-
Notifications
You must be signed in to change notification settings - Fork 606
Open
Description
There are some odd issues with pass backend and saml2aws 2.36.19:
- odd error
ERRO[0000] keychain Get returned error err="The specified item could not be found in the keyring" helper=linuxkeyring ~/.aws/saml2aws/cache_defaultis created evenpassisexecve()
$ env SAML2AWS_KEYRING_BACKEND='pass' strace -f -e process ~/.local/share/mise/installs/saml2aws/2.36.19/saml2aws login ...
execve("/home/jiri/.local/share/mise/installs/saml2aws/2.36.19/saml2aws", ["/home/jiri/.local/share/mise/ins"..., "login", "--verbose", "-p", "xxxx_AWSAdministratorAcc"..., "--cache-saml"], 0x7ffe1d2c47e0 /* 58 vars */) = 0
clone(child_stack=0xc000042000,
...
strace: Process 326090 attached
[pid 326088] clone(child_stack=0xc000094000,
...
<unfinished ...>
[pid 326090] <... clone resumed>, tls=0xc000100098) = 326092
strace: Process 326093 attached
[pid 326088] <... clone resumed>, tls=0xc00007d898) = 326093
DEBU[0000] Running command=login
DEBU[0000] Check if creds exist. command=login
DEBU[0000] Expand name=/home/jiri/.aws/credentials pkg=awsconfig
DEBU[0000] resolveSymlink name=/home/jiri/.aws/credentials pkg=awsconfig
DEBU[0000] ensureConfigExists filename=/home/jiri/.aws/credentials pkg=awsconfig
Using IdP Account default to access Okta https://xxxxx.okta.com/home/amazon_aws/xxxxxx/xxx
ERRO[0000] keychain Get returned error err="The specified item could not be found in the keyring" helper=linuxkeyring
To use saved password just hit enter.
[pid 326089] tgkill(326088, 326088, SIGURG <unfinished ...>
[pid 326088] --- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=326088, si_uid=1000} ---
[pid 326089] <... tgkill resumed>) = 0
? Username xxxx@example.com
? Password ********[pid 326089] tgkill(326088, 326088, SIGURG) = 0
...
DEBU[0007] resolveSymlink name=/home/jiri/.aws/saml2aws/cache_default pkg=samlcache
DEBU[0007] Could not read cache contentopen /home/jiri/.aws/saml2aws/cache_default: no such file or directory Cache_file=/home/jiri/.aws/saml2aws/cache_default IdpAccount=default pkg=samlcache
...
DEBU[0009] okta session expires at: 2025-11-03T15:13:07.000Z provider=okta
[pid 326104] clone(child_stack=NULL, flags=CLONE_VM|CLONE_VFORK|SIGCHLDstrace: Process 326105 attached
<unfinished ...>
[pid 326105] execve("/usr/bin/pass", ["pass", "insert", "-m", "-f", "saml2aws/https:/xxxxxx.okta.com/ho"...], 0xc0004601e0 /* 59 vars */ <unfinished ...>
......and...
$ pass list | grep -A 3 saml2aws
├── saml2aws
│ └── https:
│ └── xxxx.okta.com
│ └── home$ stat ~/.aws/saml2aws/cache_default
File: /home/jiri/.aws/saml2aws/cache_default
Size: 11000 Blocks: 24 IO Block: 4096 regular file
Device: 252,2 Inode: 71086023 Links: 1
Access: (0600/-rw-------) Uid: ( 1000/ jiri) Gid: ( 1000/ jiri)
Context: unconfined_u:object_r:user_home_t:s0
Access: 2025-11-02 16:13:30.419007777 +0100
Modify: 2025-11-02 16:13:10.591908869 +0100
Change: 2025-11-02 16:13:10.591908869 +0100
Birth: 2025-11-02 16:13:10.591908869 +0100
$ date
Sun Nov 2 04:19:18 PM CET 2025Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
No labels