<div dir="ltr"><br><div class="gmail_extra"><br><div class="gmail_quote">On Wed, Jan 3, 2018 at 2:35 PM, Olli Rajala <span dir="ltr"><<a href="mailto:olli.rajala@ravoltek.net" target="_blank">olli.rajala@ravoltek.net</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div>Hi Michael,<br></div><span class="gmail-"><div><br></div>Hello Olli,<br><div class="gmail_extra"><div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<br>
This issue has been already fixed in Spacewalk 2.7 (together with number<br>
of other tomcat_t issues). Is there a specific reason why you are<br>
usingolder (and unsupported) version?<br>
<span></span><br clear="all"></blockquote></div></div><div class="gmail_extra"><br></div></span><div class="gmail_extra">Oh, thanks for info! There is no reason, I had actually missed that 2.7 was released. So, maybe I'll just test and report back how it went.</div><br></div></blockquote></div><br clear="all"></div><div class="gmail_extra">SELinux issue seem to be resolved, it's not causing anymore any audit things to /var/log/audit/audit.log, but still PAM is not working.</div><div class="gmail_extra"><br></div><div class="gmail_extra">My config is based on this howto: <a href="https://access.redhat.com/documentation/en-us/red_hat_network_satellite/5.3/html/installation_guide/s1-maintenance-pam-auth">https://access.redhat.com/documentation/en-us/red_hat_network_satellite/5.3/html/installation_guide/s1-maintenance-pam-auth</a></div><div class="gmail_extra"><br></div><div class="gmail_extra">/var/log/messages says:</div><div class="gmail_extra"><br></div><div class="gmail_extra">Jan  3 15:36:58 java: pam_krb5[18217]: error reading keytab 'FILE:/etc/krb5.keytab'<br>Jan  3 15:36:58 java: pam_krb5[18217]: TGT verified<br>Jan  3 15:36:58 java: pam_krb5[18217]: authentication succeeds for '<account>' (<account>@domain.invalid)<br></div><div class="gmail_extra"><br></div><div class="gmail_extra">But login via Webui says "Either the password or username is incorrect."</div><div class="gmail_extra"><br></div><div class="gmail_extra">This account has 'Use PAM' enabled in Spacewalk webui -> Users and has Organization Administrator -role in use.</div><div class="gmail_extra"><br></div><div class="gmail_extra">Upgrade from 2.6 -> 2.7 went fine without errors. This is Centos 7 server.</div><div class="gmail_extra"><br></div><div class="gmail_extra">Any ideas what else to check? The working 2.6 installation in Centos 6 causes also that same keytab error line to /var/log/messages so I suppose it doesn't matter.<br></div><div class="gmail_extra"><br></div><div class="gmail_extra">BR,<br></div><div class="gmail_extra"><br></div><div class="gmail_extra">-- <br><div class="gmail_signature">Olli Rajala<br>Vaasa, Finland<br><br></div>
</div></div>