New issue
Advanced search Search tips

Issue 824204 link

Starred by 1 user
Status: Verified
Owner:
rsorokin@chromium.org
Closed: Apr 2018
Cc:
ljusten@chromium.org
Components:
EstimatedDays: ----
NextAction: ----
OS: Chrome
Pri: 1
Type: Bug



Sign in to add a comment

Chromad: Fix offline logon issues

Project Member Reported by ljusten@chromium.org, Mar 21 2018 
When having the chromebooks cache accounts, it allows them to login once when off the network but only once.

Steps to reproduce:
1. Join device to Active Directory
2. Authenticate with Active Directory user
3. Plug out network and sign out
4. Try to sign in-sign out two times

Expected:
All attempts should succeed

Observed:
Second attempt is impossible because online auth is forced

Comment 1 by rsorokin@chromium.org, Mar 21 2018

Status: Unconfirmed (was: Assigned)

Comment 2 by rsorokin@chromium.org, Mar 27 2018

Labels: -Pri-2 M-67 Pri-1
Status: Started (was: Unconfirmed)

Comment 3 by rsorokin@chromium.org, Mar 28 2018

Description: Show this description
Project Member

Comment 4 by bugdroid1@chromium.org, Apr 3 2018 

The following revision refers to this bug:
  https://chromium.googlesource.com/chromium/src.git/+/9ddc9992c3fa7b0468436f4b5b6acd80ab27a98d

commit 9ddc9992c3fa7b0468436f4b5b6acd80ab27a98d
Author: Roman Sorokin <rsorokin@chromium.org>
Date: Tue Apr 03 13:47:01 2018

Chromad: Do not force online signin on TGT problems

Now users are blocked on online signin when authpolicyd failed to get
kerberos credentials

BUG= chromium:824204 
TEST=AuthPolicyCredentialsManagerTest.*

Change-Id: Iae490a5615842aaae356e29501667453d86cd11c
Reviewed-on: https://chromium-review.googlesource.com/983917
Commit-Queue: Roman Sorokin <rsorokin@chromium.org>
Reviewed-by: Lutz Justen <ljusten@chromium.org>
Reviewed-by: Alexander Alekseev <alemate@chromium.org>
Cr-Commit-Position: refs/heads/master@{#547687}
[modify] https://crrev.com/9ddc9992c3fa7b0468436f4b5b6acd80ab27a98d/chrome/browser/chromeos/authpolicy/auth_policy_credentials_manager.cc
[modify] https://crrev.com/9ddc9992c3fa7b0468436f4b5b6acd80ab27a98d/chrome/browser/chromeos/authpolicy/auth_policy_credentials_manager_unittest.cc

Comment 5 by rsorokin@chromium.org, Apr 4 2018

Status: Fixed (was: Started)

Comment 6 by ibezmenov@chromium.org, Apr 17 2018

Status: Verified (was: Fixed)
Verified fixed. User can login offline multiple times, "Sign-in error" notification is displayed for every login attempt (see attachment).

2018-04-17T18:04:54.371842+00:00 INFO authpolicyd[31733]: authpolicyd stopping with exit code 0
2018-04-17T18:04:55.360868+00:00 INFO authpolicyd[32349]: libminijail[2]: mount / -> / type ''
2018-04-17T18:04:55.360887+00:00 INFO authpolicyd[32349]: libminijail[2]: mount /dev -> /dev type ''
2018-04-17T18:04:55.360895+00:00 INFO authpolicyd[32349]: libminijail[2]: mount /sys -> /sys type ''
2018-04-17T18:04:55.360902+00:00 INFO authpolicyd[32349]: libminijail[2]: mount /run -> /run type ''
2018-04-17T18:04:55.360908+00:00 INFO authpolicyd[32349]: libminijail[2]: mount /var -> /var type ''
2018-04-17T18:04:55.360915+00:00 INFO authpolicyd[32349]: libminijail[2]: mount /run/authpolicyd -> /run/authpolicyd type ''
2018-04-17T18:04:55.360921+00:00 INFO authpolicyd[32349]: libminijail[2]: mount /var/lib/authpolicyd -> /var/lib/authpolicyd type ''
2018-04-17T18:04:55.360928+00:00 INFO authpolicyd[32349]: libminijail[2]: mount /var/lib/metrics -> /var/lib/metrics type ''
2018-04-17T18:04:55.366003+00:00 INFO authpolicyd[32349]: Install attributes locked to Active Directory mode.
2018-04-17T18:04:55.366091+00:00 INFO authpolicyd[32349]: authpolicyd starting
2018-04-17T18:04:55.368001+00:00 INFO authpolicyd[32349]: Read configuration file '/var/lib/authpolicyd/config.dat'
2018-04-17T18:04:55.368434+00:00 INFO authpolicyd[32349]: Running scheduled machine password age check
2018-04-17T18:04:55.456844+00:00 INFO authpolicyd[32349]: libminijail[2]: child process 3 exited with status 255
2018-04-17T18:04:55.456965+00:00 ERR authpolicyd[32349]: net ads workgroup failed: network problem
2018-04-17T18:04:55.456983+00:00 ERR authpolicyd[32349]: Machine password check failed with error 19
2018-04-17T18:04:55.591757+00:00 INFO authpolicyd[32349]: #033[41;1;97mReceived 'RefreshDevicePolicy' request#033[0m
2018-04-17T18:04:55.713176+00:00 INFO authpolicyd[32349]: libminijail[2]: child process 5 exited with status 255
2018-04-17T18:04:55.713287+00:00 ERR authpolicyd[32349]: net ads workgroup failed: network problem
2018-04-17T18:04:55.713305+00:00 INFO authpolicyd[32349]: Device policy fetch and parsing failed with code 19
2018-04-17T18:05:01.709861+00:00 INFO authpolicyd[32349]: #033[41;1;97mReceived 'AuthenticateUser' request#033[0m
2018-04-17T18:05:01.805050+00:00 INFO authpolicyd[32349]: libminijail[2]: child process 7 exited with status 255
2018-04-17T18:05:01.805161+00:00 ERR authpolicyd[32349]: net ads workgroup failed: network problem
2018-04-17T18:05:01.805184+00:00 INFO authpolicyd[32349]: AuthenticateUser failed with code 19
2018-04-17T18:05:02.468721+00:00 INFO authpolicyd[32349]: #033[41;1;97mReceived 'GetUserStatus' request#033[0m
2018-04-17T18:05:02.468922+00:00 ERR authpolicyd[32349]: GetTgtLifetime failed - no credentials cache found
2018-04-17T18:05:02.468946+00:00 INFO authpolicyd[32349]: GetUserStatus succeeded
2018-04-17T18:05:02.475086+00:00 INFO authpolicyd[32349]: #033[41;1;97mReceived 'GetUserKerberosFiles' request#033[0m
2018-04-17T18:05:02.475189+00:00 INFO authpolicyd[32349]: GetUserKerberosFiles succeeded
2018-04-17T18:05:02.499598+00:00 INFO authpolicyd[32349]: #033[41;1;97mReceived 'RefreshUserPolicy' request#033[0m
2018-04-17T18:05:02.499642+00:00 ERR authpolicyd[32349]: User not logged in. Please call AuthenticateUser() first.
2018-04-17T18:05:02.499654+00:00 INFO authpolicyd[32349]: User policy fetch and parsing failed with code 16

Chrome OS: 10575.4.0
Chrome: 67.0.3396.8
Device: Paine
Screenshot 2018-04-17 at 11.05.08 AM.png
106 KB View Download
►

Sign in to add a comment