2022-09-29T03:16:10  *** Genevieve[m] is now known as Joyce3821[m]
2022-09-29T18:48:22  <lkocman[m]> Hello team, did my password on pontifex expired by any chance? I can login via pubkey, but I can't switch to mirror user with sudo su - mirror
2022-09-29T18:52:48  <krop> you need sudo to switch to another user?
2022-09-29T18:55:41  <lkocman[m]> well nope, but my sudo access was working yesterday
2022-09-29T19:11:11  <cboltz> my usual guess is that sssd needs a restart
2022-09-29T19:11:14  <cboltz> give me a minute...
2022-09-29T19:12:42  <cboltz> sssd restarted (even if sudo worked for me, which means it probably wasn't that broken)
2022-09-29T19:13:05  <cboltz> lkocman[m]: can you please try again?
2022-09-29T19:13:14  <lkocman[m]> trying so
2022-09-29T19:13:36  <lkocman[m]> seems like this also killed the vpn
2022-09-29T19:13:38  <lkocman[m]> wait a sec
2022-09-29T19:15:44  <lkocman[m]> [sudo] password for lkocman:
2022-09-29T19:15:44  <lkocman[m]> mirror@pontifex2:~>
2022-09-29T19:15:52  <lkocman[m]> thank you very much! :)
2022-09-29T19:16:01  <lkocman[m]> and vpn was issue on my side, not related
2022-09-29T19:16:01  <cboltz> you are welcome ;-)
2022-09-29T19:16:21  <cboltz> now I only wonder why sssd was only broken for you, and worked for me...
2022-09-29T19:17:48  <cboltz> BTW: I forwarded you an annoying cron mail on Sept 18th to your suse.com address, but didn't get a response
2022-09-29T19:17:53  <cboltz> did that mail ever arrive?
2022-09-29T19:18:12  <cboltz> (the actual issue was fixed by Bernhard yesterday, so the question is really "just" about the mail)
2022-09-29T19:35:11  <acidsys> sudo/su issues I had on some machines as well.. usually the "solution" was to find someone putting my ssh key into the user I tried to switch to.. good to know restarting sssd works too
2022-09-29T19:37:33  <cboltz> actually it's even a well-known issue with sssd :-/
2022-09-29T19:38:09  <cboltz> (I usually restart it via salt, because sudo isn't too helpful with a broken sssd)
2022-09-29T19:39:46  <acidsys> oh is it? I have a couple sssd's on my infrastructure and found it to be very stable.. as long as the LDAP server isn't reachable for some time
2022-09-29T19:40:04  <acidsys> s/reachable/unreachable
2022-09-29T19:40:47  <cboltz> no idea if sssd of FreeIPA ist the real problem, I only know that restarting sssd helps
2022-09-29T19:42:16  <acidsys> ah right I think the sssd-freeipa thing is different from the regular sssd-ldap
2022-09-29T19:43:05  <acidsys> does it do kerberos as well? I never checked
2022-09-29T19:44:39  <cboltz> no idea
2022-09-29T19:44:49  <cboltz> if you want to check - the sssd config is in salt
2022-09-29T19:45:05  <acidsys> cool will have a look
2022-09-29T20:28:59  *** teepee_ is now known as teepee