xen discuss - Jun 2009 - Gnome-login to osol DomU fails, refusing valid credentials

i''ve managed to get 2009.06 installed in a Xen DomU on Linux Dom0.

it''s currently ''up'' with a static IP, and i can
successfully ssh into
the box as either root or ''myuser''.

all network/login settings seem to survive reboot.

i''ve set up for VNC to the DomU.

i can connect, and am at the Gnome login window.  but, neither
''myuser'', or root, credentials are accepted @ Gnome login.   i
simply
get "Incorrect username or password".

any hints as to what add''l magic is req''d to get the
credentials accepted?

thanks.

2009/6/4 PGNet Dev
<pgnet.dev+opensolaris@gmail.com>:
> i''ve managed to get 2009.06 installed in a Xen DomU on Linux Dom0.
>
> it''s currently ''up'' with a static IP, and i can
successfully ssh into
> the box as either root or ''myuser''.
>
> all network/login settings seem to survive reboot.
>
> i''ve set up for VNC to the DomU.
>
> i can connect, and am at the Gnome login window.  but, neither
> ''myuser'', or root, credentials are accepted @ Gnome
login.   i simply
> get "Incorrect username or password".
>
> any hints as to what add''l magic is req''d to get the
credentials accepted?
For the problem with the "root" login:

"root" is a "role" in opensolaris and is not allowed to
login.  This is
defined by the "type=role;" setting in /etc/user_attr.  If you remove
it,
root becomes a normal user account and is allowed to login.


And with "myuser":

Are you using a non-US-english layout keyboard on the vncviewer side,
and are there perhaps any characters used in the password that do not
exist on an US-english layout keyboard?  Could it be a keyboard mapping
issue?

I was able to setup resumable vnc session to OSOL 2009.06 DomU :-
Logged in as user1.

$ vncserver
$ cd .vnc

Created xstartup :-

# !/usr/bin/ksh
exec /usr/bin/dtstart jds

Restarted vncserver.

This way doesn''t involve Gnome login window, just vncserver
authorization password for particular user''s desktop.

Vncserver password gets accepted on any box of the LAN.

Boris


--- On Thu, 6/4/09, PGNet Dev <pgnet.dev+opensolaris@gmail.com> wrote:

From: PGNet Dev <pgnet.dev+opensolaris@gmail.com>
Subject: [xen-discuss] Gnome-login to osol DomU fails, refusing valid
credentials
To: xen-discuss@opensolaris.org
Date: Thursday, June 4, 2009, 2:40 AM

i''ve managed to get 2009.06 installed in a Xen DomU on Linux Dom0.

it''s currently ''up'' with a static IP, and i can
successfully ssh into
the box as either root or ''myuser''.

all network/login settings seem to survive reboot.

i''ve set up for VNC to the DomU.

i can connect, and am at the Gnome login window.  but, neither
''myuser'', or root, credentials are accepted @ Gnome login.   i
simply
get "Incorrect username or password".

any hints as to what add''l magic is req''d to get the
credentials accepted?

thanks.
_______________________________________________
xen-discuss mailing list
xen-discuss@opensolaris.org

hi,

On Thu, Jun 4, 2009 at 12:06 AM, Juergen Keil <jrgn.keil@googlemail.com>
wrote:
> For the problem with the "root" login:
>
> "root" is a "role" in opensolaris and is not allowed to
login.  This is
> defined by the "type=role;" setting in /etc/user_attr.  If you
remove it,
> root becomes a normal user account and is allowed to login.
yep.  i''ve already tried both cases of root usage.  in either case i
_can_ login @ ssh, but _not_ via Gnome Login.
> And with "myuser":
>
> Are you using a non-US-english layout keyboard on the vncviewer side,
> and are there perhaps any characters used in the password that do not
> exist on an US-english layout keyboard?  Could it be a keyboard mapping
> issue?
nope. it''s an english/us keyboard, and the username & password are
all
ascii chars.

the keyboard, vnc viewer, and password are all used in other VNC
connects, both standalone and Xen DomU without any problem.

On Thu, Jun 4, 2009 at 2:29 AM, Boris Derzhavets <bderzhavets@yahoo.com>
wrote:
> I was able to setup resumable vnc session to OSOL 2009.06 DomU :-
per your suggestion,

login as myuser
start vncserver
  set ''password''

cat  /export/home/myuser/.vnc/xstartup
 #!/bin/sh
 [ -r \$HOME/.Xresources ] && xrdb \$HOME/.Xresources
 xsetroot -solid grey
 vncconfig -iconic &
 xterm -geometry 80x24+10+10 -ls -title "\$VNCDESKTOP Desktop" &
 exec /usr/bin/dtstart jds

restart vncserver
connect via VNC viewer

successfully @ desktop!

so, this is clearly an option.

still, though, doesn''t explain why Gnome Login manager refuses ... :-/

thanks.

i just noticed the following ...

after a shell-launch of vncserver,

  testuser@opensolaris:~$ vncserver

	New ''opensolaris:1 ()'' desktop is opensolaris:1
	
	Starting applications specified in /export/home/testuser/.vnc/xstartup
	Log file is /export/home/testuser/.vnc/opensolaris:1.log

i _can_ connect via VNC viewer to the desktop.

a few moments later, @ shell prompt, i note,

  testuser@opensolaris:~$ Jun  4 17:30:21 opensolaris
gnome-keyring-daemon[624]: couldn''t allocate secure memory to keep
passwords and or keys from being written to the disk


might that be a source of the can''t-login-at-Gnome issue?

Actually , ~jack/.Xclients file is :-

#!/bin/ksh
exec /usr/bin/dtstart jds

First installation  instruction :-
jack$ cp .Xclients  .vnc/xstartup

The rest of xstartup file doesn''t matter i believe.

As person too much focused on Ubuntu Servers (8.04,8.10,9.04) :-)
( due to Ubuntu 8.10 Server is a perfect target for the most recent Xen 3.4 (5) 
ports from my standpoint)  i always look for two things:-
1. Edit  /etc/gdm/gdm.conf to enable xdmcp and allow RemoteGreeter.
    /etc/init.d/gdm restart
2. Then create /etc/xinetd.d/Xvnc and restart xinetd.
    /etc/init.d/xinetd restart

Official Sun Guide for Nevada :-
http://opensolaris.org/os/community/xen/docs/setupvnc/

Turn on xdmcp via 
# svccfg -s cde-login
svc:/application/graphical-login/cde-login>
svc:/application/graphical-login/cde-login> setprop dtlogin/args=""
That should be done in some different way on OSOL . Some set of svccfg commands
properly tuning "gdm". 


--- On Thu, 6/4/09, PGNet Dev <pgnet.dev+opensolaris@gmail.com> wrote:

From: PGNet Dev <pgnet.dev+opensolaris@gmail.com>
Subject: Re: [xen-discuss] Gnome-login to osol DomU fails, refusing valid 
credentials
To: "Boris Derzhavets" <bderzhavets@yahoo.com>, "Juergen
Keil" <jrgn.keil@googlemail.com>
Cc: xen-discuss@opensolaris.org
Date: Thursday, June 4, 2009, 11:42 AM

hi,

On Thu, Jun 4, 2009 at 12:06 AM, Juergen Keil <jrgn.keil@googlemail.com>
wrote:
> For the problem with the "root" login:
>
> "root" is a "role" in opensolaris and is not allowed to
login.  This is
> defined by the "type=role;" setting in /etc/user_attr.  If you
remove it,
> root becomes a normal user account and is allowed to login.
yep.  i''ve already tried both cases of root usage.  in either case i
_can_ login @ ssh, but _not_ via Gnome Login.
> And with "myuser":
>
> Are you using a non-US-english layout keyboard on the vncviewer side,
> and are there perhaps any characters used in the password that do not
> exist on an US-english layout keyboard?  Could it be a keyboard mapping
> issue?
nope. it''s an english/us keyboard, and the username & password are
all
ascii chars.

the keyboard, vnc viewer, and password are all used in other VNC
connects, both standalone and Xen DomU without any problem.

On Thu, Jun 4, 2009 at 2:29 AM, Boris Derzhavets <bderzhavets@yahoo.com>
wrote:
> I was able to setup resumable vnc session to OSOL 2009.06 DomU :-
per your suggestion,

login as myuser
start vncserver
  set ''password''

cat  /export/home/myuser/.vnc/xstartup
 #!/bin/sh
 [ -r \$HOME/.Xresources ] && xrdb \$HOME/.Xresources
 xsetroot -solid grey
 vncconfig -iconic &
 xterm -geometry 80x24+10+10 -ls -title "\$VNCDESKTOP Desktop" &
 exec /usr/bin/dtstart jds

restart vncserver
connect via VNC viewer

successfully @ desktop!

so, this is clearly an option.

still, though, doesn''t explain why Gnome Login manager refuses ... :-/

thanks.

On Thu, Jun 4, 2009 at 10:38 AM, Boris Derzhavets <bderzhavets@yahoo.com>
wrote:
> (5)  ports from my standpoint)  i always look for two things:-
yep.  per my earlier,
> i''ve set up for VNC to the DomU
i''d done most of that ... _was_ missing remote greeter enable.


now, (in, /etc/X11/gdm/custom.conf, not /etc/gdm/gdm.conf) i''ve,

	cat /etc/X11/gdm/custom.conf
		# GDM Custom Configuration file.
		# overrides: /usr/share/gdm/defaults.conf
		[daemon]
		RemoteGreeter=/usr/lib/gdmgreeter
		
		[security]
		DisallowTCP=false
		AllowRoot=true
		AllowRemoteRoot=true
		
		[xdmcp]
		Enable=true
		
		[gui]
		
		[greeter]
		
		[chooser]
		
		[debug]
		
		[servers]

then, after,

	svcadm disable xvnc-inetd gdm
	svcadm enable  xvnc-inetd gdm

	svcs xvnc-inetd gdm
		STATE          STIME    FMRI
		online         17:46:08 svc:/application/x11/xvnc-inetd:default
		online         17:46:08 svc:/application/graphical-login/gdm:default

i can connect again remotely via VNC.  i get the osol greeter
(http://tinyurl.com/pozwgp), rather than the generic Gnome Login
greeter, but -- still -- fail to login with my credentials :-/

the ''other method'', per above, gets me to the desktop just
fine.

I''ve just succeeded with Gnome login to DomU been following your
instructions.
DomU is running in DHCP mode. Same gnome-keyring-daemon message on the serial
console. Snapshot is attached. 
Environment :-
Xen 3.4.1 Dom0 with 2.6.30-rc6-tip pvops enabled kernel built on top Ubuntu
Jaunty
Server (64-bit).

Boris

--- On Thu, 6/4/09, PGNet Dev <pgnet.dev+opensolaris@gmail.com> wrote:

From: PGNet Dev <pgnet.dev+opensolaris@gmail.com>
Subject: Re: [xen-discuss] Gnome-login to osol DomU fails, refusing valid 
credentials
To: "Boris Derzhavets" <bderzhavets@yahoo.com>
Cc: xen-discuss@opensolaris.org
Date: Thursday, June 4, 2009, 1:56 PM

On Thu, Jun 4, 2009 at 10:38 AM, Boris Derzhavets <bderzhavets@yahoo.com>
wrote:
> (5)  ports from my standpoint)  i always look for two things:-
yep.  per my earlier,
> i''ve set up for VNC to the DomU
i''d done most of that ... _was_ missing remote greeter enable.


now, (in, /etc/X11/gdm/custom.conf, not /etc/gdm/gdm.conf) i''ve,

    cat /etc/X11/gdm/custom.conf
        # GDM Custom Configuration file.
        # overrides: /usr/share/gdm/defaults.conf
        [daemon]
        RemoteGreeter=/usr/lib/gdmgreeter
        
        [security]
        DisallowTCP=false
        AllowRoot=true
        AllowRemoteRoot=true
        
        [xdmcp]
        Enable=true
        
        [gui]
        
        [greeter]
        
        [chooser]
        
        [debug]
        
        [servers]

then, after,

    svcadm disable xvnc-inetd gdm
    svcadm enable  xvnc-inetd gdm

    svcs xvnc-inetd gdm
        STATE          STIME    FMRI
        online         17:46:08 svc:/application/x11/xvnc-inetd:default
        online         17:46:08 svc:/application/graphical-login/gdm:default

i can connect again remotely via VNC.  i get the osol greeter
(http://tinyurl.com/pozwgp), rather than the generic Gnome Login
greeter, but -- still -- fail to login with my credentials :-/

the ''other method'', per above, gets me to the desktop just
fine.

On Thu, Jun 4, 2009 at 12:16 PM, Boris Derzhavets<bderzhavets at
yahoo.com> wrote:
> I''ve just succeeded with Gnome login to DomU been following your
> instructions.
well, rats.  then it''s clearly some other/add''l problem on my
end.
what/why are both good questions, atm :-/

using the ''vncserver'' method, per above, logged in to the
desktop ...

after some period of time, the screensaver kicked in, and locked the desktop.

when i enter my creads at _that_ screen, it fails as well ...

   http://img40.imageshack.us/img40/5260/47779693.png

something''s clearly not kosher here.

Wait. It looks like screen saver. Just submit password and get back

--- On Thu, 6/4/09, PGNet Dev <pgnet.dev+opensolaris at gmail.com> wrote:

From: PGNet Dev <pgnet.dev+opensolaris at gmail.com>
Subject: Re: [xen-discuss] Gnome-login to osol DomU fails, refusing valid 
credentials
To: "Boris Derzhavets" <bderzhavets at yahoo.com>
Cc: xen-discuss at opensolaris.org
Date: Thursday, June 4, 2009, 3:28 PM

using the ''vncserver'' method, per above, logged in to the
desktop ...

after some period of time, the screensaver kicked in, and locked the desktop.

when i enter my creads at _that_ screen, it fails as well ...

???http://img40.imageshack.us/img40/5260/47779693.png

something''s clearly not kosher here.



      
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://mail.opensolaris.org/pipermail/xen-discuss/attachments/20090604/99b62c96/attachment.html>

On Thu, Jun 4, 2009 at 12:32 PM, Boris Derzhavets<bderzhavets@yahoo.com>
wrote:
> Wait. It looks like screen saver. Just submit password and get back
that''s my point.  i can''t.  credentials are refused (incorrect
username or password), and the screen ''dumps'' the
"RANDR" output you
see in the shot.  only way out is to kill the vnc session & reconnect
...

(and, figure out where to turn off the screensaver ...)

On Thu, Jun 4, 2009 at 12:47 PM, Boris Derzhavets<bderzhavets@yahoo.com>
wrote:
> I''ve reproduced your problem . It''s screen saver.
that looks like you''ve _not_ reproduced the problem -- rather,
(re)login at screensaver _works_ for you.  no?

Relogin at screensaver works for me.
But, i obviously didn''t reproduce your problem

--- On Thu, 6/4/09, PGNet Dev <pgnet.dev+opensolaris@gmail.com> wrote:

From: PGNet Dev <pgnet.dev+opensolaris@gmail.com>
Subject: Re: [xen-discuss] Gnome-login to osol DomU fails, refusing valid 
credentials
To: "Boris Derzhavets" <bderzhavets@yahoo.com>
Cc: xen-discuss@opensolaris.org
Date: Thursday, June 4, 2009, 3:57 PM

On Thu, Jun 4, 2009 at 12:47 PM, Boris Derzhavets<bderzhavets@yahoo.com>
wrote:
> I''ve reproduced your problem . It''s screen saver.
that looks like you''ve _not_ reproduced the problem -- rather,
(re)login at screensaver _works_ for you.  no?

On Thu, Jun 4, 2009 at 1:03 PM, Boris Derzhavets<bderzhavets@yahoo.com>
wrote:
> Relogin at screensaver works for me.
> But, i obviously didn''t reproduce your problem
we''ve clearly established that "everything" (re: these
logins, anyway)
works for you folks -- but not for me.

i''ll be darned if i can figure out what''s fundamentally
missing/different abt my install.