Unable to authenticate.

[harry]

Hi,

after moving from Centos 5 to Oracle linux 6.4 I'm not able to set up opsi properly.
Did everything by manual but I'm unable to start opsi configurator (java gui).

Tried this also...

Code: Alles auswählen

[root@uusopsi ~]# opsi-admin -d method getClientIds_list
[root@uusopsi ~]# opsi-admin -u adminuser -p xxxxx -d method getClientIds_list
[root@uusopsi ~]#

Log says:

Code: Alles auswählen

5] [Apr 29 21:21:04] New session created (session.py|75)
[5] [Apr 29 21:21:04] Application 'opsi config editor 4.0.3.2.1' on client '10.10.9.14' supplied non existing session id: ZBTwZ0UatNBZIRF3KBaKh0dGQ47p9mMg (Worker.py|393)
[5] [Apr 29 21:21:04] Authorization request from adminuser@10.10.9.14 (application: opsi config editor 4.0.3.2.1) (workers.py|188)
[5] [Apr 29 21:21:04] Session 'crSCMt1s9gCUSmROzSriphQFC11Bsikf' from ip '10.10.9.14', application 'opsi config editor 4.0.3.2.1' deleted (Session.py|211)
[2] [Apr 29 21:21:04] Traceback: (Logger.py|742)
[2] [Apr 29 21:21:04]      line 282 in '_errback' in file '/usr/lib/python2.6/site-packages/OPSI/Service/Worker.py' (Logger.py|742)
[2] [Apr 29 21:21:04]      line 328 in '_runCallbacks' in file '/usr/lib64/python2.6/site-packages/twisted/internet/defer.py' (Logger.py|742)
[2] [Apr 29 21:21:04]      line 253 in '_authenticate' in file '/usr/lib/python2.6/site-packages/opsiconfd/workers.py' (Logger.py|742)
[2] [Apr 29 21:21:04]      ==>>> Opsi authentication error: Forbidden: Backend authentication error: Backend authentication error: PAM authentication failed for user 'adminuser': ('Authentication failure', 7) (Worker.py|289)
[3] [Apr 29 21:21:04] 7 authentication failures from '10.10.9.14' in a row, waiting 60 seconds to prevent flooding (workers.py|80)

Users:

Code: Alles auswählen

pcpatch:xx:15824:0:99999:7:::
opsiconfd:!!:15776::::::
adminuser:xxx:15824:0:99999:7:::
admin:xxx:15776:0:99999:7:::

Groups:

Code: Alles auswählen

pcpatch:x:992:adminuser,admin
opsiadmin:x:993:opsiconfd,adminuser,root,admin
shadow:x:499:opsiconfd
adminuser:x:994:
admin:x:995:

Backend:

Code: Alles auswählen

backend_.*         : file, opsipxeconfd
host_.*            : file, opsipxeconfd
productOnClient_.* : file, opsipxeconfd
configState_.*     : file, opsipxeconfd
.*                 : file

Am I missing something?

[wolfbardo]

Hi,

have a look at

http://download.uib.de/opsi4.0/doc/html ... tification

regards,
Bardo Wolf

[harry]

My colleague figured it out:
Solution was

Code: Alles auswählen

[root@uusopsi ~]# cat /etc/pam.d/opsi-auth
#%PAM-1.0
auth       required     pam_sepermit.so
auth       include      password-auth

account    required     pam_nologin.so
account    include      password-auth

password   include      password-auth

session    include      password-auth