[prev in list] [next in list] [prev in thread] [next in thread] 

List:       fedora-list
Subject:    Re: Cockpit login fails
From:       Ed Greshko <ed.greshko () greshko ! com>
Date:       2021-09-30 11:18:35
Message-ID: 4520757f-95c9-88ee-e178-0baec868cde4 () greshko ! com
[Download RAW message or body]

On 30/09/2021 18:27, Bjoern Franke via users wrote:
> Hi,
> 
> I tried to use the cockpit on fc34, but the login fails:
> 
> Sep 30 12:25:11 bfr.foo.bar.tld cockpit-session[170263]: pam_unix(cockpit:session): \
>                 session opened for user bfr(uid=1000) by (uid=0)
> Sep 30 12:25:11 bfr.foo.bar.tld audit[170263]: USER_START pid=170263 uid=0 \
> auid=1000 ses=88 subj=system_u:system_r:cockpit_session_t:s0 \
> msg='op=PAM:session_open \
> grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_ssh_add,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog \
> acct="bfr" exe="/usr/libexec/cockpit-session" hostname=::ffff:127.0.0.1 \
>                 addr=::ffff:127.0.0.1 terminal=? res=success'
> Sep 30 12:25:11 bfr.foo.bar.tld audit[170263]: CRED_REFR pid=170263 uid=0 auid=1000 \
> ses=88 subj=system_u:system_r:cockpit_session_t:s0 msg='op=PAM:setcred \
> grantors=pam_unix acct="bfr" exe="/usr/libexec/cockpit-session" \
>                 hostname=::ffff:127.0.0.1 addr=::ffff:127.0.0.1 terminal=? \
>                 res=success'
> Sep 30 12:25:12 bfr.foo.bar.tld polkitd[1979]: Registered Authentication Agent for \
> unix-session:88 (system bus name :1.1341 [cockpit-bridge], object path \
>                 /org/freedesktop/PolicyKit1/AuthenticationAgent, locale C.UTF-8)
> Sep 30 12:25:13 bfr.foo.bar.tld cockpit-ws[170258]: json_object_get_string_member: \
> assertion 'node != NULL' failed 
> Unfortunately I did not find anything regarding the
> 
> json_object_get_string_member: assertion 'node != NULL' failed
> 
> issue.   /etc/pam.d/cockpit exists and there is also no customized pam \
> configuration. 

I just installed cockpit on a F34 VM.

I configured the firewall to enable cockpit service.
I started cockpit by "systemctl --now enable cockpit.socket"

And it just works.....

The thing is, my log entries are pretty much the same as yours.

Sep 30 19:05:44 f34x.greshko.com cockpit-session[964]: pam_unix(cockpit:session):
session opened for user egreshko(uid=1026) by (uid=0)
Sep 30 19:05:44 f34x.greshko.com audit[964]: USER_START pid=964 uid=0 auid=1026 se
s=2 subj=system_u:system_r:cockpit_session_t:s0 msg='op=PAM:session_open grantors=
pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_ssh_add,pam_keyinit,pam_limit
s,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="egreshko" exe="/usr/libexec/coc
kpit-session" hostname=2001:b030:112f:2::2 addr=2001:b030:112f:2::2 terminal=? res
=success'
Sep 30 19:05:44 f34x.greshko.com audit[964]: CRED_REFR pid=964 uid=0 auid=1026 ses
=2 subj=system_u:system_r:cockpit_session_t:s0 msg='op=PAM:setcred grantors=pam_lo
caluser,pam_unix acct="egreshko" exe="/usr/libexec/cockpit-session" hostname=2001:
b030:112f:2::2 addr=2001:b030:112f:2::2 terminal=? res=success'

"success" would seem to indicate the user was authenticated.

Sep 30 19:05:45 f34x.greshko.com polkitd[635]: Registered Authentication Agent for
unix-session:2 (system bus name :1.36 [cockpit-bridge], object path /org/freedesk
top/PolicyKit1/AuthenticationAgent, locale C.UTF-8)

I don't get the json message at that point but it does appear in the journal at other
times.


[egreshko@f34x ~]$ journalctl -b 0 | grep NULL
Sep 30 19:05:35 f34x.greshko.com cockpit-ws[956]: json_object_get_string_member: a
ssertion 'node != NULL' failed
Sep 30 19:05:43 f34x.greshko.com cockpit-ws[956]: json_object_get_string_member: a
ssertion 'node != NULL' failed

I'm connecting from a different host than where cockpit is installed.





--
Nothing to see here
_______________________________________________
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
 Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure


[prev in list] [next in list] [prev in thread] [next in thread]