Quantcast
Channel: All Centrify Express posts
Viewing all articles
Browse latest Browse all 1833

Re: sshd: fatal: initgroups: : Invalid argument

$
0
0

Great job at debugging and providing output.

 

I think this part pinpoints the issue (file permissions):

 

Jan 16 09:59:17 osm adclient[364]: INFO <fd:10 PAMCreateKrb5Creds > daemon.ipcclient2 Problem storing credentials into credentials cache file for user 'i87000': 
Problem setting the ownership of FILE:/tmp/krb5cc_851444974: error = -1765328188, error message = krb5_cc_chown: Internal credentials cache error Jan 16 09:59:17 osm adclient[364]: WARN <fd:22 sshd(573)> Set credentials for user 'i87000': Problem storing credentials into credentials cache

The Kerberos cache file for the user is in the /tmp filesystem with naming convention krb5cc_[UID];  I would check the permissions or any masking in that filesystem (unorthodox), this should be writable by root.

 

Please confirm if the issue is on a single host (that would explain unorthodox config) or all systems (that would point to a bug).  Also, are there any DevOps solutions perhaps enforcing settings (Chef, Puppet, Ansible)?

 

R.P


Viewing all articles
Browse latest Browse all 1833

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>