18 16:52:02 Updated: perl-IO-Socket-SSL-1.94-5.el7.noarch
Dec 18 16:52:03 Updated: 1:perl-LDAP-0.56-5.el7.noarch
Dec 18 16:52:03 Updated: httpd-tools-2.4.6-45.el7.centos.x86_64
Dec 18 16:52:06 Updated: httpd-2.4.6-45.el7.centos.x86_64
Dec 18 16:52:07 Updated: php-5.4.16-42.el7.x86_64
Dec 18 16:52:08 Updated: 1:mod_ssl-2.4.6-45.el7.centos.x86_64
Dec 18 16:52:08 Installed: libsss_autofs-1.14.0-43.el7_3.4.x86_64
Dec 18 16:52:09 Updated: 1:dmidecode-3.0-2.el7.x86_64
Dec 18 16:52:10 Updated: virt-what-1.13-8.el7.x86_64
Dec 18 16:52:10 Updated: libtasn1-3.8-3.el7.x86_64
Dec 18 16:52:11 Updated: ipset-libs-6.19-6.el7.x86_64
Dec 18 16:52:13 Updated: libpath_utils-0.2.1-27.el7.x86_64
Dec 18 16:52:14 Updated: libini_config-1.3.0-27.el7.x86_64
Dec 18 16:52:14 Updated: libndp-1.2-7.el7.x86_64
Dec 18 16:52:16 Updated: 1:NetworkManager-1.4.0-13.el7_3.x86_64
Dec 18 16:52:17 Updated: lsscsi-0.27-4.el7.x86_64
Dec 18 16:52:17 Installed: libsss_sudo-1.14.0-43.el7_3.4.x86_64
Dec 18 16:52:18 Updated: sssd-common-1.14.0-43.el7_3.4.x86_64
Dec 18 16:52:19 Updated: sssd-krb5-common-1.14.0-43.el7_3.4.x86_64
Dec 18 16:52:19 Updated: sssd-common-pac-1.14.0-43.el7_3.4.x86_64
Dec 18 16:52:20 Updated: sssd-ad-1.14.0-43.el7_3.4.x86_64
Dec 18 16:52:22 Updated: sssd-ipa-1.14.0-43.el7_3.4.x86_64
Dec 18 16:52:22 Updated: sssd-krb5-1.14.0-43.el7_3.4.x86_64
Dec 18 16:52:23 Updated: sssd-ldap-1.14.0-43.el7_3.4.x86_64
Dec 18 16:52:24 Updated: sssd-proxy-1.14.0-43.el7_3.4.x86_64
Dec 18 16:52:24 Updated: sssd-1.14.0-43.el7_3.4.x86_64
Dec 18 16:52:25 Updated: nethserver-sssd-1.1.0-1.ns7.noarch
Dec 18 16:52:26 Updated: kernel-tools-libs-3.10.0-514.2.2.el7.x86_64
Dec 18 16:52:34 Updated: linux-firmware-20160830-49.git7534e19.el7.noarch
Dec 18 16:52:34 Updated: libreport-filesystem-2.1.11-35.el7.centos.x86_64
Dec 18 16:52:35 Updated: libX11-common-1.6.3-3.el7.noarch
Dec 18 16:52:37 Updated: libX11-1.6.3-3.el7.x86_64
Dec 18 16:52:37 Updated: nethserver-lang-en-1.1.6-1.ns7.noarch
Dec 18 16:52:39 Updated: nethserver-httpd-admin-2.0.5-1.ns7.noarch
Dec 18 16:52:39 Updated: mesa-libEGL-11.2.2-2.20160614.el7.x86_64
Dec 18 16:52:40 Updated: mesa-libGL-11.2.2-2.20160614.el7.x86_64
Dec 18 16:52:41 Updated: php-gd-5.4.16-42.el7.x86_64
Dec 18 16:52:43 Updated: mdadm-3.4-14.el7.x86_64
Dec 18 16:52:58 Installed: kernel-3.10.0-514.2.2.el7.x86_64
Dec 18 16:52:59 Updated: kernel-tools-3.10.0-514.2.2.el7.x86_64
Dec 18 16:53:00 Updated: nethserver-dc-1.1.0-1.ns7.x86_64
Dec 18 16:53:01 Updated: iprutils-2.4.13.1-1.el7.x86_64
Dec 18 16:53:01 Updated: 1:NetworkManager-tui-1.4.0-13.el7_3.x86_64
Dec 18 16:53:02 Updated: 1:NetworkManager-wifi-1.4.0-13.el7_3.x86_64
Dec 18 16:53:05 Updated: ipset-6.19-6.el7.x86_64
Dec 18 16:53:06 Updated: gnutls-3.3.24-1.el7.x86_64
Dec 18 16:53:07 Updated: tuned-2.7.1-3.el7_3.1.noarch
Dec 18 16:53:08 Updated: nethserver-letsencrypt-1.1.3-1.ns7.noarch
Dec 18 16:53:08 Updated: nethserver-samba-2.0.3-1.ns7.noarch
Dec 18 16:53:09 Updated: pciutils-3.5.1-1.el7.x86_64
Dec 18 16:53:14 Updated: 1:mariadb-server-5.5.52-1.el7.x86_64
Dec 18 16:53:14 Updated: php-mysql-5.4.16-42.el7.x86_64
Dec 18 16:53:16 Updated: 7:lvm2-2.02.166-1.el7_3.1.x86_64
Dec 18 16:53:36 Updated: selinux-policy-targeted-3.13.1-102.el7_3.7.noarch
Dec 18 16:53:37 Updated: 1:grub2-2.02-0.44.el7.centos.x86_64
Dec 18 16:53:38 Updated: kexec-tools-2.0.7-50.el7.x86_64
Dec 18 16:53:39 Updated: openssh-clients-6.6.1p1-31.el7.x86_64
Dec 18 16:53:40 Updated: openssh-server-6.6.1p1-31.el7.x86_64
Dec 18 16:53:40 Updated: kbd-1.15.5-12.el7.x86_64
Dec 18 16:53:44 Updated: audit-2.6.5-3.el7.x86_64
Dec 18 16:53:45 Updated: 3:irqbalance-1.0.7-6.el7.x86_64
Dec 18 16:53:46 Updated: chrony-2.1.1-4.el7.centos.x86_64
Dec 18 16:53:46 Updated: alsa-tools-firmware-1.1.0-1.el7.x86_64
Dec 18 16:53:47 Updated: biosdevname-0.7.2-1.el7.x86_64
Dec 18 16:55:08 Updated: 2:microcode_ctl-2.1-16.el7.x86_64
Dec 18 16:55:09 Updated: rsyslog-7.4.7-16.el7.x86_64
Dec 18 16:55:09 Updated: dracut-config-rescue-033-463.el7.x86_64
Dec 18 16:55:10 Updated: parted-3.1-28.el7.x86_64
Dec 18 16:55:11 Installed: python2-cryptography-1.3.1-3.el7.x86_64
Dec 18 16:55:11 Updated: python2-configargparse-0.11.0-1.el7.noarch
Dec 18 16:55:13 Updated: xfsprogs-4.5.0-8.el7.x86_64
Dec 18 16:55:14 Updated: btrfs-progs-4.4.1-1.el7.x86_64
Dec 18 16:55:15 Updated: e2fsprogs-1.42.9-9.el7.x86_64
Dec 18 16:55:15 Updated: avahi-autoipd-0.6.31-17.el7.x86_64
Dec 18 16:55:16 Updated: libusbx-1.0.20-1.el7.x86_64
Dec 18 16:55:18 Updated: fontconfig-2.10.95-10.el7.x86_64
Dec 18 16:55:19 Updated: wget-1.14-13.el7.x86_64
Dec 18 16:55:19 Updated: libproxy-0.4.11-10.el7.x86_64
Dec 18 16:55:20 Updated: 1:perl-Pod-Escapes-1.04-291.el7.noarch
Dec 18 16:55:21 Updated: perl-Net-DNS-0.72-6.el7.x86_64
Dec 18 16:55:21 Updated: psmisc-22.20-11.el7.x86_64
Dec 18 16:55:22 Updated: 3:traceroute-2.0.22-2.el7.x86_64
Dec 18 16:55:22 Updated: libgomp-4.8.5-11.el7.x86_64
Dec 18 16:55:23 Updated: pixman-0.34.0-1.el7.x86_64
Dec 18 16:55:23 Updated: iwl2000-firmware-18.168.6.1-49.el7.noarch
Dec 18 16:55:24 Updated: 1:iwl1000-firmware-39.31.5.1-49.el7.noarch
Dec 18 16:55:24 Updated: iwl5150-firmware-8.24.2.2-49.el7.noarch
Dec 18 16:55:24 Updated: iwl6000-firmware-9.221.4.1-49.el7.noarch
Dec 18 16:55:25 Updated: iwl3160-firmware-22.0.7.0-49.el7.noarch
Dec 18 16:55:26 Updated: iwl135-firmware-18.168.6.1-49.el7.noarch
Dec 18 16:55:26 Updated: iwl7260-firmware-22.0.7.0-49.el7.noarch
Dec 18 16:55:27 Updated: iwl3945-firmware-15.32.2.9-49.el7.noarch
Dec 18 16:55:27 Updated: iwl6050-firmware-41.28.5.1-49.el7.noarch
Dec 18 16:55:28 Updated: iwl100-firmware-39.31.5.1-49.el7.noarch
Dec 18 16:55:28 Updated: iwl6000g2b-firmware-17.168.5.2-49.el7.noarch
Dec 18 16:55:29 Updated: iwl2030-firmware-18.168.6.1-49.el7.noarch
Dec 18 16:55:29 Updated: iwl6000g2a-firmware-17.168.5.3-49.el7.noarch
Dec 18 16:55:30 Updated: iwl5000-firmware-8.83.5.1_1-49.el7.noarch
Dec 18 16:55:30 Updated: iwl4965-firmware-228.61.2.24-49.el7.noarch
Dec 18 16:55:31 Updated: iwl105-firmware-18.168.6.1-49.el7.noarch
Dec 18 16:55:47 Erased: python-cryptography-0.8.2-1.el7.x86_64
Dec 18 16:56:37 Erased: python-pyasn1-0.1.6-2.el7.noarch

dnutan · December 18, 2016, 6:52pm

As it happens to multiple persons it looks like a bug.
This seems the same problem: After Update from today no users

GG_jr · December 18, 2016, 7:32pm

Hi @dnutan,

It works! Everything is back to normal now!

I followed the steps from @davidep’s response ( After Update from today no users ) and it worked.

[root@pdc-ad ~]# realm leave abt.ro
[root@pdc-ad ~]# systemctl stop sssd
[root@pdc-ad ~]# find /var/lib/sss/ -name ‘*.ldb’ -delete
[root@pdc-ad ~]# > /etc/sssd/sssd.conf
[root@pdc-ad ~]# systemctl stop realmd
[root@pdc-ad ~]# signal-event nethserver-dnsmasq-save
[root@pdc-ad ~]# realm join abt.ro
Password for Administrator:
[root@pdc-ad ~]# signal-event nethserver-sssd-save
[root@pdc-ad ~]#

Thank you again!
I hope we will have a solution soon.

Kind regards,
Gabriel

gerald_FS · December 18, 2016, 7:35pm

cool! - Great!
Does access to SOGO work?

Can the solution be applied to my problem?

http://community.nethserver.org/t/no-login-under-sogo/?source_topic_id=5231

Greetings

GG_jr · December 18, 2016, 7:35pm

I cannot mark your answer as “Solution”.
I don’t know why.

GG_jr · December 18, 2016, 7:36pm

I really don’t know! Sorry!
I don’t use SOGo in this installation.

gerald_FS · December 18, 2016, 7:45pm

So, it has just been tested, but unfortunately it is not a solution for my SOGo problem.

The problems have to be considered separately - a pity!

dnutan · December 18, 2016, 8:04pm

Because i moved this from Support to Bug category.

GG_jr · December 18, 2016, 8:08pm

Yes, I figured out after a while!
I saw that you change the category!

davidep · December 19, 2016, 11:35am

2 posts were merged into an existing topic: No Login under SOGO

giacomo · December 19, 2016, 8:54am

Sorry guys but I see little confusion here.
I will try to recap the main issue:

RC 2 installed and working with local Samba AD
After update to RC 3 the host machine is not joined anymore to the Samba AD
The workaround is to leave and rejoin Samba AD domain.

Am I right? (/cc @dnutan)

The second issue is that after the update SOGo doesn’t work anymore.
About this one, please be patient, I will try to figure out it today.
(@gerald_FS @m.traeumner @hucky )

davidep · December 19, 2016, 9:21am

Perhaps the new sssd version from upstream or something in our config with it invalidates the kerberos keytab. IIRC somebody started to have troubles after CentOS released 7.3. We didn’t released anything that time (but some testing packages though).

The leave/join workaround creates a new machine password and a new keytab file.

dnutan · December 19, 2016, 9:59am

For what I’ve read, as @davidep said, it was after updating an RC2 system with local AD to CentOS 7.3

In RHEL release notes it says something about the keytab:

And there are lots of changes/additions to sssd…

SSSD only applies values in sudoUser attributes from AD in lower case
Upgrading SSSD sometimes causes the sssd process to be terminated
etc

davidep · December 19, 2016, 11:04am

Yes we read them, and hoped the new features wouldn’t trigger automatically

giacomo · December 19, 2016, 1:03pm

From man sssd-ad:

   ad_maximum_machine_account_password_age (integer)
       SSSD will check once a day if the machine account password is older than the given age in days and try to renew it. A value of 0 will disable
       the renewal attempt.

       Default: 30 days

SSSD changed the default behavior.
We probably should improve our SSSD config:

with Samba AD: ad_maximum_machine_account_password_age set to 0
with MS AD: ad_maximum_machine_account_password_age set to 30 and pac option in services section

davidep · December 19, 2016, 1:21pm

We were wrong mate

The good news are we’ve probably found a solution

I must confess our smb.conf is not exactly what RHEL/sssd expects.

The “keytab and password” setting is perhaps not compliant with sssd. I can’t investigate further now…

davidep · December 21, 2016, 11:10am

Good news here: I reproduced the error edit: NOW IN TESTING /cc @quality_team

It seems the upstream upgrade from sssd 1.13 to 1.14 introduces a new feature that changes the machine password each month (to emulate Win clients). This new feature is not compatible with our configuration. We now must see if we can modify our config or disable the new feature.

Thank you again @GG_jr for the detailed report!