Administrace komentářů

Prosim o radu nebo o nasmerovani kde hledat chybu :

Snazime se rozbehnout pocitacovou ucebnu (22 pocitacu) na Sambe s AD (debian wheezy-bacports). Na stanicich je debian stable s lightdm + xfce. Overuje se pres Kerberos. Uzivatele maji svoje $HOME na sambe (na siti). Sdileni je pripojeno jako

/bin/mount -t cifs //dc.in.domena.cz/home /home/samba/home -o username=cifs-user,sec=krb5,multiuser

spousti se pri startu systemu

Vyvstal neprijemny problem :

- obcas (pomerne casto) se prihlaseni pres X-windows nepovede, ani opakovane. Kdyz jsem lightdm spustil v debug modu semtam vyskoci hlaseni o nemoznosti pristupu na $HOME (permission denied). Nebo konci na tomto

[+13.74s] DEBUG: Registering session with bus path /org/freedesktop/DisplayManager/Session0
[+13.74s] DEBUG: Session 3153 exited with return value 1
[+13.74s] DEBUG: User session quit

- obcas se prihlaseni povede a vsechno funguje jak ma
- problemy vyvstavaji i v dobe kdy na serveru je pripojena pouze jedna stanice

- Problemy nenastavaji pri prihlasovani pres textovou konzolu. Resp. vzdycky kdyz jsme to zkouseli tak pres X to neslo ale v textove konzole ano
- Po uspenem prihlaseni pres textovou konzolu se povedlo prihlaseni i pres X windows.

Podle vseho je chyba v procesu overovani, ale nedokazeme najit pricinu.

v daemon.log pri neuspenem prihlaseni

Sep 11 19:42:08 ucebna cifs.upcall: ver=2
Sep 11 19:42:08 ucebna cifs.upcall: host=dc.int.domena.cz
Sep 11 19:42:08 ucebna cifs.upcall: ip=192.168.2.100
Sep 11 19:42:08 ucebna cifs.upcall: sec=1
Sep 11 19:42:08 ucebna cifs.upcall: uid=3000035
Sep 11 19:42:08 ucebna cifs.upcall: creduid=3000035
Sep 11 19:42:08 ucebna cifs.upcall: user=krb50x2dc6e3
Sep 11 19:42:08 ucebna cifs.upcall: pid=2482
Sep 11 19:42:08 ucebna cifs.upcall: find_krb5_cc: considering /tmp/krb5cc_pam_VDTTNU
Sep 11 19:42:08 ucebna cifs.upcall: find_krb5_cc: /tmp/krb5cc_pam_VDTTNU is owned by 0, not 3000035
Sep 11 19:42:08 ucebna cifs.upcall: find_krb5_cc: considering /tmp/krb5cc_0
Sep 11 19:42:08 ucebna cifs.upcall: find_krb5_cc: /tmp/krb5cc_0 is owned by 0, not 3000035
Sep 11 19:42:08 ucebna cifs.upcall: krb5_get_init_creds_keytab: -1765328378
Sep 11 19:42:08 ucebna cifs.upcall: handle_krb5_mech: getting service ticket for dc.int.domena.cz
Sep 11 19:42:08 ucebna cifs.upcall: cifs_krb5_get_req: unable to resolve (null) to ccache
Sep 11 19:42:08 ucebna cifs.upcall: handle_krb5_mech: failed to obtain service ticket (-1765328245)

V user.log je pri neuspenem prihlaseni

Sep 11 19:10:13 ucebna lightdm: pam_krb5(lightdm:auth): user xtest002 authenticated as xtest002@INT.DOMENA.CZ
Sep 11 19:10:13 ucebna lightdm: pam_unix(lightdm:session): session closed for user lightdm
Sep 11 19:10:13 ucebna lightdm: pam_unix(lightdm:session): session opened for user xtest002 by (uid=0)
Sep 11 19:10:13 ucebna lightdm: pam_ck_connector(lightdm:session): nox11 mode, ignoring PAM_TTY :1
Sep 11 19:10:13 ucebna gnome-keyring-daemon[3582]: couldn't create socket directory: Operace zamĂ­tnuta
Sep 11 19:10:13 ucebna gnome-keyring-daemon[3582]: couldn't bind to control socket: /home/samba/home/st/xtest002/.cache/keyring-vtzPGQ/control: Operace zamĂ­tnuta

V user log je toto pri uspesnem prihlaseni

Sep 11 19:00:11 ucebna lightdm: pam_unix(lightdm:session): session opened for user lightdm by (uid=0)
Sep 11 19:00:11 ucebna lightdm: pam_ck_connector(lightdm:session): nox11 mode, ignoring PAM_TTY :1
Sep 11 19:00:11 ucebna dbus[2472]: [system] Rejected send message, 2 matched rules; type="method_call", sender=":1.22" (uid=106 pid=3267 comm="/usr/sbin/lightdm-gtk-greeter ") interface="org
.freedesktop.DBus.Properties" member="GetAll" error name="(unset)" requested_reply="0" destination=":1.3" (uid=0 pid=2775 comm="/usr/sbin/console-kit-daemon --no-daemon ")
Sep 11 19:00:18 ucebna lightdm: pam_krb5(lightdm:auth): user xtest001 authenticated as xtest001@INT.DOMENA.CZ
Sep 11 19:00:18 ucebna lightdm: pam_unix(lightdm:session): session closed for user lightdm
Sep 11 19:00:18 ucebna lightdm: pam_unix(lightdm:session): session opened for user xtest001 by (uid=0)
Sep 11 19:00:18 ucebna lightdm: pam_ck_connector(lightdm:session): nox11 mode, ignoring PAM_TTY :1
Sep 11 19:00:21 ucebna polkitd(authority=local): Registered Authentication Agent for unix-session:/org/freedesktop/ConsoleKit/Session8 (system bus name :1.25 [/usr/lib/policykit-1-gnome/polk
it-gnome-authentication-agent-1], object path /org/gnome/PolicyKit1/AuthenticationAgent, locale cs_CZ.UTF-8)

Toto je vypis neuspeneho prihalseni lightdm.log

+6.22s] DEBUG: Connecting to XServer :1
[+6.26s] DEBUG: Starting greeter
[+6.26s] DEBUG: Started session 3142 with service 'lightdm', username 'lightdm'
[+6.27s] DEBUG: Session 3142 authentication complete with return value 0: Success
[+6.27s] DEBUG: Greeter authorized
[+6.27s] DEBUG: Logging to /var/log/lightdm/xvnc-1-greeter.log
[+6.27s] DEBUG: Session 3142 running command /usr/sbin/lightdm-gtk-greeter
[+6.36s] DEBUG: Greeter connected version=1.2.2
[+6.36s] DEBUG: Greeter connected, display is ready
[+6.36s] DEBUG: New display ready, switching to it
[+6.65s] DEBUG: Greeter start authentication
[+6.65s] DEBUG: Started session 3153 with service 'lightdm', username '(null)'
[+6.65s] DEBUG: Session 3153 got 1 message(s) from PAM
[+6.65s] DEBUG: Prompt greeter with 1 message(s)
[+11.22s] DEBUG: Continue authentication
[+11.22s] DEBUG: Session 3153 got 1 message(s) from PAM
[+11.22s] DEBUG: Prompt greeter with 1 message(s)
[+13.51s] DEBUG: Continue authentication
[+13.52s] DEBUG: Session 3153 authentication complete with return value 0: Success
[+13.52s] DEBUG: Authenticate result for user xtest001: Success
[+13.52s] DEBUG: User xtest001 authorized
[+13.53s] DEBUG: Greeter requests session lightdm-xsession
[+13.53s] DEBUG: Using session lightdm-xsession
[+13.53s] DEBUG: Stopping greeter
[+13.53s] DEBUG: Session 3142: Sending SIGTERM
[+13.60s] DEBUG: Greeter closed communication channel
[+13.60s] DEBUG: Session 3142 exited with return value 0
[+13.60s] DEBUG: Greeter quit
[+13.60s] DEBUG: Dropping privileges to uid 3000035
[+13.61s] DEBUG: Restoring privileges
[+13.64s] DEBUG: Dropping privileges to uid 3000035
[+13.64s] DEBUG: Writing /home/samba/home/st/xtest001/.dmrc
[+13.64s] DEBUG: Restoring privileges
[+13.72s] DEBUG: Starting session lightdm-xsession as user xtest001
[+13.72s] DEBUG: Session 3153 running command /etc/X11/Xsession default
[+13.74s] DEBUG: Registering session with bus path /org/freedesktop/DisplayManager/Session0
[+13.74s] DEBUG: Session 3153 exited with return value 1
[+13.74s] DEBUG: User session quit
[+13.74s] DEBUG: Stopping display
[+13.74s] DEBUG: Sending signal 15 to process 3139
[+13.74s] DEBUG: Process 3139 exited with return value 0
[+13.74s] DEBUG: Xvnc server stopped
[+13.74s] DEBUG: Removing X server authority /var/run/lightdm/root/:1
[+13.74s] DEBUG: Display server stopped
[+13.74s] DEBUG: Display stopped
[+13.74s] DEBUG: Stopping seat
[+13.74s] DEBUG: Seat stopped