[Bug 2072702] [NEW] AppArmor profile prevents use of TLS keys and certificates

Public bug reported: I'm trying to use the following configuration: # certificate files $DefaultNetstreamDriverCAFile /etc/ipa/ca.crt $DefaultNetstreamDriverCertFile /etc/ssl/certs/FQDN.crt $DefaultNetstreamDriverKeyFile /etc/ssl/private/FQDN.key But AppArmor prevents the loading of /etc/ipa/ca.

[Bug 1880359] Re: "Malformed output discovered from systemd list-unit-files"

I am hitting this as well. Please fix. Thank you. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1880359 Title: "Malformed output discovered from systemd list-unit-files" To manage notifications a

[Bug 1843946] [NEW] pam_sss configuration is incorrect for smartcard usage

Public bug reported: Default common-auth with sssd is: # here are the per-package modules (the "Primary" block) auth[success=2 default=ignore] pam_unix.so nullok_secure auth[success=1 default=ignore] pam_sss.so use_first_pass However, this does not allow gdm to query the smartc

[Bug 1843946] Re: pam_sss configuration is incorrect for smartcard usage

This is with Ubuntu 18.04.3 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1843946 Title: pam_sss configuration is incorrect for smartcard usage To manage notifications about this bug go to: https:/

[Bug 1756172] Re: gdm doesnt recognise smartcard when first inserted

I am starting to configure Ubuntu to use smartcard auth, and am running into similar issues. I'll note though that I have to modify /etc/pam.d /common-auth to work with a smartcard and pam_sss. I'm curious to know what your PAM configuration is. -- You received this bug notification because you

[Bug 1819197] Re: nss_getpwnam: name 'us...@xx.xx.edu@XX.XX.EDU' domain 'XX.XX.EDU': resulting localname '(null)'

I'm testing a local build of the bionic package change linked in this bug and so far so good. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1819197 Title: nss_getpwnam: name 'us...@xx.xx.edu@XX.XX.E

[Bug 1819197] Re: nss_getpwnam: name 'us...@xx.xx.edu@XX.XX.EDU' domain 'XX.XX.EDU': resulting localname '(null)'

I'm seeing this on 18.04/bionic. What needs to happen to get it released there? Thanks. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1819197 Title: nss_getpwnam: name 'us...@xx.xx.edu@XX.XX.EDU'

[Bug 1830079] [NEW] PAM errors logged when pam_kwallet is not installed

Public bug reported: ii lightdm1.18.3-0ubuntu amd64 Display Manager VERSION="16.04.6 LTS (Xenial Xerus)" Running with XFCE installed, I see the following in /var/log/auth.log: May 21 15:52:09 lightdm: PAM unable to dlopen(pam_kwallet.so): /lib/security/pam_kwallet.so: cann

[Bug 1722936] Re: sssd hbac rule applicaton for AD users is inconsistent

** Tags removed: verification-needed-xenial ** Tags added: verification-done-xenial -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1722936 Title: sssd hbac rule applicaton for AD users is inconsisten

[Bug 1824203] [NEW] p11-kit: ca-certificates.crt: BEGIN ...: pem block before p11-kit section header

Public bug reported: # trust list p11-kit: ca-certificates.crt: BEGIN ...: pem block before p11-kit section header p11-kit: ca-certificates.crt: BEGIN ...: pem block before p11-kit section header Description:Ubuntu 16.04.6 LTS Release:16.04 ** Affects: p11-kit (Ubuntu) Importanc

[Bug 1647285] Re: SSL trust not system-wide

I'm trying to make use of this in Ubuntu 14.04 with p11-kit 0.23.2-5~ubuntu16.04.1, but get the following error: # trust list p11-kit: ca-certificates.crt: BEGIN ...: pem block before p11-kit section header p11-kit: ca-certificates.crt: BEGIN ...: pem block before p11-kit section header Is p11-ki

[Bug 1722936] Re: sssd hbac rule applicaton for AD users is inconsistent

Hmm, perhaps I was just missing all the different -proposed repositories - as after adding universe and multiverse I don't seem to have the problem any more -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bug

[Bug 1722936] Re: sssd hbac rule applicaton for AD users is inconsistent

Sorry - freeipa-client -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1722936 Title: sssd hbac rule applicaton for AD users is inconsistent To manage notifications about this bug go to: https://bugs

[Bug 1722936] Re: sssd hbac rule applicaton for AD users is inconsistent

Actually, there seems to be a conflict with freeaip-client (+python- ipaclient python-ipalib python-libipa-hba) and this version of sssd. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1722936 Title:

[Bug 1796047] Re: update-ieee-data throws error because of wrong url

Still an issue with ieee-data 20170531.1 in xenial. Also generates an error from cron.monthly: run-parts: /etc/cron.monthly/ieee-data exited with return code 1 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.ne

[Bug 1722936] Re: sssd hbac rule applicaton for AD users is inconsistent

I've installed the version from -proposed now. So far so good. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1722936 Title: sssd hbac rule applicaton for AD users is inconsistent To manage notific

[Bug 1722936] Re: sssd hbac rule applicaton for AD users is inconsistent

Thank you. I'll probably have another one after this to deal with issues with sssh key lookup fixed by https://pagure.io/SSSD/sssd/c/cf89f552f06b95bd69d8c61aaa55a330a5d9f6e6?branch=master -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu

[Bug 1722936] Re: sssd hbac rule applicaton for AD users is inconsistent

I've tried again: https://code.launchpad.net/~orion- cora/ubuntu/+source/sssd/+git/sssd/+merge/362837 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1722936 Title: sssd hbac rule applicaton f

[Bug 1722936] Re: sssd hbac rule applicaton for AD users is inconsistent

Server is EL 7.4. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1722936 Title: sssd hbac rule applicaton for AD users is inconsistent To manage notifications about this bug go to: https://bugs.laun

[Bug 1722936] Re: sssd hbac rule applicaton for AD users is inconsistent

Proposed merge - https://code.launchpad.net/~orion- cora/ubuntu/+source/sssd/+git/sssd/+merge/334317 hope I got that right. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1722936 Title: sssd hbac

[Bug 1722936] Re: sssd hbac rule applicaton for AD users is inconsistent

I just started to try to do this - but it looks like the pkg/ubuntu /xenial-devel branch is at 1.13.4-1ubuntu1.8, but 1.13.4-1ubuntu1.9 has been released. Can that branch be updated? -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. htt

[Bug 1722936] [NEW] sssd hbac rule applicaton for AD users is inconsistent

Public bug reported: NAME="Ubuntu" VERSION="16.04.3 LTS (Xenial Xerus)" sssd Version: 1.13.4-1ubuntu1.8 I'm sometimes seeing AD users denied access to a machine due to HBAC access rules: (Tue Oct 3 04:11:09 2017) [sssd[be[nwra.com]]] [ipa_hbac_evaluate_rules] (0x0080): Access denied by HBAC ru

[Bug 1118290]

Still present with kernel-4.0.5-200.fc21.x86_64: [drm:radeon_get_legacy_connector_info_from_bios [radeon]] *ERROR* Unknown connector type: 8 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1118290 Titl

[Bug 397466]

Looks like pam-kwallet needs to transition to kwallet5. But this needs to be tracked elsewhere. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/397466 Title: There is no KWallet PAM integration To m

[Bug 1143495]

Patch appears to fix this for me as well as bug 53475 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1143495 Title: udisks reporting input/output error that seems to be nonsense To manage notificati

[Bug 1143495]

*** Bug 53475 has been marked as a duplicate of this bug. *** -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1143495 Title: udisks reporting input/output error that seems to be nonsense To manage no

[Bug 397466]

(In reply to comment #159) > unsubscribe > > You are receiving this mail because: > > You voted for the bug. actually, remove your vote from the bug -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/39746

[Bug 397466]

(In reply to comment #151) > unsubscribe Remove yourself from the CC list. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/397466 Title: There is no KWallet PAM integration To manage notifications a

[Bug 1052800]

Ah, sorry for not checking. Also, 1.9.1 should be out soon, right? I'd like to do that update and this patch at the same time. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1052800 Title: Lightnin

[Bug 1052800]

What's the status of this? I got a Fedora bug on this (https://bugzilla.redhat.com/show_bug.cgi?id=910976) with a suggested patch. Or I could try the WIP workaround here. Suggestions? -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu.