---------- Forwarded message ----------
From: Johan Vermeulen <jameslast29(a)gmail.com>
Date: 2018-01-05 10:27 GMT+01:00
Subject: Re: [Freeipa-users] Re: Centos7.4: users not seeing password
expired notifications
To: FreeIPA users list <freeipa-users(a)lists.fedorahosted.org>
Hello All,
I "ve set up a new machine for this test and increased the log levels to 6.
Config for Freeipa-client is done with ipa-client-install, I use chrony in
stead of ntp and Selinux is enabled.
When user logs in /var/log/secure indicates:
[root@node1 ~]# tail -f /var/log/secure
Jan 5 09:27:17 node1 lightdm: pam_sss(lightdm:auth): received for user
jvanvlasselaer: 7 (Authentication failure)
Jan 5 09:27:29 node1 lightdm: pam_sss(lightdm:auth): authentication
failure; logname= uid=0 euid=0 tty=:0 ruser= rhost= user=jvanvlasselaer
Jan 5 09:27:29 node1 lightdm: pam_sss(lightdm:auth): received for user
jvanvlasselaer: 12 (Authentication token is no longer valid; new one
required)
Jan 5 09:27:29 node1 lightdm: pam_sss(lightdm:account): User info message:
Password expired. Change your password now.
Jan 5 09:27:29 node1 lightdm: pam_unix(lightdm:chauthtok): user
"jvanvlasselaer" does not exist in /etc/passwd
But the lightdm gui screen indicates nothing.
Here are the hopefully relevant logs:
sssd_network.cawdekempen.be.log
--------------------------------
(Fri Jan 5 09:27:16 2018) [sssd[be[network.cawdekempen.be]]]
[dp_get_account_info_handler] (0x0200): Got request for
[0x3][BE_REQ_INITGROUPS][name=jvanvlasselaer(a)network.cawdekempen.be]
(Fri Jan 5 09:27:16 2018) [sssd[be[network.cawdekempen.be]]]
[dp_attach_req] (0x0400): DP Request [Initgroups #75]: New request. Flags
[0x0001].
(Fri Jan 5 09:27:16 2018) [sssd[be[network.cawdekempen.be]]]
[dp_attach_req] (0x0400): Number of active DP request: 1
(Fri Jan 5 09:27:16 2018) [sssd[be[network.cawdekempen.be]]]
[fo_resolve_service_send] (0x0100): Trying to resolve service 'IPA'
(Fri Jan 5 09:27:16 2018) [sssd[be[network.cawdekempen.be]]]
[resolve_srv_send] (0x0200): The status of SRV lookup is resolved
(Fri Jan 5 09:27:16 2018) [sssd[be[network.cawdekempen.be]]]
[be_resolve_server_process] (0x0200): Found address for server
freeipa03.network.cawdekempen.be: [192.168.250.12] TTL 1200
(Fri Jan 5 09:27:16 2018) [sssd[be[network.cawdekempen.be]]]
[sssd_async_socket_init_send] (0x0400): Setting 6 seconds timeout for
connecting
(Fri Jan 5 09:27:16 2018) [sssd[be[network.cawdekempen.be]]]
[sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with
[(objectclass=*)][].
(Fri Jan 5 09:27:16 2018) [sssd[be[network.cawdekempen.be]]]
[sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no
errmsg set
(Fri Jan 5 09:27:16 2018) [sssd[be[network.cawdekempen.be]]]
[sdap_kinit_send] (0x0400): Attempting kinit (default, host/node1.network.
cawdekempen.be, NETWORK.CAWDEKEMPEN.BE, 86400)
(Fri Jan 5 09:27:16 2018) [sssd[be[network.cawdekempen.be]]]
[fo_resolve_service_send] (0x0100): Trying to resolve service 'IPA'
(Fri Jan 5 09:27:16 2018) [sssd[be[network.cawdekempen.be]]]
[resolve_srv_send] (0x0200): The status of SRV lookup is resolved
(Fri Jan 5 09:27:16 2018) [sssd[be[network.cawdekempen.be]]]
[be_resolve_server_process] (0x0200): Found address for server
freeipa03.network.cawdekempen.be: [192.168.250.12] TTL 1200
(Fri Jan 5 09:27:16 2018) [sssd[be[network.cawdekempen.be]]]
[create_tgt_req_send_buffer] (0x0400): buffer size: 79
(Fri Jan 5 09:27:16 2018) [sssd[be[network.cawdekempen.be]]]
[set_tgt_child_timeout] (0x0400): Setting 6 seconds timeout for tgt child
(Fri Jan 5 09:27:16 2018) [sssd[be[network.cawdekempen.be]]]
[write_pipe_handler] (0x0400): All data has been sent!
(Fri Jan 5 09:27:16 2018) [sssd[be[network.cawdekempen.be]]]
[read_pipe_handler] (0x0400): EOF received, client finished
(Fri Jan 5 09:27:16 2018) [sssd[be[network.cawdekempen.be]]]
[sdap_get_tgt_recv] (0x0400): Child responded: 0 [FILE:/var/lib/sss/db/
ccache_NETWORK.CAWDEKEMPEN.BE], expired on [1515227236]
(Fri Jan 5 09:27:16 2018) [sssd[be[network.cawdekempen.be]]]
[sdap_cli_auth_step] (0x0100): expire timeout is 900
(Fri Jan 5 09:27:16 2018) [sssd[be[network.cawdekempen.be]]]
[sasl_bind_send] (0x0100): Executing sasl bind mech: GSSAPI, user: host/
node1.network.cawdekempen.be
(Fri Jan 5 09:27:17 2018) [sssd[be[network.cawdekempen.be]]]
[child_sig_handler] (0x0100): child [1688] finished successfully.
(Fri Jan 5 09:27:17 2018) [sssd[be[network.cawdekempen.be]]]
[sdap_cli_connect_recv] (0x0400): Connection established.
(Fri Jan 5 09:27:17 2018) [sssd[be[network.cawdekempen.be]]]
[fo_set_port_status] (0x0100): Marking port 389 of server '
freeipa03.network.cawdekempen.be' as 'working'
(Fri Jan 5 09:27:17 2018) [sssd[be[network.cawdekempen.be]]]
[set_server_common_status] (0x0100): Marking server 'freeipa03.network.
cawdekempen.be' as 'working'
(Fri Jan 5 09:27:17 2018) [sssd[be[network.cawdekempen.be]]]
[fo_set_port_status] (0x0400): Marking port 389 of duplicate server '
freeipa03.network.cawdekempen.be' as 'working'
(Fri Jan 5 09:27:17 2018) [sssd[be[network.cawdekempen.be]]]
[sdap_get_initgr_next_base] (0x0400): Searching for users with base
[cn=accounts,dc=network,dc=cawdekempen,dc=be]
(Fri Jan 5 09:27:17 2018) [sssd[be[network.cawdekempen.be]]]
[sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with
[(&(uid=jvanvlasselaer)(objectclass=posixAccount)(&(
uidNumber=*)(!(uidNumber=0))))][cn=accounts,dc=network,dc=
cawdekempen,dc=be].
(Fri Jan 5 09:27:17 2018) [sssd[be[network.cawdekempen.be]]]
[sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no
errmsg set
(Fri Jan 5 09:27:17 2018) [sssd[be[network.cawdekempen.be]]]
[sdap_save_user] (0x0400): Save user
(Fri Jan 5 09:27:17 2018) [sssd[be[network.cawdekempen.be]]]
[sdap_get_primary_name] (0x0400): Processing object jvanvlasselaer
(Fri Jan 5 09:27:17 2018) [sssd[be[network.cawdekempen.be]]]
[sdap_save_user] (0x0400): Processing user jvanvlasselaer@network.
cawdekempen.be
(Fri Jan 5 09:27:17 2018) [sssd[be[network.cawdekempen.be]]]
[sdap_save_user] (0x0400): Adding original memberOf attributes to [
jvanvlasselaer(a)network.cawdekempen.be].
(Fri Jan 5 09:27:17 2018) [sssd[be[network.cawdekempen.be]]]
[sdap_save_user] (0x0400): Adding user principal [jvanvlasselaer@NETWORK.
CAWDEKEMPEN.BE] to attributes of [jvanvlasselaer(a)network.cawdekempen.be].
(Fri Jan 5 09:27:17 2018) [sssd[be[network.cawdekempen.be]]]
[sdap_save_user] (0x0400): Storing info for user jvanvlasselaer@network.
cawdekempen.be
(Fri Jan 5 09:27:17 2018) [sssd[be[network.cawdekempen.be]]]
[sysdb_set_entry_attr] (0x0200): Entry [name=jvanvlasselaer@network.
cawdekempen.be,cn=users,cn=network.cawdekempen.be,cn=sysdb] has set [cache,
ts_cache] attrs.
(Fri Jan 5 09:27:17 2018) [sssd[be[network.cawdekempen.be]]]
[sdap_get_primary_name] (0x0400): Processing object jvanvlasselaer
(Fri Jan 5 09:27:17 2018) [sssd[be[network.cawdekempen.be]]]
[sdap_has_deref_support] (0x0400): The server supports deref method OpenLDAP
(Fri Jan 5 09:27:17 2018) [sssd[be[network.cawdekempen.be]]]
[sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with
[(&(|(objectClass=ipaUserGroup)(objectClass=posixGroup))(cn=*))][cn=
ipausers,cn=groups,cn=accounts,dc=network,dc=cawdekempen,dc=be].
(Fri Jan 5 09:27:17 2018) [sssd[be[network.cawdekempen.be]]]
[sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no
errmsg set
(Fri Jan 5 09:27:17 2018) [sssd[be[network.cawdekempen.be]]]
[sdap_get_primary_name] (0x0400): Processing object ipausers
(Fri Jan 5 09:27:17 2018) [sssd[be[network.cawdekempen.be]]]
[sdap_get_initgr_done] (0x0400): Primary group already cached, nothing to
do.
(Fri Jan 5 09:27:17 2018) [sssd[be[network.cawdekempen.be]]]
[sysdb_set_entry_attr] (0x0200): Entry [name=jvanvlasselaer@network.
cawdekempen.be,cn=users,cn=network.cawdekempen.be,cn=sysdb] has set
[ts_cache] attrs.
(Fri Jan 5 09:27:17 2018) [sssd[be[network.cawdekempen.be]]]
[sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with
[(&(objectClass=ipaOverrideAnchor)(ipaAnchorUUID=:IPA:network.
cawdekempen.be:ce59521a-f15e-11e7-9a7e-7aa69aa21e18))][cn=Default Trust
View,cn=views,cn=accounts,dc=network,dc=cawdekempen,dc=be].
(Fri Jan 5 09:27:17 2018) [sssd[be[network.cawdekempen.be]]]
[sdap_get_generic_op_finished] (0x0400): Search result: No such object(32),
no errmsg set
(Fri Jan 5 09:27:17 2018) [sssd[be[network.cawdekempen.be]]] [dp_req_done]
(0x0400): DP Request [Initgroups #75]: Request handler finished [0]: Gelukt
(Fri Jan 5 09:27:17 2018) [sssd[be[network.cawdekempen.be]]]
[_dp_req_recv] (0x0400): DP Request [Initgroups #75]: Receiving request
data.
(Fri Jan 5 09:27:17 2018) [sssd[be[network.cawdekempen.be]]]
[dp_req_initgr_pp] (0x0400): Ordering NSS responder to update memory cache
(Fri Jan 5 09:27:17 2018) [sssd[be[network.cawdekempen.be]]]
[dp_req_reply_list_success] (0x0400): DP Request [Initgroups #75]:
Finished. Success.
(Fri Jan 5 09:27:17 2018) [sssd[be[network.cawdekempen.be]]]
[dp_table_value_destructor] (0x0400): Removing [0:1:0x0001:3::network.
cawdekempen.be:name=jvanvlasselaer@network.cawdekempen.be] from reply table
(Fri Jan 5 09:27:17 2018) [sssd[be[network.cawdekempen.be]]]
[dp_req_destructor] (0x0400): DP Request [Initgroups #75]: Request removed.
(Fri Jan 5 09:27:17 2018) [sssd[be[network.cawdekempen.be]]]
[dp_req_destructor] (0x0400): Number of active DP request: 0
(Fri Jan 5 09:27:17 2018) [sssd[be[network.cawdekempen.be]]]
[dp_pam_handler] (0x0100): Got request with the following data
(Fri Jan 5 09:27:17 2018) [sssd[be[network.cawdekempen.be]]]
[pam_print_data] (0x0100): command: SSS_PAM_AUTHENTICATE
(Fri Jan 5 09:27:17 2018) [sssd[be[network.cawdekempen.be]]]
[pam_print_data] (0x0100): domain: network.cawdekempen.be
(Fri Jan 5 09:27:17 2018) [sssd[be[network.cawdekempen.be]]]
[pam_print_data] (0x0100): user: jvanvlasselaer(a)network.cawdekempen.be
(Fri Jan 5 09:27:17 2018) [sssd[be[network.cawdekempen.be]]]
[pam_print_data] (0x0100): service: lightdm
(Fri Jan 5 09:27:17 2018) [sssd[be[network.cawdekempen.be]]]
[pam_print_data] (0x0100): tty: :0
(Fri Jan 5 09:27:17 2018) [sssd[be[network.cawdekempen.be]]]
[pam_print_data] (0x0100): ruser:
(Fri Jan 5 09:27:17 2018) [sssd[be[network.cawdekempen.be]]]
[pam_print_data] (0x0100): rhost:
(Fri Jan 5 09:27:17 2018) [sssd[be[network.cawdekempen.be]]]
[pam_print_data] (0x0100): authtok type: 0
(Fri Jan 5 09:27:17 2018) [sssd[be[network.cawdekempen.be]]]
[pam_print_data] (0x0100): newauthtok type: 0
(Fri Jan 5 09:27:17 2018) [sssd[be[network.cawdekempen.be]]]
[pam_print_data] (0x0100): priv: 1
(Fri Jan 5 09:27:17 2018) [sssd[be[network.cawdekempen.be]]]
[pam_print_data] (0x0100): cli_pid: 1588
(Fri Jan 5 09:27:17 2018) [sssd[be[network.cawdekempen.be]]]
[pam_print_data] (0x0100): logon name: not set
(Fri Jan 5 09:27:17 2018) [sssd[be[network.cawdekempen.be]]]
[dp_attach_req] (0x0400): DP Request [PAM Authenticate #76]: New request.
Flags [0000].
(Fri Jan 5 09:27:17 2018) [sssd[be[network.cawdekempen.be]]]
[dp_attach_req] (0x0400): Number of active DP request: 1
(Fri Jan 5 09:27:17 2018) [sssd[be[network.cawdekempen.be]]]
[krb5_auth_send] (0x0020): Illegal zero-length authtok for user [
jvanvlasselaer(a)network.cawdekempen.be]
(Fri Jan 5 09:27:17 2018) [sssd[be[network.cawdekempen.be]]] [dp_req_done]
(0x0400): DP Request [PAM Authenticate #76]: Request handler finished [0]:
Gelukt
(Fri Jan 5 09:27:17 2018) [sssd[be[network.cawdekempen.be]]]
[_dp_req_recv] (0x0400): DP Request [PAM Authenticate #76]: Receiving
request data.
(Fri Jan 5 09:27:17 2018) [sssd[be[network.cawdekempen.be]]]
[dp_req_destructor] (0x0400): DP Request [PAM Authenticate #76]: Request
removed.
(Fri Jan 5 09:27:17 2018) [sssd[be[network.cawdekempen.be]]]
[dp_req_destructor] (0x0400): Number of active DP request: 0
(Fri Jan 5 09:27:19 2018) [sssd[be[network.cawdekempen.be]]]
[dp_pam_handler] (0x0100): Got request with the following data
(Fri Jan 5 09:27:19 2018) [sssd[be[network.cawdekempen.be]]]
[pam_print_data] (0x0100): command: SSS_PAM_PREAUTH
(Fri Jan 5 09:27:19 2018) [sssd[be[network.cawdekempen.be]]]
[pam_print_data] (0x0100): domain: network.cawdekempen.be
(Fri Jan 5 09:27:19 2018) [sssd[be[network.cawdekempen.be]]]
[pam_print_data] (0x0100): user: jvanvlasselaer(a)network.cawdekempen.be
(Fri Jan 5 09:27:19 2018) [sssd[be[network.cawdekempen.be]]]
[pam_print_data] (0x0100): service: lightdm
(Fri Jan 5 09:27:19 2018) [sssd[be[network.cawdekempen.be]]]
[pam_print_data] (0x0100): tty: :0
(Fri Jan 5 09:27:19 2018) [sssd[be[network.cawdekempen.be]]]
[pam_print_data] (0x0100): ruser:
(Fri Jan 5 09:27:19 2018) [sssd[be[network.cawdekempen.be]]]
[pam_print_data] (0x0100): rhost:
(Fri Jan 5 09:27:19 2018) [sssd[be[network.cawdekempen.be]]]
[pam_print_data] (0x0100): authtok type: 0
(Fri Jan 5 09:27:19 2018) [sssd[be[network.cawdekempen.be]]]
[pam_print_data] (0x0100): newauthtok type: 0
(Fri Jan 5 09:27:19 2018) [sssd[be[network.cawdekempen.be]]]
[pam_print_data] (0x0100): priv: 1
(Fri Jan 5 09:27:19 2018) [sssd[be[network.cawdekempen.be]]]
[pam_print_data] (0x0100): cli_pid: 1689
(Fri Jan 5 09:27:19 2018) [sssd[be[network.cawdekempen.be]]]
[pam_print_data] (0x0100): logon name: not set
(Fri Jan 5 09:27:19 2018) [sssd[be[network.cawdekempen.be]]]
[dp_attach_req] (0x0400): DP Request [PAM Preauth #77]: New request. Flags
[0000].
(Fri Jan 5 09:27:19 2018) [sssd[be[network.cawdekempen.be]]]
[dp_attach_req] (0x0400): Number of active DP request: 1
(Fri Jan 5 09:27:19 2018) [sssd[be[network.cawdekempen.be]]]
[fo_resolve_service_send] (0x0100): Trying to resolve service 'IPA'
(Fri Jan 5 09:27:19 2018) [sssd[be[network.cawdekempen.be]]]
[resolve_srv_send] (0x0200): The status of SRV lookup is resolved
(Fri Jan 5 09:27:19 2018) [sssd[be[network.cawdekempen.be]]]
[be_resolve_server_process] (0x0200): Found address for server
freeipa03.network.cawdekempen.be: [192.168.250.12] TTL 1200
(Fri Jan 5 09:27:19 2018) [sssd[be[network.cawdekempen.be]]]
[ipa_resolve_callback] (0x0400): Constructed uri 'ldap://freeipa03.network.
cawdekempen.be'
(Fri Jan 5 09:27:19 2018) [sssd[be[network.cawdekempen.be]]]
[write_pipe_handler] (0x0400): All data has been sent!
(Fri Jan 5 09:27:19 2018) [sssd[be[network.cawdekempen.be]]]
[read_pipe_handler] (0x0400): EOF received, client finished
(Fri Jan 5 09:27:19 2018) [sssd[be[network.cawdekempen.be]]]
[fo_set_port_status] (0x0100): Marking port 389 of server '
freeipa03.network.cawdekempen.be' as 'working'
(Fri Jan 5 09:27:19 2018) [sssd[be[network.cawdekempen.be]]]
[set_server_common_status] (0x0100): Marking server 'freeipa03.network.
cawdekempen.be' as 'working'
(Fri Jan 5 09:27:19 2018) [sssd[be[network.cawdekempen.be]]]
[fo_set_port_status] (0x0400): Marking port 389 of duplicate server '
freeipa03.network.cawdekempen.be' as 'working'
(Fri Jan 5 09:27:19 2018) [sssd[be[network.cawdekempen.be]]]
[sysdb_set_entry_attr] (0x0200): Entry [name=jvanvlasselaer@network.
cawdekempen.be,cn=users,cn=network.cawdekempen.be,cn=sysdb] has set [cache,
ts_cache] attrs.
(Fri Jan 5 09:27:19 2018) [sssd[be[network.cawdekempen.be]]] [dp_req_done]
(0x0400): DP Request [PAM Preauth #77]: Request handler finished [0]: Gelukt
(Fri Jan 5 09:27:19 2018) [sssd[be[network.cawdekempen.be]]]
[_dp_req_recv] (0x0400): DP Request [PAM Preauth #77]: Receiving request
data.
(Fri Jan 5 09:27:19 2018) [sssd[be[network.cawdekempen.be]]]
[dp_req_destructor] (0x0400): DP Request [PAM Preauth #77]: Request removed.
(Fri Jan 5 09:27:19 2018) [sssd[be[network.cawdekempen.be]]]
[dp_req_destructor] (0x0400): Number of active DP request: 0
(Fri Jan 5 09:27:19 2018) [sssd[be[network.cawdekempen.be]]]
[child_sig_handler] (0x0100): child [1690] finished successfully.
(Fri Jan 5 09:27:22 2018) [sssd[be[network.cawdekempen.be]]]
[dp_pam_handler] (0x0100): Got request with the following data
(Fri Jan 5 09:27:22 2018) [sssd[be[network.cawdekempen.be]]]
[pam_print_data] (0x0100): command: SSS_PAM_PREAUTH
(Fri Jan 5 09:27:22 2018) [sssd[be[network.cawdekempen.be]]]
[pam_print_data] (0x0100): domain: network.cawdekempen.be
(Fri Jan 5 09:27:22 2018) [sssd[be[network.cawdekempen.be]]]
[pam_print_data] (0x0100): user: jvanvlasselaer(a)network.cawdekempen.be
(Fri Jan 5 09:27:22 2018) [sssd[be[network.cawdekempen.be]]]
[pam_print_data] (0x0100): service: lightdm
(Fri Jan 5 09:27:22 2018) [sssd[be[network.cawdekempen.be]]]
[pam_print_data] (0x0100): tty: :0
(Fri Jan 5 09:27:22 2018) [sssd[be[network.cawdekempen.be]]]
[pam_print_data] (0x0100): ruser:
(Fri Jan 5 09:27:22 2018) [sssd[be[network.cawdekempen.be]]]
[pam_print_data] (0x0100): rhost:
(Fri Jan 5 09:27:22 2018) [sssd[be[network.cawdekempen.be]]]
[pam_print_data] (0x0100): authtok type: 0
(Fri Jan 5 09:27:22 2018) [sssd[be[network.cawdekempen.be]]]
[pam_print_data] (0x0100): newauthtok type: 0
(Fri Jan 5 09:27:22 2018) [sssd[be[network.cawdekempen.be]]]
[pam_print_data] (0x0100): priv: 1
(Fri Jan 5 09:27:22 2018) [sssd[be[network.cawdekempen.be]]]
[pam_print_data] (0x0100): cli_pid: 1691
(Fri Jan 5 09:27:22 2018) [sssd[be[network.cawdekempen.be]]]
[pam_print_data] (0x0100): logon name: not set
(Fri Jan 5 09:27:22 2018) [sssd[be[network.cawdekempen.be]]]
[dp_attach_req] (0x0400): DP Request [PAM Preauth #78]: New request. Flags
[0000].
(Fri Jan 5 09:27:22 2018) [sssd[be[network.cawdekempen.be]]]
[dp_attach_req] (0x0400): Number of active DP request: 1
(Fri Jan 5 09:27:22 2018) [sssd[be[network.cawdekempen.be]]]
[fo_resolve_service_send] (0x0100): Trying to resolve service 'IPA'
(Fri Jan 5 09:27:22 2018) [sssd[be[network.cawdekempen.be]]]
[resolve_srv_send] (0x0200): The status of SRV lookup is resolved
(Fri Jan 5 09:27:22 2018) [sssd[be[network.cawdekempen.be]]]
[be_resolve_server_process] (0x0200): Found address for server
freeipa03.network.cawdekempen.be: [192.168.250.12] TTL 1200
(Fri Jan 5 09:27:22 2018) [sssd[be[network.cawdekempen.be]]]
[ipa_resolve_callback] (0x0400): Constructed uri 'ldap://freeipa03.network.
cawdekempen.be'
(Fri Jan 5 09:27:22 2018) [sssd[be[network.cawdekempen.be]]]
[write_pipe_handler] (0x0400): All data has been sent!
(Fri Jan 5 09:27:22 2018) [sssd[be[network.cawdekempen.be]]]
[read_pipe_handler] (0x0400): EOF received, client finished
(Fri Jan 5 09:27:22 2018) [sssd[be[network.cawdekempen.be]]]
[fo_set_port_status] (0x0100): Marking port 389 of server '
freeipa03.network.cawdekempen.be' as 'working'
(Fri Jan 5 09:27:22 2018) [sssd[be[network.cawdekempen.be]]]
[set_server_common_status] (0x0100): Marking server 'freeipa03.network.
cawdekempen.be' as 'working'
(Fri Jan 5 09:27:22 2018) [sssd[be[network.cawdekempen.be]]]
[fo_set_port_status] (0x0400): Marking port 389 of duplicate server '
freeipa03.network.cawdekempen.be' as 'working'
(Fri Jan 5 09:27:22 2018) [sssd[be[network.cawdekempen.be]]]
[sysdb_set_entry_attr] (0x0200): Entry [name=jvanvlasselaer@network.
cawdekempen.be,cn=users,cn=network.cawdekempen.be,cn=sysdb] has set
[ts_cache] attrs.
(Fri Jan 5 09:27:22 2018) [sssd[be[network.cawdekempen.be]]] [dp_req_done]
(0x0400): DP Request [PAM Preauth #78]: Request handler finished [0]: Gelukt
(Fri Jan 5 09:27:22 2018) [sssd[be[network.cawdekempen.be]]]
[_dp_req_recv] (0x0400): DP Request [PAM Preauth #78]: Receiving request
data.
(Fri Jan 5 09:27:22 2018) [sssd[be[network.cawdekempen.be]]]
[dp_req_destructor] (0x0400): DP Request [PAM Preauth #78]: Request removed.
(Fri Jan 5 09:27:22 2018) [sssd[be[network.cawdekempen.be]]]
[dp_req_destructor] (0x0400): Number of active DP request: 0
(Fri Jan 5 09:27:22 2018) [sssd[be[network.cawdekempen.be]]]
[child_sig_handler] (0x0100): child [1692] finished successfully.
(Fri Jan 5 09:27:27 2018) [sssd[be[network.cawdekempen.be]]]
[dp_get_account_info_handler] (0x0200): Got request for
[0x3][BE_REQ_INITGROUPS][name=jvanvlasselaer(a)network.cawdekempen.be]
(Fri Jan 5 09:27:27 2018) [sssd[be[network.cawdekempen.be]]]
[dp_attach_req] (0x0400): DP Request [Initgroups #79]: New request. Flags
[0x0001].
(Fri Jan 5 09:27:27 2018) [sssd[be[network.cawdekempen.be]]]
[dp_attach_req] (0x0400): Number of active DP request: 1
(Fri Jan 5 09:27:27 2018) [sssd[be[network.cawdekempen.be]]]
[sdap_get_initgr_next_base] (0x0400): Searching for users with base
[cn=accounts,dc=network,dc=cawdekempen,dc=be]
(Fri Jan 5 09:27:27 2018) [sssd[be[network.cawdekempen.be]]]
[sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with
[(&(uid=jvanvlasselaer)(objectclass=posixAccount)(&(
uidNumber=*)(!(uidNumber=0))))][cn=accounts,dc=network,dc=
cawdekempen,dc=be].
(Fri Jan 5 09:27:27 2018) [sssd[be[network.cawdekempen.be]]]
[sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no
errmsg set
(Fri Jan 5 09:27:27 2018) [sssd[be[network.cawdekempen.be]]]
[sdap_save_user] (0x0400): Save user
(Fri Jan 5 09:27:27 2018) [sssd[be[network.cawdekempen.be]]]
[sdap_get_primary_name] (0x0400): Processing object jvanvlasselaer
(Fri Jan 5 09:27:27 2018) [sssd[be[network.cawdekempen.be]]]
[sdap_save_user] (0x0400): Processing user jvanvlasselaer@network.
cawdekempen.be
(Fri Jan 5 09:27:27 2018) [sssd[be[network.cawdekempen.be]]]
[sdap_save_user] (0x0400): Adding original memberOf attributes to [
jvanvlasselaer(a)network.cawdekempen.be].
(Fri Jan 5 09:27:27 2018) [sssd[be[network.cawdekempen.be]]]
[sdap_save_user] (0x0400): Adding user principal [jvanvlasselaer@NETWORK.
CAWDEKEMPEN.BE] to attributes of [jvanvlasselaer(a)network.cawdekempen.be].
(Fri Jan 5 09:27:27 2018) [sssd[be[network.cawdekempen.be]]]
[sdap_save_user] (0x0400): Storing info for user jvanvlasselaer@network.
cawdekempen.be
(Fri Jan 5 09:27:27 2018) [sssd[be[network.cawdekempen.be]]]
[sysdb_set_entry_attr] (0x0200): Entry [name=jvanvlasselaer@network.
cawdekempen.be,cn=users,cn=network.cawdekempen.be,cn=sysdb] has set
[ts_cache] attrs.
(Fri Jan 5 09:27:27 2018) [sssd[be[network.cawdekempen.be]]]
[sdap_get_primary_name] (0x0400): Processing object jvanvlasselaer
(Fri Jan 5 09:27:27 2018) [sssd[be[network.cawdekempen.be]]]
[sdap_has_deref_support] (0x0400): The server supports deref method OpenLDAP
(Fri Jan 5 09:27:27 2018) [sssd[be[network.cawdekempen.be]]]
[sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with
[(&(|(objectClass=ipaUserGroup)(objectClass=posixGroup))(cn=*))][cn=
ipausers,cn=groups,cn=accounts,dc=network,dc=cawdekempen,dc=be].
(Fri Jan 5 09:27:27 2018) [sssd[be[network.cawdekempen.be]]]
[sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no
errmsg set
(Fri Jan 5 09:27:27 2018) [sssd[be[network.cawdekempen.be]]]
[sdap_get_primary_name] (0x0400): Processing object ipausers
(Fri Jan 5 09:27:27 2018) [sssd[be[network.cawdekempen.be]]]
[sdap_get_initgr_done] (0x0400): Primary group already cached, nothing to
do.
(Fri Jan 5 09:27:27 2018) [sssd[be[network.cawdekempen.be]]]
[sysdb_set_entry_attr] (0x0200): Entry [name=jvanvlasselaer@network.
cawdekempen.be,cn=users,cn=network.cawdekempen.be,cn=sysdb] has set
[ts_cache] attrs.
(Fri Jan 5 09:27:27 2018) [sssd[be[network.cawdekempen.be]]]
[sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with
[(&(objectClass=ipaOverrideAnchor)(ipaAnchorUUID=:IPA:network.
cawdekempen.be:ce59521a-f15e-11e7-9a7e-7aa69aa21e18))][cn=Default Trust
View,cn=views,cn=accounts,dc=network,dc=cawdekempen,dc=be].
(Fri Jan 5 09:27:27 2018) [sssd[be[network.cawdekempen.be]]]
[sdap_get_generic_op_finished] (0x0400): Search result: No such object(32),
no errmsg set
(Fri Jan 5 09:27:27 2018) [sssd[be[network.cawdekempen.be]]] [dp_req_done]
(0x0400): DP Request [Initgroups #79]: Request handler finished [0]: Gelukt
(Fri Jan 5 09:27:27 2018) [sssd[be[network.cawdekempen.be]]]
[_dp_req_recv] (0x0400): DP Request [Initgroups #79]: Receiving request
data.
(Fri Jan 5 09:27:27 2018) [sssd[be[network.cawdekempen.be]]]
[dp_req_initgr_pp] (0x0400): Ordering NSS responder to update memory cache
(Fri Jan 5 09:27:27 2018) [sssd[be[network.cawdekempen.be]]]
[dp_req_reply_list_success] (0x0400): DP Request [Initgroups #79]:
Finished. Success.
(Fri Jan 5 09:27:27 2018) [sssd[be[network.cawdekempen.be]]]
[dp_table_value_destructor] (0x0400): Removing [0:1:0x0001:3::network.
cawdekempen.be:name=jvanvlasselaer@network.cawdekempen.be] from reply table
(Fri Jan 5 09:27:27 2018) [sssd[be[network.cawdekempen.be]]]
[dp_req_destructor] (0x0400): DP Request [Initgroups #79]: Request removed.
(Fri Jan 5 09:27:27 2018) [sssd[be[network.cawdekempen.be]]]
[dp_req_destructor] (0x0400): Number of active DP request: 0
(Fri Jan 5 09:27:27 2018) [sssd[be[network.cawdekempen.be]]]
[dp_pam_handler] (0x0100): Got request with the following data
(Fri Jan 5 09:27:27 2018) [sssd[be[network.cawdekempen.be]]]
[pam_print_data] (0x0100): command: SSS_PAM_AUTHENTICATE
(Fri Jan 5 09:27:27 2018) [sssd[be[network.cawdekempen.be]]]
[pam_print_data] (0x0100): domain: network.cawdekempen.be
(Fri Jan 5 09:27:27 2018) [sssd[be[network.cawdekempen.be]]]
[pam_print_data] (0x0100): user: jvanvlasselaer(a)network.cawdekempen.be
(Fri Jan 5 09:27:27 2018) [sssd[be[network.cawdekempen.be]]]
[pam_print_data] (0x0100): service: lightdm
(Fri Jan 5 09:27:27 2018) [sssd[be[network.cawdekempen.be]]]
[pam_print_data] (0x0100): tty: :0
(Fri Jan 5 09:27:27 2018) [sssd[be[network.cawdekempen.be]]]
[pam_print_data] (0x0100): ruser:
(Fri Jan 5 09:27:27 2018) [sssd[be[network.cawdekempen.be]]]
[pam_print_data] (0x0100): rhost:
(Fri Jan 5 09:27:27 2018) [sssd[be[network.cawdekempen.be]]]
[pam_print_data] (0x0100): authtok type: 1
(Fri Jan 5 09:27:27 2018) [sssd[be[network.cawdekempen.be]]]
[pam_print_data] (0x0100): newauthtok type: 0
(Fri Jan 5 09:27:27 2018) [sssd[be[network.cawdekempen.be]]]
[pam_print_data] (0x0100): priv: 1
(Fri Jan 5 09:27:27 2018) [sssd[be[network.cawdekempen.be]]]
[pam_print_data] (0x0100): cli_pid: 1691
(Fri Jan 5 09:27:27 2018) [sssd[be[network.cawdekempen.be]]]
[pam_print_data] (0x0100): logon name: not set
(Fri Jan 5 09:27:27 2018) [sssd[be[network.cawdekempen.be]]]
[dp_attach_req] (0x0400): DP Request [PAM Authenticate #80]: New request.
Flags [0000].
(Fri Jan 5 09:27:27 2018) [sssd[be[network.cawdekempen.be]]]
[dp_attach_req] (0x0400): Number of active DP request: 1
(Fri Jan 5 09:27:27 2018) [sssd[be[network.cawdekempen.be]]]
[fo_resolve_service_send] (0x0100): Trying to resolve service 'IPA'
(Fri Jan 5 09:27:27 2018) [sssd[be[network.cawdekempen.be]]]
[resolve_srv_send] (0x0200): The status of SRV lookup is resolved
(Fri Jan 5 09:27:27 2018) [sssd[be[network.cawdekempen.be]]]
[be_resolve_server_process] (0x0200): Found address for server
freeipa03.network.cawdekempen.be: [192.168.250.12] TTL 1200
(Fri Jan 5 09:27:27 2018) [sssd[be[network.cawdekempen.be]]]
[ipa_resolve_callback] (0x0400): Constructed uri 'ldap://freeipa03.network.
cawdekempen.be'
(Fri Jan 5 09:27:27 2018) [sssd[be[network.cawdekempen.be]]]
[write_pipe_handler] (0x0400): All data has been sent!
(Fri Jan 5 09:27:29 2018) [sssd[be[network.cawdekempen.be]]]
[read_pipe_handler] (0x0400): EOF received, client finished
(Fri Jan 5 09:27:29 2018) [sssd[be[network.cawdekempen.be]]]
[sysdb_set_entry_attr] (0x0080): Cannot set ts attrs for name=
jvanvlasselaer(a)network.cawdekempen.be,cn=users,cn=network.cawdekempen.be
,cn=sysdb
(Fri Jan 5 09:27:29 2018) [sssd[be[network.cawdekempen.be]]]
[sysdb_set_entry_attr] (0x0200): Entry [name=jvanvlasselaer@network.
cawdekempen.be,cn=users,cn=network.cawdekempen.be,cn=sysdb] has set [cache]
attrs.
(Fri Jan 5 09:27:29 2018) [sssd[be[network.cawdekempen.be]]]
[sysdb_set_entry_attr] (0x0080): Cannot set ts attrs for name=
jvanvlasselaer(a)network.cawdekempen.be,cn=users,cn=network.cawdekempen.be
,cn=sysdb
(Fri Jan 5 09:27:29 2018) [sssd[be[network.cawdekempen.be]]] [dp_req_done]
(0x0400): DP Request [PAM Authenticate #80]: Request handler finished [0]:
Gelukt
(Fri Jan 5 09:27:29 2018) [sssd[be[network.cawdekempen.be]]]
[_dp_req_recv] (0x0400): DP Request [PAM Authenticate #80]: Receiving
request data.
(Fri Jan 5 09:27:29 2018) [sssd[be[network.cawdekempen.be]]]
[dp_req_destructor] (0x0400): DP Request [PAM Authenticate #80]: Request
removed.
(Fri Jan 5 09:27:29 2018) [sssd[be[network.cawdekempen.be]]]
[dp_req_destructor] (0x0400): Number of active DP request: 0
(Fri Jan 5 09:27:29 2018) [sssd[be[network.cawdekempen.be]]]
[child_sig_handler] (0x0100): child [1693] finished successfully.
(Fri Jan 5 09:27:29 2018) [sssd[be[network.cawdekempen.be]]]
[dp_pam_handler] (0x0100): Got request with the following data
(Fri Jan 5 09:27:29 2018) [sssd[be[network.cawdekempen.be]]]
[pam_print_data] (0x0100): command: SSS_PAM_ACCT_MGMT
(Fri Jan 5 09:27:29 2018) [sssd[be[network.cawdekempen.be]]]
[pam_print_data] (0x0100): domain: network.cawdekempen.be
(Fri Jan 5 09:27:29 2018) [sssd[be[network.cawdekempen.be]]]
[pam_print_data] (0x0100): user: jvanvlasselaer(a)network.cawdekempen.be
(Fri Jan 5 09:27:29 2018) [sssd[be[network.cawdekempen.be]]]
[pam_print_data] (0x0100): service: lightdm
(Fri Jan 5 09:27:29 2018) [sssd[be[network.cawdekempen.be]]]
[pam_print_data] (0x0100): tty: :0
(Fri Jan 5 09:27:29 2018) [sssd[be[network.cawdekempen.be]]]
[pam_print_data] (0x0100): ruser:
(Fri Jan 5 09:27:29 2018) [sssd[be[network.cawdekempen.be]]]
[pam_print_data] (0x0100): rhost:
(Fri Jan 5 09:27:29 2018) [sssd[be[network.cawdekempen.be]]]
[pam_print_data] (0x0100): authtok type: 0
(Fri Jan 5 09:27:29 2018) [sssd[be[network.cawdekempen.be]]]
[pam_print_data] (0x0100): newauthtok type: 0
(Fri Jan 5 09:27:29 2018) [sssd[be[network.cawdekempen.be]]]
[pam_print_data] (0x0100): priv: 1
(Fri Jan 5 09:27:29 2018) [sssd[be[network.cawdekempen.be]]]
[pam_print_data] (0x0100): cli_pid: 1691
(Fri Jan 5 09:27:29 2018) [sssd[be[network.cawdekempen.be]]]
[pam_print_data] (0x0100): logon name: not set
(Fri Jan 5 09:27:29 2018) [sssd[be[network.cawdekempen.be]]]
[dp_attach_req] (0x0400): DP Request [PAM Account #81]: New request. Flags
[0000].
(Fri Jan 5 09:27:29 2018) [sssd[be[network.cawdekempen.be]]]
[dp_attach_req] (0x0400): Number of active DP request: 1
(Fri Jan 5 09:27:29 2018) [sssd[be[network.cawdekempen.be]]]
[sdap_access_send] (0x0400): Performing access check for user [
jvanvlasselaer(a)network.cawdekempen.be]
(Fri Jan 5 09:27:29 2018) [sssd[be[network.cawdekempen.be]]]
[sdap_account_expired_rhds] (0x0400): Performing RHDS access check for user
[jvanvlasselaer(a)network.cawdekempen.be]
(Fri Jan 5 09:27:29 2018) [sssd[be[network.cawdekempen.be]]]
[sdap_account_expired] (0x0400): IPA access control succeeded, checking AD
access control
(Fri Jan 5 09:27:29 2018) [sssd[be[network.cawdekempen.be]]]
[sdap_account_expired_ad] (0x0400): Performing AD access check for user [
jvanvlasselaer(a)network.cawdekempen.be]
(Fri Jan 5 09:27:29 2018) [sssd[be[network.cawdekempen.be]]]
[sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with
[(&(objectClass=ipaHost)(fqdn=node1.network.cawdekempen.be))
][cn=accounts,dc=network,dc=cawdekempen,dc=be].
(Fri Jan 5 09:27:29 2018) [sssd[be[network.cawdekempen.be]]]
[sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no
errmsg set
(Fri Jan 5 09:27:29 2018) [sssd[be[network.cawdekempen.be]]]
[sdap_has_deref_support] (0x0400): The server supports deref method OpenLDAP
(Fri Jan 5 09:27:29 2018) [sssd[be[network.cawdekempen.be]]]
[sdap_x_deref_search_send] (0x0400): Dereferencing entry [fqdn=
node1.network.cawdekempen.be,cn=computers,cn=accounts,dc=network,dc=cawdekempen,dc=be]
using OpenLDAP deref
(Fri Jan 5 09:27:29 2018) [sssd[be[network.cawdekempen.be]]]
[sdap_get_generic_ext_send] (0x0400): WARNING: Disabling paging because
scope is set to base.
(Fri Jan 5 09:27:29 2018) [sssd[be[network.cawdekempen.be]]]
[sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [no
filter][fqdn=node1.network.cawdekempen.be,cn=computers,
cn=accounts,dc=network,dc=cawdekempen,dc=be].
(Fri Jan 5 09:27:29 2018) [sssd[be[network.cawdekempen.be]]]
[sdap_x_deref_parse_entry] (0x0400): Got deref control
(Fri Jan 5 09:27:29 2018) [sssd[be[network.cawdekempen.be]]]
[sdap_x_deref_parse_entry] (0x0400): All deref results from a single
control parsed
(Fri Jan 5 09:27:29 2018) [sssd[be[network.cawdekempen.be]]]
[sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no
errmsg set
(Fri Jan 5 09:27:29 2018) [sssd[be[network.cawdekempen.be]]]
[ipa_hostgroup_info_done] (0x0200): No host groups were dereferenced
(Fri Jan 5 09:27:29 2018) [sssd[be[network.cawdekempen.be]]]
[ipa_hbac_service_info_next] (0x0400): Sending request for next search
base: [cn=hbac,dc=network,dc=cawdekempen,dc=be][2][(
objectClass=ipaHBACService)]
(Fri Jan 5 09:27:29 2018) [sssd[be[network.cawdekempen.be]]]
[sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with
[(objectClass=ipaHBACService)][cn=hbac,dc=network,dc=cawdekempen,dc=be].
(Fri Jan 5 09:27:29 2018) [sssd[be[network.cawdekempen.be]]]
[sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no
errmsg set
(Fri Jan 5 09:27:29 2018) [sssd[be[network.cawdekempen.be]]]
[ipa_hbac_servicegroup_info_next] (0x0400): Sending request for next search
base: [cn=hbac,dc=network,dc=cawdekempen,dc=be][2][(objectClass=
ipaHBACServiceGroup)]
(Fri Jan 5 09:27:29 2018) [sssd[be[network.cawdekempen.be]]]
[sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with
[(objectClass=ipaHBACServiceGroup)][cn=hbac,dc=network,dc=cawdekempen,dc=
be].
(Fri Jan 5 09:27:29 2018) [sssd[be[network.cawdekempen.be]]]
[sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no
errmsg set
(Fri Jan 5 09:27:29 2018) [sssd[be[network.cawdekempen.be]]]
[ipa_hbac_rule_info_next] (0x0400): Sending request for next search base:
[cn=hbac,dc=network,dc=cawdekempen,dc=be][2][(&(objectclass=ipaHBACRule)(
ipaenabledflag=TRUE)(accessRuleType=allow)(|(hostCategory=all)(memberHost=
fqdn=node1.network.cawdekempen.be,cn=computers,cn=accounts,dc=network,dc=
cawdekempen,dc=be)))]
(Fri Jan 5 09:27:29 2018) [sssd[be[network.cawdekempen.be]]]
[sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with
[(&(objectclass=ipaHBACRule)(ipaenabledflag=TRUE)(accessRuleType=allow)(|(
hostCategory=all)(memberHost=fqdn=node1.network.cawdekempen.be,cn=computers,
cn=accounts,dc=network,dc=cawdekempen,dc=be)))][cn=hbac,
dc=network,dc=cawdekempen,dc=be].
(Fri Jan 5 09:27:29 2018) [sssd[be[network.cawdekempen.be]]]
[sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no
errmsg set
(Fri Jan 5 09:27:29 2018) [sssd[be[network.cawdekempen.be]]]
[hbac_get_category] (0x0200): Category is set to 'all'.
(Fri Jan 5 09:27:29 2018) [sssd[be[network.cawdekempen.be]]]
[hbac_get_category] (0x0200): Category is set to 'all'.
(Fri Jan 5 09:27:29 2018) [sssd[be[network.cawdekempen.be]]]
[hbac_get_category] (0x0200): Category is set to 'all'.
(Fri Jan 5 09:27:29 2018) [sssd[be[network.cawdekempen.be]]]
[hbac_shost_attrs_to_rule] (0x0400): Processing source hosts for rule
[allow_all]
(Fri Jan 5 09:27:29 2018) [sssd[be[network.cawdekempen.be]]]
[hbac_evaluate] (0x0100): [< hbac_evaluate()
(Fri Jan 5 09:27:29 2018) [sssd[be[network.cawdekempen.be]]]
[hbac_evaluate] (0x0100): ALLOWED by rule [allow_all].
(Fri Jan 5 09:27:29 2018) [sssd[be[network.cawdekempen.be]]]
[hbac_evaluate] (0x0100): hbac_evaluate() >]
(Fri Jan 5 09:27:29 2018) [sssd[be[network.cawdekempen.be]]]
[ipa_hbac_evaluate_rules] (0x0080): Access granted by HBAC rule [allow_all]
(Fri Jan 5 09:27:29 2018) [sssd[be[network.cawdekempen.be]]] [dp_req_done]
(0x0400): DP Request [PAM Account #81]: Request handler finished [0]: Gelukt
(Fri Jan 5 09:27:29 2018) [sssd[be[network.cawdekempen.be]]]
[_dp_req_recv] (0x0400): DP Request [PAM Account #81]: Receiving request
data.
(Fri Jan 5 09:27:29 2018) [sssd[be[network.cawdekempen.be]]]
[dp_req_destructor] (0x0400): DP Request [PAM Account #81]: Request removed.
(Fri Jan 5 09:27:29 2018) [sssd[be[network.cawdekempen.be]]]
[dp_req_destructor] (0x0400): Number of active DP request: 0
(Fri Jan 5 09:27:29 2018) [sssd[be[network.cawdekempen.be]]]
[dp_attach_req] (0x0400): DP Request [PAM SELinux #82]: New request. Flags
[0000].
(Fri Jan 5 09:27:29 2018) [sssd[be[network.cawdekempen.be]]]
[dp_attach_req] (0x0400): Number of active DP request: 1
(Fri Jan 5 09:27:29 2018) [sssd[be[network.cawdekempen.be]]]
[ipa_get_selinux_send] (0x0400): Retrieving SELinux user mapping
(Fri Jan 5 09:27:29 2018) [sssd[be[network.cawdekempen.be]]]
[sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with
[(&(cn=ipaConfig)(objectClass=ipaGuiConfig))][cn=etc,dc=
network,dc=cawdekempen,dc=be].
(Fri Jan 5 09:27:29 2018) [sssd[be[network.cawdekempen.be]]]
[sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no
errmsg set
(Fri Jan 5 09:27:29 2018) [sssd[be[network.cawdekempen.be]]]
[ipa_selinux_get_maps_next] (0x0400): Trying to fetch SELinux maps with
following parameters: [2][(&(objectclass=ipaselinuxusermap)(
ipaEnabledFlag=TRUE))][cn=selinux,dc=network,dc=cawdekempen,dc=be]
(Fri Jan 5 09:27:29 2018) [sssd[be[network.cawdekempen.be]]]
[sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with
[(&(objectclass=ipaselinuxusermap)(ipaEnabledFlag=TRUE))][cn=
selinux,dc=network,dc=cawdekempen,dc=be].
(Fri Jan 5 09:27:29 2018) [sssd[be[network.cawdekempen.be]]]
[sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no
errmsg set
(Fri Jan 5 09:27:29 2018) [sssd[be[network.cawdekempen.be]]]
[ipa_selinux_get_maps_done] (0x0400): No SELinux user maps found!
(Fri Jan 5 09:27:29 2018) [sssd[be[network.cawdekempen.be]]]
[sysdb_entry_attrs_diff] (0x0400): Entry [cn=selinux,cn=network.
cawdekempen.be,cn=sysdb] differs, reason: ts_cache doesn't trace this type
of entry.
(Fri Jan 5 09:27:29 2018) [sssd[be[network.cawdekempen.be]]]
[sysdb_set_entry_attr] (0x0200): Entry
[cn=selinux,cn=network.cawdekempen.be,cn=sysdb]
has set [cache] attrs.
(Fri Jan 5 09:27:29 2018) [sssd[be[network.cawdekempen.be]]]
[write_pipe_handler] (0x0400): All data has been sent!
(Fri Jan 5 09:27:29 2018) [sssd[be[network.cawdekempen.be]]]
[read_pipe_handler] (0x0400): EOF received, client finished
(Fri Jan 5 09:27:29 2018) [sssd[be[network.cawdekempen.be]]] [dp_req_done]
(0x0400): DP Request [PAM SELinux #82]: Request handler finished [0]: Gelukt
(Fri Jan 5 09:27:29 2018) [sssd[be[network.cawdekempen.be]]]
[_dp_req_recv] (0x0400): DP Request [PAM SELinux #82]: Receiving request
data.
(Fri Jan 5 09:27:29 2018) [sssd[be[network.cawdekempen.be]]]
[dp_req_destructor] (0x0400): DP Request [PAM SELinux #82]: Request removed.
(Fri Jan 5 09:27:29 2018) [sssd[be[network.cawdekempen.be]]]
[dp_req_destructor] (0x0400): Number of active DP request: 0
(Fri Jan 5 09:27:29 2018) [sssd[be[network.cawdekempen.be]]]
[child_sig_handler] (0x0100): child [1694] finished successfully.
sssd_pam.log
-------------
(Fri Jan 5 09:27:16 2018) [sssd[pam]] [accept_fd_handler] (0x0400): Client
connected to privileged pipe!
(Fri Jan 5 09:27:16 2018) [sssd[pam]] [sss_cmd_get_version] (0x0200):
Received client version [3].
(Fri Jan 5 09:27:16 2018) [sssd[pam]] [sss_cmd_get_version] (0x0200):
Offered version [3].
(Fri Jan 5 09:27:16 2018) [sssd[pam]] [pam_cmd_authenticate] (0x0100):
entering pam_cmd_authenticate
(Fri Jan 5 09:27:16 2018) [sssd[pam]] [sss_parse_name_for_domains]
(0x0200): name 'jvanvlasselaer' matched without domain, user is
jvanvlasselaer
(Fri Jan 5 09:27:16 2018) [sssd[pam]] [pam_print_data] (0x0100): command:
SSS_PAM_AUTHENTICATE
(Fri Jan 5 09:27:16 2018) [sssd[pam]] [pam_print_data] (0x0100): domain:
not set
(Fri Jan 5 09:27:16 2018) [sssd[pam]] [pam_print_data] (0x0100): user:
jvanvlasselaer
(Fri Jan 5 09:27:16 2018) [sssd[pam]] [pam_print_data] (0x0100): service:
lightdm
(Fri Jan 5 09:27:16 2018) [sssd[pam]] [pam_print_data] (0x0100): tty: :0
(Fri Jan 5 09:27:16 2018) [sssd[pam]] [pam_print_data] (0x0100): ruser:
not set
(Fri Jan 5 09:27:16 2018) [sssd[pam]] [pam_print_data] (0x0100): rhost:
not set
(Fri Jan 5 09:27:16 2018) [sssd[pam]] [pam_print_data] (0x0100): authtok
type: 0
(Fri Jan 5 09:27:16 2018) [sssd[pam]] [pam_print_data] (0x0100):
newauthtok type: 0
(Fri Jan 5 09:27:16 2018) [sssd[pam]] [pam_print_data] (0x0100): priv: 1
(Fri Jan 5 09:27:16 2018) [sssd[pam]] [pam_print_data] (0x0100): cli_pid:
1588
(Fri Jan 5 09:27:16 2018) [sssd[pam]] [pam_print_data] (0x0100): logon
name: jvanvlasselaer
(Fri Jan 5 09:27:16 2018) [sssd[pam]] [cache_req_send] (0x0400): CR #10:
New request 'Initgroups by name'
(Fri Jan 5 09:27:16 2018) [sssd[pam]] [cache_req_process_input] (0x0400):
CR #10: Parsing input name [jvanvlasselaer]
(Fri Jan 5 09:27:16 2018) [sssd[pam]] [sss_parse_name_for_domains]
(0x0200): name 'jvanvlasselaer' matched without domain, user is
jvanvlasselaer
(Fri Jan 5 09:27:16 2018) [sssd[pam]] [cache_req_set_name] (0x0400): CR
#10: Setting name [jvanvlasselaer]
(Fri Jan 5 09:27:16 2018) [sssd[pam]] [cache_req_select_domains] (0x0400):
CR #10: Performing a multi-domain search
(Fri Jan 5 09:27:16 2018) [sssd[pam]] [cache_req_search_domains] (0x0400):
CR #10: Search will bypass the cache and check the data provider
(Fri Jan 5 09:27:16 2018) [sssd[pam]] [cache_req_set_domain] (0x0400): CR
#10: Using domain [network.cawdekempen.be]
(Fri Jan 5 09:27:16 2018) [sssd[pam]] [cache_req_prepare_domain_data]
(0x0400): CR #10: Preparing input data for domain [network.cawdekempen.be]
rules
(Fri Jan 5 09:27:16 2018) [sssd[pam]] [cache_req_search_send] (0x0400): CR
#10: Looking up jvanvlasselaer(a)network.cawdekempen.be
(Fri Jan 5 09:27:16 2018) [sssd[pam]] [cache_req_search_ncache] (0x0400):
CR #10: Checking negative cache for [jvanvlasselaer(a)network.cawdekempen.be]
(Fri Jan 5 09:27:16 2018) [sssd[pam]] [cache_req_search_ncache] (0x0400):
CR #10: [jvanvlasselaer(a)network.cawdekempen.be] is not present in negative
cache
(Fri Jan 5 09:27:16 2018) [sssd[pam]] [cache_req_search_dp] (0x0400): CR
#10: Looking up [jvanvlasselaer(a)network.cawdekempen.be] in data provider
(Fri Jan 5 09:27:16 2018) [sssd[pam]] [sss_dp_issue_request] (0x0400):
Issuing request for [0x555c978f71d0:3:jvanvlasselaer@network.cawdekempen.be@
network.cawdekempen.be]
(Fri Jan 5 09:27:16 2018) [sssd[pam]] [sss_dp_get_account_msg] (0x0400):
Creating request for [network.cawdekempen.be][0x3][BE_REQ_INITGROUPS][name=
jvanvlasselaer@network.cawdekempen.be:-]
(Fri Jan 5 09:27:16 2018) [sssd[pam]] [sss_dp_internal_get_send] (0x0400):
Entering request [0x555c978f71d0:3:jvanvlasselaer@network.cawdekempen.be@
network.cawdekempen.be]
(Fri Jan 5 09:27:17 2018) [sssd[pam]] [cache_req_search_cache] (0x0400):
CR #10: Looking up [jvanvlasselaer(a)network.cawdekempen.be] in cache
(Fri Jan 5 09:27:17 2018) [sssd[pam]] [cache_req_search_ncache_filter]
(0x0400): CR #10: This request type does not support filtering result by
negative cache
(Fri Jan 5 09:27:17 2018) [sssd[pam]] [cache_req_search_done] (0x0400): CR
#10: Returning updated object [jvanvlasselaer(a)network.cawdekempen.be]
(Fri Jan 5 09:27:17 2018) [sssd[pam]] [cache_req_create_and_add_result]
(0x0400): CR #10: Found 2 entries in domain network.cawdekempen.be
(Fri Jan 5 09:27:17 2018) [sssd[pam]] [cache_req_done] (0x0400): CR #10:
Finished: Success
(Fri Jan 5 09:27:17 2018) [sssd[pam]] [pd_set_primary_name] (0x0400):
User's primary name is jvanvlasselaer(a)network.cawdekempen.be
(Fri Jan 5 09:27:17 2018) [sssd[pam]] [pam_dp_send_req] (0x0100): Sending
request with the following data:
(Fri Jan 5 09:27:17 2018) [sssd[pam]] [pam_print_data] (0x0100): command:
SSS_PAM_AUTHENTICATE
(Fri Jan 5 09:27:17 2018) [sssd[pam]] [pam_print_data] (0x0100): domain:
network.cawdekempen.be
(Fri Jan 5 09:27:17 2018) [sssd[pam]] [pam_print_data] (0x0100): user:
jvanvlasselaer(a)network.cawdekempen.be
(Fri Jan 5 09:27:17 2018) [sssd[pam]] [pam_print_data] (0x0100): service:
lightdm
(Fri Jan 5 09:27:17 2018) [sssd[pam]] [pam_print_data] (0x0100): tty: :0
(Fri Jan 5 09:27:17 2018) [sssd[pam]] [pam_print_data] (0x0100): ruser:
not set
(Fri Jan 5 09:27:17 2018) [sssd[pam]] [pam_print_data] (0x0100): rhost:
not set
(Fri Jan 5 09:27:17 2018) [sssd[pam]] [pam_print_data] (0x0100): authtok
type: 0
(Fri Jan 5 09:27:17 2018) [sssd[pam]] [pam_print_data] (0x0100):
newauthtok type: 0
(Fri Jan 5 09:27:17 2018) [sssd[pam]] [pam_print_data] (0x0100): priv: 1
(Fri Jan 5 09:27:17 2018) [sssd[pam]] [pam_print_data] (0x0100): cli_pid:
1588
(Fri Jan 5 09:27:17 2018) [sssd[pam]] [pam_print_data] (0x0100): logon
name: jvanvlasselaer
(Fri Jan 5 09:27:17 2018) [sssd[pam]] [pam_dom_forwarder] (0x0100):
pam_dp_send_req returned 0
(Fri Jan 5 09:27:17 2018) [sssd[pam]] [sss_dp_req_destructor] (0x0400):
Deleting request: [0x555c978f71d0:3:jvanvlasselaer@network.cawdekempen.be@
network.cawdekempen.be]
(Fri Jan 5 09:27:17 2018) [sssd[pam]] [pam_dp_process_reply] (0x0200):
received: [7 (Authenticatiefout)][network.cawdekempen.be]
(Fri Jan 5 09:27:17 2018) [sssd[pam]] [pam_reply] (0x0200): pam_reply
called with result [7]: Authenticatiefout.
(Fri Jan 5 09:27:17 2018) [sssd[pam]] [filter_responses] (0x0100):
[pam_response_filter] not available, not fatal.
(Fri Jan 5 09:27:17 2018) [sssd[pam]] [pam_reply] (0x0200): blen: 39
(Fri Jan 5 09:27:19 2018) [sssd[pam]] [client_recv] (0x0200): Client
disconnected!
(Fri Jan 5 09:27:19 2018) [sssd[pam]] [accept_fd_handler] (0x0400): Client
connected to privileged pipe!
(Fri Jan 5 09:27:19 2018) [sssd[pam]] [sss_cmd_get_version] (0x0200):
Received client version [3].
(Fri Jan 5 09:27:19 2018) [sssd[pam]] [sss_cmd_get_version] (0x0200):
Offered version [3].
(Fri Jan 5 09:27:19 2018) [sssd[pam]] [pam_cmd_preauth] (0x0100): entering
pam_cmd_preauth
(Fri Jan 5 09:27:19 2018) [sssd[pam]] [sss_parse_name_for_domains]
(0x0200): name 'jvanvlasselaer' matched without domain, user is
jvanvlasselaer
(Fri Jan 5 09:27:19 2018) [sssd[pam]] [pam_print_data] (0x0100): command:
SSS_PAM_PREAUTH
(Fri Jan 5 09:27:19 2018) [sssd[pam]] [pam_print_data] (0x0100): domain:
not set
(Fri Jan 5 09:27:19 2018) [sssd[pam]] [pam_print_data] (0x0100): user:
jvanvlasselaer
(Fri Jan 5 09:27:19 2018) [sssd[pam]] [pam_print_data] (0x0100): service:
lightdm
(Fri Jan 5 09:27:19 2018) [sssd[pam]] [pam_print_data] (0x0100): tty: :0
(Fri Jan 5 09:27:19 2018) [sssd[pam]] [pam_print_data] (0x0100): ruser:
not set
(Fri Jan 5 09:27:19 2018) [sssd[pam]] [pam_print_data] (0x0100): rhost:
not set
(Fri Jan 5 09:27:19 2018) [sssd[pam]] [pam_print_data] (0x0100): authtok
type: 0
(Fri Jan 5 09:27:19 2018) [sssd[pam]] [pam_print_data] (0x0100):
newauthtok type: 0
(Fri Jan 5 09:27:19 2018) [sssd[pam]] [pam_print_data] (0x0100): priv: 1
(Fri Jan 5 09:27:19 2018) [sssd[pam]] [pam_print_data] (0x0100): cli_pid:
1689
(Fri Jan 5 09:27:19 2018) [sssd[pam]] [pam_print_data] (0x0100): logon
name: jvanvlasselaer
(Fri Jan 5 09:27:19 2018) [sssd[pam]] [cache_req_send] (0x0400): CR #11:
New request 'Initgroups by name'
(Fri Jan 5 09:27:19 2018) [sssd[pam]] [cache_req_process_input] (0x0400):
CR #11: Parsing input name [jvanvlasselaer]
(Fri Jan 5 09:27:19 2018) [sssd[pam]] [sss_parse_name_for_domains]
(0x0200): name 'jvanvlasselaer' matched without domain, user is
jvanvlasselaer
(Fri Jan 5 09:27:19 2018) [sssd[pam]] [cache_req_set_name] (0x0400): CR
#11: Setting name [jvanvlasselaer]
(Fri Jan 5 09:27:19 2018) [sssd[pam]] [cache_req_select_domains] (0x0400):
CR #11: Performing a multi-domain search
(Fri Jan 5 09:27:19 2018) [sssd[pam]] [cache_req_search_domains] (0x0400):
CR #11: Search will check the cache and check the data provider
(Fri Jan 5 09:27:19 2018) [sssd[pam]] [cache_req_set_domain] (0x0400): CR
#11: Using domain [network.cawdekempen.be]
(Fri Jan 5 09:27:19 2018) [sssd[pam]] [cache_req_prepare_domain_data]
(0x0400): CR #11: Preparing input data for domain [network.cawdekempen.be]
rules
(Fri Jan 5 09:27:19 2018) [sssd[pam]] [cache_req_search_send] (0x0400): CR
#11: Looking up jvanvlasselaer(a)network.cawdekempen.be
(Fri Jan 5 09:27:19 2018) [sssd[pam]] [cache_req_search_ncache] (0x0400):
CR #11: Checking negative cache for [jvanvlasselaer(a)network.cawdekempen.be]
(Fri Jan 5 09:27:19 2018) [sssd[pam]] [cache_req_search_ncache] (0x0400):
CR #11: [jvanvlasselaer(a)network.cawdekempen.be] is not present in negative
cache
(Fri Jan 5 09:27:19 2018) [sssd[pam]] [cache_req_search_cache] (0x0400):
CR #11: Looking up [jvanvlasselaer(a)network.cawdekempen.be] in cache
(Fri Jan 5 09:27:19 2018) [sssd[pam]] [cache_req_search_send] (0x0400): CR
#11: Returning [jvanvlasselaer(a)network.cawdekempen.be] from cache
(Fri Jan 5 09:27:19 2018) [sssd[pam]] [cache_req_search_ncache_filter]
(0x0400): CR #11: This request type does not support filtering result by
negative cache
(Fri Jan 5 09:27:19 2018) [sssd[pam]] [cache_req_create_and_add_result]
(0x0400): CR #11: Found 2 entries in domain network.cawdekempen.be
(Fri Jan 5 09:27:19 2018) [sssd[pam]] [cache_req_done] (0x0400): CR #11:
Finished: Success
(Fri Jan 5 09:27:19 2018) [sssd[pam]] [pd_set_primary_name] (0x0400):
User's primary name is jvanvlasselaer(a)network.cawdekempen.be
(Fri Jan 5 09:27:19 2018) [sssd[pam]] [pam_dp_send_req] (0x0100): Sending
request with the following data:
(Fri Jan 5 09:27:19 2018) [sssd[pam]] [pam_print_data] (0x0100): command:
SSS_PAM_PREAUTH
(Fri Jan 5 09:27:19 2018) [sssd[pam]] [pam_print_data] (0x0100): domain:
network.cawdekempen.be
(Fri Jan 5 09:27:19 2018) [sssd[pam]] [pam_print_data] (0x0100): user:
jvanvlasselaer(a)network.cawdekempen.be
(Fri Jan 5 09:27:19 2018) [sssd[pam]] [pam_print_data] (0x0100): service:
lightdm
(Fri Jan 5 09:27:19 2018) [sssd[pam]] [pam_print_data] (0x0100): tty: :0
(Fri Jan 5 09:27:19 2018) [sssd[pam]] [pam_print_data] (0x0100): ruser:
not set
(Fri Jan 5 09:27:19 2018) [sssd[pam]] [pam_print_data] (0x0100): rhost:
not set
(Fri Jan 5 09:27:19 2018) [sssd[pam]] [pam_print_data] (0x0100): authtok
type: 0
(Fri Jan 5 09:27:19 2018) [sssd[pam]] [pam_print_data] (0x0100):
newauthtok type: 0
(Fri Jan 5 09:27:19 2018) [sssd[pam]] [pam_print_data] (0x0100): priv: 1
(Fri Jan 5 09:27:19 2018) [sssd[pam]] [pam_print_data] (0x0100): cli_pid:
1689
(Fri Jan 5 09:27:19 2018) [sssd[pam]] [pam_print_data] (0x0100): logon
name: jvanvlasselaer
(Fri Jan 5 09:27:19 2018) [sssd[pam]] [pam_dom_forwarder] (0x0100):
pam_dp_send_req returned 0
(Fri Jan 5 09:27:19 2018) [sssd[pam]] [pam_dp_process_reply] (0x0200):
received: [0 (Succes)][network.cawdekempen.be]
(Fri Jan 5 09:27:19 2018) [sssd[pam]] [pam_reply] (0x0200): pam_reply
called with result [0]: Succes.
(Fri Jan 5 09:27:19 2018) [sssd[pam]] [filter_responses] (0x0100):
[pam_response_filter] not available, not fatal.
(Fri Jan 5 09:27:19 2018) [sssd[pam]] [pam_reply] (0x0200): blen: 39
(Fri Jan 5 09:27:22 2018) [sssd[pam]] [client_recv] (0x0200): Client
disconnected!
(Fri Jan 5 09:27:22 2018) [sssd[pam]] [accept_fd_handler] (0x0400): Client
connected to privileged pipe!
(Fri Jan 5 09:27:22 2018) [sssd[pam]] [sss_cmd_get_version] (0x0200):
Received client version [3].
(Fri Jan 5 09:27:22 2018) [sssd[pam]] [sss_cmd_get_version] (0x0200):
Offered version [3].
(Fri Jan 5 09:27:22 2018) [sssd[pam]] [pam_cmd_preauth] (0x0100): entering
pam_cmd_preauth
(Fri Jan 5 09:27:22 2018) [sssd[pam]] [sss_parse_name_for_domains]
(0x0200): name 'jvanvlasselaer' matched without domain, user is
jvanvlasselaer
(Fri Jan 5 09:27:22 2018) [sssd[pam]] [pam_print_data] (0x0100): command:
SSS_PAM_PREAUTH
(Fri Jan 5 09:27:22 2018) [sssd[pam]] [pam_print_data] (0x0100): domain:
not set
(Fri Jan 5 09:27:22 2018) [sssd[pam]] [pam_print_data] (0x0100): user:
jvanvlasselaer
(Fri Jan 5 09:27:22 2018) [sssd[pam]] [pam_print_data] (0x0100): service:
lightdm
(Fri Jan 5 09:27:22 2018) [sssd[pam]] [pam_print_data] (0x0100): tty: :0
(Fri Jan 5 09:27:22 2018) [sssd[pam]] [pam_print_data] (0x0100): ruser:
not set
(Fri Jan 5 09:27:22 2018) [sssd[pam]] [pam_print_data] (0x0100): rhost:
not set
(Fri Jan 5 09:27:22 2018) [sssd[pam]] [pam_print_data] (0x0100): authtok
type: 0
(Fri Jan 5 09:27:22 2018) [sssd[pam]] [pam_print_data] (0x0100):
newauthtok type: 0
(Fri Jan 5 09:27:22 2018) [sssd[pam]] [pam_print_data] (0x0100): priv: 1
(Fri Jan 5 09:27:22 2018) [sssd[pam]] [pam_print_data] (0x0100): cli_pid:
1691
(Fri Jan 5 09:27:22 2018) [sssd[pam]] [pam_print_data] (0x0100): logon
name: jvanvlasselaer
(Fri Jan 5 09:27:22 2018) [sssd[pam]] [cache_req_send] (0x0400): CR #12:
New request 'Initgroups by name'
(Fri Jan 5 09:27:22 2018) [sssd[pam]] [cache_req_process_input] (0x0400):
CR #12: Parsing input name [jvanvlasselaer]
(Fri Jan 5 09:27:22 2018) [sssd[pam]] [sss_parse_name_for_domains]
(0x0200): name 'jvanvlasselaer' matched without domain, user is
jvanvlasselaer
(Fri Jan 5 09:27:22 2018) [sssd[pam]] [cache_req_set_name] (0x0400): CR
#12: Setting name [jvanvlasselaer]
(Fri Jan 5 09:27:22 2018) [sssd[pam]] [cache_req_select_domains] (0x0400):
CR #12: Performing a multi-domain search
(Fri Jan 5 09:27:22 2018) [sssd[pam]] [cache_req_search_domains] (0x0400):
CR #12: Search will check the cache and check the data provider
(Fri Jan 5 09:27:22 2018) [sssd[pam]] [cache_req_set_domain] (0x0400): CR
#12: Using domain [network.cawdekempen.be]
(Fri Jan 5 09:27:22 2018) [sssd[pam]] [cache_req_prepare_domain_data]
(0x0400): CR #12: Preparing input data for domain [network.cawdekempen.be]
rules
(Fri Jan 5 09:27:22 2018) [sssd[pam]] [cache_req_search_send] (0x0400): CR
#12: Looking up jvanvlasselaer(a)network.cawdekempen.be
(Fri Jan 5 09:27:22 2018) [sssd[pam]] [cache_req_search_ncache] (0x0400):
CR #12: Checking negative cache for [jvanvlasselaer(a)network.cawdekempen.be]
(Fri Jan 5 09:27:22 2018) [sssd[pam]] [cache_req_search_ncache] (0x0400):
CR #12: [jvanvlasselaer(a)network.cawdekempen.be] is not present in negative
cache
(Fri Jan 5 09:27:22 2018) [sssd[pam]] [cache_req_search_cache] (0x0400):
CR #12: Looking up [jvanvlasselaer(a)network.cawdekempen.be] in cache
(Fri Jan 5 09:27:22 2018) [sssd[pam]] [cache_req_search_send] (0x0400): CR
#12: Returning [jvanvlasselaer(a)network.cawdekempen.be] from cache
(Fri Jan 5 09:27:22 2018) [sssd[pam]] [cache_req_search_ncache_filter]
(0x0400): CR #12: This request type does not support filtering result by
negative cache
(Fri Jan 5 09:27:22 2018) [sssd[pam]] [cache_req_create_and_add_result]
(0x0400): CR #12: Found 2 entries in domain network.cawdekempen.be
(Fri Jan 5 09:27:22 2018) [sssd[pam]] [cache_req_done] (0x0400): CR #12:
Finished: Success
(Fri Jan 5 09:27:22 2018) [sssd[pam]] [pd_set_primary_name] (0x0400):
User's primary name is jvanvlasselaer(a)network.cawdekempen.be
(Fri Jan 5 09:27:22 2018) [sssd[pam]] [pam_dp_send_req] (0x0100): Sending
request with the following data:
(Fri Jan 5 09:27:22 2018) [sssd[pam]] [pam_print_data] (0x0100): command:
SSS_PAM_PREAUTH
(Fri Jan 5 09:27:22 2018) [sssd[pam]] [pam_print_data] (0x0100): domain:
network.cawdekempen.be
(Fri Jan 5 09:27:22 2018) [sssd[pam]] [pam_print_data] (0x0100): user:
jvanvlasselaer(a)network.cawdekempen.be
(Fri Jan 5 09:27:22 2018) [sssd[pam]] [pam_print_data] (0x0100): service:
lightdm
(Fri Jan 5 09:27:22 2018) [sssd[pam]] [pam_print_data] (0x0100): tty: :0
(Fri Jan 5 09:27:22 2018) [sssd[pam]] [pam_print_data] (0x0100): ruser:
not set
(Fri Jan 5 09:27:22 2018) [sssd[pam]] [pam_print_data] (0x0100): rhost:
not set
(Fri Jan 5 09:27:22 2018) [sssd[pam]] [pam_print_data] (0x0100): authtok
type: 0
(Fri Jan 5 09:27:22 2018) [sssd[pam]] [pam_print_data] (0x0100):
newauthtok type: 0
(Fri Jan 5 09:27:22 2018) [sssd[pam]] [pam_print_data] (0x0100): priv: 1
(Fri Jan 5 09:27:22 2018) [sssd[pam]] [pam_print_data] (0x0100): cli_pid:
1691
(Fri Jan 5 09:27:22 2018) [sssd[pam]] [pam_print_data] (0x0100): logon
name: jvanvlasselaer
(Fri Jan 5 09:27:22 2018) [sssd[pam]] [pam_dom_forwarder] (0x0100):
pam_dp_send_req returned 0
(Fri Jan 5 09:27:22 2018) [sssd[pam]] [pam_dp_process_reply] (0x0200):
received: [0 (Succes)][network.cawdekempen.be]
(Fri Jan 5 09:27:22 2018) [sssd[pam]] [pam_reply] (0x0200): pam_reply
called with result [0]: Succes.
(Fri Jan 5 09:27:22 2018) [sssd[pam]] [filter_responses] (0x0100):
[pam_response_filter] not available, not fatal.
(Fri Jan 5 09:27:22 2018) [sssd[pam]] [pam_reply] (0x0200): blen: 39
(Fri Jan 5 09:27:27 2018) [sssd[pam]] [pam_cmd_authenticate] (0x0100):
entering pam_cmd_authenticate
(Fri Jan 5 09:27:27 2018) [sssd[pam]] [sss_parse_name_for_domains]
(0x0200): name 'jvanvlasselaer' matched without domain, user is
jvanvlasselaer
(Fri Jan 5 09:27:27 2018) [sssd[pam]] [pam_print_data] (0x0100): command:
SSS_PAM_AUTHENTICATE
(Fri Jan 5 09:27:27 2018) [sssd[pam]] [pam_print_data] (0x0100): domain:
not set
(Fri Jan 5 09:27:27 2018) [sssd[pam]] [pam_print_data] (0x0100): user:
jvanvlasselaer
(Fri Jan 5 09:27:27 2018) [sssd[pam]] [pam_print_data] (0x0100): service:
lightdm
(Fri Jan 5 09:27:27 2018) [sssd[pam]] [pam_print_data] (0x0100): tty: :0
(Fri Jan 5 09:27:27 2018) [sssd[pam]] [pam_print_data] (0x0100): ruser:
not set
(Fri Jan 5 09:27:27 2018) [sssd[pam]] [pam_print_data] (0x0100): rhost:
not set
(Fri Jan 5 09:27:27 2018) [sssd[pam]] [pam_print_data] (0x0100): authtok
type: 1
(Fri Jan 5 09:27:27 2018) [sssd[pam]] [pam_print_data] (0x0100):
newauthtok type: 0
(Fri Jan 5 09:27:27 2018) [sssd[pam]] [pam_print_data] (0x0100): priv: 1
(Fri Jan 5 09:27:27 2018) [sssd[pam]] [pam_print_data] (0x0100): cli_pid:
1691
(Fri Jan 5 09:27:27 2018) [sssd[pam]] [pam_print_data] (0x0100): logon
name: jvanvlasselaer
(Fri Jan 5 09:27:27 2018) [sssd[pam]] [cache_req_send] (0x0400): CR #13:
New request 'Initgroups by name'
(Fri Jan 5 09:27:27 2018) [sssd[pam]] [cache_req_process_input] (0x0400):
CR #13: Parsing input name [jvanvlasselaer]
(Fri Jan 5 09:27:27 2018) [sssd[pam]] [sss_parse_name_for_domains]
(0x0200): name 'jvanvlasselaer' matched without domain, user is
jvanvlasselaer
(Fri Jan 5 09:27:27 2018) [sssd[pam]] [cache_req_set_name] (0x0400): CR
#13: Setting name [jvanvlasselaer]
(Fri Jan 5 09:27:27 2018) [sssd[pam]] [cache_req_select_domains] (0x0400):
CR #13: Performing a multi-domain search
(Fri Jan 5 09:27:27 2018) [sssd[pam]] [cache_req_search_domains] (0x0400):
CR #13: Search will bypass the cache and check the data provider
(Fri Jan 5 09:27:27 2018) [sssd[pam]] [cache_req_set_domain] (0x0400): CR
#13: Using domain [network.cawdekempen.be]
(Fri Jan 5 09:27:27 2018) [sssd[pam]] [cache_req_prepare_domain_data]
(0x0400): CR #13: Preparing input data for domain [network.cawdekempen.be]
rules
(Fri Jan 5 09:27:27 2018) [sssd[pam]] [cache_req_search_send] (0x0400): CR
#13: Looking up jvanvlasselaer(a)network.cawdekempen.be
(Fri Jan 5 09:27:27 2018) [sssd[pam]] [cache_req_search_ncache] (0x0400):
CR #13: Checking negative cache for [jvanvlasselaer(a)network.cawdekempen.be]
(Fri Jan 5 09:27:27 2018) [sssd[pam]] [cache_req_search_ncache] (0x0400):
CR #13: [jvanvlasselaer(a)network.cawdekempen.be] is not present in negative
cache
(Fri Jan 5 09:27:27 2018) [sssd[pam]] [cache_req_search_dp] (0x0400): CR
#13: Looking up [jvanvlasselaer(a)network.cawdekempen.be] in data provider
(Fri Jan 5 09:27:27 2018) [sssd[pam]] [sss_dp_issue_request] (0x0400):
Issuing request for [0x555c978f71d0:3:jvanvlasselaer@network.cawdekempen.be@
network.cawdekempen.be]
(Fri Jan 5 09:27:27 2018) [sssd[pam]] [sss_dp_get_account_msg] (0x0400):
Creating request for [network.cawdekempen.be][0x3][BE_REQ_INITGROUPS][name=
jvanvlasselaer@network.cawdekempen.be:-]
(Fri Jan 5 09:27:27 2018) [sssd[pam]] [sss_dp_internal_get_send] (0x0400):
Entering request [0x555c978f71d0:3:jvanvlasselaer@network.cawdekempen.be@
network.cawdekempen.be]
(Fri Jan 5 09:27:27 2018) [sssd[pam]] [cache_req_search_cache] (0x0400):
CR #13: Looking up [jvanvlasselaer(a)network.cawdekempen.be] in cache
(Fri Jan 5 09:27:27 2018) [sssd[pam]] [cache_req_search_ncache_filter]
(0x0400): CR #13: This request type does not support filtering result by
negative cache
(Fri Jan 5 09:27:27 2018) [sssd[pam]] [cache_req_search_done] (0x0400): CR
#13: Returning updated object [jvanvlasselaer(a)network.cawdekempen.be]
(Fri Jan 5 09:27:27 2018) [sssd[pam]] [cache_req_create_and_add_result]
(0x0400): CR #13: Found 2 entries in domain network.cawdekempen.be
(Fri Jan 5 09:27:27 2018) [sssd[pam]] [cache_req_done] (0x0400): CR #13:
Finished: Success
(Fri Jan 5 09:27:27 2018) [sssd[pam]] [pd_set_primary_name] (0x0400):
User's primary name is jvanvlasselaer(a)network.cawdekempen.be
(Fri Jan 5 09:27:27 2018) [sssd[pam]] [pam_dp_send_req] (0x0100): Sending
request with the following data:
(Fri Jan 5 09:27:27 2018) [sssd[pam]] [pam_print_data] (0x0100): command:
SSS_PAM_AUTHENTICATE
(Fri Jan 5 09:27:27 2018) [sssd[pam]] [pam_print_data] (0x0100): domain:
network.cawdekempen.be
(Fri Jan 5 09:27:27 2018) [sssd[pam]] [pam_print_data] (0x0100): user:
jvanvlasselaer(a)network.cawdekempen.be
(Fri Jan 5 09:27:27 2018) [sssd[pam]] [pam_print_data] (0x0100): service:
lightdm
(Fri Jan 5 09:27:27 2018) [sssd[pam]] [pam_print_data] (0x0100): tty: :0
(Fri Jan 5 09:27:27 2018) [sssd[pam]] [pam_print_data] (0x0100): ruser:
not set
(Fri Jan 5 09:27:27 2018) [sssd[pam]] [pam_print_data] (0x0100): rhost:
not set
(Fri Jan 5 09:27:27 2018) [sssd[pam]] [pam_print_data] (0x0100): authtok
type: 1
(Fri Jan 5 09:27:27 2018) [sssd[pam]] [pam_print_data] (0x0100):
newauthtok type: 0
(Fri Jan 5 09:27:27 2018) [sssd[pam]] [pam_print_data] (0x0100): priv: 1
(Fri Jan 5 09:27:27 2018) [sssd[pam]] [pam_print_data] (0x0100): cli_pid:
1691
(Fri Jan 5 09:27:27 2018) [sssd[pam]] [pam_print_data] (0x0100): logon
name: jvanvlasselaer
(Fri Jan 5 09:27:27 2018) [sssd[pam]] [pam_dom_forwarder] (0x0100):
pam_dp_send_req returned 0
(Fri Jan 5 09:27:27 2018) [sssd[pam]] [sss_dp_req_destructor] (0x0400):
Deleting request: [0x555c978f71d0:3:jvanvlasselaer@network.cawdekempen.be@
network.cawdekempen.be]
(Fri Jan 5 09:27:29 2018) [sssd[pam]] [pam_dp_process_reply] (0x0200):
received: [12 (Authenticatietoken is niet langer geldig; nieuwe is
vereist)][network.cawdekempen.be]
(Fri Jan 5 09:27:29 2018) [sssd[pam]] [pam_reply] (0x0200): pam_reply
called with result [12]: Authenticatietoken is niet langer geldig; nieuwe
is vereist.
(Fri Jan 5 09:27:29 2018) [sssd[pam]] [filter_responses] (0x0100):
[pam_response_filter] not available, not fatal.
(Fri Jan 5 09:27:29 2018) [sssd[pam]] [pam_reply] (0x0200): blen: 39
(Fri Jan 5 09:27:29 2018) [sssd[pam]] [pam_cmd_acct_mgmt] (0x0100):
entering pam_cmd_acct_mgmt
(Fri Jan 5 09:27:29 2018) [sssd[pam]] [sss_parse_name_for_domains]
(0x0200): name 'jvanvlasselaer' matched without domain, user is
jvanvlasselaer
(Fri Jan 5 09:27:29 2018) [sssd[pam]] [pam_print_data] (0x0100): command:
SSS_PAM_ACCT_MGMT
(Fri Jan 5 09:27:29 2018) [sssd[pam]] [pam_print_data] (0x0100): domain:
not set
(Fri Jan 5 09:27:29 2018) [sssd[pam]] [pam_print_data] (0x0100): user:
jvanvlasselaer
(Fri Jan 5 09:27:29 2018) [sssd[pam]] [pam_print_data] (0x0100): service:
lightdm
(Fri Jan 5 09:27:29 2018) [sssd[pam]] [pam_print_data] (0x0100): tty: :0
(Fri Jan 5 09:27:29 2018) [sssd[pam]] [pam_print_data] (0x0100): ruser:
not set
(Fri Jan 5 09:27:29 2018) [sssd[pam]] [pam_print_data] (0x0100): rhost:
not set
(Fri Jan 5 09:27:29 2018) [sssd[pam]] [pam_print_data] (0x0100): authtok
type: 0
(Fri Jan 5 09:27:29 2018) [sssd[pam]] [pam_print_data] (0x0100):
newauthtok type: 0
(Fri Jan 5 09:27:29 2018) [sssd[pam]] [pam_print_data] (0x0100): priv: 1
(Fri Jan 5 09:27:29 2018) [sssd[pam]] [pam_print_data] (0x0100): cli_pid:
1691
(Fri Jan 5 09:27:29 2018) [sssd[pam]] [pam_print_data] (0x0100): logon
name: jvanvlasselaer
(Fri Jan 5 09:27:29 2018) [sssd[pam]] [cache_req_send] (0x0400): CR #14:
New request 'Initgroups by name'
(Fri Jan 5 09:27:29 2018) [sssd[pam]] [cache_req_process_input] (0x0400):
CR #14: Parsing input name [jvanvlasselaer]
(Fri Jan 5 09:27:29 2018) [sssd[pam]] [sss_parse_name_for_domains]
(0x0200): name 'jvanvlasselaer' matched without domain, user is
jvanvlasselaer
(Fri Jan 5 09:27:29 2018) [sssd[pam]] [cache_req_set_name] (0x0400): CR
#14: Setting name [jvanvlasselaer]
(Fri Jan 5 09:27:29 2018) [sssd[pam]] [cache_req_select_domains] (0x0400):
CR #14: Performing a multi-domain search
(Fri Jan 5 09:27:29 2018) [sssd[pam]] [cache_req_search_domains] (0x0400):
CR #14: Search will check the cache and check the data provider
(Fri Jan 5 09:27:29 2018) [sssd[pam]] [cache_req_set_domain] (0x0400): CR
#14: Using domain [network.cawdekempen.be]
(Fri Jan 5 09:27:29 2018) [sssd[pam]] [cache_req_prepare_domain_data]
(0x0400): CR #14: Preparing input data for domain [network.cawdekempen.be]
rules
(Fri Jan 5 09:27:29 2018) [sssd[pam]] [cache_req_search_send] (0x0400): CR
#14: Looking up jvanvlasselaer(a)network.cawdekempen.be
(Fri Jan 5 09:27:29 2018) [sssd[pam]] [cache_req_search_ncache] (0x0400):
CR #14: Checking negative cache for [jvanvlasselaer(a)network.cawdekempen.be]
(Fri Jan 5 09:27:29 2018) [sssd[pam]] [cache_req_search_ncache] (0x0400):
CR #14: [jvanvlasselaer(a)network.cawdekempen.be] is not present in negative
cache
(Fri Jan 5 09:27:29 2018) [sssd[pam]] [cache_req_search_cache] (0x0400):
CR #14: Looking up [jvanvlasselaer(a)network.cawdekempen.be] in cache
(Fri Jan 5 09:27:29 2018) [sssd[pam]] [cache_req_search_send] (0x0400): CR
#14: Returning [jvanvlasselaer(a)network.cawdekempen.be] from cache
(Fri Jan 5 09:27:29 2018) [sssd[pam]] [cache_req_search_ncache_filter]
(0x0400): CR #14: This request type does not support filtering result by
negative cache
(Fri Jan 5 09:27:29 2018) [sssd[pam]] [cache_req_create_and_add_result]
(0x0400): CR #14: Found 2 entries in domain network.cawdekempen.be
(Fri Jan 5 09:27:29 2018) [sssd[pam]] [cache_req_done] (0x0400): CR #14:
Finished: Success
(Fri Jan 5 09:27:29 2018) [sssd[pam]] [pd_set_primary_name] (0x0400):
User's primary name is jvanvlasselaer(a)network.cawdekempen.be
(Fri Jan 5 09:27:29 2018) [sssd[pam]] [pam_dp_send_req] (0x0100): Sending
request with the following data:
(Fri Jan 5 09:27:29 2018) [sssd[pam]] [pam_print_data] (0x0100): command:
SSS_PAM_ACCT_MGMT
(Fri Jan 5 09:27:29 2018) [sssd[pam]] [pam_print_data] (0x0100): domain:
network.cawdekempen.be
(Fri Jan 5 09:27:29 2018) [sssd[pam]] [pam_print_data] (0x0100): user:
jvanvlasselaer(a)network.cawdekempen.be
(Fri Jan 5 09:27:29 2018) [sssd[pam]] [pam_print_data] (0x0100): service:
lightdm
(Fri Jan 5 09:27:29 2018) [sssd[pam]] [pam_print_data] (0x0100): tty: :0
(Fri Jan 5 09:27:29 2018) [sssd[pam]] [pam_print_data] (0x0100): ruser:
not set
(Fri Jan 5 09:27:29 2018) [sssd[pam]] [pam_print_data] (0x0100): rhost:
not set
(Fri Jan 5 09:27:29 2018) [sssd[pam]] [pam_print_data] (0x0100): authtok
type: 0
(Fri Jan 5 09:27:29 2018) [sssd[pam]] [pam_print_data] (0x0100):
newauthtok type: 0
(Fri Jan 5 09:27:29 2018) [sssd[pam]] [pam_print_data] (0x0100): priv: 1
(Fri Jan 5 09:27:29 2018) [sssd[pam]] [pam_print_data] (0x0100): cli_pid:
1691
(Fri Jan 5 09:27:29 2018) [sssd[pam]] [pam_print_data] (0x0100): logon
name: jvanvlasselaer
(Fri Jan 5 09:27:29 2018) [sssd[pam]] [pam_dom_forwarder] (0x0100):
pam_dp_send_req returned 0
(Fri Jan 5 09:27:29 2018) [sssd[pam]] [pam_dp_process_reply] (0x0200):
received: [0 (Succes)][network.cawdekempen.be]
(Fri Jan 5 09:27:29 2018) [sssd[pam]] [pam_reply] (0x0200): pam_reply
called with result [0]: Succes.
(Fri Jan 5 09:27:29 2018) [sssd[pam]] [filter_responses] (0x0100):
[pam_response_filter] not available, not fatal.
(Fri Jan 5 09:27:29 2018) [sssd[pam]] [pam_reply] (0x0200): blen: 39
2018-01-04 13:53 GMT+01:00 Jakub Hrozek via FreeIPA-users <
freeipa-users(a)lists.fedorahosted.org>:
On Thu, Jan 04, 2018 at 11:30:22AM +0100, Johan Vermeulen via
FreeIPA-users wrote:
> Hello,
>
> apologies for the late reply, due to the holidays.
>
> I had a call from a user this morning, she had to do multiple login
> attempts and reboot several times before she could login.
>
> Trying to follow
>
https://docs.pagure.org/SSSD.sssd/users/troubleshooting.html
>
> I assume the general setup works, as troubles only show up when password
> expires.
> On the users laptop:
>
> [root@lremijsen ~]# systemctl status sssd
> ● sssd.service - System Security Services Daemon
> Loaded: loaded (/usr/lib/systemd/system/sssd.service; enabled; vendor
> preset: disabled)
> Drop-In: /etc/systemd/system/sssd.service.d
> └─journal.conf
> Active: active (running) since do 2018-01-04 08:42:01 CET; 2h 35min
ago
> Process: 730 ExecStart=/usr/sbin/sssd -D -f (code=exited,
> status=0/SUCCESS)
> Main PID: 757 (sssd)
> CGroup: /system.slice/sssd.service
> ├─757 /usr/sbin/sssd -D -f
> ├─767 /usr/libexec/sssd/sssd_be --domain
network.cawdekempen.be
> --uid 0 --gid 0 --debug-to-files
> ├─774 /usr/libexec/sssd/sssd_nss --uid 0 --gid 0
--debug-to-files
> ├─775 /usr/libexec/sssd/sssd_sudo --uid 0 --gid 0
> --debug-to-files
> ├─776 /usr/libexec/sssd/sssd_pam --uid 0 --gid 0
--debug-to-files
> ├─777 /usr/libexec/sssd/sssd_ssh --uid 0 --gid 0
--debug-to-files
> └─778 /usr/libexec/sssd/sssd_pac --uid 0 --gid 0
--debug-to-files
>
> jan 04 10:37:45 lremijsen.network.cawdekempen.be sssd_be[767]: GSSAPI
> client step 1
> jan 04 10:37:45 lremijsen.network.cawdekempen.be sssd_be[767]: GSSAPI
> client step 2
> jan 04 10:52:45 lremijsen.network.cawdekempen.be sssd_be[767]: GSSAPI
> client step 1
> jan 04 10:52:45 lremijsen.network.cawdekempen.be sssd_be[767]: GSSAPI
> client step 1
> jan 04 10:52:46 lremijsen.network.cawdekempen.be sssd_be[767]: GSSAPI
> client step 1
> jan 04 10:52:46 lremijsen.network.cawdekempen.be sssd_be[767]: GSSAPI
> client step 2
> jan 04 11:07:45 lremijsen.network.cawdekempen.be sssd_be[767]: GSSAPI
> client step 1
> jan 04 11:07:45 lremijsen.network.cawdekempen.be sssd_be[767]: GSSAPI
> client step 1
> jan 04 11:07:46 lremijsen.network.cawdekempen.be sssd_be[767]: GSSAPI
> client step 1
> jan 04 11:07:46 lremijsen.network.cawdekempen.be sssd_be[767]: GSSAPI
> client step 2
>
> In /var/log/secure there is always a clear message that the password is
> expired:
>
> Jan 4 10:06:13 lremijsen mate-screensaver-dialog:
> pam_sss(mate-screensaver:auth): authentication failure; logname=
> uid=382900705 euid=382900705 tty=:0.0 ruser= rhost= user=lremijsen
> Jan 4 10:06:13 lremijsen mate-screensaver-dialog:
> pam_sss(mate-screensaver:auth): received for user lremijsen: 12
> (Authenticatietoken is niet langer geldig; nieuwe is vereist)
> Jan 4 10:06:14 lremijsen mate-screensaver-dialog:
> pam_sss(mate-screensaver:account): User info message: Wachtwoord
verlopen.
> Verander nu uw wachtwoord.
>
> sssd_pam.log only shows:
>
> (Tue Jan 2 13:05:46 2018) [sssd[pam]] [orderly_shutdown] (0x0010):
> SIGTERM: killing children
>
> sssd_network.cawdekempen.be.log only shows:
>
> (Tue Jan 2 13:05:46 2018) [sssd[be[network.cawdekempen.be]]]
> [orderly_shutdown] (0x0010): SIGTERM: killing children
>
> I suppose I have to increase the log levels?
Yes, by default, SSSD doesn't log much. I think you would need
especially the pam and domain service debug logs.
_______________________________________________
FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org