Koozali.org: home of the SME Server

Obsolete Releases => SME Server 9.x => Topic started by: pelli on September 15, 2016, 04:33:03 PM

Title: Client Authentication:Ubuntu via sssd/ldap
Post by: pelli on September 15, 2016, 04:33:03 PM

Hello, i follow this how-to https://wiki.contribs.org/Client_Authentication:Ubuntu_via_sssd/ldap and all work except shutdown/reboot. Any user (local admin ubuntu and sme ldap user) can't shutdown or reboot the machine. Also in the login box the reboot and shutdown option are gray (not selectable)

Any suggestion?

Thanks

Title: Re: Client Authentication:Ubuntu via sssd/ldap
Post by: Stefano on September 15, 2016, 05:01:10 PM

I suggest you to ask elsewhere, in any ubuntu related forum.. just explain your configuration (I bet 0,50 € is something related to pam)

Title: Re: Client Authentication:Ubuntu via sssd/ldap
Post by: pelli on September 15, 2016, 05:20:20 PM

Quote from: Stefano on September 15, 2016, 05:01:10 PM

I suggest you to ask elsewhere, in any ubuntu related forum.. just explain your configuration (I bet 0,50 € is something related to pam)

bingo. i find the solution

edit the file /etc/pam.d/common-session and add the line
session         optional                        pam_systemd.so

Thanks

Title: Re: Client Authentication:Ubuntu via sssd/ldap
Post by: Stefano on September 15, 2016, 06:01:48 PM

well, please amend the wiki page accordingly, thank you

Title: Re: Client Authentication:Ubuntu via sssd/ldap
Post by: ReetP on September 15, 2016, 06:03:43 PM

Please note that if you read further down the page this is already mentioned here :

https://wiki.contribs.org/Client_Authentication:Ubuntu_via_sssd/ldap#System_Permissions_.26_PolicyKit

Please read all the 'Desktop Setup' section

B. Rgds
John

Title: Re: Client Authentication:Ubuntu via sssd/ldap
Post by: pelli on September 15, 2016, 06:18:04 PM

Quote from: ReetP on September 15, 2016, 06:03:43 PM

Please note that if you read further down the page this is already mentioned here :

https://wiki.contribs.org/Client_Authentication:Ubuntu_via_sssd/ldap#System_Permissions_.26_PolicyKit

Please read all the 'Desktop Setup' section

B. Rgds
John

yes is mentioned but the file to modify is another

"I also found to enable shutdown/restart, network indicator etc I had to add this to /etc/auth-client-config/profile.d/sss "
For enable shutdown and restart I also modified the file /etc/pam.d/common-session

Title: Re: Client Authentication:Ubuntu via sssd/ldap
Post by: ReetP on September 15, 2016, 06:32:20 PM

You still did not read the wiki page correctly.

Quote

System Permissions & PolicyKit

I also found to enable shutdown/restart, network indicator etc I had to add this to /etc/auth-client-config/profile.d/sss

pam_session=
               session         optional                        pam_systemd.so

That means you need to add it AT THE START and then when you run this

Code: [Select]

sudo auth-client-config -a -p sss
It will create the file  /etc/pam.d/common-session correctly without you having to edit it manually..... and this is the preferred way to do it so you can revert your changes with

Code: [Select]

sudo auth-client-config -a -p sss -r
The also occurs for mounting shares.

So the wiki is correct.

B. Rgds
John

Title: Re: Client Authentication:Ubuntu via sssd/ldap
Post by: pelli on September 16, 2016, 08:52:19 AM

Quote from: ReetP on September 15, 2016, 06:32:20 PM

You still did not read the wiki page correctly.

That means you need to add it AT THE START and then when you run this

Code: [Select]

sudo auth-client-config -a -p sss
It will create the file  /etc/pam.d/common-session correctly without you having to edit it manually..... and this is the preferred way to do it so you can revert your changes with

Code: [Select]

sudo auth-client-config -a -p sss -r
The also occurs for mounting shares.

So the wiki is correct.

B. Rgds
John

Ok, thanks John.

Title: Re: Client Authentication:Ubuntu via sssd/ldap
Post by: ReetP on September 16, 2016, 02:30:31 PM

No problems :-)

If you notice anything else please let me know and I will look.

B. Rgds
John

Title: Re: Client Authentication:Ubuntu via sssd/ldap
Post by: pelli on September 30, 2016, 05:27:41 PM

Hello, i resume this post for a problem with mount shares.  the automatically mounts shares not work.  where i can find the log for examine the problem?

Thanks

Title: Re: Client Authentication:Ubuntu via sssd/ldap
Post by: ReetP on September 30, 2016, 07:47:50 PM

I can't remember specifically... try the usual /var/log hierachy. I think you may have a sssd dir in there now ?

What about showing some configs ? Did you follow the wiki ?