[Freeipa-users] Trying to use the CLI logs me out

[Rob Crittenden]

Dmitri Pal wrote:
> On 02/25/2014 07:31 PM, Bret Wortman wrote:
>> Nope, running with strace lets us use the IPA command again with impunity. Without it, process termination.
>
> A theory. Your data has some output that is treated as escape sequence
> that crushes the shell so your connection is closed.
> Do you test it with the same command all the time?
>
> Have you tried other commands?
> Can you do a user/group/host add?
>
> Can you try other commands?

I think he said it fails with a simple ipa help, which eliminates a 
whole lot of the work we do because it does no networking in that case.

Maybe running inside a typescript will show something like weird characters.

rob

>
>
>>
>>
>> Bret Wortman
>> http://bretwortman.com/
>> http://twitter.com/BretWortman
>>
>>> On Feb 25, 2014, at 6:06 PM, Rob Crittenden<rcritten at redhat.com>  wrote:
>>>
>>> Bret Wortman wrote:
>>>> I don't know if this will be informative or not, but:
>>>>
>>>> # strace -f -o /tmp/out ipa host-find zw129.damascusgrp.com
>>>> --------------
>>>> 1 host matched
>>>> --------------
>>>> Host name: zw129.damascusgrp.com
>>>>    :
>>>>    :
>>>> #
>>>>
>>>> I then found this pattern occurring a number of times within the (17564
>>>> line) output file:
>>>>
>>>> 4229  mmap(NULL, 1052672, PROT_READ|PROT_WRITE,
>>>> MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
>>>> 4237  <... close resumed> )             = 0
>>>> 4229  <... mmap resumed> )              = 0x7f936aad2000
>>>> 4229  read(13, <unfinished ...>
>>>> 4237  dup2(7, 0)                        = 0
>>>> 4237  dup2(10, 1)                       = 1
>>>> 4237  dup2(12, 2)                       = 2
>>>> 4237  close(7)                          = 0
>>>> 4237  close(10)                         = 0
>>>> 4237  close(12)                         = 0
>>>> 4237  close(3)                          = 0
>>>> 4237  close(4)                          = 0
>>>> 4237  close(5)                          = 0
>>>> 4237  close(6)                          = 0
>>>> 4237  close(7)                          = -1 EBADF (Bad file descriptor)
>>>> 4237  close(8)                          = -1 EBADF (Bad file descriptor)
>>>> 4237  close(9)                          = -1 EBADF (Bad file descriptor)
>>>> 4237  close(10)                         = -1 EBADF (Bad file descriptor)
>>>> :
>>>> : Continues for a thousand entries or so, then
>>>> :
>>>> 4237  close(1022)                       = -1 EBADF (Bad file descriptor)
>>>> 4237  close(1023)                       = -1 EBADF (Bad file descriptor)
>>>> 4237  execve("/bin/keyctl", ["keyctl", "padd", "user",
>>>> "ipa_session_cookie:admin at DAMASCUSGRP.COM", "@s"], [/* 27 vars */]
>>>> <unfinished ...>
>>> Just noise while we fork off and run another process, in this case keyctl to store the session cookie in the kernel keyring.
>>>
>>> So running with strace doesn't result in the session logging out?
>>>
>>> rob
>>>
>>>
>>>
>>> _______________________________________________
>>> Freeipa-users mailing list
>>> Freeipa-users at redhat.com
>>> https://www.redhat.com/mailman/listinfo/freeipa-users
>
>
> --
> Thank you,
> Dmitri Pal
>
> Sr. Engineering Manager for IdM portfolio
> Red Hat Inc.
>
>
> -------------------------------
> Looking to carve out IT costs?
> www.redhat.com/carveoutcosts/
>
>
>
>
> _______________________________________________
> Freeipa-users mailing list
> Freeipa-users at redhat.com
> https://www.redhat.com/mailman/listinfo/freeipa-users
>