Attachment 20969 Details for Bug 58399 – Установка пакетов и ввод в домен с winbind (аналогичная ситуация с sssd), ошибки работы gdm.

Установка пакетов и ввод в домен с winbind (аналогичная ситуация с sssd), ошибки работы gdm.

file_58399.txt (text/plain), 6.06 KB, created by Владимир on 2026-03-26 16:18:18 MSK

(hide)

Description:

Filename:

MIME Type:

Creator: Владимир

Created: 2026-03-26 16:18:18 MSK

Size: 6.06 KB

patch

obsolete

>[root@g11-sys ~]# cat /etc/os-release 
>NAME="ALT"
>VERSION="20260316"
>ID=altlinux
>VERSION_ID=20260316
>PRETTY_NAME="ALT Regular"
>VARIANT="Regular"
>ANSI_COLOR="1;33"
>CPE_NAME="cpe:/o:alt:sisyphus:20260316"
>BUILD_ID="Sisyphus 20250612"
>ALT_BRANCH_ID="sisyphus"
>HOME_URL="http://en.altlinux.org"
>BUG_REPORT_URL="https://bugs.altlinux.org/"
>LOGO=altlinux
>
>[root@g11-sys ~]# apt-get install task-auth-ad-winbind -y
>ÐÐ±Ð½Ð¾Ð²Ð»ÐµÐ½Ð¸Ðµ / ÑÑÑÐ°Ð½Ð¾Ð²ÐºÐ°...
> 1: krb5-kinit-1.22.2-alt1                                                                                                                          
> 2: libHX-5.3-alt1                                                                                                                                  
> 3: libtomlc99-1.0-alt1.git5221b3d                                                                                                                  
> 4: openldap-clients-2.6.13-alt1                                                                                                                    
> 5: ofl-20251011-alt1                                                                                                                               
> 6: fd0ssh-20251011-alt1                                                                                                                            
> 7: pam_mount-2.22-alt1                                                                                                                             
> 8: remote-polkit-agent-0.1.2-alt2                                                                                                                  
> 9: alterator-manager-0.1.33-alt1                                                                                                                   
>10: alterator-module-executor-0.1.31-alt1                                                                                                           
>11: alterator-interface-diag-0.1.5-alt1                                                                                                             
>12: diag-domain-client-0.7.3-alt2                                                                                                                   
>13: avahi-tools-0.8-alt5                                                                                                                            
>14: alterator-openldap-functions-0.3.4-alt1                                                                                                         
>15: samba-winbind-common-4.22.8-alt2                                                                                                                
>16: samba-winbind-4.22.8-alt2                                                                                                                       
>17: samba-winbind-clients-4.22.8-alt2                                                                                                               
>18: samba-winbind-dnsupdate-0.8.1-alt1                                                                                                              
>19: server-role-0.9.9.17-alt1                                                                                                                       
>20: alterator-default-configs-0.1-alt1                                                                                                              
>21: avahi-daemon-0.8-alt5                                                                                                                           
>22: pam_krb5-4.8-alt1                                                                                                                               
>23: alterator-auth-0.48-alt1                                                                                                                        
>24: task-auth-ad-winbind-0.48-alt1                                                                                                                  
>ÐÐ°Ð²ÐµÑÑÐµÐ½Ð¾.
>
>[root@g11-sys ~]# systemctl enable winbind.service 
>Synchronizing state of winbind.service with SysV service script with /usr/lib/systemd/systemd-sysv-install.
>Executing: /usr/lib/systemd/systemd-sysv-install enable winbind
>Created symlink '/etc/systemd/system/multi-user.target.wants/winbind.service' â '/usr/lib/systemd/system/winbind.service'.
>
>[root@g11-sys ~]# system-auth write ad domain.local g11-sys domain admin password
>ldb: unable to stat module /usr/lib64/samba/ldb : ÐÐµÑ ÑÐ°ÐºÐ¾Ð³Ð¾ ÑÐ°Ð¹Ð»Ð° Ð¸Ð»Ð¸ ÐºÐ°ÑÐ°Ð»Ð¾Ð³Ð°
>ldb: unable to stat module /usr/lib64/samba/ldb : ÐÐµÑ ÑÐ°ÐºÐ¾Ð³Ð¾ ÑÐ°Ð¹Ð»Ð° Ð¸Ð»Ð¸ ÐºÐ°ÑÐ°Ð»Ð¾Ð³Ð°
>Using short domain name -- DOMAIN
>Joined 'G11-SYS' to dns domain 'domain.local'
>kinit: Preauthentication failed while getting initial credentials
>No such group: !
>Error 156: No such group
>
>[root@g11-sys ~]# net ads info
>LDAP server: 
>LDAP server name: domain.local
>Workgroup: DOMAIN
>Realm: DOMAIN.LOCAL
>Bind Path: dc=domain,dc=local
>LDAP port: 389
>Server time: Ð§Ñ, 26 Ð¼Ð°Ñ 2026 15:45:52 MSK
>KDC server: 192.168.40.80
>Server time offset: 0
>Last machine account password change: Ð§Ñ, 26 Ð¼Ð°Ñ 2026 15:45:31 MSK
>
>[root@g11-sys ~]# journalctl -b | grep gdm
>Ð¼Ð°Ñ 26 15:49:55 g11-sys.domain.local systemd[1]: Starting gdm.service - GNOME Display Manager...
>Ð¼Ð°Ñ 26 15:49:55 g11-sys.domain.local audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=gdm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>Ð¼Ð°Ñ 26 15:49:55 g11-sys.domain.local systemd[1]: Started gdm.service - GNOME Display Manager.
>Ð¼Ð°Ñ 26 15:49:55 g11-sys.domain.local gdm-launch-environment][1088]: pam_succeed_if(gdm-launch-environment:auth): requirement "user ingroup gdm:gnome-initial-setup" not met by user "gdm-greeter"
>Ð¼Ð°Ñ 26 15:49:55 g11-sys.domain.local audit[1088]: AUDIT1100 pid=1088 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:authentication grantors=? acct="gdm-greeter" exe="/usr/libexec/gdm-session-worker" hostname=g11-sys.domain.local addr=? terminal=/dev/tty1 res=failed'

Actions: View

Attachments on bug 58399: 20969