Bug 2311897 - sssd_kcm service fails with `could not open file /var/lib/sss/secrets/secrets.ldb: Permission denied`
Summary: sssd_kcm service fails with `could not open file /var/lib/sss/secrets/secrets...
Keywords:
Status: CLOSED DUPLICATE of bug 2308428
Alias: None
Product: Fedora
Classification: Fedora
Component: sssd
Version: 41
Hardware: x86_64
OS: Linux
unspecified
medium
Target Milestone: ---
Assignee: sssd-maintainers
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2024-09-12 11:24 UTC by Michal Konecny
Modified: 2024-09-12 11:30 UTC (History)
9 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2024-09-12 11:30:54 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)

Description Michal Konecny 2024-09-12 11:24:19 UTC
After rebasing to Fedora Silverblue 41 from Fedora Silverblue 40 I'm unable to generate a kerberos ticket with `kinit: Connection refused while getting default ccache`. After some searching I found out that this needs sssd_kcm service to be running.

But sssd_kcm fails with:
```
zář 12 13:13:00 zlopez-workstation sssd_kcm[16158]: ltdb: tdb(/var/lib/sss/secrets/secrets.ldb): tdb_open_ex: could not open file /var/lib/sss/secrets/secrets.ldb: Permission denied
zář 12 13:13:00 zlopez-workstation sssd_kcm[16158]: Unable to open tdb '/var/lib/sss/secrets/secrets.ldb': Permission denied
zář 12 13:13:00 zlopez-workstation sssd_kcm[16158]: Failed to connect to '/var/lib/sss/secrets/secrets.ldb' with backend 'tdb': Unable to open tdb '/var/lib/sss/secrets/secrets.ldb: Permission denied
zář 12 13:13:00 zlopez-workstation sssd_kcm[16158]: (2024-09-12 13:13:00): [kcm] [sss_sec_init] (0x0020): Failed to initialize secdb [5]: Input/output error
zář 12 13:13:00 zlopez-workstation sssd_kcm[16158]: (2024-09-12 13:13:00): [kcm] [ccdb_secdb_init] (0x0020): Cannot initialize the security database
zář 12 13:13:00 zlopez-workstation sssd_kcm[16158]: (2024-09-12 13:13:00): [kcm] [kcm_ccdb_init] (0x0020): Cannot initialize ccache database
zář 12 13:13:00 zlopez-workstation sssd_kcm[16158]: (2024-09-12 13:13:00): [kcm] [kcm_process_init] (0x0010): fatal error initializing responder data
```

Reproducible: Always

Steps to Reproduce:
1. systemctl start sssd_kcm
Actual Results:  
Service fails to start

Expected Results:  
Service starts

Comment 1 Michal Konecny 2024-09-12 11:26:36 UTC
Here is the output of `ls -lh /var/log/sss/secrets/`:
```
total 2,5M
-rw-------. 1 root root 2,5M 12. zář 11.19 secrets.ldb
```

Comment 2 Alexey Tikhonov 2024-09-12 11:30:54 UTC

*** This bug has been marked as a duplicate of bug 2308428 ***


Note You need to log in before you can comment on or make changes to this bug.