Bug 882580

Summary:	realmd error adding to the domain.
Product:	[Fedora] Fedora	Reporter:	Brandon <h_fone>
Component:	realmd	Assignee:	Stef Walter <stefw>
Status:	CLOSED ERRATA	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	18	CC:	jhrozek, stefw, yaneti
Target Milestone:	---
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2013-04-20 19:18:22 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Brandon 2012-12-02 01:38:55 UTC

realm join -v -U bcamadin colossus.----.edu 
i am domain admin.


* Searching for kerberos SRV records for domain: _kerberos._udp.colossus.----.edu
 * Searching for MSDCS SRV records on domain: _kerberos._tcp.dc._msdcs.colossus.----.edu
 * delta1.colossus.----.edu:88 colossus2.colossus.----.edu:88 
 * Found kerberos DNS records for: colossus.----.edu
 * Found AD style DNS records for: colossus.----.edu
 * Successfully discovered: colossus.----.edu
Password for bcamadin: 
 * Couldn't find file: /usr/sbin/sss_cache
 * Assuming packages installed
 ! Failed to enroll machine in realm: GDBus.Error:org.freedesktop.DBus.Error.AccessDenied: An SELinux policy prevents this sender from sending this message to this recipient, 0 matched rules; type="method_call", sender=":1.90" (uid=0 pid=2110 comm="/usr/lib64/realmd/realmd ") interface="org.freedesktop.PackageKit" member="CreateTransaction" error name="(unset)" requested_reply="0" destination=":1.69" (uid=0 pid=1618 comm="/usr/libexec/packagekitd ")
realm: Couldn't join realm: Failed to enroll machine in realm. See diagnostics.
[brandon@J310-borg ~]$ realm join -v --user bcamadin colossus.----.edu
 * Searching for kerberos SRV records for domain: _kerberos._udp.colossus.----.edu
 * Searching for MSDCS SRV records on domain: _kerberos._tcp.dc._msdcs.colossus.----.edu
 * delta1.colossus.----.edu:88 colossus2.colossus.----.edu:88 
 * Found kerberos DNS records for: colossus.----.edu
 * Found AD style DNS records for: colossus.----.edu
 * Successfully discovered: colossus.----.edu
Password for bcamadin: 
 * Couldn't find file: /usr/sbin/sss_cache
 * Assuming packages installed
 ! Failed to enroll machine in realm: GDBus.Error:org.freedesktop.DBus.Error.AccessDenied: An SELinux policy prevents this sender from sending this message to this recipient, 0 matched rules; type="method_call", sender=":1.90" (uid=0 pid=2110 comm="/usr/lib64/realmd/realmd ") interface="org.freedesktop.PackageKit" member="CreateTransaction" error name="(unset)" requested_reply="0" destination=":1.69" (uid=0 pid=1618 comm="/usr/libexec/packagekitd ")
realm: Couldn't join realm: Failed to enroll machine in realm. See diagnostics.

Comment 1 Brandon 2012-12-02 01:39:50 UTC

Realmd cannot Join Windows Server 2008 Domain.

Comment 2 Brandon 2012-12-02 02:35:09 UTC

I found out I needed more packages and I installed them.  When I went to add the computer to the domain.  It informed me that it had a buffer overflow.  When I changed the name to a shorter host name and added it. It informed me that It was successful in adding the comptuer.  Shortly after, I recieved an error message from SE Linux saying something was blocked.  I rebooted my computer. When I tried to login using domain credentials I could not.  The change in the host name was also gone.

Comment 3 Brandon 2012-12-02 02:38:07 UTC

[brandon@J263-borg ~]$ realm discover
realm: No default realm discovered


[brandon@J263-borg ~]$ realm discover colossus.----.edu
colossus.spsu.edu
  type: kerberos
  realm-name: COLOSSUS.SPSU.EDU
  domain-name: colossus.----.edu
  configured: kerberos-member
  server-software: active-directory
  client-software: sssd
  required-package: sssd-tools
  required-package: sssd
  required-package: adcli
  required-package: samba-common
  login-formats: COLOSSUS\%U
  login-policy: allow-permitted-logins
  permitted-logins: 
[brandon@J263-borg ~]$

Comment 4 Stef Walter 2013-04-17 09:36:26 UTC

In Fedora 19, we have done work to solve these issues.

 * We provide an intelligent message when realmd runs but necessary packages are not installed. In addition many crashers have been fixed.
 * Without a stack trace it's impossible to say whether the 'buffer overflow' you encountered has been fixed, but I'm assuming it has. Please reopen this bug if not.

Comment 5 Fedora Update System 2013-04-17 11:43:27 UTC

realmd-0.13.3-1.fc19 has been submitted as an update for Fedora 19.
https://admin.fedoraproject.org/updates/realmd-0.13.3-1.fc19

Comment 6 Fedora Update System 2013-04-17 16:25:03 UTC

Package realmd-0.13.3-1.fc19:
* should fix your issue,
* was pushed to the Fedora 19 testing repository,
* should be available at your local mirror within two days.
Update it with:
# su -c 'yum update --enablerepo=updates-testing realmd-0.13.3-1.fc19'
as soon as you are able to.
Please go to the following url:
https://admin.fedoraproject.org/updates/FEDORA-2013-5882/realmd-0.13.3-1.fc19
then log in and leave karma (feedback).

Comment 7 Fedora Update System 2013-04-17 17:26:34 UTC

realmd-0.13.3-2.fc19 has been submitted as an update for Fedora 19.
https://admin.fedoraproject.org/updates/realmd-0.13.3-2.fc19

Comment 8 Fedora Update System 2013-04-20 19:18:24 UTC

realmd-0.13.3-2.fc19 has been pushed to the Fedora 19 stable repository.  If problems still persist, please make note of it in this bug report.