authd icon indicating copy to clipboard operation
authd copied to clipboard

GDM: Log in with new user fails without error message when offline

Open adombeck opened this issue 7 months ago • 0 comments

Is there an existing issue for this?

  • [x] I have searched the existing issues and found none that matched mine

Describe the issue

While testing authd 0.5.0, I noticed that we still don't display an error message when the user tries to login via any non-local with a user for the first time (so there is no local password yet). That's not a regression, I confirmed that authd 0.4.1 behaves the same.

I'm pretty sure we filed an issue for that before, but I couldn't find it.

Steps to reproduce

No response

System information and logs

authd version

authd	0.4.1

authd-msentraid broker version

name:      authd-msentraid
summary:   Authd - MS Entra ID Cloud Authentication for Ubuntu
publisher: --
store-url: https://snapcraft.io/authd-msentraid
license:   GPL-3.0
description: |
  Authd is a powerful authentication service for Ubuntu, designed to
  integrate with cloud identity providers like
  Microsoft Entra ID. It delivers a secure, flexible solution for
  organizations and individuals who are transitioning
  to cloud-based identity management on Ubuntu workstations and servers.
  Authd uses the OAuth Device Authorization Grant and ensures a consistent
  and secure login experience across
  Ubuntu Desktop and Server — whether through GDM, SSH, or network services
  like NFS and Samba.
  
  Key Features
  * Cloud identity provider Integration: Connects with Microsoft Entra ID
  * Secure Login: Authd leverages the OAuth Device Authorization Grant RFC
  8628-compliant workflows for reliability
    and security.
  * Open-Source: Free and community-driven, with contributions welcomed.
  * Enterprise ready: Ubuntu Pro customers will benefit from the same
  expanded security and support guarantees.
  * Authd is free for all Ubuntu Desktop and Server 24.04 LTS users and is
  under active development.
    Explore the official documentation for installation and configuration
    steps, or visit the GitHub repository to
    contribute or provide feedback.
services:
  authd-msentraid: simple, enabled, active
refresh-date: yesterday at 20:25 CEST
channels:
  0.x/stable:    0.2.0+33feab0.0d0d6c7 2025-02-03 (137) 19MB -
  0.x/candidate: ^                                           
  0.x/beta:      ^                                           
  0.x/edge:      0.2.0+09003c5.72a7227 2025-05-20 (195) 20MB -
installed:       0.2.0+09003c5.72a7227             (x6) 20MB -

gnome-shell version

gnome-shell:
  Installed: 46.3.1-1ubuntu1~24.04.1authd2
  Candidate: 46.3.1-1ubuntu1~24.04.1authd2
  Version table:
 *** 46.3.1-1ubuntu1~24.04.1authd2 500
        500 https://ppa.launchpadcontent.net/ubuntu-enterprise-desktop/authd/ubuntu noble/main amd64 Packages
        100 /var/lib/dpkg/status
     46.0-0ubuntu6~24.04.9 500 (phased 60%)
        500 http://archive.ubuntu.com/ubuntu noble-updates/main amd64 Packages
     46.0-0ubuntu6~24.04.3 500
        500 http://security.ubuntu.com/ubuntu noble-security/main amd64 Packages
     46.0-0ubuntu5 500
        500 http://archive.ubuntu.com/ubuntu noble/main amd64 Packages

Distribution

Distributor ID:	Ubuntu
Description:	Ubuntu 24.04.2 LTS
Release:	24.04
Codename:	noble

Logs

[17131.326512] ubuntu authd-msentraid[16156]: Starting to serve requests
[17131.327057] ubuntu authd-msentraid[16156]: Serving requests as com.ubuntu.authd.MSEntraID
[17752.213841] ubuntu systemd[1]: Stopping authd.service - Authd daemon service...
[17752.217730] ubuntu authd[10848]: Stopping daemon requested.
[17752.219526] ubuntu authd[10848]: Wait for active requests to close.
[17752.220061] ubuntu authd[10848]: All connections have now ended.
[17752.220222] ubuntu authd[10848]: Closing gRPC manager and database
[17752.220328] ubuntu authd[10848]: Closing database
[17752.236238] ubuntu systemd[1]: authd.service: Deactivated successfully.
[17752.236648] ubuntu systemd[1]: Stopped authd.service - Authd daemon service.
[17752.236876] ubuntu systemd[1]: authd.service: Consumed 6.079s CPU time, 8.7M memory peak, 0B memory swap peak.
[17834.327439] ubuntu gdm-authd][56697]: PAM unable to dlopen(pam_authd.so): /usr/lib/security/pam_authd.so: cannot open shared object file: No such file or directory
[17834.330256] ubuntu gdm-authd][56697]: PAM adding faulty module: pam_authd.so
[17869.298470] ubuntu gdm-authd][56782]: PAM unable to dlopen(pam_authd.so): /usr/lib/security/pam_authd.so: cannot open shared object file: No such file or directory
[17869.299501] ubuntu gdm-authd][56782]: PAM adding faulty module: pam_authd.so
[17935.640461] ubuntu systemd[1]: Starting authd.service - Authd daemon service...
[17935.736223] ubuntu authd[57154]: Using configuration file: /etc/authd/authd.yaml
[17935.737032] ubuntu authd[57154]: Verbosity: 2
[17935.737138] ubuntu authd[57154]: Both bbolt and SQLite databases exist in "/var/lib/authd/", can't migrate
[17935.737255] ubuntu authd[57154]: Building authd object
[17935.737847] ubuntu authd[57154]: Building broker detection
[17935.738069] ubuntu authd[57154]: Auto-detecting brokers
[17935.738161] ubuntu authd[57154]: Loading broker from "/etc/authd/brokers.d/google.conf"
[17935.738713] ubuntu authd[57154]: D-Bus broker configuration at "/etc/authd/brokers.d/google.conf"
[17935.738908] ubuntu authd[57154]: Loading broker from "/etc/authd/brokers.d/msentraid.conf"
[17935.739034] ubuntu authd[57154]: D-Bus broker configuration at "/etc/authd/brokers.d/msentraid.conf"
[17935.739364] ubuntu authd[57154]: Creating user manager with config: {UIDMin:1000000000 UIDMax:1999999999 GIDMin:1000000000 GIDMax:1999999999}
[17935.740138] ubuntu authd[57154]: Building new gRPC NSS service
[17935.740669] ubuntu authd[57154]: Building new gRPC PAM service
[17935.740861] ubuntu authd[57154]: Building new daemon
[17935.741586] ubuntu authd[57154]: Use socket activation
[17935.741834] ubuntu authd[57154]: Registering gRPC services
[17935.741901] ubuntu authd[57154]: Starting to serve requests on /run/authd.sock
[17935.742104] ubuntu systemd[1]: Started authd.service - Authd daemon service.
[17935.742574] ubuntu authd[57154]: Ready state sent to systemd
[17935.743459] ubuntu authd[57154]: Serving gRPC requests on /run/authd.sock
[17945.997376] ubuntu gdm-authd][57748]: accountsservice: ActUserManager: user (null) has no username (uid: -1)
[17951.031146] ubuntu authd-msentraid[16156]: Could not connect to the provider: Get "https://login.microsoftonline.com/<UUID redacted>/v2.0/.well-known/openid-configuration": context deadline exceeded. Starting session in offline mode.
[17951.031715] ubuntu authd[57154]: 2102147668-<UUID redacted>: New session for "[email protected]"
[17953.269179] ubuntu authd-msentraid[16156]: Authentication failure: incorrect local password for user "[email protected]"
[17953.269562] ubuntu authd-msentraid[16156]: IsAuthenticated: retry
[17953.269648] ubuntu authd[57154]: 2102147668-<UUID redacted>: Authentication result: retry
[17956.016927] ubuntu authd-msentraid[16156]: Could not fetch user info: session is in offline mode. Using cached user info.
[17956.017496] ubuntu authd-msentraid[16156]: IsAuthenticated: granted
[17956.017992] ubuntu authd[57154]: 2102147668-<UUID redacted>: Authentication result: granted
[17956.018910] ubuntu authd[57154]: Updating entry of user "[email protected]" (UID: 1736005146)
[17956.019326] ubuntu authd[57154]: Updating user [email protected]
[17956.019935] ubuntu authd[57154]: Updating entry of group "[email protected]" ({Name:[email protected] GID:1499334545 UGID:[email protected]})
[17956.020116] ubuntu authd[57154]: Updating entry of group "test-group" ({Name:test-group GID:1935611084 UGID:<UUID redacted>})
[17956.020248] ubuntu authd[57154]: Adding user 1736005146 to group 1499334545
[17956.020349] ubuntu authd[57154]: Adding user 1736005146 to group 1935611084
[17956.026963] ubuntu authd[57154]: Updating local groups for user "[email protected]", new groups: [users sudo lpadmin], old groups: [lpadmin sudo users]
[17956.027263] ubuntu authd[57154]: Adding to local groups: []
[17956.027347] ubuntu authd[57154]: Removing from local groups: []
[17956.055938] ubuntu authd[57154]: 2102147668-<UUID redacted>: End session "Microsoft Entra ID"
[17956.129576] ubuntu gdm-authd][57748]: gkr-pam: no password is available for user
[17956.174140] ubuntu gdm-authd][57748]: accountsservice: act_user_set_session: assertion 'ACCOUNTS_IS_USER (user->accounts_proxy)' failed
[17956.180418] ubuntu gdm-authd][57748]: Gdm: could not save session and language settings
[17956.200158] ubuntu gdm-authd][57748]: pam_intune(gdm-authd:session): No authtok available; password policies will fail: No module specific data is present
[17956.202317] ubuntu gdm-authd][57748]: pam_unix(gdm-authd:session): session opened for user [email protected](uid=1736005146) by [email protected](uid=0)
[17956.637554] ubuntu gdm-authd][57748]: gkr-pam: couldn't unlock the login keyring.
[17970.152618] ubuntu authd[57154]: 2102147668-<UUID redacted>: New session for "[email protected]"
[17970.154550] ubuntu authd-msentraid[16156]: Authentication mode "device_auth" is not supported by the UI
[17970.784995] ubuntu authd[57154]: 2102147668-<UUID redacted>: End session "Microsoft Entra ID"
[17972.293588] ubuntu authd[57154]: 2102147668-<UUID redacted>: New session for "[email protected]"
[17972.295325] ubuntu authd-msentraid[16156]: Authentication mode "device_auth" is not supported by the UI
[17974.285621] ubuntu authd-msentraid[16156]: Getting user groups from Microsoft Graph API
[17975.434084] ubuntu authd-msentraid[16156]: Got groups: test-group
[17975.434597] ubuntu authd-msentraid[16156]: IsAuthenticated: granted
[17975.435066] ubuntu authd[57154]: 2102147668-<UUID redacted>: Authentication result: granted
[17975.435362] ubuntu authd[57154]: Updating entry of user "[email protected]" (UID: 1736005146)
[17975.435442] ubuntu authd[57154]: Updating user [email protected]
[17975.435655] ubuntu authd[57154]: Updating entry of group "[email protected]" ({Name:[email protected] GID:1499334545 UGID:[email protected]})
[17975.435765] ubuntu authd[57154]: Updating entry of group "test-group" ({Name:test-group GID:1935611084 UGID:<UUID redacted>})
[17975.435850] ubuntu authd[57154]: Adding user 1736005146 to group 1499334545
[17975.435902] ubuntu authd[57154]: Adding user 1736005146 to group 1935611084
[17975.455366] ubuntu authd[57154]: Updating local groups for user "[email protected]", new groups: [], old groups: [lpadmin sudo users]
[17975.455560] ubuntu authd[57154]: Adding to local groups: []
[17975.455621] ubuntu authd[57154]: Removing from local groups: [lpadmin sudo users]
[17975.478864] ubuntu gpasswd[59611]: user [email protected] removed by root from group lpadmin
[17975.500907] ubuntu gpasswd[59617]: user [email protected] removed by root from group sudo
[17975.523624] ubuntu gpasswd[59623]: user [email protected] removed by root from group users
[17975.526126] ubuntu authd[57154]: 2102147668-<UUID redacted>: End session "Microsoft Entra ID"
[18022.368199] ubuntu authd[57154]: rpc error: code = NotFound desc = 
[18024.483037] ubuntu authd[57154]: rpc error: code = NotFound desc = 
[18024.616178] ubuntu authd[57154]: rpc error: code = NotFound desc = 
[18085.048015] ubuntu authd[57154]: rpc error: code = NotFound desc = 
[18085.144647] ubuntu authd[57154]: rpc error: code = NotFound desc = 
[18243.655920] ubuntu gdm-authd][57748]: pam_unix(gdm-authd:session): session closed for user [email protected]
[18249.287446] ubuntu gdm-authd][85103]: pam_intune(gdm-authd:auth): Creating auth context
[18249.292963] ubuntu gdm-authd][85103]: gkr-pam: unlocked login keyring
[18701.575043] ubuntu systemd[1]: Stopping authd.service - Authd daemon service...
[18701.575853] ubuntu authd[57154]: Stopping daemon requested.
[18701.576205] ubuntu authd[57154]: Wait for active requests to close.
[18701.576277] ubuntu authd[57154]: All connections have now ended.
[18701.576343] ubuntu authd[57154]: Closing gRPC manager and database
[18701.576398] ubuntu authd[57154]: Closing database
[18701.580098] ubuntu systemd[1]: authd.service: Deactivated successfully.
[18701.580559] ubuntu systemd[1]: Stopped authd.service - Authd daemon service.
[18701.580842] ubuntu systemd[1]: authd.service: Consumed 5.550s CPU time, 11.3M memory peak, 0B memory swap peak.
[18722.014411] ubuntu systemd[1]: Starting authd.service - Authd daemon service...
[18722.109947] ubuntu authd[88360]: Using configuration file: /etc/authd/authd.yaml
[18722.110465] ubuntu authd[88360]: Verbosity: 2
[18722.110526] ubuntu authd[88360]: Both bbolt and SQLite databases exist in "/var/lib/authd/", can't migrate
[18722.110575] ubuntu authd[88360]: Building authd object
[18722.110615] ubuntu authd[88360]: Building broker detection
[18722.110969] ubuntu authd[88360]: Auto-detecting brokers
[18722.111089] ubuntu authd[88360]: Loading broker from "/etc/authd/brokers.d/google.conf"
[18722.111146] ubuntu authd[88360]: D-Bus broker configuration at "/etc/authd/brokers.d/google.conf"
[18722.111191] ubuntu authd[88360]: Loading broker from "/etc/authd/brokers.d/msentraid.conf"
[18722.111233] ubuntu authd[88360]: D-Bus broker configuration at "/etc/authd/brokers.d/msentraid.conf"
[18722.111299] ubuntu authd[88360]: Creating user manager with config: {UIDMin:1000000000 UIDMax:1999999999 GIDMin:1000000000 GIDMax:1999999999}
[18722.111701] ubuntu authd[88360]: Building new gRPC NSS service
[18722.111790] ubuntu authd[88360]: Building new gRPC PAM service
[18722.111862] ubuntu authd[88360]: Building new daemon
[18722.111936] ubuntu authd[88360]: Use socket activation
[18722.112028] ubuntu authd[88360]: Registering gRPC services
[18722.112100] ubuntu authd[88360]: Starting to serve requests on /run/authd.sock
[18722.112166] ubuntu authd[88360]: Ready state sent to systemd
[18722.112233] ubuntu authd[88360]: Serving gRPC requests on /run/authd.sock
[18722.112300] ubuntu systemd[1]: Started authd.service - Authd daemon service.
[18725.197859] ubuntu authd[88360]: Stopping daemon requested.
[18725.198208] ubuntu authd[88360]: Wait for active requests to close.
[18725.198292] ubuntu systemd[1]: Stopping authd.service - Authd daemon service...
[18725.198502] ubuntu authd[88360]: All connections have now ended.
[18725.198556] ubuntu authd[88360]: Closing gRPC manager and database
[18725.198609] ubuntu authd[88360]: Closing database
[18725.201350] ubuntu systemd[1]: authd.service: Deactivated successfully.
[18725.201782] ubuntu systemd[1]: Stopped authd.service - Authd daemon service.
[18748.886580] ubuntu systemd[1]: Starting authd.service - Authd daemon service...
[18748.986383] ubuntu authd[89054]: Using configuration file: /etc/authd/authd.yaml
[18748.987245] ubuntu authd[89054]: Verbosity: 2
[18748.987350] ubuntu authd[89054]: Both bbolt and SQLite databases exist in "/var/lib/authd/", can't migrate
[18748.987408] ubuntu authd[89054]: Building authd object
[18748.987458] ubuntu authd[89054]: Building broker detection
[18748.988030] ubuntu authd[89054]: Auto-detecting brokers
[18748.988165] ubuntu authd[89054]: Loading broker from "/etc/authd/brokers.d/google.conf"
[18748.988223] ubuntu authd[89054]: D-Bus broker configuration at "/etc/authd/brokers.d/google.conf"
[18748.988279] ubuntu authd[89054]: Loading broker from "/etc/authd/brokers.d/msentraid.conf"
[18748.988336] ubuntu authd[89054]: D-Bus broker configuration at "/etc/authd/brokers.d/msentraid.conf"
[18748.988442] ubuntu authd[89054]: Creating user manager with config: {UIDMin:1000000000 UIDMax:1999999999 GIDMin:1000000000 GIDMax:1999999999}
[18748.989538] ubuntu authd[89054]: Building new gRPC user service
[18748.989655] ubuntu authd[89054]: Building new gRPC PAM service
[18748.989713] ubuntu authd[89054]: Building new daemon
[18748.989768] ubuntu authd[89054]: Use socket activation
[18748.989818] ubuntu authd[89054]: Registering gRPC services
[18748.989935] ubuntu authd[89054]: Starting to serve requests on /run/authd.sock
[18748.990053] ubuntu authd[89054]: Ready state sent to systemd
[18748.990142] ubuntu authd[89054]: Serving gRPC requests on /run/authd.sock
[18748.990295] ubuntu systemd[1]: Started authd.service - Authd daemon service.
[18754.249692] ubuntu systemd[1]: Stopping authd.service - Authd daemon service...
[18754.250100] ubuntu authd[89054]: Stopping daemon requested for socket /run/authd.sock.
[18754.250268] ubuntu authd[89054]: Wait for active requests to close.
[18754.250311] ubuntu authd[89054]: All connections have now ended.
[18754.250360] ubuntu authd[89054]: Closing gRPC manager and database
[18754.250409] ubuntu authd[89054]: Closing database
[18754.253599] ubuntu systemd[1]: authd.service: Deactivated successfully.
[18754.253956] ubuntu systemd[1]: Stopped authd.service - Authd daemon service.
[18762.869108] ubuntu systemd[1]: Starting authd.service - Authd daemon service...
[18762.964607] ubuntu authd[89212]: Using configuration file: /etc/authd/authd.yaml
[18762.965253] ubuntu authd[89212]: Verbosity: 2
[18762.965386] ubuntu authd[89212]: Both bbolt and SQLite databases exist in "/var/lib/authd/", can't migrate
[18762.965500] ubuntu authd[89212]: Building authd object
[18762.965614] ubuntu authd[89212]: Building broker detection
[18762.966026] ubuntu authd[89212]: Auto-detecting brokers
[18762.966145] ubuntu authd[89212]: Loading broker from "/etc/authd/brokers.d/google.conf"
[18762.966237] ubuntu authd[89212]: D-Bus broker configuration at "/etc/authd/brokers.d/google.conf"
[18762.966342] ubuntu authd[89212]: Loading broker from "/etc/authd/brokers.d/msentraid.conf"
[18762.966444] ubuntu authd[89212]: D-Bus broker configuration at "/etc/authd/brokers.d/msentraid.conf"
[18762.966557] ubuntu authd[89212]: Creating user manager with config: {UIDMin:1000000000 UIDMax:1999999999 GIDMin:1000000000 GIDMax:1999999999}
[18762.966810] ubuntu authd[89212]: Building new gRPC user service
[18762.966935] ubuntu authd[89212]: Building new gRPC PAM service
[18762.967065] ubuntu authd[89212]: Building new daemon
[18762.967158] ubuntu authd[89212]: Use socket activation
[18762.967239] ubuntu authd[89212]: Registering gRPC services
[18762.967295] ubuntu authd[89212]: Starting to serve requests on /run/authd.sock
[18762.967345] ubuntu systemd[1]: Started authd.service - Authd daemon service.
[18762.967692] ubuntu authd[89212]: Ready state sent to systemd
[18762.968220] ubuntu authd[89212]: Serving gRPC requests on /run/authd.sock
[18769.135443] ubuntu authd[89212]: rpc error: code = NotFound desc = 
[18769.137374] ubuntu authd[89212]: GetUserByName: no result matching  in 
[18769.137522] ubuntu authd[89212]: rpc error: code = NotFound desc = 
[18769.138583] ubuntu authd[89212]: GetUserByName: no result matching  in 
[18769.138764] ubuntu authd[89212]: rpc error: code = NotFound desc = 
[18769.140202] ubuntu authd[89212]: GetUserByName: no result matching  in 
[18769.140399] ubuntu authd[89212]: rpc error: code = NotFound desc = 
[18769.141803] ubuntu authd[89212]: GetUserByName: no result matching  in 
[18769.141931] ubuntu authd[89212]: rpc error: code = NotFound desc = 
[18908.546874] ubuntu systemd[1]: Stopping authd.service - Authd daemon service...
[18908.547117] ubuntu authd[89212]: Stopping daemon requested for socket /run/authd.sock.
[18908.547459] ubuntu authd[89212]: Wait for active requests to close.
[18908.547541] ubuntu authd[89212]: All connections have now ended.
[18908.547624] ubuntu authd[89212]: Closing gRPC manager and database
[18908.547702] ubuntu authd[89212]: Closing database
[18908.553906] ubuntu systemd[1]: authd.service: Deactivated successfully.
[18908.554263] ubuntu systemd[1]: Stopped authd.service - Authd daemon service.
[18908.565609] ubuntu systemd[1]: Starting authd.service - Authd daemon service...
[18908.650926] ubuntu authd[89572]: Using configuration file: /etc/authd/authd.yaml
[18908.651344] ubuntu authd[89572]: Verbosity: 2
[18908.651427] ubuntu authd[89572]: Both bbolt and SQLite databases exist in "/var/lib/authd/", can't migrate
[18908.651512] ubuntu authd[89572]: Building authd object
[18908.651566] ubuntu authd[89572]: Building broker detection
[18908.652262] ubuntu authd[89572]: Auto-detecting brokers
[18908.652350] ubuntu authd[89572]: Loading broker from "/etc/authd/brokers.d/google.conf"
[18908.652398] ubuntu authd[89572]: D-Bus broker configuration at "/etc/authd/brokers.d/google.conf"
[18908.652441] ubuntu authd[89572]: Loading broker from "/etc/authd/brokers.d/msentraid.conf"
[18908.652484] ubuntu authd[89572]: D-Bus broker configuration at "/etc/authd/brokers.d/msentraid.conf"
[18908.652524] ubuntu authd[89572]: Creating user manager with config: {UIDMin:1000000000 UIDMax:1999999999 GIDMin:1000000000 GIDMax:1999999999}
[18908.652892] ubuntu authd[89572]: Building new gRPC NSS service
[18908.652955] ubuntu authd[89572]: Building new gRPC PAM service
[18908.653012] ubuntu authd[89572]: Building new daemon
[18908.653063] ubuntu authd[89572]: Use socket activation
[18908.653106] ubuntu authd[89572]: Registering gRPC services
[18908.653147] ubuntu authd[89572]: Starting to serve requests on /run/authd.sock
[18908.653208] ubuntu authd[89572]: Ready state sent to systemd
[18908.653408] ubuntu authd[89572]: Serving gRPC requests on /run/authd.sock
[18908.653574] ubuntu systemd[1]: Started authd.service - Authd daemon service.
[19015.326179] ubuntu systemd[1]: Stopping authd.service - Authd daemon service...
[19015.327061] ubuntu authd[89572]: Stopping daemon requested.
[19015.327261] ubuntu authd[89572]: Wait for active requests to close.
[19015.327364] ubuntu authd[89572]: All connections have now ended.
[19015.327427] ubuntu authd[89572]: Closing gRPC manager and database
[19015.327468] ubuntu authd[89572]: Closing database
[19015.330593] ubuntu systemd[1]: authd.service: Deactivated successfully.
[19015.330922] ubuntu systemd[1]: Stopped authd.service - Authd daemon service.
[19017.570877] ubuntu systemd[1]: Starting authd.service - Authd daemon service...
[19017.656495] ubuntu authd[95779]: Using configuration file: /etc/authd/authd.yaml
[19017.656883] ubuntu authd[95779]: Verbosity: 2
[19017.656932] ubuntu authd[95779]: Both bbolt and SQLite databases exist in "/var/lib/authd/", can't migrate
[19017.656989] ubuntu authd[95779]: Building authd object
[19017.657058] ubuntu authd[95779]: Building broker detection
[19017.657499] ubuntu authd[95779]: Auto-detecting brokers
[19017.657599] ubuntu authd[95779]: Loading broker from "/etc/authd/brokers.d/google.conf"
[19017.657761] ubuntu authd[95779]: D-Bus broker configuration at "/etc/authd/brokers.d/google.conf"
[19017.657839] ubuntu authd[95779]: Loading broker from "/etc/authd/brokers.d/msentraid.conf"
[19017.657909] ubuntu authd[95779]: D-Bus broker configuration at "/etc/authd/brokers.d/msentraid.conf"
[19017.657974] ubuntu authd[95779]: Creating user manager with config: {UIDMin:1000000000 UIDMax:1999999999 GIDMin:1000000000 GIDMax:1999999999}
[19017.658099] ubuntu authd[95779]: Building new gRPC user service
[19017.658194] ubuntu authd[95779]: Building new gRPC PAM service
[19017.658298] ubuntu authd[95779]: Building new daemon
[19017.658380] ubuntu authd[95779]: Use socket activation
[19017.658427] ubuntu authd[95779]: Registering gRPC services
[19017.658466] ubuntu authd[95779]: Starting to serve requests on /run/authd.sock
[19017.658504] ubuntu authd[95779]: Ready state sent to systemd
[19017.658540] ubuntu authd[95779]: Serving gRPC requests on /run/authd.sock
[19017.658578] ubuntu systemd[1]: Started authd.service - Authd daemon service.
[19021.898665] ubuntu authd[95779]: rpc error: code = NotFound desc = 
[19021.900589] ubuntu authd[95779]: GetUserByName: no result matching  in 
[19021.900751] ubuntu authd[95779]: rpc error: code = NotFound desc = 
[19021.901898] ubuntu authd[95779]: GetUserByName: no result matching  in 
[19021.901986] ubuntu authd[95779]: rpc error: code = NotFound desc = 
[19021.903391] ubuntu authd[95779]: GetUserByName: no result matching  in 
[19021.903595] ubuntu authd[95779]: rpc error: code = NotFound desc = 
[19021.904836] ubuntu authd[95779]: GetUserByName: no result matching  in 
[19021.905117] ubuntu authd[95779]: rpc error: code = NotFound desc = 
[19106.339484] ubuntu systemd[1]: Stopping authd.service - Authd daemon service...
[19106.339652] ubuntu authd[95779]: Stopping daemon requested for socket /run/authd.sock.
[19106.340050] ubuntu authd[95779]: Wait for active requests to close.
[19106.340114] ubuntu authd[95779]: All connections have now ended.
[19106.340170] ubuntu authd[95779]: Closing gRPC manager and database
[19106.340218] ubuntu authd[95779]: Closing database
[19106.346028] ubuntu systemd[1]: authd.service: Deactivated successfully.
[19106.346359] ubuntu systemd[1]: Stopped authd.service - Authd daemon service.
[19106.361311] ubuntu systemd[1]: Starting authd.service - Authd daemon service...
[19106.449424] ubuntu authd[96138]: Using configuration file: /etc/authd/authd.yaml
[19106.449778] ubuntu authd[96138]: Verbosity: 2
[19106.449885] ubuntu authd[96138]: Both bbolt and SQLite databases exist in "/var/lib/authd/", can't migrate
[19106.449943] ubuntu authd[96138]: Building authd object
[19106.449987] ubuntu authd[96138]: Building broker detection
[19106.450270] ubuntu authd[96138]: Auto-detecting brokers
[19106.450365] ubuntu authd[96138]: Loading broker from "/etc/authd/brokers.d/google.conf"
[19106.450425] ubuntu authd[96138]: D-Bus broker configuration at "/etc/authd/brokers.d/google.conf"
[19106.450518] ubuntu authd[96138]: Loading broker from "/etc/authd/brokers.d/msentraid.conf"
[19106.450576] ubuntu authd[96138]: D-Bus broker configuration at "/etc/authd/brokers.d/msentraid.conf"
[19106.450617] ubuntu authd[96138]: Creating user manager with config: {UIDMin:1000000000 UIDMax:1999999999 GIDMin:1000000000 GIDMax:1999999999}
[19106.450849] ubuntu authd[96138]: Building new gRPC NSS service
[19106.450977] ubuntu authd[96138]: Building new gRPC PAM service
[19106.451062] ubuntu authd[96138]: Building new daemon
[19106.451135] ubuntu authd[96138]: Use socket activation
[19106.451298] ubuntu authd[96138]: Registering gRPC services
[19106.451479] ubuntu authd[96138]: Starting to serve requests on /run/authd.sock
[19106.451572] ubuntu authd[96138]: Ready state sent to systemd
[19106.451664] ubuntu authd[96138]: Serving gRPC requests on /run/authd.sock
[19106.451744] ubuntu systemd[1]: Started authd.service - Authd daemon service.
[21123.816562] ubuntu authd[96138]: Stopping daemon requested.
[21123.816902] ubuntu authd[96138]: Wait for active requests to close.
[21123.816958] ubuntu systemd[1]: Stopping authd.service - Authd daemon service...
[21123.817047] ubuntu authd[96138]: All connections have now ended.
[21123.817100] ubuntu authd[96138]: Closing gRPC manager and database
[21123.817144] ubuntu authd[96138]: Closing database
[21123.822021] ubuntu systemd[1]: authd.service: Deactivated successfully.
[21123.822340] ubuntu systemd[1]: Stopped authd.service - Authd daemon service.
[21123.839335] ubuntu systemd[1]: Starting authd.service - Authd daemon service...
[21123.927446] ubuntu authd[99239]: Using configuration file: /etc/authd/authd.yaml
[21123.927842] ubuntu authd[99239]: Verbosity: 2
[21123.927944] ubuntu authd[99239]: Both bbolt and SQLite databases exist in "/var/lib/authd/", can't migrate
[21123.928324] ubuntu authd[99239]: Building authd object
[21123.928375] ubuntu authd[99239]: Building broker detection
[21123.928595] ubuntu authd[99239]: Auto-detecting brokers
[21123.928705] ubuntu authd[99239]: Loading broker from "/etc/authd/brokers.d/google.conf"
[21123.928808] ubuntu authd[99239]: D-Bus broker configuration at "/etc/authd/brokers.d/google.conf"
[21123.928888] ubuntu authd[99239]: Loading broker from "/etc/authd/brokers.d/msentraid.conf"
[21123.928967] ubuntu authd[99239]: D-Bus broker configuration at "/etc/authd/brokers.d/msentraid.conf"
[21123.929075] ubuntu authd[99239]: Creating user manager with config: {UIDMin:1000000000 UIDMax:1999999999 GIDMin:1000000000 GIDMax:1999999999}
[21123.929245] ubuntu authd[99239]: Building new gRPC user service
[21123.929349] ubuntu authd[99239]: Building new gRPC PAM service
[21123.929406] ubuntu authd[99239]: Building new daemon
[21123.929453] ubuntu authd[99239]: Use socket activation
[21123.929490] ubuntu authd[99239]: Registering gRPC services
[21123.929526] ubuntu authd[99239]: Starting to serve requests on /run/authd.sock
[21123.929562] ubuntu authd[99239]: Ready state sent to systemd
[21123.929598] ubuntu authd[99239]: Serving gRPC requests on /run/authd.sock
[21123.929841] ubuntu systemd[1]: Started authd.service - Authd daemon service.
[21130.150221] ubuntu authd[99239]: rpc error: code = NotFound desc = 
[21130.151390] ubuntu authd[99239]: GetUserByName: no result matching  in 
[21130.151481] ubuntu authd[99239]: rpc error: code = NotFound desc = 
[21130.152412] ubuntu authd[99239]: GetUserByName: no result matching  in 
[21130.152494] ubuntu authd[99239]: rpc error: code = NotFound desc = 
[21130.153481] ubuntu authd[99239]: GetUserByName: no result matching  in 
[21130.153551] ubuntu authd[99239]: rpc error: code = NotFound desc = 
[21130.154345] ubuntu authd[99239]: GetUserByName: no result matching  in 
[21130.154415] ubuntu authd[99239]: rpc error: code = NotFound desc = 
[21178.851648] ubuntu authd[99239]: 2102147668-<UUID redacted>: New auth session for "[email protected]"
[21178.854856] ubuntu authd-msentraid[16156]: Authentication mode "device_auth" is not supported by the UI
[21208.464039] ubuntu authd-msentraid[16156]: Getting user groups from Microsoft Graph API
[21209.588796] ubuntu authd-msentraid[16156]: Got groups: test-group
[21209.589369] ubuntu authd-msentraid[16156]: IsAuthenticated: next
[21209.589516] ubuntu authd[99239]: 2102147668-<UUID redacted>: Authentication result: next
[21213.087249] ubuntu authd-msentraid[16156]: IsAuthenticated: granted
[21213.087812] ubuntu authd[99239]: 2102147668-<UUID redacted>: Authentication result: granted
[21213.088069] ubuntu authd[99239]: Updating user "[email protected]"
[21213.088157] ubuntu authd[99239]: Updating entry of user "[email protected]" (UID: 1736005146)
[21213.088241] ubuntu authd[99239]: Updating user [email protected]
[21213.088308] ubuntu authd[99239]: Updating entry of group "[email protected]" ({Name:[email protected] GID:1499334545 UGID:[email protected]})
[21213.088446] ubuntu authd[99239]: Updating entry of group "test-group" ({Name:test-group GID:1935611084 UGID:<UUID redacted>})
[21213.088553] ubuntu authd[99239]: Adding user 1736005146 to group 1499334545
[21213.088614] ubuntu authd[99239]: Adding user 1736005146 to group 1935611084
[21213.107696] ubuntu authd[99239]: Updating local groups for user "[email protected]", new groups: [], old groups: []
[21213.107858] ubuntu authd[99239]: Adding to local groups: []
[21213.108069] ubuntu authd[99239]: Removing from local groups: []
[21213.110073] ubuntu authd[99239]: 2102147668-<UUID redacted>: End session "Microsoft Entra ID"
[21225.850873] ubuntu authd[99239]: GetUserByName: no result matching  in 
[21225.851801] ubuntu authd[99239]: rpc error: code = NotFound desc = 
[21245.153379] ubuntu authd[99239]: 2102147668-<UUID redacted>: New auth session for "[email protected]"
[21245.155557] ubuntu authd-msentraid[16156]: Authentication mode "device_auth" is not supported by the UI
[21248.740141] ubuntu authd-msentraid[16156]: Getting user groups from Microsoft Graph API
[21249.837696] ubuntu authd-msentraid[16156]: Got groups: test-group
[21249.838284] ubuntu authd-msentraid[16156]: IsAuthenticated: granted
[21249.838726] ubuntu authd[99239]: 2102147668-<UUID redacted>: Authentication result: granted
[21249.839087] ubuntu authd[99239]: Updating user "[email protected]"
[21249.839185] ubuntu authd[99239]: Updating entry of user "[email protected]" (UID: 1736005146)
[21249.839246] ubuntu authd[99239]: Updating user [email protected]
[21249.839486] ubuntu authd[99239]: Updating entry of group "[email protected]" ({Name:[email protected] GID:1499334545 UGID:[email protected]})
[21249.839622] ubuntu authd[99239]: Updating entry of group "test-group" ({Name:test-group GID:1935611084 UGID:<UUID redacted>})
[21249.839743] ubuntu authd[99239]: Adding user 1736005146 to group 1499334545
[21249.839831] ubuntu authd[99239]: Adding user 1736005146 to group 1935611084
[21249.859200] ubuntu authd[99239]: Updating local groups for user "[email protected]", new groups: [], old groups: []
[21249.859352] ubuntu authd[99239]: Adding to local groups: []
[21249.859433] ubuntu authd[99239]: Removing from local groups: []
[21249.862161] ubuntu authd[99239]: 2102147668-<UUID redacted>: End session "Microsoft Entra ID"
[21287.452825] ubuntu authd[99239]: rpc error: code = NotFound desc = 
[21287.453945] ubuntu authd[99239]: GetUserByName: no result matching  in 
[21287.454059] ubuntu authd[99239]: rpc error: code = NotFound desc = 
[21287.454984] ubuntu authd[99239]: GetUserByName: no result matching  in 
[21287.455073] ubuntu authd[99239]: rpc error: code = NotFound desc = 
[21287.455819] ubuntu authd[99239]: GetUserByName: no result matching  in 
[21287.455907] ubuntu authd[99239]: rpc error: code = NotFound desc = 
[21287.456596] ubuntu authd[99239]: GetUserByName: no result matching  in 
[21287.456777] ubuntu authd[99239]: rpc error: code = NotFound desc = 
[21302.395458] ubuntu authd[99239]: rpc error: code = NotFound desc = 
[21302.396727] ubuntu authd[99239]: GetUserByName: no result matching  in 
[21302.396847] ubuntu authd[99239]: rpc error: code = NotFound desc = 
[21302.397714] ubuntu authd[99239]: GetUserByName: no result matching  in 
[21302.397836] ubuntu authd[99239]: rpc error: code = NotFound desc = 
[21302.398615] ubuntu authd[99239]: GetUserByName: no result matching  in 
[21302.398722] ubuntu authd[99239]: rpc error: code = NotFound desc = 
[21302.399555] ubuntu authd[99239]: GetUserByName: no result matching  in 
[21302.399656] ubuntu authd[99239]: rpc error: code = NotFound desc = 
[21309.770266] ubuntu authd[99239]: 2102147668-<UUID redacted>: New auth session for "[email protected]"
[21309.773573] ubuntu authd-msentraid[16156]: Authentication mode "device_auth" is not supported by the UI
[21312.178312] ubuntu authd-msentraid[16156]: Getting user groups from Microsoft Graph API
[21313.241332] ubuntu authd-msentraid[16156]: Got groups: test-group
[21313.242320] ubuntu authd-msentraid[16156]: IsAuthenticated: granted
[21313.242507] ubuntu authd[99239]: 2102147668-<UUID redacted>: Authentication result: granted
[21313.242961] ubuntu authd[99239]: Updating user "[email protected]"
[21313.243152] ubuntu authd[99239]: Updating entry of user "[email protected]" (UID: 1736005146)
[21313.243277] ubuntu authd[99239]: Updating user [email protected]
[21313.243375] ubuntu authd[99239]: Updating entry of group "[email protected]" ({Name:[email protected] GID:1499334545 UGID:[email protected]})
[21313.243483] ubuntu authd[99239]: Updating entry of group "test-group" ({Name:test-group GID:1935611084 UGID:<UUID redacted>})
[21313.243596] ubuntu authd[99239]: Adding user 1736005146 to group 1499334545
[21313.243686] ubuntu authd[99239]: Adding user 1736005146 to group 1935611084
[21313.261591] ubuntu authd[99239]: Updating local groups for user "[email protected]", new groups: [], old groups: []
[21313.261880] ubuntu authd[99239]: Adding to local groups: []
[21313.261997] ubuntu authd[99239]: Removing from local groups: []
[21313.264528] ubuntu authd[99239]: 2102147668-<UUID redacted>: End session "Microsoft Entra ID"
[21315.855263] ubuntu authd[99239]: rpc error: code = NotFound desc = 
[21315.856844] ubuntu authd[99239]: GetUserByName: no result matching  in 
[21315.856940] ubuntu authd[99239]: rpc error: code = NotFound desc = 
[21315.857712] ubuntu authd[99239]: GetUserByName: no result matching  in 
[21315.857875] ubuntu authd[99239]: rpc error: code = NotFound desc = 
[21315.858721] ubuntu authd[99239]: GetUserByName: no result matching  in 
[21315.858838] ubuntu authd[99239]: rpc error: code = NotFound desc = 
[21315.859880] ubuntu authd[99239]: GetUserByName: no result matching  in 
[21315.859980] ubuntu authd[99239]: rpc error: code = NotFound desc = 
[22161.599417] ubuntu authd[99239]: 2102147668-<UUID redacted>: New auth session for "[email protected]"
[22161.603160] ubuntu authd-msentraid[16156]: Authentication mode "device_auth" is not supported by the UI
[22180.029671] ubuntu authd-msentraid[16156]: Getting user groups from Microsoft Graph API
[22181.047715] ubuntu authd-msentraid[16156]: Got groups: test-group
[22181.048545] ubuntu authd-msentraid[16156]: IsAuthenticated: next
[22181.048890] ubuntu authd[99239]: 2102147668-<UUID redacted>: Authentication result: next
[22188.834293] ubuntu authd-msentraid[16156]: IsAuthenticated: granted
[22188.835125] ubuntu authd[99239]: 2102147668-<UUID redacted>: Authentication result: granted
[22188.835367] ubuntu authd[99239]: Updating user "[email protected]"
[22188.835425] ubuntu authd[99239]: Updating entry of user "[email protected]" (UID: 1736005146)
[22188.835472] ubuntu authd[99239]: Updating user [email protected]
[22188.835638] ubuntu authd[99239]: Updating entry of group "[email protected]" ({Name:[email protected] GID:1499334545 UGID:[email protected]})
[22188.835784] ubuntu authd[99239]: Updating entry of group "test-group" ({Name:test-group GID:1935611084 UGID:<UUID redacted>})
[22188.835901] ubuntu authd[99239]: Adding user 1736005146 to group 1499334545
[22188.835957] ubuntu authd[99239]: Adding user 1736005146 to group 1935611084
[22188.853642] ubuntu authd[99239]: Updating local groups for user "[email protected]", new groups: [], old groups: []
[22188.853763] ubuntu authd[99239]: Adding to local groups: []
[22188.853968] ubuntu authd[99239]: Removing from local groups: []
[22188.855388] ubuntu authd[99239]: 2102147668-<UUID redacted>: End session "Microsoft Entra ID"
[63252.458544] ubuntu authd[99239]: 2102147668-<UUID redacted>: New auth session for "[email protected]"
[63252.469382] ubuntu authd-msentraid[16156]: Authentication mode "device_auth_qr" is not supported by the UI
[63325.433125] ubuntu authd[99239]: 2102147668-<UUID redacted>: End session "Microsoft Entra ID"
[64352.011795] ubuntu authd[99239]: GetUserByName: no result matching  in 
[64352.013749] ubuntu authd[99239]: rpc error: code = NotFound desc = 
[64352.029114] ubuntu authd[99239]: GetUserByName: no result matching  in 
[64352.029501] ubuntu authd[99239]: rpc error: code = NotFound desc = 
[64352.029602] ubuntu gdm-authd][109345]: accountsservice: ActUserManager: user (null) has no username (uid: -1)
[64352.234157] ubuntu authd[99239]: GetUserByName: no result matching  in 
[64352.234379] ubuntu authd[99239]: rpc error: code = NotFound desc = 
[64352.234518] ubuntu authd[99239]: User "[email protected]" is unknown
[64354.617598] ubuntu authd-msentraid[16156]: Could not connect to the provider: Get "https://login.microsoftonline.com/<UUID redacted>/v2.0/.well-known/openid-configuration": dial tcp: lookup login.microsoftonline.com on 127.0.0.53:53: server misbehaving. Starting session in offline mode.
[64354.618323] ubuntu authd[99239]: 2102147668-<UUID redacted>: New auth session for "[email protected]"
[64354.623149] ubuntu authd[99239]: could not get authentication modes: no authentication modes available for user "[email protected]"
[64354.625048] ubuntu authd[99239]: 2102147668-<UUID redacted>: End session "Microsoft Entra ID"
[64385.140589] ubuntu authd[99239]: GetUserByName: no result matching  in 
[64385.141149] ubuntu authd[99239]: rpc error: code = NotFound desc = 
[64385.149957] ubuntu authd[99239]: GetUserByName: no result matching  in 
[64385.150124] ubuntu authd[99239]: rpc error: code = NotFound desc = 
[64385.150431] ubuntu gdm-authd][109400]: accountsservice: ActUserManager: user (null) has no username (uid: -1)
[64385.191720] ubuntu authd[99239]: GetUserByName: no result matching  in 
[64385.191884] ubuntu authd[99239]: rpc error: code = NotFound desc = 
[64385.191950] ubuntu authd[99239]: User "test123" is unknown
[64389.618304] ubuntu authd[99239]: GetUserByName: no result matching  in 
[64389.619204] ubuntu authd[99239]: rpc error: code = NotFound desc = 
[64434.433032] ubuntu authd-msentraid[16156]: Could not connect to the provider: Get "https://login.microsoftonline.com/<UUID redacted>/v2.0/.well-known/openid-configuration": dial tcp: lookup login.microsoftonline.com on 127.0.0.53:53: server misbehaving. Starting session in offline mode.
[64434.433632] ubuntu authd[99239]: 2102147668-<UUID redacted>: New auth session for "[email protected]"
[64437.111097] ubuntu gdm-session-wor[109435]: GDM Stage changed to authModeSelection
[64439.166663] ubuntu gdm-session-wor[109435]: GDM Stage changed to brokerSelection
[64439.169531] ubuntu authd[99239]: 2102147668-<UUID redacted>: End session "Microsoft Entra ID"
[64441.734534] ubuntu authd-msentraid[16156]: Could not connect to the provider: Get "https://login.microsoftonline.com/<UUID redacted>/v2.0/.well-known/openid-configuration": dial tcp: lookup login.microsoftonline.com on 127.0.0.53:53: server misbehaving. Starting session in offline mode.
[64441.734910] ubuntu authd[99239]: 2102147668-<UUID redacted>: New auth session for "[email protected]"
[64442.732946] ubuntu gdm-session-wor[109435]: GDM Stage changed to authModeSelection
[64443.237675] ubuntu gdm-session-wor[109435]: GDM Stage changed to brokerSelection
[64443.239249] ubuntu authd[99239]: 2102147668-<UUID redacted>: End session "Microsoft Entra ID"
[64490.938328] ubuntu gdm-authd][109492]: pam_intune(gdm-authd:auth): Creating auth context
[64490.953731] ubuntu gdm-authd][109492]: gkr-pam: unlocked login keyring
[64596.320381] ubuntu systemd[1]: Stopping authd.service - Authd daemon service...
[64596.322778] ubuntu authd[99239]: Stopping daemon requested for socket /run/authd.sock.
[64596.324282] ubuntu authd[99239]: Wait for active requests to close.
[64596.324930] ubuntu authd[99239]: Closing gRPC manager and database
[64596.325051] ubuntu authd[99239]: Closing database
[64596.325109] ubuntu authd[99239]: All connections have now ended.
[64596.353214] ubuntu systemd[1]: authd.service: Deactivated successfully.
[64596.355811] ubuntu systemd[1]: Stopped authd.service - Authd daemon service.
[64596.356197] ubuntu systemd[1]: authd.service: Consumed 1.835s CPU time, 11.5M memory peak, 0B memory swap peak.
[64596.379504] ubuntu systemd[1]: Starting authd.service - Authd daemon service...
[64596.464716] ubuntu authd[110472]: Using configuration file: /etc/authd/authd.yaml
[64596.465865] ubuntu authd[110472]: Verbosity: 2
[64596.465957] ubuntu authd[110472]: Building authd object
[64596.466059] ubuntu authd[110472]: Building broker detection
[64596.466141] ubuntu authd[110472]: Auto-detecting brokers
[64596.466386] ubuntu authd[110472]: Loading broker from "/etc/authd/brokers.d/google.conf"
[64596.466466] ubuntu authd[110472]: D-Bus broker configuration at "/etc/authd/brokers.d/google.conf"
[64596.466537] ubuntu authd[110472]: Loading broker from "/etc/authd/brokers.d/msentraid.conf"
[64596.466609] ubuntu authd[110472]: D-Bus broker configuration at "/etc/authd/brokers.d/msentraid.conf"
[64596.467300] ubuntu authd[110472]: Creating user manager with config: {UIDMin:1000000000 UIDMax:1999999999 GIDMin:1000000000 GIDMax:1999999999}
[64596.476185] ubuntu authd[110472]: Cleaning up orphaned user records
[64596.479570] ubuntu authd[110472]: Done cleaning up orphaned user records
[64596.480076] ubuntu authd[110472]: Building new gRPC NSS service
[64596.480461] ubuntu authd[110472]: Building new gRPC PAM service
[64596.480853] ubuntu authd[110472]: Building new daemon
[64596.481142] ubuntu authd[110472]: Use socket activation
[64596.481239] ubuntu authd[110472]: Registering gRPC services
[64596.481324] ubuntu authd[110472]: Starting to serve requests on /run/authd.sock
[64596.481419] ubuntu authd[110472]: Ready state sent to systemd
[64596.481502] ubuntu authd[110472]: Serving gRPC requests on /run/authd.sock
[64596.481813] ubuntu systemd[1]: Started authd.service - Authd daemon service.
[64614.819275] ubuntu gdm-authd][111252]: accountsservice: ActUserManager: user (null) has no username (uid: -1)
[64614.837312] ubuntu authd[110472]: rpc error: code = NotFound desc = 
[64614.837669] ubuntu authd[110472]: User "[email protected]" is unknown
[64616.690797] ubuntu authd-msentraid[16156]: Could not connect to the provider: Get "https://login.microsoftonline.com/<UUID redacted>/v2.0/.well-known/openid-configuration": dial tcp: lookup login.microsoftonline.com on 127.0.0.53:53: server misbehaving. Starting session in offline mode.
[64616.691204] ubuntu authd[110472]: 2102147668-<UUID redacted>: New session for "[email protected]"
[64616.694401] ubuntu authd[110472]: could not get authentication modes: no authentication modes available for user "[email protected]"
[64616.695464] ubuntu authd[110472]: 2102147668-<UUID redacted>: End session "Microsoft Entra ID"
[64679.899132] ubuntu gdm-authd][111289]: pam_intune(gdm-authd:auth): Creating auth context
[64679.904693] ubuntu gdm-authd][111289]: gkr-pam: unlocked login keyring

authd broker configuration

/etc/authd/brokers.d/google.conf

# This section is used by authd to identify and communicate with the broker.
# It should not be edited.
[authd]
name = Google
brand_icon = /snap/authd-google/current/broker_icon.png
dbus_name = com.ubuntu.authd.Google
dbus_object = /com/ubuntu/authd/Google

/etc/authd/brokers.d/msentraid.conf

# This section is used by authd to identify and communicate with the broker.
# It should not be edited.
[authd]
name = Microsoft Entra ID
brand_icon = /snap/authd-msentraid/current/broker_icon.png
dbus_name = com.ubuntu.authd.MSEntraID
dbus_object = /com/ubuntu/authd/MSEntraID

authd-msentraid configuration

[oidc]
# ubudev1.onmicrosoft.com
issuer = https://login.microsoftonline.com/<UUID redacted>/v2.0
client_id = <UUID redacted>

# uaadtest.onmicrosoft.com
#issuer = https://login.microsoftonline.com/<UUID redacted>/v2.0
#client_id = <UUID redacted>


## Depending on the identity provider, you may need to provide a
## client secret to authenticate with the provider.
#client_secret = <CLIENT_SECRET>

## Force remote authentication with the identity provider during login,
## even if a local method (e.g. local password) is used.
## This works by forcing a token refresh during login, which fails if the
## user does not have the necessary permissions in the identity provider.
##
## If set to false (the default), remote authentication with the identity
## provider only happens if there is a working internet connection and
## the provider is reachable during login.
##
## Important: Enabling this option prevents authd users from logging in
## if the identity provider is unreachable (e.g. due to network issues).
#force_provider_authentication = false

[users]
## The directory where the home directories of new users are created.
## Existing users will keep their current home directory.
## The home directories are created in the format <home_base_dir>/<username>
#home_base_dir = /home

## If configured, only users with a suffix in this list are allowed to
## log in via SSH. The suffixes must be separated by comma.
#ssh_allowed_suffixes = @example.com,@anotherexample.com

## 'allowed_users' specifies the users who are permitted to log in after
## successfully authenticating with the Identity Provider.
## Values are separated by commas. Supported values:
## - 'OWNER': Grants access to the user specified in the 'owner' option
##            (see below). This is the default.
## - 'ALL': Grants access to all users who successfully authenticate
##          with the Identity Provider.
## - <username>: Grants access to specific additional users
##               (e.g. [email protected]).
## Example: allowed_users = OWNER,[email protected],[email protected]
#allowed_users = OWNER

## 'owner' specifies the user assigned the owner role. This user is
## permitted to log in if 'OWNER' is included in the 'allowed_users'
## option.
##
## If this option is left unset, the first user to successfully log in
## via this broker will automatically be assigned the owner role. A
## drop-in configuration file will be created in broker.conf.d/ to set
## the 'owner' option.
##
## To disable automatic assignment, you can either:
## 1. Explicitly set this option to an empty value (e.g. owner = "")
## 2. Remove 'OWNER' from the 'allowed_users' option
##
## Example: owner = [email protected]
#owner =

## A comma-separated list of local groups which authd users will be
## added to upon login.
## Example: extra_groups = users
extra_groups = users

## Like 'extra_groups', but only the owner user will be added to these
## groups.
## Example: owner_extra_groups = sudo,lpadmin
owner_extra_groups = sudo,lpadmin

authd-google configuration

[oidc]
issuer = https://accounts.google.com
client_id = <redacted>
client_secret = <redacted>

[users]
## The directory where the home directories of new users are created.
## Existing users will keep their current home directory.
## The home directories are created in the format <home_base_dir>/<username>
#home_base_dir = /home

## If configured, only users with a suffix in this list are allowed to
## log in via SSH. The suffixes must be separated by comma.
#ssh_allowed_suffixes = @example.com,@anotherexample.com

## 'allowed_users' specifies the users who are permitted to log in after
## successfully authenticating with the Identity Provider.
## Values are separated by commas. Supported values:
## - 'OWNER': Grants access to the user specified in the 'owner' option
##        	(see below). This is the default.
## - 'ALL': Grants access to all users who successfully authenticate
##      	with the Identity Provider.
## - <username>: Grants access to specific additional users
##           	(e.g. [email protected]).
## Example: allowed_users = OWNER,[email protected],[email protected]
allowed_users = ALL

## 'owner' specifies the user assigned the owner role. This user is
## permitted to log in if 'OWNER' is included in the 'allowed_users'
## option.
##
## If this option is left unset, the first user to successfully log in
## via this broker will automatically be assigned the owner role. A
## drop-in configuration file will be created in broker.conf.d/ to set
## the 'owner' option.
##
## To disable automatic assignment, you can either:
## 1. Explicitly set this option to an empty value (e.g. owner = "")
## 2. Remove 'OWNER' from the 'allowed_users' option
##
## Example: owner = [email protected]
#owner =

Double check your logs

  • [x] I have redacted any sensitive information from the logs

adombeck avatar May 21 '25 21:05 adombeck