<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"Open Sans";}
@font-face
{font-family:inherit;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
span.StileMessaggioDiPostaElettronica17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 2.0cm 2.0cm 2.0cm;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="IT" link="#0563C1" vlink="#954F72" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal">Hi,<o:p></o:p></p>
<p class="MsoNormal">we're trying to administrate Red Hat Enterprise Linux 8.4 servers using the Unix Connector and we're experiencing the following issue.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">The configuration of the resource was implemented according to the samples available in midPoint repository: user (midpoint_users) with his password are configured, the option "Host user is root user?" is set to false and the sudo password
is setted (obviously all the other attributes are correctly configured, too). <o:p>
</o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Using this configuration, the connection is successful but once I click into the "Account" tab, midPoint doesn't list accounts with the following fatal error:<o:p></o:p></p>
<p class="MsoNormal"><i>Couldn't list objectsErrorError communicating with the connector ConnectorInstanceIcfImpl(connector:00335ff5-fd22-46b5-8e09-ff3d21a39f49(ConnId org.connid.bundles.unix.UnixConnector v1.1-SNAPSHOT)): Operation timed out: org.identityconnectors.framework.common.exceptions.OperationTimeoutException(java.util.concurrent.TimeoutException)->java.util.concurrent.TimeoutException(null).<o:p></o:p></i></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Logging into the target server and reading the "secure" file (auth.log) I see the following behavior:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">When midPoint tests connection toward the target server, in the log file results "<i>Accepted password for midpoint_user from ipaddress port 1234 ssh2</i>", "<i>pam_unix(sshd:session): session opened for user midpoint_user by (uid=0)</i>";<o:p></o:p></p>
<p class="MsoNormal">When midPoint tries to list objects in Account section, in the log file results "<i>pam_unix(sudo:auth): conversation failed</i>", "<i>pam_unix(sudo:auth): auth could not identify password for [midpoint_user ]</i>"<o:p></o:p></p>
<p class="MsoNormal">It's like midPoint couldn't run SUDO command or something else.<o:p></o:p></p>
<p class="MsoNormal">In fact, we have tried to set the option "Host user is root user?" to true (with the same user of the previously attempts) and midPoint can list accounts, but is not able to read permissions and especially it can't create users on target
server.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">N.B.: the user that we are using for this resource configuration has already all the necessary permissions for read and create users; directly from the server terminal the midpoint_user is able to do SUDO, read accounts, permissions and
create users.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">We have tried a lot of different configurations but nothing seems to work.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Thank you in advance,<o:p></o:p></p>
<p class="MsoNormal">Marianna<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" style="background:white;border-collapse:collapse">
<tbody>
<tr>
<td width="104" rowspan="6" style="width:77.75pt;padding:0cm 5.4pt 0cm 5.4pt">
<p class="MsoNormal" style="text-align:justify"><span style="mso-fareast-language:IT"><img width="93" height="85" style="width:.9702in;height:.8869in" id="Immagine_x0020_1" src="cid:image001.png@01D7CBF6.868140D0"></span><span style="mso-fareast-language:IT"><o:p></o:p></span></p>
</td>
<td width="274" style="width:205.5pt;padding:0cm 5.4pt 0cm 5.4pt">
<p class="MsoNormal" style="text-align:justify"><span style="mso-fareast-language:IT"><o:p> </o:p></span></p>
<p class="MsoNormal" style="text-align:justify"><b><span lang="EN-US" style="font-size:9.0pt;font-family:"Open Sans",sans-serif;color:#336699;border:none windowtext 1.0pt;padding:0cm;mso-fareast-language:IT">MARIANNA DE BIASIO</span></b><span style="mso-fareast-language:IT"><o:p></o:p></span></p>
</td>
</tr>
<tr>
<td width="274" style="width:205.5pt;padding:0cm 5.4pt 0cm 5.4pt">
<p class="MsoNormal" style="text-align:justify"><span lang="EN-US" style="font-size:9.0pt;font-family:"Open Sans",sans-serif;color:#A6A6A6;border:none windowtext 1.0pt;padding:0cm;mso-fareast-language:IT">TEAM LEADER & IAM ENGINEER</span><span style="mso-fareast-language:IT"><o:p></o:p></span></p>
</td>
</tr>
<tr>
<td width="274" style="width:205.5pt;padding:0cm 5.4pt 0cm 5.4pt">
<p class="MsoNormal" style="text-align:justify"><span lang="EN-US" style="font-size:7.0pt;font-family:"Open Sans",sans-serif;color:#336699;border:none windowtext 1.0pt;padding:0cm;mso-fareast-language:IT">MAIL: </span><span lang="EN-US" style="font-size:7.0pt;font-family:"Open Sans",sans-serif;color:black;border:none windowtext 1.0pt;padding:0cm;mso-fareast-language:IT"><a href="mailto:JOHN.DOHE@INNOVERY.NET" target="_blank"><span style="color:blue">MARIANNA.DEBIASIO@INNOVERY.NET</span></a></span><span style="mso-fareast-language:IT"><o:p></o:p></span></p>
</td>
</tr>
<tr>
<td width="274" style="width:205.5pt;padding:0cm 5.4pt 0cm 5.4pt">
<p class="MsoNormal" style="text-align:justify"><span lang="EN-US" style="font-size:7.0pt;font-family:"Open Sans",sans-serif;color:#336699;border:none windowtext 1.0pt;padding:0cm;mso-fareast-language:IT">PHONE:</span><span lang="EN-US" style="font-size:7.0pt;font-family:"Open Sans",sans-serif;color:black;border:none windowtext 1.0pt;padding:0cm;mso-fareast-language:IT"> +39
06 51963439</span><span style="mso-fareast-language:IT"><o:p></o:p></span></p>
</td>
</tr>
<tr>
<td width="274" style="width:205.5pt;padding:0cm 5.4pt 0cm 5.4pt"></td>
</tr>
<tr>
<td width="274" style="width:205.5pt;padding:0cm 5.4pt 0cm 5.4pt">
<p class="MsoNormal" style="text-align:justify"><span lang="EN-US" style="font-size:7.0pt;font-family:"Open Sans",sans-serif;color:black;border:none windowtext 1.0pt;padding:0cm;mso-fareast-language:IT"> </span><span style="mso-fareast-language:IT"><o:p></o:p></span></p>
</td>
</tr>
<tr>
<td width="378" colspan="2" style="width:283.25pt;padding:0cm 5.4pt 0cm 5.4pt">
<p class="MsoNormal"><span style="font-size:6.5pt;font-family:"Open Sans",sans-serif;color:#336699;border:none windowtext 1.0pt;padding:0cm;mso-fareast-language:IT"><a href="http://www.innovery.net/" target="_blank"><span style="color:blue">WWW.INNOVERY.NET</span></a></span><span style="mso-fareast-language:IT"><o:p></o:p></span></p>
</td>
</tr>
<tr>
<td width="378" colspan="2" style="width:283.25pt;padding:0cm 5.4pt 0cm 5.4pt">
<p class="MsoNormal"><span style="font-size:7.0pt;font-family:"Open Sans",sans-serif;color:#A6A6A6;border:none windowtext 1.0pt;padding:0cm;mso-fareast-language:IT">STRADA QUATTRO SNC, PAL A6</span><span style="mso-fareast-language:IT"><o:p></o:p></span></p>
</td>
</tr>
<tr>
<td width="378" colspan="2" style="width:283.25pt;padding:0cm 5.4pt 0cm 5.4pt">
<p class="MsoNormal"><span style="font-size:7.0pt;font-family:"Open Sans",sans-serif;color:#A6A6A6;border:none windowtext 1.0pt;padding:0cm;mso-fareast-language:IT">CENTRO DIREZIONALE MILANOFIORI | 20057 ASSAGO (MI)</span><span style="mso-fareast-language:IT"><o:p></o:p></span></p>
</td>
</tr>
<tr>
<td width="378" colspan="2" style="width:283.25pt;padding:0cm 5.4pt 0cm 5.4pt">
<p class="MsoNormal"><span style="font-size:5.0pt;font-family:inherit;color:black;border:none windowtext 1.0pt;padding:0cm;mso-fareast-language:IT"> </span><span style="mso-fareast-language:IT"><o:p></o:p></span></p>
</td>
</tr>
<tr>
<td width="378" colspan="2" style="width:283.25pt;padding:0cm 5.4pt 0cm 5.4pt">
<p class="MsoNormal"><span style="color:black;mso-fareast-language:IT"><img border="0" width="261" height="27" style="width:2.7202in;height:.2797in" id="Immagine_x0020_2" src="cid:image002.png@01D7CBF6.868140D0"></span><span style="mso-fareast-language:IT"><o:p></o:p></span></p>
</td>
</tr>
</tbody>
</table>
<p class="MsoNormal" style="background:white;vertical-align:baseline"><span style="color:#201F1E;mso-fareast-language:IT"><o:p> </o:p></span></p>
<p class="MsoNormal" style="background:white"><i><span style="font-size:9.0pt;font-family:inherit;color:#999999;border:none windowtext 1.0pt;padding:0cm;mso-fareast-language:IT">This e-mail and any attachments is confidential and may contain privileged information
intended for the addressee(s) only. Dissemination, copying, printing or use by anybody else is unauthorized. If you are not the intended recipient, please delete this message and any attachments and advise the sender by return e-mail, Thanks. </span></i><b><i><span style="font-size:8.0pt;font-family:inherit;color:#70AD47;border:none windowtext 1.0pt;padding:0cm;mso-fareast-language:IT">Respect
the environment. Do not print this mail if it is not necessary.</span></i></b><span style="color:#201F1E;mso-fareast-language:IT"><o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>