Re: x11/xdm with PAM and security/sssd2: not working

Am Tage des Herren Wed, 25 Mar 2026 16:35:10 +0300
Gleb Popov <[email protected]> schrieb:

> On Wed, Mar 25, 2026 at 3:16 PM A FreeBSD User <[email protected]> wrote:
> >
> > In /usr/local/etc/sssd/sssd.conf I also tried to enable "debug_level = 6" - I never see in
> > ANY log file residing in /var/log more than (grep -r sssd /var/log):  
> 
> Yes, I also don't remember how to properly enable logging to file in
> SSSD. Instead, when I need to debug it, I do

I tried almost every section applying debug_leve = XX, either an integer in decimal notation
or its hex analogon.
Loggin even doesn't work when setting "-d 6" in /etc/rc.conf (sssd_flags="${sssd_flags} -d 8").

Maybe this is a real bug?

> 
> service sssd stop
> sssd -dddd -i
> 
> This runs sssd in the foreground with all logs visible on the console.
> Maybe you should try this as a last attempt?
> 

I used 
sssd_flags="${sssd_flags} -d 8 -i

in /etc/rc.conf (sssd_flags="...").

Since I try to copy-paste from consoles of my box, it is a pain. I do not see anything
suspicious, which doesn't mean that there isn't anything from the point of view of a
seasoned/skilled developer. But I fight copying from console to console and somehow I copy
always the first(!) occurence of anything on one console - the same stuff is copied over and
over not matter how much log pushes through the console, when switching ALT-F5, for instance,
I copy always the stuff marked (mouse dragging) the very first time (for the record: vt driver
...).

Nearby: when checking as root 

pamtester xdm ohartmann authenticate acct_mgmt open_session close_session

I see up to acct_mgmt in the log - but nothing for open_session close_session.

Another point is that I do not use proper search filters defined in sssd.conf for ou=users,
ou=groups and let the algorithm of sssd traverse down to the right object, starting from
search base on. This works with login, ssh. I don't see anything different, but it might be a
chance to get something ...

Kind regrards and thanks for the help,

Oliver 


-- 

A FreeBSD user

-----BEGIN PGP SIGNATURE-----

iHUEARYKAB0WIQRQheDybVktG5eW/1Kxzvs8OqokrwUCacV0sAAKCRCxzvs8Oqok
r8lwAQCC3QjgvmAe7TM6ZIWlBIQaiNJM/1NdXKNAbSta9LEwhAEAm7ZNGjimpnSA
eJ3vzP5iTv6Epkk2/5mJvgSo1ps9bAI=
=4iru
-----END PGP SIGNATURE-----