rstudio / rstudio/helm

userCreate - PAM/Sudo Issue

Open
#265 4 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

team: workbench
Dominant language
Markdown
Stars
46
Forks
40
Avg merge
4h 3m
Merged PRs (30d)
6

Description

Hello everyone,

I'm facing an Issue with spinning up the rstudio-workbench helm chart when deploying it with the Option userCreate = true . The creation of the local user goes through but the when it come to changing the password I see an error in the logs when spinning up the pod:

+ '[' -z rstudio ']'
+ useradd -m -s /bin/bash -N -u 10000 rstudio
+ echo rstudio:rstudio
+ sudo chpasswd
sudo: unable to send audit message
sudo: pam_open_session: System error
sudo: policy plugin failed session initialization
+ deactivate
+ echo '== Exiting =='
+ rstudio-server stop

Plattform: Openshift 4.10.22


UDPATE 1:

I was able to change the password of the local "rstudio" user with usermod --password rstudio rstudio but still cant login via the web gui.

Error: Incorrect or invalid username/password


UDPATE 2:

Testing the pam login with /usr/lib/rstudio-server/bin/pamtester --verbose rstudio rstudio authenticate reveals the follwing:

pamtester: invoking pam_start(rstudio, rstudio, ...)
pamtester: performing operation - authenticate
Password: 
pamtester: System error

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start with the Helm chart's userCreate=true startup path and the pod log around useradd, sudo chpasswd, and PAM session initialization; reproduce the authentication failure with the mentioned pamtester command. Done means the local rstudio user is created successfully and can log in through the web GUI on OpenShift.

Written by the indexing model from the issue text.

Assessment

Tech stack
helm, kubernetes
Domain
authentication, devops
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.