CentOS and Kerberos

General support questions
InfernalRed
Posts: 1
Joined: 2018/01/31 12:41:58

CentOS and Kerberos

Postby InfernalRed » 2018/02/06 12:35:26

Hello. My centos in windows domain. And all was be ok, but yesterday i cannot log in ssh, zabbix.

Code: Select all

klist
Ticket cache: KEYRING:persistent:0:0
Default principal: user@domain

Valid starting       Expires              Service principal
06.02.2018 14:45:15  07.02.2018 00:45:15  krbtgt/domain@domain
        renew until 13.02.2018 14:45:05


klist -k
Keytab name: FILE:/etc/krb5.keytab
KVNO Principal
---- --------------------------------------------------------------------------
  12 host/spb-zabbix.domain@domain
  12 host/spb-zabbix.domain@domain
  12 host/spb-zabbix.domain@domain
  12 host/spb-zabbix.domain@domain
  12 host/SPB-ZABBIX@domain
  12 host/SPB-ZABBIX@domain
  12 HTTP/SPB-ZABBIX@domain
  12 host/SPB-ZABBIX@domain
  12 host/SPB-ZABBIX@domain
  12 HTTP/SPB-ZABBIX@domain
  12 SPB-ZABBIX$@domain
  12 SPB-ZABBIX$@domain
  12 SPB-ZABBIX$@domain
  12 SPB-ZABBIX$@domain
  12 HTTP/zabbix@domain
  12 HTTP/spb-zabbix.domain@domain
  12 HTTP/spb-zabbix.domain@domain
  12 HTTP/spb-zabbix.domain@domain
  12 HTTP/spb-zabbix.domain@domain
  12 HTTP/SPB-ZABBIX@domain
  12 HTTP/zabbix@domain
  11 SPB-ZABBIX$@domain
  12 HTTP/SPB-ZABBIX@domain
  12 HTTP/SPB-ZABBIX@domain
  12 HTTP/zabbix@domain
  12 HTTP/zabbix.domain@domain
  12 HTTP/zabbix.domain@domain
  12 HTTP/zabbix.domain@domain
  12 HTTP/zabbix.domain@domain
  12 HTTP/zabbix@domain
  11 SPB-ZABBIX$@domain
  13 HTTP/zabbix@domain
  11 SPB-ZABBIX$@domain
  12 HTTP/zabbix@domain
  11 SPB-ZABBIX$@domain
  11 host/SPB-ZABBIX@domain
  11 host/SPB-ZABBIX@domain
  11 SPB-ZABBIX$@domain
  11 host/spb-zabbix.domain@domain
  11 host/spb-zabbix.domain@domain
  11 host/spb-zabbix.domain@domain
  11 host/spb-zabbix.domain@domain
  11 host/spb-zabbix.domain@domain
  13 HTTP/SPB-ZABBIX@domain
  13 HTTP/SPB-ZABBIX@domain
  11 host/SPB-ZABBIX@domain
  11 host/SPB-ZABBIX@domain
  11 host/SPB-ZABBIX@domain
  13 HTTP/spb-zabbix.domain@domain
  13 HTTP/spb-zabbix.domain@domain
  13 HTTP/spb-zabbix.domain@domain
  13 HTTP/SPB-ZABBIX@domain
  13 HTTP/spb-zabbix.domain@domain
  13 HTTP/zabbix@domain
  13 HTTP/SPB-ZABBIX@domain
  13 HTTP/zabbix@domain
  13 HTTP/SPB-ZABBIX@domain
  13 HTTP/zabbix.domain@domain
  13 HTTP/zabbix.domain@domain
  13 HTTP/zabbix.domain@domain
  13 HTTP/zabbix.domain@domain
  13 HTTP/zabbix.domain@domain
  13 HTTP/zabbix@domain
  13 HTTP/zabbix@domain
  12 SPB-ZABBIX$@domain
  12 host/spb-zabbix.domain@domain
  12 host/SPB-ZABBIX@domain
  12 HTTP/spb-zabbix.domain@domain
  12 HTTP/zabbix.domain@domain
  13 HTTP/spb-zabbix.domain@domain



Code: Select all

ldap_child.log
(Mon Feb  5 09:32:55 2018) [[sssd[ldap_child[1322]]]] [ldap_child_get_tgt_sync] (0x0010): Failed to init credentials: Preauthentication failed
(Mon Feb  5 09:32:55 2018) [[sssd[ldap_child[1323]]]] [ldap_child_get_tgt_sync] (0x0010): Failed to init credentials: Preauthentication failed
(Mon Feb  5 09:32:55 2018) [[sssd[ldap_child[1324]]]] [ldap_child_get_tgt_sync] (0x0010): Failed to init credentials: Preauthentication failed
(Mon Feb  5 09:32:55 2018) [[sssd[ldap_child[1325]]]] [ldap_child_get_tgt_sync] (0x0010): Failed to init credentials: Preauthentication failed
(Mon Feb  5 09:32:55 2018) [[sssd[ldap_child[1333]]]] [ldap_child_get_tgt_sync] (0x0010): Failed to init credentials: Preauthentication failed
(Mon Feb  5 09:32:56 2018) [[sssd[ldap_child[1346]]]] [ldap_child_get_tgt_sync] (0x0010): Failed to init credentials: Preauthentication failed
(Mon Feb  5 09:32:56 2018) [[sssd[ldap_child[1347]]]] [ldap_child_get_tgt_sync] (0x0010): Failed to init credentials: Preauthentication failed
(Mon Feb  5 09:34:22 2018) [[sssd[ldap_child[1841]]]] [ldap_child_get_tgt_sync] (0x0010): Failed to init credentials: Preauthentication failed
(Mon Feb  5 09:34:22 2018) [[sssd[ldap_child[1842]]]] [ldap_child_get_tgt_sync] (0x0010): Failed to init credentials: Preauthentication failed

sssd_nss.log
(Mon Feb  5 09:32:55 2018) [sssd[nss]] [sss_dp_get_reply] (0x0010): The Data Provider returned an error [org.freedesktop.sssd.Error.DataProvider.Off$
(Mon Feb  5 09:57:54 2018) [sssd[nss]] [orderly_shutdown] (0x0010): SIGTERM: killing children
(Mon Feb  5 09:59:14 2018) [sssd[nss]] [sss_dp_get_reply] (0x0010): The Data Provider returned an error [org.freedesktop.sssd.Error.DataProvider.Off$
(Mon Feb  5 10:05:34 2018) [sssd[nss]] [sss_dp_get_reply] (0x0010): The Data Provider returned an error [org.freedesktop.sssd.Error.DataProvider.Off$
(Mon Feb  5 10:05:34 2018) [sssd[nss]] [sss_dp_get_reply] (0x0010): The Data Provider returned an error [org.freedesktop.sssd.Error.DataProvider.Off$
(Mon Feb  5 10:05:34 2018) [sssd[nss]] [sss_dp_get_reply] (0x0010): The Data Provider returned an error [org.freedesktop.sssd.Error.DataProvider.Off$
(Mon Feb  5 10:05:35 2018) [sssd[nss]] [sss_dp_get_reply] (0x0010): The Data Provider returned an error [org.freedesktop.sssd.Error.DataProvider.Off$
(Mon Feb  5 10:05:35 2018) [sssd[nss]] [sss_dp_get_reply] (0x0010): The Data Provider returned an error [org.freedesktop.sssd.Error.DataProvider.Off$
(Mon Feb  5 10:05:35 2018) [sssd[nss]] [sss_dp_get_reply] (0x0010): The Data Provider returned an error [org.freedesktop.sssd.Error.DataProvider.Off$
(Mon Feb  5 10:05:35 2018) [sssd[nss]] [sss_dp_get_reply] (0x0010): The Data Provider returned an error [org.freedesktop.sssd.Error.DataProvider.Off$
(Mon Feb  5 10:05:35 2018) [sssd[nss]] [sss_dp_get_reply] (0x0010): The Data Provider returned an error [org.freedesktop.sssd.Error.DataProvider.Off$


sssd_pam.log

$
(Mon Feb  5 12:50:12 2018) [sssd[pam]] [orderly_shutdown] (0x0010): SIGTERM: killing children
(Tue Feb  6 13:40:12 2018) [sssd[pam]] [orderly_shutdown] (0x0010): SIGTERM: killing children
(Tue Feb  6 14:01:39 2018) [sssd[pam]] [sss_dp_get_reply] (0x0010): The Data Provider returned an error [org.freedesktop.sssd.Error.DataProvider.Off$
(Tue Feb  6 14:02:01 2018) [sssd[pam]] [sss_dp_get_reply] (0x0010): The Data Provider returned an error [org.freedesktop.sssd.Error.DataProvider.Off$
(Tue Feb  6 14:02:05 2018) [sssd[pam]] [sss_dp_get_reply] (0x0010): The Data Provider returned an error [org.freedesktop.sssd.Error.DataProvider.Off$
(Tue Feb  6 14:04:21 2018) [sssd[pam]] [sss_dp_get_reply] (0x0010): The Data Provider returned an error [org.freedesktop.sssd.Error.DataProvider.Off$
(Tue Feb  6 15:16:00 2018) [sssd[pam]] [orderly_shutdown] (0x0010): SIGTERM: killing children




Please, help me :oops: