Dollemore, Mark (London)
2018-11-06 11:38:21 UTC
Hi guys,
We are using Single Sign On authentication for Check_MK using Kerberos as per https://mathias-kettner.com/cms_kerberos.html , this all works fine.
However, we are receiving the following error in the site specific apache error_log file, repeating regularly;-
[Tue Nov 06 11:34:48.511090 2018] [auth_kerb:error] [pid 3995] [client 127.0.0.1:43004] mkstemp() failed: Permission denied, referer: https://dloninnags71.maninvestments.com/ito/check_mk/side.py
[Tue Nov 06 11:34:48.511129 2018] [auth_kerb:error] [pid 3995] [client 127.0.0.1:43004] Cannot create krb5 ccache (Unknown code A 244), referer: https://dloninnags71.maninvestments.com/ito/check_mk/side.py
Clearly mkstemp is unable to create a temp file due to permission issues, but does anyone know where mkstemp is trying to create these files. Our site user has access to /tmp so I don't think this is the location.
Cheers
Mark
Mark Dollemore
Global Operations
***@man.com<mailto:***@man.com>
Tel +44 20 7144 3749
Mob 07762893260
[logo]
Man Group UK Limited |
Registered address: Riverbank House, 2 Swan Lane, London EC4R 3AD, United Kingdom
Registered in England and Wales no. 5856654
Visit us at: www.man.com<http://www.man.com>
This email has been sent by a member of the Man group (âManâ). Manâs parent company, Man Group plc, is registered in England and Wales (company number 08172396) at Riverbank House, 2 Swan Lane, London, EC4R 3AD.
The contents of this email are for the named addressee(s) only. It contains information which may be confidential and privileged. If you are not the intended recipient, please notify the sender immediately, destroy this email and any attachments and do not otherwise disclose or use them. Email transmission is not a secure method of communication and Man cannot accept responsibility for the completeness or accuracy of this email or any attachments. Whilst Man makes every effort to keep its network free from viruses, it does not accept responsibility for any computer virus which might be transferred by way of this email or any attachments. This email does not constitute a request, offer, recommendation or solicitation of any kind to buy, subscribe, sell or redeem any investment instruments or to perform other such transactions of any kind. Man reserves the right to monitor, record and retain all electronic and telephone communications through its network in accordance with applicable laws and regulations.
During the course of our business relationship with you, we may process your personal data, including through the monitoring of electronic communications. We will only process your personal data to the extent permitted by laws and regulations; for the purposes of ensuring compliance with our legal and regulatory obligations and internal policies; and for managing client relationships. For further information please see our Privacy Notice: https://www.man.com/privacy-policy
We are using Single Sign On authentication for Check_MK using Kerberos as per https://mathias-kettner.com/cms_kerberos.html , this all works fine.
However, we are receiving the following error in the site specific apache error_log file, repeating regularly;-
[Tue Nov 06 11:34:48.511090 2018] [auth_kerb:error] [pid 3995] [client 127.0.0.1:43004] mkstemp() failed: Permission denied, referer: https://dloninnags71.maninvestments.com/ito/check_mk/side.py
[Tue Nov 06 11:34:48.511129 2018] [auth_kerb:error] [pid 3995] [client 127.0.0.1:43004] Cannot create krb5 ccache (Unknown code A 244), referer: https://dloninnags71.maninvestments.com/ito/check_mk/side.py
Clearly mkstemp is unable to create a temp file due to permission issues, but does anyone know where mkstemp is trying to create these files. Our site user has access to /tmp so I don't think this is the location.
Cheers
Mark
Mark Dollemore
Global Operations
***@man.com<mailto:***@man.com>
Tel +44 20 7144 3749
Mob 07762893260
[logo]
Man Group UK Limited |
Registered address: Riverbank House, 2 Swan Lane, London EC4R 3AD, United Kingdom
Registered in England and Wales no. 5856654
Visit us at: www.man.com<http://www.man.com>
This email has been sent by a member of the Man group (âManâ). Manâs parent company, Man Group plc, is registered in England and Wales (company number 08172396) at Riverbank House, 2 Swan Lane, London, EC4R 3AD.
The contents of this email are for the named addressee(s) only. It contains information which may be confidential and privileged. If you are not the intended recipient, please notify the sender immediately, destroy this email and any attachments and do not otherwise disclose or use them. Email transmission is not a secure method of communication and Man cannot accept responsibility for the completeness or accuracy of this email or any attachments. Whilst Man makes every effort to keep its network free from viruses, it does not accept responsibility for any computer virus which might be transferred by way of this email or any attachments. This email does not constitute a request, offer, recommendation or solicitation of any kind to buy, subscribe, sell or redeem any investment instruments or to perform other such transactions of any kind. Man reserves the right to monitor, record and retain all electronic and telephone communications through its network in accordance with applicable laws and regulations.
During the course of our business relationship with you, we may process your personal data, including through the monitoring of electronic communications. We will only process your personal data to the extent permitted by laws and regulations; for the purposes of ensuring compliance with our legal and regulatory obligations and internal policies; and for managing client relationships. For further information please see our Privacy Notice: https://www.man.com/privacy-policy