主页 / user-361051

S4rg0n's questions

Martin Hope
S4rg0n
Asked: 2021-03-11 02:14:09 +0800 CST
  • 0

我们在 CENTOS 7.5 上使用 SSSD 进行 Active Directory 身份验证

从今天开始，用户将无法登录。当他们尝试时，他们会得到：

/usr/bin/id: cannot find name for group ID xxxxxxxxxx

我查看了/var/log/secure：

pam_sss(crond:session): Request to sssd failed. Public socket has wrong ownership or permissions.

这是 sssd.conf：

domains = xxxxxxxxx
config_file_version = 2
services = nss, pam

[domain/xxxxxxxx]
ad_domain = xxxxxxxx
krb5_realm = XXXXXXXXXX
realmd_tags = manages-system joined-with-samba
cache_credentials = True
id_provider = ad
krb5_store_password_if_offline = True
default_shell = /bin/bash
ldap_id_mapping = True
#use_fully_qualified_names = True
use_fully_qualified_names = False
#fallback_homedir = /home/%u@%d
fallback_homedir = /home/%u
access_provider = ad

在另一台机器上，配置完全相同，一切正常。

最近一点变化都没有。

谢谢你的帮助。

centos sssd
Martin Hope
S4rg0n
Asked: 2016-06-17 23:41:18 +0800 CST
  • 0

我有这个 SystemD 脚本：

[单位] 描述=RTC 客户服务

[Service]
user=linuxuser
WorkingDirectory=/usr/lib/systemd/scripts/
Type=forking
ExecStart=/bin/bash rtc_client.sh start
ExecStop=/bin/bash rtc_client.sh stop
Restart=no
RemainAfterExit=no
TimeoutStartSec=0
TimeoutStopSec=60

[Install]
WantedBy=multi-user.target

它正确启动脚本，但始终使用 root。这是：

#!/bin/bash

RTCENGINEID=$HOSTNAME'_engine'
RTCUSER='RTCUSER'
RTCPW='RTCPWD'
RTCSERVER='SERVER'
RTCSERVERPORT='9443'
RTCREPOSITORY=https://$RTCSERVER:$RTCSERVERPORT/ccm
export WORKDIR='/opt/ibm/buildsystemtoolkit/buildsystem/buildengine/eclipse'
export JAVACMD=/opt/ibm/java-s390x-71/jre/bin/java
export ARGS="-cp ./plugins/org.eclipse.equinox.launcher_1.1.1.R36x_v20101122_1400.jar org.eclipse.equinox.launcher.Main -application com.ibm.team.build.engine.jazzBuildEngine -repository $RTCREPOSITORY -engineId $RTCENGINEID -userId $RTCUSER -pass $RTCPW"
RTCJAR=org.eclipse.equinox.launcher
PIDFILE='/var/run/rtc_client/rtc_client.pid'
DEBUGLOG='/tmp/rtc_debug.log'

. /home/linuxuser/.bash_profile

start() {

        cd $WORKDIR
        nohup $JAVACMD $ARGS > $DEBUGLOG &
        sleep 10
        pgrep -f $RTCJAR > $PIDFILE
        echo "USER IS: " $(whoami) | tee -a $DEBUGLOG
        echo "PID IS: " $(cat $PIDFILE) | tee -a $DEBUGLOG

}


stop() {

        echo "USER IS: " $(whoami) | tee -a $DEBUGLOG
        echo "PID IS: " $(cat $PIDFILE) | tee -a $DEBUGLOG
        kill $(cat $PIDFILE)
        rm -f $PIDFILE

}

restart() {

        stop
        start

}

reload() {

        restart

}

case "$1" in
  start)
        start
        ;;
  stop)
        stop
        ;;
  restart)
        restart
        ;;
  reload)
        reload
        ;;
  *)
        echo "Usage: $0 {start|stop|restart}"
        exit 1
esac

exit $?

我试图用“su pers5i”启动它，它运行正常，我不知道可能是什么问题。

任何帮助深表感谢。

bash systemd