userCreate - PAM/Sudo Issue
Nobody has claimed this yet.
- Dominant language
- Markdown
- Stars
- 46
- Forks
- 40
- Avg merge
- 4h 3m
- Merged PRs (30d)
- 6
Description
Hello everyone,
I'm facing an Issue with spinning up the rstudio-workbench helm chart when deploying it with the Option userCreate = true . The creation of the local user goes through but the when it come to changing the password I see an error in the logs when spinning up the pod:
+ '[' -z rstudio ']'
+ useradd -m -s /bin/bash -N -u 10000 rstudio
+ echo rstudio:rstudio
+ sudo chpasswd
sudo: unable to send audit message
sudo: pam_open_session: System error
sudo: policy plugin failed session initialization
+ deactivate
+ echo '== Exiting =='
+ rstudio-server stop
Plattform: Openshift 4.10.22
UDPATE 1:
I was able to change the password of the local "rstudio" user with usermod --password rstudio rstudio but still cant login via the web gui.
Error: Incorrect or invalid username/password
UDPATE 2:
Testing the pam login with /usr/lib/rstudio-server/bin/pamtester --verbose rstudio rstudio authenticate reveals the follwing:
pamtester: invoking pam_start(rstudio, rstudio, ...)
pamtester: performing operation - authenticate
Password:
pamtester: System error
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start with the Helm chart's userCreate=true startup path and the pod log around useradd, sudo chpasswd, and PAM session initialization; reproduce the authentication failure with the mentioned pamtester command. Done means the local rstudio user is created successfully and can log in through the web GUI on OpenShift.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- helm, kubernetes
- Domain
- authentication, devops
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100