Re: SFS on Ubuntu Warty - authentication problems

On Mon, 21 Mar 2005, Oliver Comber wrote:
> Hi List,
> 
> I've been trying out SFS on Ubuntu Warty, but I've fallen at the first
> hurdle: I can't even register a key! - I get config file errors for the
> default config and authentication errors for key registering.

 Hmm, I think Ubuntu uses unmodified sfs packages from Debian, so
 we're talking 0.8 snapshot here.

> I've installed the sfs-server package on my workstation and the
> sfs-client package inside a vmware on my workstation.
> 
> The sfsauthd_config file contains the following line, which appears to
> give problems:
>  Userfile -update -passwd -create -pub=sfs_users.pub sfs_users
> 
> 
> With the config as-is, I start the sfs server in debug mode, and
> sfsauthd fails with the following error:
> 
>  sfsauthd: /etc/sfs/sfsauthd_config:36: 'sfs_users' has -update flag;
>  must end '.db/'
>  sfsauthd: fatal: errors in config file
>  sfsrwsd: version 0.8pre, pid 31020
>  sfssd: EOF from /usr/lib/sfs-0.8pre/sfsauthd
> 
> which I assume explains why I then get a 'Connection refused' error when
> doing an 'sfskey register' later.
> 
> I don't understand the error it gives - What must end '.db/'? I tried
> appending .db/ to the filename...no good.

 Someone I talked to ran into this some time ago, and from top of my
 head.. if there is the -update parameter specified, also "dbcache"
 should be specified, and by default it is not, so the filename
 does definately not end '.db/', so error is given.

> If I take comment this out in the config, it tells me it is using the
> following config: 
>   Userfile -passwd -update -create -pub=sfs_users.pub sfs_users
> 
> Once it is running (by commenting the line out before starting the
> server), I run 'sfskey register' and follow the steps to generate the
> key, but am then told 'access denied'.
> 
> The server gives me some kind of authentication error:
>  sfsauthd: BAD login for newuser from LOCAL(uid=1003)!sfsauthd using 
>  unix password (authentication database error)
> 
> Is this because it is trying to use the passwd file rather than shadow
> or PAM?

 You want to read:

 http://diswww.mit.edu/snafu.fooworld.org/sfs/2223

 and the whole thread. 

 Are you authenticating against ldap or something, or is your
 user just a regular local one ?

 		--j