[Freeipa-users] Trying to use the CLI logs me out

Bret Wortman bret.wortman at damascusgrp.com
Wed Feb 26 00:31:17 UTC 2014


Nope, running with strace lets us use the IPA command again with impunity. Without it, process termination. 


Bret Wortman
http://bretwortman.com/
http://twitter.com/BretWortman

> On Feb 25, 2014, at 6:06 PM, Rob Crittenden <rcritten at redhat.com> wrote:
> 
> Bret Wortman wrote:
>> I don't know if this will be informative or not, but:
>> 
>> # strace -f -o /tmp/out ipa host-find zw129.damascusgrp.com
>> --------------
>> 1 host matched
>> --------------
>> Host name: zw129.damascusgrp.com
>>   :
>>   :
>> #
>> 
>> I then found this pattern occurring a number of times within the (17564
>> line) output file:
>> 
>> 4229  mmap(NULL, 1052672, PROT_READ|PROT_WRITE,
>> MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
>> 4237  <... close resumed> )             = 0
>> 4229  <... mmap resumed> )              = 0x7f936aad2000
>> 4229  read(13, <unfinished ...>
>> 4237  dup2(7, 0)                        = 0
>> 4237  dup2(10, 1)                       = 1
>> 4237  dup2(12, 2)                       = 2
>> 4237  close(7)                          = 0
>> 4237  close(10)                         = 0
>> 4237  close(12)                         = 0
>> 4237  close(3)                          = 0
>> 4237  close(4)                          = 0
>> 4237  close(5)                          = 0
>> 4237  close(6)                          = 0
>> 4237  close(7)                          = -1 EBADF (Bad file descriptor)
>> 4237  close(8)                          = -1 EBADF (Bad file descriptor)
>> 4237  close(9)                          = -1 EBADF (Bad file descriptor)
>> 4237  close(10)                         = -1 EBADF (Bad file descriptor)
>> :
>> : Continues for a thousand entries or so, then
>> :
>> 4237  close(1022)                       = -1 EBADF (Bad file descriptor)
>> 4237  close(1023)                       = -1 EBADF (Bad file descriptor)
>> 4237  execve("/bin/keyctl", ["keyctl", "padd", "user",
>> "ipa_session_cookie:admin at DAMASCUSGRP.COM", "@s"], [/* 27 vars */]
>> <unfinished ...>
> 
> Just noise while we fork off and run another process, in this case keyctl to store the session cookie in the kernel keyring.
> 
> So running with strace doesn't result in the session logging out?
> 
> rob
> 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 2346 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20140225/38a24085/attachment.p7s>


More information about the Freeipa-users mailing list