{"action":"created","issue":{"url":"https://api.github.com/repos/systemd/systemd/issues/7261","repository_url":"https://api.github.com/repos/systemd/systemd","labels_url":"https://api.github.com/repos/systemd/systemd/issues/7261/labels{/name}","comments_url":"https://api.github.com/repos/systemd/systemd/issues/7261/comments","events_url":"https://api.github.com/repos/systemd/systemd/issues/7261/events","html_url":"https://github.com/systemd/systemd/issues/7261","id":271455563,"number":7261,"title":"systemd breaks user directory on AFS","user":{"login":"rzlourenco","id":2820998,"avatar_url":"https://avatars2.githubusercontent.com/u/2820998?v=4","gravatar_id":"","url":"https://api.github.com/users/rzlourenco","html_url":"https://github.com/rzlourenco","followers_url":"https://api.github.com/users/rzlourenco/followers","following_url":"https://api.github.com/users/rzlourenco/following{/other_user}","gists_url":"https://api.github.com/users/rzlourenco/gists{/gist_id}","starred_url":"https://api.github.com/users/rzlourenco/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/rzlourenco/subscriptions","organizations_url":"https://api.github.com/users/rzlourenco/orgs","repos_url":"https://api.github.com/users/rzlourenco/repos","events_url":"https://api.github.com/users/rzlourenco/events{/privacy}","received_events_url":"https://api.github.com/users/rzlourenco/received_events","type":"User","site_admin":false},"labels":[{"id":225812111,"url":"https://api.github.com/repos/systemd/systemd/labels/not-our-bug","name":"not-our-bug","color":"0052cc","default":false}],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":68,"created_at":"2017-11-06T12:15:34Z","updated_at":"2018-04-25T17:38:16Z","closed_at":"2017-11-07T13:21:45Z","author_association":"NONE","body":"### Submission type\r\n\r\n - Bug report\r\n\r\n### systemd version the issue has been seen with\r\n\r\n```bash\r\n$ systemctl --version\r\nsystemd 234\r\n+PAM -AUDIT +SELINUX -IMA +APPARMOR -SMACK +SYSVINIT +UTMP +LIBCRYPTSETUP +GCRYPT +GNUTLS +ACL +XZ +LZ4 +SECCOMP +BLKID -ELFUTILS +KMOD -IDN2 -IDN default-hierarchy=hybrid\r\n$ uname -a\r\nLinux dred 4.12.8-1-default #1 SMP PREEMPT Thu Aug 17 05:30:12 UTC 2017 (4d7933a) x86_64 x86_64 x86_64 GNU/Linux\r\n```\r\n\r\n### Used distribution\r\n\r\nopenSUSE Tumbleweed.\r\n\r\n### In case of bug report: Expected behaviour you didn't see\r\n\r\nI should be able to login into GNOME with GDM. I should be able to use `systemctl --user`.\r\n\r\n### In case of bug report: Unexpected behaviour you saw\r\n\r\nAfter login I'm brought back to GDM. [Here's](https://gist.github.com/rzlourenco/5f32f5b1bb65e287d9cf476f8f9bf472) a snippet of journalctl when I login in the console. A few things of note, when I login in the console:\r\n\r\n```bash\r\n$ env | grep XDG\r\nXDG_DATA_DIRS=/afs/l2f/home/rzl/.local/share/flatpak/exports/share:/var/lib/flatpak/exports/share:/usr/local/share:/usr/share\r\nXDG_CONFIG_DIRS=/etc/xdg\r\n$ env | grep DBUS\r\n1 $ tree /run/user/`id -u`\r\n/run/user/50421\r\n├── krb5cc_CCMdRW [error opening dir]\r\n└── krb5cc_d2OGVV\r\n    ├── primary\r\n    └── tktOaPFiW\r\n$ systemctl --user status\r\nFailed to read server status: Process org.freedesktop.systemd1 exited with status 1\r\n```\r\n\r\nMy PAM config:\r\n```bash\r\n$ cat /etc/pam.d/systemd-user\r\n# This file is part of systemd.\r\n#\r\n# Used by systemd --user instances.\r\naccount  include common-account\r\nsession  required pam_selinux.so close\r\nsession  required pam_selinux.so nottys open\r\nsession  include common-session\r\n$ cat /etc/pam.d/common-session\r\n# [...]\r\nsession optional        pam_systemd.so  debug\r\nsession required        pam_limits.so\r\nsession required        pam_unix.so     try_first_pass\r\nsession optional        pam_krb5.so     minimum_uid=500\r\nsession optional        pam_umask.so\r\nsession optional        pam_gnome_keyring.so    auto_start only_if=gdm,gdm-password,lxdm,lightdm\r\nsession optional        pam_env.so\r\n```\r\n\r\n### In case of bug report: Steps to reproduce the problem\r\n\r\nBroadly:\r\n\r\n1. Install Tumbleweed with GNOME.\r\n2. Install OpenAFS. You can get it from the [filesystems repo](https://build.opensuse.org/project/show/filesystems), though you'll need an older kernel since the package doesn't build since 4.12.8.\r\n3. Get users from LDAP.\r\n4. Setup Kerberos authentication.\r\n5. Reboot.\r\n6. Try to login.\r\n\r\nThis used to work. More detailed [instructions for Fedora](https://docs.google.com/document/d/1P27fP1uj-C8QdxDKMKtI-Qh00c5_9zJa4YHjnpB6ODM/pub), but it's basically the same. It seems Debian [has stumbled into this problem](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=846377) sometime ago.\r\n\r\nIf I understood correctly, the problem is that systemd changed behavior and started forking a \"user manager\" daemon from PID 1, off of which things like D-Bus are launched. But since it does not pass through PAM, it gets no AFS token, so the user directory is effectively inaccessible.\r\n\r\nMy temporary workaround is to login in the console and then in GDM. This is a non-solution because it requires me to leave an open console with my user... It works somewhat, but GNOME crashes often, from D-Bus-related problems, it seems. I don't think it's a problem with GNOME because I have a box at home with the same GNOME, but no AFS and it is very stable.\r\n\r\nWhat can I do to help? Is there a way to not launch a user manager outside my PAM session?"},"comment":{"url":"https://api.github.com/repos/systemd/systemd/issues/comments/384371797","html_url":"https://github.com/systemd/systemd/issues/7261#issuecomment-384371797","issue_url":"https://api.github.com/repos/systemd/systemd/issues/7261","id":384371797,"user":{"login":"jaltman","id":206466,"avatar_url":"https://avatars3.githubusercontent.com/u/206466?v=4","gravatar_id":"","url":"https://api.github.com/users/jaltman","html_url":"https://github.com/jaltman","followers_url":"https://api.github.com/users/jaltman/followers","following_url":"https://api.github.com/users/jaltman/following{/other_user}","gists_url":"https://api.github.com/users/jaltman/gists{/gist_id}","starred_url":"https://api.github.com/users/jaltman/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jaltman/subscriptions","organizations_url":"https://api.github.com/users/jaltman/orgs","repos_url":"https://api.github.com/users/jaltman/repos","events_url":"https://api.github.com/users/jaltman/events{/privacy}","received_events_url":"https://api.github.com/users/jaltman/received_events","type":"User","site_admin":false},"created_at":"2018-04-25T17:38:16Z","updated_at":"2018-04-25T17:38:16Z","author_association":"NONE","body":"@grawity in case you are interested, kcron is shipped as part of Scientific Linux and the source rpm is available from ftp://linux1.fnal.gov/linux/scientific/7x/contexts/fermilab/SRPMS/fermilab-util_kcron-1.0-0.el7.src.rpm\r\n"}}
{"actor":{"display_login":"jaltman"}}