10:06 a.m.
Hi all,
I've set up two FreeIPA servers without CA (I provided 3rd party certificates during
the installation process). I also established trust to an AD domain as below:
ipa trust-add --type=ad AD.DOMAIN --external=True --all
I checked that I can successfully obtain cross-realm ticket (kvno -S host ...) as
described below:
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/...
I also can ssh to either of the two FreeIPA servers as user(a)ad.domain.
However, when I configured FreeIPA client and tried to ssh into it / su inside it as the
same ad user then it fails (I cannot ssh, when I try to su - as the ad user it fails with
user(a)ad.domain does not exist.
I increased sssd log level on both client and servers but I cannot find anything spooky
there (but I might as well not know what to look for :)).
Can someone please advise on how to narrow this down?
1:29 p.m.
New subject: Cannot log in as an AD user to FreeIPA client but can log in to server
On Tue, Jun 05, 2018 at 03:06:44PM -0000, Bart via FreeIPA-users wrote:
Hi all,
I've set up two FreeIPA servers without CA (I provided 3rd party certificates during
the installation process). I also established trust to an AD domain as below:
ipa trust-add --type=ad AD.DOMAIN --external=True --all
I checked that I can successfully obtain cross-realm ticket (kvno -S host ...) as
described below:
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/...
I also can ssh to either of the two FreeIPA servers as user(a)ad.domain.
However, when I configured FreeIPA client and tried to ssh into it / su inside it as the
same ad user then it fails (I cannot ssh, when I try to su - as the ad user it fails with
user(a)ad.domain does not exist.
I increased sssd log level on both client and servers but I cannot find anything spooky
there (but I might as well not know what to look for :)).
Can someone please advise on how to narrow this down?
First, can you resolve the user and all their groups on the client?
If yes, then I normally start with /var/log/secure or journal to see
what did pam_sss return and work my way from there to the sssd logs..
9:30 a.m.
New subject: Cannot log in as an AD user to FreeIPA client but can log in to server
Hi Jakub, thank you for help.
I cannot resolve all of the users nor their groups on a client hosts. getent passwd
doesn't return anything, su - user(a)ad.domain doesn't work either.
All AD users I tried get resolved on the FreeIPA servers. For the one account it gets
resolved on one client host but on another client host it fails.
Oddly, I can see in server's /var/log/sssd/ad_domain.log that upon issuing su -
user(a)ad.domain on a client host group membership is being resolved. User is not resolved
on the client host though.
The only suspicious thing I can find in the logfiles is this entry but I do not know if it
is the culprit or not:
(Wed Jun 6 16:11:39 2018) [sssd[be[ipa.domain]]] [sysdb_error_to_errno] (0x0020): LDB
returned unexpected error: [No such attribute]
(Wed Jun 6 16:11:39 2018) [sssd[be[ipa.domain]]] [sysdb_mod_group_member] (0x0400):
Error: 14 (Bad address)
(Wed Jun 6 16:11:39 2018) [sssd[be[ipa.domain]]] [sysdb_update_members_ex] (0x0020):
Could not remove member [user(a)ad.domain] from group
[name=some_group(a)ad.domain,cn=groups,cn=ad.domain,cn=sysdb]. Skipping
(Wed Jun 6 16:11:39 2018) [sssd[be[ipa.domain]]] [sss_domain_get_state] (0x1000): Domain
ipa.domain is Active
(Wed Jun 6 16:11:39 2018) [sssd[be[ipa.domain]]] [sss_domain_get_state] (0x1000): Domain
ad.domain is Active
(Wed Jun 6 16:11:39 2018) [sssd[be[ipa.domain]]] [ldb] (0x4000): start ldb transaction
(nesting: 1)
(Wed Jun 6 16:11:39 2018) [sssd[be[ipa.domain]]] [ldb] (0x4000): Added timed event
"ltdb_callback": 0x55bdb
9:45 a.m.
New subject: Cannot log in as an AD user to FreeIPA client but can log in to server
On Wed, Jun 06, 2018 at 02:30:56PM -0000, Bart via FreeIPA-users wrote:
Hi Jakub, thank you for help.
I cannot resolve all of the users nor their groups on a client hosts. getent passwd
doesn't return anything, su - user(a)ad.domain doesn't work either.
All AD users I tried get resolved on the FreeIPA servers. For the one account it gets
resolved on one client host but on another client host it fails.
It's hard to say without the complete logs, but very often this reason
is that one or more of the user's groups can't be resolved on the
client.
If you do id $username on the client and then try their group on the
server, do at least some of them resolve (getent group $groupname)
Alternatively, you can look at the sssd_nss.log on the server and check
for getgrgid lookups and see if some of them fail.
Oddly, I can see in server's /var/log/sssd/ad_domain.log that upon issuing su -
user(a)ad.domain on a client host group membership is being resolved. User is not resolved
on the client host though.
The only suspicious thing I can find in the logfiles is this entry but I do not know if
it is the culprit or not:
(Wed Jun 6 16:11:39 2018) [sssd[be[ipa.domain]]] [sysdb_error_to_errno] (0x0020): LDB
returned unexpected error: [No such attribute]
(Wed Jun 6 16:11:39 2018) [sssd[be[ipa.domain]]] [sysdb_mod_group_member] (0x0400):
Error: 14 (Bad address)
(Wed Jun 6 16:11:39 2018) [sssd[be[ipa.domain]]] [sysdb_update_members_ex] (0x0020):
Could not remove member [user(a)ad.domain] from group
[name=some_group(a)ad.domain,cn=groups,cn=ad.domain,cn=sysdb]. Skipping
Since the message says skipping, I'm quite certain that it's not the
problem.
> (Wed Jun 6 16:11:39 2018) [sssd[be[ipa.domain]]] [sss_domain_get_state] (0x1000):
Domain ipa.domain is Active
> (Wed Jun 6 16:11:39 2018) [sssd[be[ipa.domain]]] [sss_domain_get_state] (0x1000):
Domain ad.domain is Active
> (Wed Jun 6 16:11:39 2018) [sssd[be[ipa.domain]]] [ldb] (0x4000): start ldb
transaction (nesting: 1)
> (Wed Jun 6 16:11:39 2018) [sssd[be[ipa.domain]]] [ldb] (0x4000): Added timed event
"ltdb_callback": 0x55bdb
> _______________________________________________
> FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
> To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org
> Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
https://lists.fedoraproject.org/archives/list/freeipa-users@lists.fedorah...
7:19 a.m.
New subject: Cannot log in as an AD user to FreeIPA client but can log in to server
Thank you Jakub for your hints.
I created a brand new instance of FreeIPA client and connected it to the existing
servers.
Now I cannot resolve anytthing on a client (getent group $group, getent passwd $user yield
no results).
For the same exact users/groups I tested on the client, they get resolved on the server.
Awkwardly, in the sssd log files on the client I can see that the corresponding user/group
entries are present.
When I issue getent passwd ad_user(a)ad.domain on a client (I sanitized names in the log
file), entries for that user and his groups are present (Received [144] groups from the
IPA server).
Is there anything wrong in this log file from the client host?
(Thu Jun 7 13:28:23 2018) [sssd[be[ipa.domain]]] [dp_get_account_info_handler] (0x0200):
Got request for [0x1][BE_REQ_USER][name=ad_user(a)ad.domain]
(Thu Jun 7 13:28:23 2018) [sssd[be[ipa.domain]]] [dp_attach_req] (0x0400): DP Request
[Account #1]: New request. Flags [0x0001].
(Thu Jun 7 13:28:23 2018) [sssd[be[ipa.domain]]] [dp_attach_req] (0x0400): Number of
active DP request: 1
(Thu Jun 7 13:28:23 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x0400):
calling ldap_search_ext with
[(&(objectClass=ipaUserOverride)(uid=ad_user))][cn=Default Trust
View,cn=views,cn=accounts,dc=ipa,dc=domain].
(Thu Jun 7 13:28:23 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_op_finished] (0x0400):
Search result: Success(0), no errmsg set
(Thu Jun 7 13:28:23 2018) [sssd[be[ipa.domain]]] [ipa_s2n_get_acct_info_send] (0x0400):
Sending request_type: [REQ_FULL_WITH_MEMBERS] for trust user [ad_user] to IPA server
(Thu Jun 7 13:28:23 2018) [sssd[be[ipa.domain]]] [ipa_s2n_exop_send] (0x0400): Executing
extended operation
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [ipa_s2n_exop_done] (0x0400):
ldap_extended_operation result: Success(0), (null).
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [ipa_s2n_get_user_done] (0x0400):
Received [144] groups in group list from IPA Server
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [ipa_s2n_get_user_done] (0x0400):
[ad_user(a)ad.domain].
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [ipa_s2n_get_user_done] (0x0400):
[group1(a)ad.domain].
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [ipa_s2n_get_user_done] (0x0400):
[group2(a)ad.domain].
(...) sanitized other groups out of 144 groups returned (...)
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [ipa_s2n_get_user_done] (0x0400):
[ad_admins(a)ipa.domain].
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [ipa_s2n_get_list_step] (0x0400):
Sending request_type: [REQ_FULL_WITH_MEMBERS] for object [ad_user(a)ad.domain].
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [ipa_s2n_exop_send] (0x0400): Executing
extended operation
(Thu Jun 7 13:28:31 2018) [sssd[be[ipa.domain]]] [dp_get_account_info_handler] (0x0200):
Got request for [0x1][BE_REQ_USER][name=ad_user(a)ad.domain]
(Thu Jun 7 13:28:31 2018) [sssd[be[ipa.domain]]] [dp_attach_req] (0x0400): DP Request
[Account #2]: New request. Flags [0x0001].
(Thu Jun 7 13:28:31 2018) [sssd[be[ipa.domain]]] [dp_attach_req] (0x0400): Number of
active DP request: 2
(Thu Jun 7 13:28:31 2018) [sssd[be[ipa.domain]]] [sdap_search_user_next_base] (0x0400):
Searching for users with base [cn=accounts,dc=ipa,dc=domain]
(Thu Jun 7 13:28:31 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x0400):
calling ldap_search_ext with
[(&(|(krbPrincipalName=ad_user@ad.domain)(mail=ad_user@ad.domain)(krbPrincipalName=ad_user\\@ad.domain@ipa.domain))(objectclass=posixAccount)(uid=*)(&(uidNumber=*)(!(uidNumber=0))))][cn=accounts,dc=ipa,dc=domain].
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [ipa_s2n_get_list_next] (0x0040): s2n
exop request failed.
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [ipa_s2n_get_list_done] (0x0040): s2n
get_fqlist request failed.
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [sdap_id_op_done] (0x0200):
communication error on cached connection, moving to next server
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [fo_resolve_service_send] (0x0100):
Trying to resolve service 'IPA'
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [resolve_srv_send] (0x0200): The status
of SRV lookup is neutral
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [resolv_discover_srv_next_domain]
(0x0400): SRV resolution of service 'ldap'. Will use DNS discovery domain
'ipa.domain'
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [resolv_getsrv_send] (0x0100): Trying to
resolve SRV record of '_ldap._tcp.ipa.domain'
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [request_watch_destructor] (0x0400):
Deleting request watch
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [fo_discover_srv_done] (0x0400): Got
answer. Processing...
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [fo_discover_srv_done] (0x0400): Got 2
servers
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [fo_add_server_to_list] (0x0400):
Inserted primary server 'ipa-server.ipa.domain:389' to service 'IPA'
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [fo_add_server_to_list] (0x0400):
Inserted primary server 'ipa-server-2.ipa.domain:389' to service 'IPA'
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [set_srv_data_status] (0x0100): Marking
SRV lookup of service 'IPA' as 'resolved'
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [get_server_status] (0x0100): Hostname
resolution expired, resetting the server status of 'ipa-server.ipa.domain'
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [set_server_common_status] (0x0100):
Marking server 'ipa-server.ipa.domain' as 'name not resolved'
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [resolv_gethostbyname_files_send]
(0x0100): Trying to resolve A record of 'ipa-server.ipa.domain' in files
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [set_server_common_status] (0x0100):
Marking server 'ipa-server.ipa.domain' as 'resolving name'
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [resolv_gethostbyname_files_send]
(0x0100): Trying to resolve AAAA record of 'ipa-server.ipa.domain' in files
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [resolv_gethostbyname_next] (0x0200): No
more address families to retry
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [resolv_gethostbyname_dns_query]
(0x0100): Trying to resolve A record of 'ipa-server.ipa.domain' in DNS
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [request_watch_destructor] (0x0400):
Deleting request watch
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [set_server_common_status] (0x0100):
Marking server 'ipa-server.ipa.domain' as 'name resolved'
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [be_resolve_server_process] (0x0200):
Found address for server ipa-server.ipa.domain: [10.144.45.29] TTL 60
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [ipa_resolve_callback] (0x0400):
Constructed uri 'ldap://ipa-server.ipa.domain'
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [sssd_async_socket_init_send] (0x0400):
Setting 6 seconds timeout for connecting
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x0400):
calling ldap_search_ext with [(objectclass=*)][].
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_op_finished] (0x0400):
Search result: Success(0), no errmsg set
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [sdap_kinit_send] (0x0400): Attempting
kinit (default, host/ipa-client-centos6.ipa.domain, ipa.domain, 86400)
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [fo_resolve_service_send] (0x0100):
Trying to resolve service 'IPA'
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [resolve_srv_send] (0x0200): The status
of SRV lookup is resolved
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [be_resolve_server_process] (0x0200):
Found address for server ipa-server.ipa.domain: [10.144.45.29] TTL 60
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [create_tgt_req_send_buffer] (0x0400):
buffer size: 70
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [set_tgt_child_timeout] (0x0400):
Setting 6 seconds timeout for tgt child
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [write_pipe_handler] (0x0400): All data
has been sent!
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [read_pipe_handler] (0x0400): EOF
received, client finished
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [sdap_get_tgt_recv] (0x0400): Child
responded: 0 [FILE:/var/lib/sss/db/ccache_ipa.domain], expired on [1528457315]
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [sdap_cli_auth_step] (0x0100): expire
timeout is 900
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [sasl_bind_send] (0x0100): Executing
sasl bind mech: GSSAPI, user: host/ipa-client-centos6.ipa.domain
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [child_sig_handler] (0x0100): child
[6125] finished successfully.
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [sdap_cli_connect_recv] (0x0400):
Connection established.
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [fo_set_port_status] (0x0100): Marking
port 389 of server 'ipa-server.ipa.domain' as 'working'
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [set_server_common_status] (0x0100):
Marking server 'ipa-server.ipa.domain' as 'working'
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [fo_set_port_status] (0x0400): Marking
port 389 of duplicate server 'ipa-server.ipa.domain' as 'working'
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [ipa_s2n_get_acct_info_send] (0x0400):
Sending request_type: [REQ_FULL_WITH_MEMBERS] for trust user [ad_user] to IPA server
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [ipa_s2n_exop_send] (0x0400): Executing
extended operation
(Thu Jun 7 13:28:37 2018) [sssd[be[ipa.domain]]] [generic_ext_search_handler] (0x0040):
sdap_get_generic_ext_recv failed [110]: Connection timed out
(Thu Jun 7 13:28:37 2018) [sssd[be[ipa.domain]]] [sdap_get_users_done] (0x0040): Failed
to retrieve users [110][Connection timed out].
(Thu Jun 7 13:28:37 2018) [sssd[be[ipa.domain]]] [sdap_search_user_next_base] (0x0400):
Searching for users with base [cn=accounts,dc=ipa,dc=domain]
(Thu Jun 7 13:28:37 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x0400):
calling ldap_search_ext with
[(&(|(krbPrincipalName=ad_user@ad.domain)(mail=ad_user@ad.domain)(krbPrincipalName=ad_user\\@ad.domain@ipa.domain))(objectclass=posixAccount)(uid=*)(&(uidNumber=*)(!(uidNumber=0))))][cn=accounts,dc=ipa,dc=domain].
(Thu Jun 7 13:28:37 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_op_finished] (0x0400):
Search result: Success(0), no errmsg set
(Thu Jun 7 13:28:37 2018) [sssd[be[ipa.domain]]] [sdap_search_user_process] (0x0400):
Search for users, returned 0 results.
(Thu Jun 7 13:28:37 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:37 2018) [sssd[be[ipa.domain]]] [sysdb_delete_user] (0x0400): Error: 2
(No such file or directory)
(Thu Jun 7 13:28:37 2018) [sssd[be[ipa.domain]]] [sysdb_search_user_by_upn] (0x0400): No
entry with upn [ad_user(a)ad.domain] found.
(Thu Jun 7 13:28:37 2018) [sssd[be[ipa.domain]]] [ipa_id_get_account_info_orig_done]
(0x0080): Object not found, ending request
(Thu Jun 7 13:28:37 2018) [sssd[be[ipa.domain]]] [dp_req_done] (0x0400): DP Request
[Account #2]: Request handler finished [0]: Success
(Thu Jun 7 13:28:37 2018) [sssd[be[ipa.domain]]] [_dp_req_recv] (0x0400): DP Request
[Account #2]: Receiving request data.
(Thu Jun 7 13:28:37 2018) [sssd[be[ipa.domain]]] [dp_req_reply_list_success] (0x0400): DP
Request [Account #2]: Finished. Success.
(Thu Jun 7 13:28:37 2018) [sssd[be[ipa.domain]]] [dp_table_value_destructor] (0x0400):
Removing [0:1:0x0001:1:U:ipa.domain:name=ad_user@ad.domain] from reply table
(Thu Jun 7 13:28:37 2018) [sssd[be[ipa.domain]]] [dp_req_destructor] (0x0400): DP Request
[Account #2]: Request removed.
(Thu Jun 7 13:28:37 2018) [sssd[be[ipa.domain]]] [dp_req_destructor] (0x0400): Number of
active DP request: 1
(Thu Jun 7 13:28:37 2018) [sssd[be[ipa.domain]]] [dp_get_account_info_handler] (0x0200):
Got request for [0x1][BE_REQ_USER][name=ad_user(a)ad.domain]
(Thu Jun 7 13:28:37 2018) [sssd[be[ipa.domain]]] [dp_attach_req] (0x0400): DP Request
[Account #3]: New request. Flags [0x0001].
(Thu Jun 7 13:28:37 2018) [sssd[be[ipa.domain]]] [dp_attach_req] (0x0400): Number of
active DP request: 2
(Thu Jun 7 13:28:37 2018) [sssd[be[ipa.domain]]] [ipa_s2n_get_acct_info_send] (0x0400):
Sending request_type: [REQ_FULL_WITH_MEMBERS] for trust user [ad_user(a)ad.domain] to IPA
server
(Thu Jun 7 13:28:37 2018) [sssd[be[ipa.domain]]] [ipa_s2n_exop_send] (0x0400): Executing
extended operation
(Thu Jun 7 13:28:41 2018) [sssd[be[ipa.domain]]] [ipa_s2n_get_user_done] (0x0040): s2n
exop request failed.
(Thu Jun 7 13:28:41 2018) [sssd[be[ipa.domain]]] [sdap_id_op_done] (0x0200):
communication error on cached connection, moving to next server
(Thu Jun 7 13:28:41 2018) [sssd[be[ipa.domain]]] [fo_resolve_service_send] (0x0100):
Trying to resolve service 'IPA'
(Thu Jun 7 13:28:41 2018) [sssd[be[ipa.domain]]] [resolve_srv_send] (0x0200): The status
of SRV lookup is resolved
(Thu Jun 7 13:28:41 2018) [sssd[be[ipa.domain]]] [resolv_gethostbyname_files_send]
(0x0100): Trying to resolve A record of 'ipa-server-2.ipa.domain' in files
(Thu Jun 7 13:28:41 2018) [sssd[be[ipa.domain]]] [set_server_common_status] (0x0100):
Marking server 'ipa-server-2.ipa.domain' as 'resolving name'
(Thu Jun 7 13:28:41 2018) [sssd[be[ipa.domain]]] [resolv_gethostbyname_files_send]
(0x0100): Trying to resolve AAAA record of 'ipa-server-2.ipa.domain' in files
(Thu Jun 7 13:28:41 2018) [sssd[be[ipa.domain]]] [resolv_gethostbyname_next] (0x0200): No
more address families to retry
(Thu Jun 7 13:28:41 2018) [sssd[be[ipa.domain]]] [resolv_gethostbyname_dns_query]
(0x0100): Trying to resolve A record of 'ipa-server-2.ipa.domain' in DNS
(Thu Jun 7 13:28:41 2018) [sssd[be[ipa.domain]]] [request_watch_destructor] (0x0400):
Deleting request watch
(Thu Jun 7 13:28:41 2018) [sssd[be[ipa.domain]]] [set_server_common_status] (0x0100):
Marking server 'ipa-server-2.ipa.domain' as 'name resolved'
(Thu Jun 7 13:28:41 2018) [sssd[be[ipa.domain]]] [be_resolve_server_process] (0x0200):
Found address for server ipa-server-2.ipa.domain: [10.144.46.20] TTL 54
(Thu Jun 7 13:28:41 2018) [sssd[be[ipa.domain]]] [ipa_resolve_callback] (0x0400):
Constructed uri 'ldap://ipa-server-2.ipa.domain'
(Thu Jun 7 13:28:41 2018) [sssd[be[ipa.domain]]] [sssd_async_socket_init_send] (0x0400):
Setting 6 seconds timeout for connecting
(Thu Jun 7 13:28:43 2018) [sssd[be[ipa.domain]]] [ipa_s2n_get_user_done] (0x0040): s2n
exop request failed.
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [sssd_async_connect_done] (0x0020):
connect failed [113][No route to host].
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [sssd_async_socket_init_done] (0x0020):
sdap_async_sys_connect request failed: [113]: No route to host.
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [sssd_async_socket_state_destructor]
(0x0400): closing socket [29]
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [sss_ldap_init_sys_connect_done]
(0x0020): sssd_async_socket_init request failed: [113]: No route to host.
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [sdap_sys_connect_done] (0x0020):
sdap_async_connect_call request failed: [113]: No route to host.
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [fo_set_port_status] (0x0100): Marking
port 389 of server 'ipa-server-2.ipa.domain' as 'not working'
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [fo_set_port_status] (0x0400): Marking
port 389 of duplicate server 'ipa-server-2.ipa.domain' as 'not working'
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [fo_resolve_service_send] (0x0100):
Trying to resolve service 'IPA'
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [get_port_status] (0x0080): SSSD is
unable to complete the full connection request, this internal status does not necessarily
indicate network port issues.
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [get_port_status] (0x0100): Resetting
the status of port 0 for server 'ipa-server.ipa.domain'
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [be_resolve_server_process] (0x0200):
Found address for server ipa-server.ipa.domain: [10.144.45.29] TTL 60
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [ipa_resolve_callback] (0x0400):
Constructed uri 'ldap://ipa-server.ipa.domain'
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [sssd_async_socket_init_send] (0x0400):
Setting 6 seconds timeout for connecting
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x0400):
calling ldap_search_ext with [(objectclass=*)][].
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_op_finished] (0x0400):
Search result: Success(0), no errmsg set
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [sdap_kinit_send] (0x0400): Attempting
kinit (default, host/ipa-client-centos6.ipa.domain, ipa.domain, 86400)
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [fo_resolve_service_send] (0x0100):
Trying to resolve service 'IPA'
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [be_resolve_server_process] (0x0200):
Found address for server ipa-server.ipa.domain: [10.144.45.29] TTL 60
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [create_tgt_req_send_buffer] (0x0400):
buffer size: 70
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [set_tgt_child_timeout] (0x0400):
Setting 6 seconds timeout for tgt child
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [write_pipe_handler] (0x0400): All data
has been sent!
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [read_pipe_handler] (0x0400): EOF
received, client finished
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [sdap_get_tgt_recv] (0x0400): Child
responded: 0 [FILE:/var/lib/sss/db/ccache_ipa.domain], expired on [1528457324]
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [sdap_cli_auth_step] (0x0100): expire
timeout is 900
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [sasl_bind_send] (0x0100): Executing
sasl bind mech: GSSAPI, user: host/ipa-client-centos6.ipa.domain
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [child_sig_handler] (0x0100): child
[6126] finished successfully.
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [sdap_cli_connect_recv] (0x0400):
Connection established.
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [fo_set_port_status] (0x0100): Marking
port 0 of server 'ipa-server.ipa.domain' as 'working'
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [set_server_common_status] (0x0100):
Marking server 'ipa-server.ipa.domain' as 'working'
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [fo_set_port_status] (0x0400): Marking
port 0 of duplicate server 'ipa-server.ipa.domain' as 'working'
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [ipa_s2n_get_acct_info_send] (0x0400):
Sending request_type: [REQ_FULL_WITH_MEMBERS] for trust user [ad_user] to IPA server
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [ipa_s2n_exop_send] (0x0400): Executing
extended operation
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [ipa_s2n_get_acct_info_send] (0x0400):
Sending request_type: [REQ_FULL_WITH_MEMBERS] for trust user [ad_user(a)ad.domain] to IPA
server
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [ipa_s2n_exop_send] (0x0400): Executing
extended operation
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [ipa_s2n_get_user_done] (0x0040): s2n
exop request failed.
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [sdap_id_op_done] (0x0200):
communication error on cached connection, moving to next server
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [fo_resolve_service_send] (0x0100):
Trying to resolve service 'IPA'
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [get_port_status] (0x0080): SSSD is
unable to complete the full connection request, this internal status does not necessarily
indicate network port issues.
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [get_port_status] (0x0080): SSSD is
unable to complete the full connection request, this internal status does not necessarily
indicate network port issues.
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [get_port_status] (0x0080): SSSD is
unable to complete the full connection request, this internal status does not necessarily
indicate network port issues.
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [fo_resolve_service_send] (0x0020): No
available servers for service 'IPA'
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [sdap_id_op_connect_done] (0x0020):
Failed to connect, going offline (5 [Input/output error])
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [be_ptask_create] (0x0400): Periodic
task [Check if online (periodic)] was created
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [be_ptask_schedule] (0x0400): Task
[Check if online (periodic)]: scheduling task 74 seconds from now [1528371004]
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [be_run_offline_cb] (0x0080): Going
offline. Running callbacks.
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [ipa_subdomain_account_done] (0x0040):
ipa_get_*_acct request failed: [11]: Resource temporarily unavailable.
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [dp_req_done] (0x0400): DP Request
[Account #1]: Request handler finished [0]: Success
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [_dp_req_recv] (0x0400): DP Request
[Account #1]: Receiving request data.
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [dp_req_reply_list_success] (0x0400): DP
Request [Account #1]: Finished. Success.
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [dp_table_value_destructor] (0x0400):
Removing [0:1:0x0001:1::ad.domain:name=ad_user@ad.domain] from reply table
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [dp_req_destructor] (0x0400): DP Request
[Account #1]: Request removed.
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [dp_req_destructor] (0x0400): Number of
active DP request: 1
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [ipa_s2n_get_user_done] (0x0040): s2n
exop request failed.
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [ipa_subdomain_account_done] (0x0040):
ipa_get_*_acct request failed: [11]: Resource temporarily unavailable.
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [dp_req_done] (0x0400): DP Request
[Account #3]: Request handler finished [0]: Success
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [_dp_req_recv] (0x0400): DP Request
[Account #3]: Receiving request data.
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [dp_req_reply_list_success] (0x0400): DP
Request [Account #3]: Finished. Success.
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [dp_table_value_destructor] (0x0400):
Removing [0:1:0x0001:1:U:ad.domain:name=ad_user@ad.domain] from reply table
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [dp_req_destructor] (0x0400): DP Request
[Account #3]: Request removed.
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [dp_req_destructor] (0x0400): Number of
active DP request: 0
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [be_ptask_offline_cb] (0x0400): Back end
is offline
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [be_ptask_disable] (0x0400): Task
[Subdomains Refresh]: disabling task
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [be_ptask_offline_cb] (0x0400): Back end
is offline
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [be_ptask_disable] (0x0400): Task [SUDO
Smart Refresh]: disabling task
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [be_ptask_offline_cb] (0x0400): Back end
is offline
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [be_ptask_disable] (0x0400): Task [SUDO
Full Refresh]: disabling task
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [remove_krb5_info_files] (0x0200): Could
not remove [/var/lib/sss/pubconf/kpasswdinfo.ipa.domain], [2][No such file or directory]
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [be_ptask_execute] (0x0400): Back end is
offline
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [be_ptask_execute] (0x0400): Task [Check
if online (periodic)]: executing task, timeout 60 seconds
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [set_server_common_status] (0x0100):
Marking server 'ipa-server.ipa.domain' as 'name not resolved'
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [fo_set_port_status] (0x0100): Marking
port 0 of server 'ipa-server.ipa.domain' as 'neutral'
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [fo_set_port_status] (0x0400): Marking
port 0 of duplicate server 'ipa-server.ipa.domain' as 'neutral'
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [set_srv_data_status] (0x0100): Marking
SRV lookup of service 'IPA' as 'neutral'
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [set_server_common_status] (0x0100):
Marking server 'ipa-server.ipa.domain' as 'name not resolved'
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [fo_set_port_status] (0x0100): Marking
port 389 of server 'ipa-server.ipa.domain' as 'neutral'
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [fo_set_port_status] (0x0400): Marking
port 389 of duplicate server 'ipa-server.ipa.domain' as 'neutral'
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [set_srv_data_status] (0x0100): Marking
SRV lookup of service 'IPA' as 'neutral'
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [set_server_common_status] (0x0100):
Marking server 'ipa-server-2.ipa.domain' as 'name not resolved'
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [fo_set_port_status] (0x0100): Marking
port 389 of server 'ipa-server-2.ipa.domain' as 'neutral'
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [fo_set_port_status] (0x0400): Marking
port 389 of duplicate server 'ipa-server-2.ipa.domain' as 'neutral'
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [dp_attach_req] (0x0400): DP Request
[Online Check #4]: New request. Flags [0000].
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [dp_attach_req] (0x0400): Number of
active DP request: 1
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [fo_resolve_service_send] (0x0100):
Trying to resolve service 'IPA'
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [resolv_gethostbyname_files_send]
(0x0100): Trying to resolve A record of 'ipa-server.ipa.domain' in files
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [set_server_common_status] (0x0100):
Marking server 'ipa-server.ipa.domain' as 'resolving name'
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [resolv_gethostbyname_files_send]
(0x0100): Trying to resolve AAAA record of 'ipa-server.ipa.domain' in files
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [be_ptask_done] (0x0400): Task [Check if
online (periodic)]: finished successfully
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [be_ptask_schedule] (0x0400): Task
[Check if online (periodic)]: scheduling task 79 seconds from last execution time
[1528371083]
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [resolv_gethostbyname_next] (0x0200): No
more address families to retry
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [resolv_gethostbyname_dns_query]
(0x0100): Trying to resolve A record of 'ipa-server.ipa.domain' in DNS
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [request_watch_destructor] (0x0400):
Deleting request watch
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [set_server_common_status] (0x0100):
Marking server 'ipa-server.ipa.domain' as 'name resolved'
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [be_resolve_server_process] (0x0200):
Found address for server ipa-server.ipa.domain: [10.144.45.29] TTL 0
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [ipa_resolve_callback] (0x0400):
Constructed uri 'ldap://ipa-server.ipa.domain'
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sssd_async_socket_init_send] (0x0400):
Setting 6 seconds timeout for connecting
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x0400):
calling ldap_search_ext with [(objectclass=*)][].
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_op_finished] (0x0400):
Search result: Success(0), no errmsg set
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_kinit_send] (0x0400): Attempting
kinit (default, host/ipa-client-centos6.ipa.domain, ipa.domain, 86400)
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [fo_resolve_service_send] (0x0100):
Trying to resolve service 'IPA'
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [be_resolve_server_process] (0x0200):
Found address for server ipa-server.ipa.domain: [10.144.45.29] TTL 0
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [create_tgt_req_send_buffer] (0x0400):
buffer size: 70
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [set_tgt_child_timeout] (0x0400):
Setting 6 seconds timeout for tgt child
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [write_pipe_handler] (0x0400): All data
has been sent!
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [read_pipe_handler] (0x0400): EOF
received, client finished
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_get_tgt_recv] (0x0400): Child
responded: 0 [FILE:/var/lib/sss/db/ccache_ipa.domain], expired on [1528457404]
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_cli_auth_step] (0x0100): expire
timeout is 900
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sasl_bind_send] (0x0100): Executing
sasl bind mech: GSSAPI, user: host/ipa-client-centos6.ipa.domain
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [child_sig_handler] (0x0100): child
[6165] finished successfully.
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_cli_connect_recv] (0x0400):
Connection established.
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [fo_set_port_status] (0x0100): Marking
port 0 of server 'ipa-server.ipa.domain' as 'working'
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [set_server_common_status] (0x0100):
Marking server 'ipa-server.ipa.domain' as 'working'
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [fo_set_port_status] (0x0400): Marking
port 0 of duplicate server 'ipa-server.ipa.domain' as 'working'
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [dp_req_done] (0x0400): DP Request
[Online Check #4]: Request handler finished [0]: Success
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [_dp_req_recv] (0x0400): DP Request
[Online Check #4]: Receiving request data.
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [dp_req_destructor] (0x0400): DP Request
[Online Check #4]: Request removed.
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [dp_req_destructor] (0x0400): Number of
active DP request: 0
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [be_check_online_done] (0x0400): Backend
is online
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [be_ptask_disable] (0x0400): Task [Check
if online (periodic)]: disabling task
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [be_run_online_cb] (0x0080): Going
online. Running callbacks.
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [be_ptask_online_cb] (0x0400): Back end
is online
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [be_ptask_enable] (0x0400): Task
[Subdomains Refresh]: enabling task
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [be_ptask_schedule] (0x0400): Task
[Subdomains Refresh]: scheduling task 0 seconds from now [1528371004]
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [be_ptask_execute] (0x0400): Task
[Subdomains Refresh]: executing task, timeout 14400 seconds
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [fo_resolve_service_send] (0x0100):
Trying to resolve service 'IPA'
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [be_resolve_server_process] (0x0200):
Found address for server ipa-server.ipa.domain: [10.144.45.29] TTL 0
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sssd_async_socket_init_send] (0x0400):
Setting 6 seconds timeout for connecting
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x0400):
calling ldap_search_ext with [(objectclass=*)][].
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_op_finished] (0x0400):
Search result: Success(0), no errmsg set
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_kinit_send] (0x0400): Attempting
kinit (default, host/ipa-client-centos6.ipa.domain, ipa.domain, 86400)
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [fo_resolve_service_send] (0x0100):
Trying to resolve service 'IPA'
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [be_resolve_server_process] (0x0200):
Found address for server ipa-server.ipa.domain: [10.144.45.29] TTL 0
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [create_tgt_req_send_buffer] (0x0400):
buffer size: 70
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [set_tgt_child_timeout] (0x0400):
Setting 6 seconds timeout for tgt child
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [write_pipe_handler] (0x0400): All data
has been sent!
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [be_ptask_online_cb] (0x0400): Back end
is online
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [be_ptask_enable] (0x0400): Task [SUDO
Smart Refresh]: enabling task
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [be_ptask_schedule] (0x0400): Task [SUDO
Smart Refresh]: scheduling task 900 seconds from now [1528371904]
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [be_ptask_online_cb] (0x0400): Back end
is online
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [be_ptask_enable] (0x0400): Task [SUDO
Full Refresh]: enabling task
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [be_ptask_schedule] (0x0400): Task [SUDO
Full Refresh]: scheduling task 0 seconds from now [1528371004]
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [be_ptask_execute] (0x0400): Task [SUDO
Full Refresh]: executing task, timeout 21600 seconds
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [ipa_sudo_full_refresh_send] (0x0400):
Issuing a full refresh of sudo rules
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [delayed_online_authentication_callback]
(0x0200): Backend is online, starting delayed online authentication.
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [read_pipe_handler] (0x0400): EOF
received, client finished
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_get_tgt_recv] (0x0400): Child
responded: 0 [FILE:/var/lib/sss/db/ccache_ipa.domain], expired on [1528457404]
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_cli_auth_step] (0x0100): expire
timeout is 900
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sasl_bind_send] (0x0100): Executing
sasl bind mech: GSSAPI, user: host/ipa-client-centos6.ipa.domain
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [child_sig_handler] (0x0100): child
[6166] finished successfully.
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_cli_connect_recv] (0x0400):
Connection established.
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [fo_set_port_status] (0x0100): Marking
port 0 of server 'ipa-server.ipa.domain' as 'working'
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [set_server_common_status] (0x0100):
Marking server 'ipa-server.ipa.domain' as 'working'
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [fo_set_port_status] (0x0400): Marking
port 0 of duplicate server 'ipa-server.ipa.domain' as 'working'
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_search_bases_ex_next_base]
(0x0400): Issuing LDAP lookup with base [cn=ranges,cn=etc,dc=ipa,dc=domain]
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x0400):
calling ldap_search_ext with [objectclass=ipaIDRange][cn=ranges,cn=etc,dc=ipa,dc=domain].
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [ipa_sudo_refresh_connect_done]
(0x0400): SUDO LDAP connection successful
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [ipa_sudo_refresh_connect_done]
(0x0400): About to fetch host information
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x0400):
calling ldap_search_ext with
[(&(objectClass=ipaHost)(fqdn=ipa-client-centos6.ipa.domain))][cn=accounts,dc=ipa,dc=domain].
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_op_finished] (0x0400):
Search result: Success(0), no errmsg set
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_search_bases_ex_done] (0x0400):
Receiving data from base [cn=ranges,cn=etc,dc=ipa,dc=domain]
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x0400):
calling ldap_search_ext with
[(|(&(objectClass=ipaCertMapRule)(ipaEnabledFlag=TRUE))(objectClass=ipaCertMapConfigObject))][cn=certmap,dc=ipa,dc=domain].
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_op_finished] (0x0400):
Search result: Success(0), no errmsg set
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_has_deref_support] (0x0400): The
server supports deref method OpenLDAP
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_x_deref_search_send] (0x0400):
Dereferencing entry
[fqdn=ipa-client-centos6.ipa.domain,cn=computers,cn=accounts,dc=ipa,dc=domain] using
OpenLDAP deref
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_send] (0x0400):
WARNING: Disabling paging because scope is set to base.
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x0400):
calling ldap_search_ext with [no
filter][fqdn=ipa-client-centos6.ipa.domain,cn=computers,cn=accounts,dc=ipa,dc=domain].
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_op_finished] (0x0400):
Search result: Success(0), no errmsg set
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [ipa_subdomains_master_send] (0x0400):
Master record is up to date.
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_search_bases_ex_next_base]
(0x0400): Issuing LDAP lookup with base [cn=trusts,dc=ipa,dc=domain]
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x0400):
calling ldap_search_ext with
[objectclass=ipaNTTrustedDomain][cn=trusts,dc=ipa,dc=domain].
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_x_deref_parse_entry] (0x0400): Got
deref control
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_x_deref_parse_entry] (0x0400): All
deref results from a single control parsed
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_op_finished] (0x0400):
Search result: Success(0), no errmsg set
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [ipa_hostgroup_info_done] (0x0200): No
host groups were dereferenced
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [ipa_sudo_fetch_rules] (0x0400): About
to fetch sudo rules
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_search_bases_ex_next_base]
(0x0400): Issuing LDAP lookup with base [cn=sudo,dc=ipa,dc=domain]
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x0400):
calling ldap_search_ext with
[(&(objectClass=ipasudorule)(ipaEnabledFlag=TRUE)(|(!(memberHost=*))(hostCategory=ALL)(memberHost=fqdn=ipa-client-centos6.ipa.domain,cn=computers,cn=accounts,dc=ipa,dc=domain)))][cn=sudo,dc=ipa,dc=domain].
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_op_finished] (0x0400):
Search result: Success(0), no errmsg set
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_search_bases_ex_done] (0x0400):
Receiving data from base [cn=trusts,dc=ipa,dc=domain]
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [ipa_subdom_is_member_dom] (0x0400): 4th
component is not 'trust', not a member domain
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [ipa_enable_enterprise_principals]
(0x0100): Enterprise principals enabled.
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_deref_bases_ex_next_base]
(0x0400): Issuing LDAP deref lookup with base [cn=accounts,dc=ipa,dc=domain]
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_x_deref_search_send] (0x0400):
Dereferencing entry [cn=accounts,dc=ipa,dc=domain] using OpenLDAP deref
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x0400):
calling ldap_search_ext with
[(&(objectClass=ipaHost)(fqdn=ipa-client-centos6.ipa.domain))][cn=accounts,dc=ipa,dc=domain].
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_op_finished] (0x0400):
Search result: Success(0), no errmsg set
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_search_bases_ex_done] (0x0400):
Receiving data from base [cn=sudo,dc=ipa,dc=domain]
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [ipa_sudo_fetch_rules_done] (0x0040):
Received 0 sudo rules
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [ipa_sudo_fetch_cmdgroups] (0x0400):
About to fetch sudo command groups
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [ipa_sudo_fetch_cmdgroups] (0x0400): No
command groups needs to be downloaded
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [ipa_sudo_fetch_cmds] (0x0400): About to
fetch sudo commands
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [ipa_sudo_fetch_cmds] (0x0400): No
commands needs to be downloaded
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [ipa_sudo_fetch_done] (0x0400): About to
convert rules
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sysdb_sudo_purge_all] (0x0400):
Deleting all cached sudo rules
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_sudo_set_usn] (0x0400): SUDO USN
value is empty.
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [ipa_sudo_refresh_done] (0x0400): Sudo
rules are successfully stored in cache
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [ipa_sudo_full_refresh_done] (0x0400):
Successful full refresh of sudo rules
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [be_ptask_done] (0x0400): Task [SUDO
Full Refresh]: finished successfully
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [be_ptask_schedule] (0x0400): Task [SUDO
Full Refresh]: scheduling task 21600 seconds from last execution time [1528392604]
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_x_deref_parse_entry] (0x0400): Got
deref control
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_x_deref_parse_entry] (0x0400): All
deref results from a single control parsed
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_op_finished] (0x0400):
Search result: Success(0), no errmsg set
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_deref_bases_ex_done] (0x0400):
Receiving data from base [cn=accounts,dc=ipa,dc=domain]
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [ipa_subdomains_view_name_done]
(0x0400): No view found, using default.
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [ipa_apply_view] (0x0400): View name did
not change.
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x0400):
calling ldap_search_ext with [no
filter][cn=default,cn=views,cn=accounts,dc=ipa,dc=domain].
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_op_finished] (0x0400):
Search result: Success(0), no errmsg set
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x0400):
calling ldap_search_ext with
[(&(cn=ipaConfig)(objectClass=ipaGuiConfig))][cn=etc,dc=ipa,dc=domain].
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_op_finished] (0x0400):
Search result: Success(0), no errmsg set
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [be_ptask_done] (0x0400): Task
[Subdomains Refresh]: finished successfully
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [be_ptask_schedule] (0x0400): Task
[Subdomains Refresh]: scheduling task 14400 seconds from last execution time [1528385404]
(Thu Jun 7 13:31:23 2018) [sssd[be[ipa.domain]]] [dp_get_account_info_handler] (0x0200):
Got request for [0x3][BE_REQ_INITGROUPS][name=postfix(a)ipa.domain]
(Thu Jun 7 13:31:23 2018) [sssd[be[ipa.domain]]] [dp_attach_req] (0x0400): DP Request
[Initgroups #5]: New request. Flags [0x0001].
(Thu Jun 7 13:31:23 2018) [sssd[be[ipa.domain]]] [dp_attach_req] (0x0400): Number of
active DP request: 1
(Thu Jun 7 13:31:23 2018) [sssd[be[ipa.domain]]] [sdap_get_initgr_next_base] (0x0400):
Searching for users with base [cn=accounts,dc=ipa,dc=domain]
(Thu Jun 7 13:31:23 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x0400):
calling ldap_search_ext with
[(&(uid=postfix)(objectclass=posixAccount)(&(uidNumber=*)(!(uidNumber=0))))][cn=accounts,dc=ipa,dc=domain].
(Thu Jun 7 13:31:23 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_op_finished] (0x0400):
Search result: Success(0), no errmsg set
(Thu Jun 7 13:31:23 2018) [sssd[be[ipa.domain]]] [sysdb_search_user_by_upn] (0x0400): No
entry with upn [postfix(a)ipa.domain] found.
(Thu Jun 7 13:31:23 2018) [sssd[be[ipa.domain]]] [sysdb_search_entry_by_sid_str]
(0x0400): No such entry
(Thu Jun 7 13:31:23 2018) [sssd[be[ipa.domain]]] [sysdb_search_object_attr] (0x0400): No
such entry.
(Thu Jun 7 13:31:23 2018) [sssd[be[ipa.domain]]] [sysdb_get_real_name] (0x0040): Cannot
find user [postfix(a)ipa.domain] in cache
(Thu Jun 7 13:31:23 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:31:23 2018) [sssd[be[ipa.domain]]] [sysdb_delete_user] (0x0400): Error: 2
(No such file or directory)
(Thu Jun 7 13:31:23 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:31:23 2018) [sssd[be[ipa.domain]]] [ipa_id_get_account_info_orig_done]
(0x0080): Object not found, ending request
(Thu Jun 7 13:31:23 2018) [sssd[be[ipa.domain]]] [dp_req_done] (0x0400): DP Request
[Initgroups #5]: Request handler finished [0]: Success
(Thu Jun 7 13:31:23 2018) [sssd[be[ipa.domain]]] [_dp_req_recv] (0x0400): DP Request
[Initgroups #5]: Receiving request data.
(Thu Jun 7 13:31:23 2018) [sssd[be[ipa.domain]]] [dp_req_reply_list_success] (0x0400): DP
Request [Initgroups #5]: Finished. Success.
(Thu Jun 7 13:31:23 2018) [sssd[be[ipa.domain]]] [dp_table_value_destructor] (0x0400):
Removing [0:1:0x0001:3::ipa.domain:name=postfix@ipa.domain] from reply table
(Thu Jun 7 13:31:23 2018) [sssd[be[ipa.domain]]] [dp_req_destructor] (0x0400): DP Request
[Initgroups #5]: Request removed.
(Thu Jun 7 13:31:23 2018) [sssd[be[ipa.domain]]] [dp_req_destructor] (0x0400): Number of
active DP request: 0
(Thu Jun 7 13:44:58 2018) [sssd[be[ipa.domain]]] [sdap_id_conn_data_expire_handler]
(0x0080): connection is about to expire, releasing it
8:08 a.m.
New subject: Cannot log in as an AD user to FreeIPA client but can log in to server
On to, 07 kesä 2018, Bart via FreeIPA-users wrote:
Thank you Jakub for your hints.
I created a brand new instance of FreeIPA client and connected it to the existing
servers.
Now I cannot resolve anytthing on a client (getent group $group, getent passwd $user yield
no results).
For the same exact users/groups I tested on the client, they get resolved on the server.
Awkwardly, in the sssd log files on the client I can see that the corresponding user/group
entries are present.
When I issue getent passwd ad_user(a)ad.domain on a client (I sanitized names in the log
file), entries for that user and his groups are present (Received [144] groups from the
IPA server).
Is there anything wrong in this log file from the client host?
I see some s2n exop operations fail, so the IPA server definitely has issues
returning information about AD users and groups.
Following log message may give a clue:
generic_ext_search_handler] (0x0040): sdap_get_generic_ext_recv failed [110]: Connection
timed out
it means gathering an answer for REQ_FULL_WITH_MEMBERS wasn't complete
in time SSSD on the client expected. You may want to increate timeouts.
(Thu Jun 7 13:28:23 2018) [sssd[be[ipa.domain]]] [dp_get_account_info_handler] (0x0200):
Got request for [0x1][BE_REQ_USER][name=ad_user(a)ad.domain]
(Thu Jun 7 13:28:23 2018) [sssd[be[ipa.domain]]] [dp_attach_req] (0x0400): DP Request
[Account #1]: New request. Flags [0x0001].
(Thu Jun 7 13:28:23 2018) [sssd[be[ipa.domain]]] [dp_attach_req] (0x0400): Number of
active DP request: 1
(Thu Jun 7 13:28:23 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x0400):
calling ldap_search_ext with
[(&(objectClass=ipaUserOverride)(uid=ad_user))][cn=Default Trust
View,cn=views,cn=accounts,dc=ipa,dc=domain].
(Thu Jun 7 13:28:23 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_op_finished] (0x0400):
Search result: Success(0), no errmsg set
(Thu Jun 7 13:28:23 2018) [sssd[be[ipa.domain]]] [ipa_s2n_get_acct_info_send] (0x0400):
Sending request_type: [REQ_FULL_WITH_MEMBERS] for trust user [ad_user] to IPA server
(Thu Jun 7 13:28:23 2018) [sssd[be[ipa.domain]]] [ipa_s2n_exop_send] (0x0400): Executing
extended operation
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [ipa_s2n_exop_done] (0x0400):
ldap_extended_operation result: Success(0), (null).
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [ipa_s2n_get_user_done] (0x0400):
Received [144] groups in group list from IPA Server
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [ipa_s2n_get_user_done] (0x0400):
[ad_user(a)ad.domain].
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [ipa_s2n_get_user_done] (0x0400):
[group1(a)ad.domain].
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [ipa_s2n_get_user_done] (0x0400):
[group2(a)ad.domain].
(...) sanitized other groups out of 144 groups returned (...)
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [ipa_s2n_get_user_done] (0x0400):
[ad_admins(a)ipa.domain].
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [ipa_s2n_get_list_step] (0x0400):
Sending request_type: [REQ_FULL_WITH_MEMBERS] for object [ad_user(a)ad.domain].
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [ipa_s2n_exop_send] (0x0400): Executing
extended operation
(Thu Jun 7 13:28:31 2018) [sssd[be[ipa.domain]]] [dp_get_account_info_handler] (0x0200):
Got request for [0x1][BE_REQ_USER][name=ad_user(a)ad.domain]
(Thu Jun 7 13:28:31 2018) [sssd[be[ipa.domain]]] [dp_attach_req] (0x0400): DP Request
[Account #2]: New request. Flags [0x0001].
(Thu Jun 7 13:28:31 2018) [sssd[be[ipa.domain]]] [dp_attach_req] (0x0400): Number of
active DP request: 2
(Thu Jun 7 13:28:31 2018) [sssd[be[ipa.domain]]] [sdap_search_user_next_base] (0x0400):
Searching for users with base [cn=accounts,dc=ipa,dc=domain]
(Thu Jun 7 13:28:31 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x0400):
calling ldap_search_ext with
[(&(|(krbPrincipalName=ad_user@ad.domain)(mail=ad_user@ad.domain)(krbPrincipalName=ad_user\\@ad.domain@ipa.domain))(objectclass=posixAccount)(uid=*)(&(uidNumber=*)(!(uidNumber=0))))][cn=accounts,dc=ipa,dc=domain].
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [ipa_s2n_get_list_next] (0x0040): s2n
exop request failed.
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [ipa_s2n_get_list_done] (0x0040): s2n
get_fqlist request failed.
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [sdap_id_op_done] (0x0200):
communication error on cached connection, moving to next server
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [fo_resolve_service_send] (0x0100):
Trying to resolve service 'IPA'
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [resolve_srv_send] (0x0200): The status
of SRV lookup is neutral
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [resolv_discover_srv_next_domain]
(0x0400): SRV resolution of service 'ldap'. Will use DNS discovery domain
'ipa.domain'
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [resolv_getsrv_send] (0x0100): Trying to
resolve SRV record of '_ldap._tcp.ipa.domain'
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [request_watch_destructor] (0x0400):
Deleting request watch
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [fo_discover_srv_done] (0x0400): Got
answer. Processing...
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [fo_discover_srv_done] (0x0400): Got 2
servers
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [fo_add_server_to_list] (0x0400):
Inserted primary server 'ipa-server.ipa.domain:389' to service 'IPA'
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [fo_add_server_to_list] (0x0400):
Inserted primary server 'ipa-server-2.ipa.domain:389' to service 'IPA'
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [set_srv_data_status] (0x0100): Marking
SRV lookup of service 'IPA' as 'resolved'
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [get_server_status] (0x0100): Hostname
resolution expired, resetting the server status of 'ipa-server.ipa.domain'
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [set_server_common_status] (0x0100):
Marking server 'ipa-server.ipa.domain' as 'name not resolved'
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [resolv_gethostbyname_files_send]
(0x0100): Trying to resolve A record of 'ipa-server.ipa.domain' in files
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [set_server_common_status] (0x0100):
Marking server 'ipa-server.ipa.domain' as 'resolving name'
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [resolv_gethostbyname_files_send]
(0x0100): Trying to resolve AAAA record of 'ipa-server.ipa.domain' in files
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [resolv_gethostbyname_next] (0x0200): No
more address families to retry
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [resolv_gethostbyname_dns_query]
(0x0100): Trying to resolve A record of 'ipa-server.ipa.domain' in DNS
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [request_watch_destructor] (0x0400):
Deleting request watch
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [set_server_common_status] (0x0100):
Marking server 'ipa-server.ipa.domain' as 'name resolved'
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [be_resolve_server_process] (0x0200):
Found address for server ipa-server.ipa.domain: [10.144.45.29] TTL 60
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [ipa_resolve_callback] (0x0400):
Constructed uri 'ldap://ipa-server.ipa.domain'
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [sssd_async_socket_init_send] (0x0400):
Setting 6 seconds timeout for connecting
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x0400):
calling ldap_search_ext with [(objectclass=*)][].
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_op_finished] (0x0400):
Search result: Success(0), no errmsg set
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [sdap_kinit_send] (0x0400): Attempting
kinit (default, host/ipa-client-centos6.ipa.domain, ipa.domain, 86400)
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [fo_resolve_service_send] (0x0100):
Trying to resolve service 'IPA'
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [resolve_srv_send] (0x0200): The status
of SRV lookup is resolved
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [be_resolve_server_process] (0x0200):
Found address for server ipa-server.ipa.domain: [10.144.45.29] TTL 60
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [create_tgt_req_send_buffer] (0x0400):
buffer size: 70
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [set_tgt_child_timeout] (0x0400):
Setting 6 seconds timeout for tgt child
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [write_pipe_handler] (0x0400): All data
has been sent!
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [read_pipe_handler] (0x0400): EOF
received, client finished
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [sdap_get_tgt_recv] (0x0400): Child
responded: 0 [FILE:/var/lib/sss/db/ccache_ipa.domain], expired on [1528457315]
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [sdap_cli_auth_step] (0x0100): expire
timeout is 900
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [sasl_bind_send] (0x0100): Executing
sasl bind mech: GSSAPI, user: host/ipa-client-centos6.ipa.domain
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [child_sig_handler] (0x0100): child
[6125] finished successfully.
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [sdap_cli_connect_recv] (0x0400):
Connection established.
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [fo_set_port_status] (0x0100): Marking
port 389 of server 'ipa-server.ipa.domain' as 'working'
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [set_server_common_status] (0x0100):
Marking server 'ipa-server.ipa.domain' as 'working'
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [fo_set_port_status] (0x0400): Marking
port 389 of duplicate server 'ipa-server.ipa.domain' as 'working'
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [ipa_s2n_get_acct_info_send] (0x0400):
Sending request_type: [REQ_FULL_WITH_MEMBERS] for trust user [ad_user] to IPA server
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [ipa_s2n_exop_send] (0x0400): Executing
extended operation
(Thu Jun 7 13:28:37 2018) [sssd[be[ipa.domain]]] [generic_ext_search_handler] (0x0040):
sdap_get_generic_ext_recv failed [110]: Connection timed out
(Thu Jun 7 13:28:37 2018) [sssd[be[ipa.domain]]] [sdap_get_users_done] (0x0040): Failed
to retrieve users [110][Connection timed out].
(Thu Jun 7 13:28:37 2018) [sssd[be[ipa.domain]]] [sdap_search_user_next_base] (0x0400):
Searching for users with base [cn=accounts,dc=ipa,dc=domain]
(Thu Jun 7 13:28:37 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x0400):
calling ldap_search_ext with
[(&(|(krbPrincipalName=ad_user@ad.domain)(mail=ad_user@ad.domain)(krbPrincipalName=ad_user\\@ad.domain@ipa.domain))(objectclass=posixAccount)(uid=*)(&(uidNumber=*)(!(uidNumber=0))))][cn=accounts,dc=ipa,dc=domain].
(Thu Jun 7 13:28:37 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_op_finished] (0x0400):
Search result: Success(0), no errmsg set
(Thu Jun 7 13:28:37 2018) [sssd[be[ipa.domain]]] [sdap_search_user_process] (0x0400):
Search for users, returned 0 results.
(Thu Jun 7 13:28:37 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:37 2018) [sssd[be[ipa.domain]]] [sysdb_delete_user] (0x0400): Error: 2
(No such file or directory)
(Thu Jun 7 13:28:37 2018) [sssd[be[ipa.domain]]] [sysdb_search_user_by_upn] (0x0400): No
entry with upn [ad_user(a)ad.domain] found.
(Thu Jun 7 13:28:37 2018) [sssd[be[ipa.domain]]] [ipa_id_get_account_info_orig_done]
(0x0080): Object not found, ending request
(Thu Jun 7 13:28:37 2018) [sssd[be[ipa.domain]]] [dp_req_done] (0x0400): DP Request
[Account #2]: Request handler finished [0]: Success
(Thu Jun 7 13:28:37 2018) [sssd[be[ipa.domain]]] [_dp_req_recv] (0x0400): DP Request
[Account #2]: Receiving request data.
(Thu Jun 7 13:28:37 2018) [sssd[be[ipa.domain]]] [dp_req_reply_list_success] (0x0400): DP
Request [Account #2]: Finished. Success.
(Thu Jun 7 13:28:37 2018) [sssd[be[ipa.domain]]] [dp_table_value_destructor] (0x0400):
Removing [0:1:0x0001:1:U:ipa.domain:name=ad_user@ad.domain] from reply table
(Thu Jun 7 13:28:37 2018) [sssd[be[ipa.domain]]] [dp_req_destructor] (0x0400): DP Request
[Account #2]: Request removed.
(Thu Jun 7 13:28:37 2018) [sssd[be[ipa.domain]]] [dp_req_destructor] (0x0400): Number of
active DP request: 1
(Thu Jun 7 13:28:37 2018) [sssd[be[ipa.domain]]] [dp_get_account_info_handler] (0x0200):
Got request for [0x1][BE_REQ_USER][name=ad_user(a)ad.domain]
(Thu Jun 7 13:28:37 2018) [sssd[be[ipa.domain]]] [dp_attach_req] (0x0400): DP Request
[Account #3]: New request. Flags [0x0001].
(Thu Jun 7 13:28:37 2018) [sssd[be[ipa.domain]]] [dp_attach_req] (0x0400): Number of
active DP request: 2
(Thu Jun 7 13:28:37 2018) [sssd[be[ipa.domain]]] [ipa_s2n_get_acct_info_send] (0x0400):
Sending request_type: [REQ_FULL_WITH_MEMBERS] for trust user [ad_user(a)ad.domain] to IPA
server
(Thu Jun 7 13:28:37 2018) [sssd[be[ipa.domain]]] [ipa_s2n_exop_send] (0x0400): Executing
extended operation
(Thu Jun 7 13:28:41 2018) [sssd[be[ipa.domain]]] [ipa_s2n_get_user_done] (0x0040): s2n
exop request failed.
(Thu Jun 7 13:28:41 2018) [sssd[be[ipa.domain]]] [sdap_id_op_done] (0x0200):
communication error on cached connection, moving to next server
(Thu Jun 7 13:28:41 2018) [sssd[be[ipa.domain]]] [fo_resolve_service_send] (0x0100):
Trying to resolve service 'IPA'
(Thu Jun 7 13:28:41 2018) [sssd[be[ipa.domain]]] [resolve_srv_send] (0x0200): The status
of SRV lookup is resolved
(Thu Jun 7 13:28:41 2018) [sssd[be[ipa.domain]]] [resolv_gethostbyname_files_send]
(0x0100): Trying to resolve A record of 'ipa-server-2.ipa.domain' in files
(Thu Jun 7 13:28:41 2018) [sssd[be[ipa.domain]]] [set_server_common_status] (0x0100):
Marking server 'ipa-server-2.ipa.domain' as 'resolving name'
(Thu Jun 7 13:28:41 2018) [sssd[be[ipa.domain]]] [resolv_gethostbyname_files_send]
(0x0100): Trying to resolve AAAA record of 'ipa-server-2.ipa.domain' in files
(Thu Jun 7 13:28:41 2018) [sssd[be[ipa.domain]]] [resolv_gethostbyname_next] (0x0200): No
more address families to retry
(Thu Jun 7 13:28:41 2018) [sssd[be[ipa.domain]]] [resolv_gethostbyname_dns_query]
(0x0100): Trying to resolve A record of 'ipa-server-2.ipa.domain' in DNS
(Thu Jun 7 13:28:41 2018) [sssd[be[ipa.domain]]] [request_watch_destructor] (0x0400):
Deleting request watch
(Thu Jun 7 13:28:41 2018) [sssd[be[ipa.domain]]] [set_server_common_status] (0x0100):
Marking server 'ipa-server-2.ipa.domain' as 'name resolved'
(Thu Jun 7 13:28:41 2018) [sssd[be[ipa.domain]]] [be_resolve_server_process] (0x0200):
Found address for server ipa-server-2.ipa.domain: [10.144.46.20] TTL 54
(Thu Jun 7 13:28:41 2018) [sssd[be[ipa.domain]]] [ipa_resolve_callback] (0x0400):
Constructed uri 'ldap://ipa-server-2.ipa.domain'
(Thu Jun 7 13:28:41 2018) [sssd[be[ipa.domain]]] [sssd_async_socket_init_send] (0x0400):
Setting 6 seconds timeout for connecting
(Thu Jun 7 13:28:43 2018) [sssd[be[ipa.domain]]] [ipa_s2n_get_user_done] (0x0040): s2n
exop request failed.
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [sssd_async_connect_done] (0x0020):
connect failed [113][No route to host].
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [sssd_async_socket_init_done] (0x0020):
sdap_async_sys_connect request failed: [113]: No route to host.
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [sssd_async_socket_state_destructor]
(0x0400): closing socket [29]
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [sss_ldap_init_sys_connect_done]
(0x0020): sssd_async_socket_init request failed: [113]: No route to host.
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [sdap_sys_connect_done] (0x0020):
sdap_async_connect_call request failed: [113]: No route to host.
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [fo_set_port_status] (0x0100): Marking
port 389 of server 'ipa-server-2.ipa.domain' as 'not working'
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [fo_set_port_status] (0x0400): Marking
port 389 of duplicate server 'ipa-server-2.ipa.domain' as 'not working'
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [fo_resolve_service_send] (0x0100):
Trying to resolve service 'IPA'
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [get_port_status] (0x0080): SSSD is
unable to complete the full connection request, this internal status does not necessarily
indicate network port issues.
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [get_port_status] (0x0100): Resetting
the status of port 0 for server 'ipa-server.ipa.domain'
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [be_resolve_server_process] (0x0200):
Found address for server ipa-server.ipa.domain: [10.144.45.29] TTL 60
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [ipa_resolve_callback] (0x0400):
Constructed uri 'ldap://ipa-server.ipa.domain'
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [sssd_async_socket_init_send] (0x0400):
Setting 6 seconds timeout for connecting
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x0400):
calling ldap_search_ext with [(objectclass=*)][].
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_op_finished] (0x0400):
Search result: Success(0), no errmsg set
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [sdap_kinit_send] (0x0400): Attempting
kinit (default, host/ipa-client-centos6.ipa.domain, ipa.domain, 86400)
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [fo_resolve_service_send] (0x0100):
Trying to resolve service 'IPA'
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [be_resolve_server_process] (0x0200):
Found address for server ipa-server.ipa.domain: [10.144.45.29] TTL 60
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [create_tgt_req_send_buffer] (0x0400):
buffer size: 70
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [set_tgt_child_timeout] (0x0400):
Setting 6 seconds timeout for tgt child
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [write_pipe_handler] (0x0400): All data
has been sent!
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [read_pipe_handler] (0x0400): EOF
received, client finished
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [sdap_get_tgt_recv] (0x0400): Child
responded: 0 [FILE:/var/lib/sss/db/ccache_ipa.domain], expired on [1528457324]
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [sdap_cli_auth_step] (0x0100): expire
timeout is 900
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [sasl_bind_send] (0x0100): Executing
sasl bind mech: GSSAPI, user: host/ipa-client-centos6.ipa.domain
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [child_sig_handler] (0x0100): child
[6126] finished successfully.
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [sdap_cli_connect_recv] (0x0400):
Connection established.
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [fo_set_port_status] (0x0100): Marking
port 0 of server 'ipa-server.ipa.domain' as 'working'
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [set_server_common_status] (0x0100):
Marking server 'ipa-server.ipa.domain' as 'working'
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [fo_set_port_status] (0x0400): Marking
port 0 of duplicate server 'ipa-server.ipa.domain' as 'working'
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [ipa_s2n_get_acct_info_send] (0x0400):
Sending request_type: [REQ_FULL_WITH_MEMBERS] for trust user [ad_user] to IPA server
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [ipa_s2n_exop_send] (0x0400): Executing
extended operation
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [ipa_s2n_get_acct_info_send] (0x0400):
Sending request_type: [REQ_FULL_WITH_MEMBERS] for trust user [ad_user(a)ad.domain] to IPA
server
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [ipa_s2n_exop_send] (0x0400): Executing
extended operation
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [ipa_s2n_get_user_done] (0x0040): s2n
exop request failed.
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [sdap_id_op_done] (0x0200):
communication error on cached connection, moving to next server
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [fo_resolve_service_send] (0x0100):
Trying to resolve service 'IPA'
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [get_port_status] (0x0080): SSSD is
unable to complete the full connection request, this internal status does not necessarily
indicate network port issues.
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [get_port_status] (0x0080): SSSD is
unable to complete the full connection request, this internal status does not necessarily
indicate network port issues.
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [get_port_status] (0x0080): SSSD is
unable to complete the full connection request, this internal status does not necessarily
indicate network port issues.
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [fo_resolve_service_send] (0x0020): No
available servers for service 'IPA'
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [sdap_id_op_connect_done] (0x0020):
Failed to connect, going offline (5 [Input/output error])
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [be_ptask_create] (0x0400): Periodic
task [Check if online (periodic)] was created
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [be_ptask_schedule] (0x0400): Task
[Check if online (periodic)]: scheduling task 74 seconds from now [1528371004]
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [be_run_offline_cb] (0x0080): Going
offline. Running callbacks.
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [ipa_subdomain_account_done] (0x0040):
ipa_get_*_acct request failed: [11]: Resource temporarily unavailable.
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [dp_req_done] (0x0400): DP Request
[Account #1]: Request handler finished [0]: Success
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [_dp_req_recv] (0x0400): DP Request
[Account #1]: Receiving request data.
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [dp_req_reply_list_success] (0x0400): DP
Request [Account #1]: Finished. Success.
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [dp_table_value_destructor] (0x0400):
Removing [0:1:0x0001:1::ad.domain:name=ad_user@ad.domain] from reply table
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [dp_req_destructor] (0x0400): DP Request
[Account #1]: Request removed.
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [dp_req_destructor] (0x0400): Number of
active DP request: 1
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [ipa_s2n_get_user_done] (0x0040): s2n
exop request failed.
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [ipa_subdomain_account_done] (0x0040):
ipa_get_*_acct request failed: [11]: Resource temporarily unavailable.
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [dp_req_done] (0x0400): DP Request
[Account #3]: Request handler finished [0]: Success
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [_dp_req_recv] (0x0400): DP Request
[Account #3]: Receiving request data.
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [dp_req_reply_list_success] (0x0400): DP
Request [Account #3]: Finished. Success.
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [dp_table_value_destructor] (0x0400):
Removing [0:1:0x0001:1:U:ad.domain:name=ad_user@ad.domain] from reply table
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [dp_req_destructor] (0x0400): DP Request
[Account #3]: Request removed.
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [dp_req_destructor] (0x0400): Number of
active DP request: 0
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [be_ptask_offline_cb] (0x0400): Back end
is offline
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [be_ptask_disable] (0x0400): Task
[Subdomains Refresh]: disabling task
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [be_ptask_offline_cb] (0x0400): Back end
is offline
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [be_ptask_disable] (0x0400): Task [SUDO
Smart Refresh]: disabling task
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [be_ptask_offline_cb] (0x0400): Back end
is offline
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [be_ptask_disable] (0x0400): Task [SUDO
Full Refresh]: disabling task
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [remove_krb5_info_files] (0x0200): Could
not remove [/var/lib/sss/pubconf/kpasswdinfo.ipa.domain], [2][No such file or directory]
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [be_ptask_execute] (0x0400): Back end is
offline
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [be_ptask_execute] (0x0400): Task [Check
if online (periodic)]: executing task, timeout 60 seconds
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [set_server_common_status] (0x0100):
Marking server 'ipa-server.ipa.domain' as 'name not resolved'
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [fo_set_port_status] (0x0100): Marking
port 0 of server 'ipa-server.ipa.domain' as 'neutral'
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [fo_set_port_status] (0x0400): Marking
port 0 of duplicate server 'ipa-server.ipa.domain' as 'neutral'
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [set_srv_data_status] (0x0100): Marking
SRV lookup of service 'IPA' as 'neutral'
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [set_server_common_status] (0x0100):
Marking server 'ipa-server.ipa.domain' as 'name not resolved'
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [fo_set_port_status] (0x0100): Marking
port 389 of server 'ipa-server.ipa.domain' as 'neutral'
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [fo_set_port_status] (0x0400): Marking
port 389 of duplicate server 'ipa-server.ipa.domain' as 'neutral'
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [set_srv_data_status] (0x0100): Marking
SRV lookup of service 'IPA' as 'neutral'
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [set_server_common_status] (0x0100):
Marking server 'ipa-server-2.ipa.domain' as 'name not resolved'
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [fo_set_port_status] (0x0100): Marking
port 389 of server 'ipa-server-2.ipa.domain' as 'neutral'
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [fo_set_port_status] (0x0400): Marking
port 389 of duplicate server 'ipa-server-2.ipa.domain' as 'neutral'
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [dp_attach_req] (0x0400): DP Request
[Online Check #4]: New request. Flags [0000].
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [dp_attach_req] (0x0400): Number of
active DP request: 1
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [fo_resolve_service_send] (0x0100):
Trying to resolve service 'IPA'
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [resolv_gethostbyname_files_send]
(0x0100): Trying to resolve A record of 'ipa-server.ipa.domain' in files
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [set_server_common_status] (0x0100):
Marking server 'ipa-server.ipa.domain' as 'resolving name'
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [resolv_gethostbyname_files_send]
(0x0100): Trying to resolve AAAA record of 'ipa-server.ipa.domain' in files
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [be_ptask_done] (0x0400): Task [Check if
online (periodic)]: finished successfully
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [be_ptask_schedule] (0x0400): Task
[Check if online (periodic)]: scheduling task 79 seconds from last execution time
[1528371083]
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [resolv_gethostbyname_next] (0x0200): No
more address families to retry
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [resolv_gethostbyname_dns_query]
(0x0100): Trying to resolve A record of 'ipa-server.ipa.domain' in DNS
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [request_watch_destructor] (0x0400):
Deleting request watch
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [set_server_common_status] (0x0100):
Marking server 'ipa-server.ipa.domain' as 'name resolved'
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [be_resolve_server_process] (0x0200):
Found address for server ipa-server.ipa.domain: [10.144.45.29] TTL 0
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [ipa_resolve_callback] (0x0400):
Constructed uri 'ldap://ipa-server.ipa.domain'
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sssd_async_socket_init_send] (0x0400):
Setting 6 seconds timeout for connecting
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x0400):
calling ldap_search_ext with [(objectclass=*)][].
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_op_finished] (0x0400):
Search result: Success(0), no errmsg set
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_kinit_send] (0x0400): Attempting
kinit (default, host/ipa-client-centos6.ipa.domain, ipa.domain, 86400)
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [fo_resolve_service_send] (0x0100):
Trying to resolve service 'IPA'
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [be_resolve_server_process] (0x0200):
Found address for server ipa-server.ipa.domain: [10.144.45.29] TTL 0
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [create_tgt_req_send_buffer] (0x0400):
buffer size: 70
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [set_tgt_child_timeout] (0x0400):
Setting 6 seconds timeout for tgt child
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [write_pipe_handler] (0x0400): All data
has been sent!
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [read_pipe_handler] (0x0400): EOF
received, client finished
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_get_tgt_recv] (0x0400): Child
responded: 0 [FILE:/var/lib/sss/db/ccache_ipa.domain], expired on [1528457404]
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_cli_auth_step] (0x0100): expire
timeout is 900
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sasl_bind_send] (0x0100): Executing
sasl bind mech: GSSAPI, user: host/ipa-client-centos6.ipa.domain
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [child_sig_handler] (0x0100): child
[6165] finished successfully.
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_cli_connect_recv] (0x0400):
Connection established.
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [fo_set_port_status] (0x0100): Marking
port 0 of server 'ipa-server.ipa.domain' as 'working'
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [set_server_common_status] (0x0100):
Marking server 'ipa-server.ipa.domain' as 'working'
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [fo_set_port_status] (0x0400): Marking
port 0 of duplicate server 'ipa-server.ipa.domain' as 'working'
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [dp_req_done] (0x0400): DP Request
[Online Check #4]: Request handler finished [0]: Success
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [_dp_req_recv] (0x0400): DP Request
[Online Check #4]: Receiving request data.
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [dp_req_destructor] (0x0400): DP Request
[Online Check #4]: Request removed.
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [dp_req_destructor] (0x0400): Number of
active DP request: 0
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [be_check_online_done] (0x0400): Backend
is online
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [be_ptask_disable] (0x0400): Task [Check
if online (periodic)]: disabling task
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [be_run_online_cb] (0x0080): Going
online. Running callbacks.
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [be_ptask_online_cb] (0x0400): Back end
is online
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [be_ptask_enable] (0x0400): Task
[Subdomains Refresh]: enabling task
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [be_ptask_schedule] (0x0400): Task
[Subdomains Refresh]: scheduling task 0 seconds from now [1528371004]
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [be_ptask_execute] (0x0400): Task
[Subdomains Refresh]: executing task, timeout 14400 seconds
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [fo_resolve_service_send] (0x0100):
Trying to resolve service 'IPA'
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [be_resolve_server_process] (0x0200):
Found address for server ipa-server.ipa.domain: [10.144.45.29] TTL 0
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sssd_async_socket_init_send] (0x0400):
Setting 6 seconds timeout for connecting
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x0400):
calling ldap_search_ext with [(objectclass=*)][].
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_op_finished] (0x0400):
Search result: Success(0), no errmsg set
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_kinit_send] (0x0400): Attempting
kinit (default, host/ipa-client-centos6.ipa.domain, ipa.domain, 86400)
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [fo_resolve_service_send] (0x0100):
Trying to resolve service 'IPA'
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [be_resolve_server_process] (0x0200):
Found address for server ipa-server.ipa.domain: [10.144.45.29] TTL 0
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [create_tgt_req_send_buffer] (0x0400):
buffer size: 70
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [set_tgt_child_timeout] (0x0400):
Setting 6 seconds timeout for tgt child
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [write_pipe_handler] (0x0400): All data
has been sent!
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [be_ptask_online_cb] (0x0400): Back end
is online
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [be_ptask_enable] (0x0400): Task [SUDO
Smart Refresh]: enabling task
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [be_ptask_schedule] (0x0400): Task [SUDO
Smart Refresh]: scheduling task 900 seconds from now [1528371904]
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [be_ptask_online_cb] (0x0400): Back end
is online
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [be_ptask_enable] (0x0400): Task [SUDO
Full Refresh]: enabling task
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [be_ptask_schedule] (0x0400): Task [SUDO
Full Refresh]: scheduling task 0 seconds from now [1528371004]
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [be_ptask_execute] (0x0400): Task [SUDO
Full Refresh]: executing task, timeout 21600 seconds
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [ipa_sudo_full_refresh_send] (0x0400):
Issuing a full refresh of sudo rules
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [delayed_online_authentication_callback]
(0x0200): Backend is online, starting delayed online authentication.
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [read_pipe_handler] (0x0400): EOF
received, client finished
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_get_tgt_recv] (0x0400): Child
responded: 0 [FILE:/var/lib/sss/db/ccache_ipa.domain], expired on [1528457404]
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_cli_auth_step] (0x0100): expire
timeout is 900
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sasl_bind_send] (0x0100): Executing
sasl bind mech: GSSAPI, user: host/ipa-client-centos6.ipa.domain
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [child_sig_handler] (0x0100): child
[6166] finished successfully.
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_cli_connect_recv] (0x0400):
Connection established.
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [fo_set_port_status] (0x0100): Marking
port 0 of server 'ipa-server.ipa.domain' as 'working'
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [set_server_common_status] (0x0100):
Marking server 'ipa-server.ipa.domain' as 'working'
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [fo_set_port_status] (0x0400): Marking
port 0 of duplicate server 'ipa-server.ipa.domain' as 'working'
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_search_bases_ex_next_base]
(0x0400): Issuing LDAP lookup with base [cn=ranges,cn=etc,dc=ipa,dc=domain]
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x0400):
calling ldap_search_ext with [objectclass=ipaIDRange][cn=ranges,cn=etc,dc=ipa,dc=domain].
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [ipa_sudo_refresh_connect_done]
(0x0400): SUDO LDAP connection successful
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [ipa_sudo_refresh_connect_done]
(0x0400): About to fetch host information
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x0400):
calling ldap_search_ext with
[(&(objectClass=ipaHost)(fqdn=ipa-client-centos6.ipa.domain))][cn=accounts,dc=ipa,dc=domain].
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_op_finished] (0x0400):
Search result: Success(0), no errmsg set
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_search_bases_ex_done] (0x0400):
Receiving data from base [cn=ranges,cn=etc,dc=ipa,dc=domain]
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x0400):
calling ldap_search_ext with
[(|(&(objectClass=ipaCertMapRule)(ipaEnabledFlag=TRUE))(objectClass=ipaCertMapConfigObject))][cn=certmap,dc=ipa,dc=domain].
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_op_finished] (0x0400):
Search result: Success(0), no errmsg set
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_has_deref_support] (0x0400): The
server supports deref method OpenLDAP
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_x_deref_search_send] (0x0400):
Dereferencing entry
[fqdn=ipa-client-centos6.ipa.domain,cn=computers,cn=accounts,dc=ipa,dc=domain] using
OpenLDAP deref
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_send] (0x0400):
WARNING: Disabling paging because scope is set to base.
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x0400):
calling ldap_search_ext with [no
filter][fqdn=ipa-client-centos6.ipa.domain,cn=computers,cn=accounts,dc=ipa,dc=domain].
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_op_finished] (0x0400):
Search result: Success(0), no errmsg set
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [ipa_subdomains_master_send] (0x0400):
Master record is up to date.
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_search_bases_ex_next_base]
(0x0400): Issuing LDAP lookup with base [cn=trusts,dc=ipa,dc=domain]
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x0400):
calling ldap_search_ext with
[objectclass=ipaNTTrustedDomain][cn=trusts,dc=ipa,dc=domain].
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_x_deref_parse_entry] (0x0400): Got
deref control
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_x_deref_parse_entry] (0x0400): All
deref results from a single control parsed
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_op_finished] (0x0400):
Search result: Success(0), no errmsg set
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [ipa_hostgroup_info_done] (0x0200): No
host groups were dereferenced
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [ipa_sudo_fetch_rules] (0x0400): About
to fetch sudo rules
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_search_bases_ex_next_base]
(0x0400): Issuing LDAP lookup with base [cn=sudo,dc=ipa,dc=domain]
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x0400):
calling ldap_search_ext with
[(&(objectClass=ipasudorule)(ipaEnabledFlag=TRUE)(|(!(memberHost=*))(hostCategory=ALL)(memberHost=fqdn=ipa-client-centos6.ipa.domain,cn=computers,cn=accounts,dc=ipa,dc=domain)))][cn=sudo,dc=ipa,dc=domain].
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_op_finished] (0x0400):
Search result: Success(0), no errmsg set
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_search_bases_ex_done] (0x0400):
Receiving data from base [cn=trusts,dc=ipa,dc=domain]
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [ipa_subdom_is_member_dom] (0x0400): 4th
component is not 'trust', not a member domain
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [ipa_enable_enterprise_principals]
(0x0100): Enterprise principals enabled.
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_deref_bases_ex_next_base]
(0x0400): Issuing LDAP deref lookup with base [cn=accounts,dc=ipa,dc=domain]
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_x_deref_search_send] (0x0400):
Dereferencing entry [cn=accounts,dc=ipa,dc=domain] using OpenLDAP deref
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x0400):
calling ldap_search_ext with
[(&(objectClass=ipaHost)(fqdn=ipa-client-centos6.ipa.domain))][cn=accounts,dc=ipa,dc=domain].
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_op_finished] (0x0400):
Search result: Success(0), no errmsg set
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_search_bases_ex_done] (0x0400):
Receiving data from base [cn=sudo,dc=ipa,dc=domain]
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [ipa_sudo_fetch_rules_done] (0x0040):
Received 0 sudo rules
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [ipa_sudo_fetch_cmdgroups] (0x0400):
About to fetch sudo command groups
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [ipa_sudo_fetch_cmdgroups] (0x0400): No
command groups needs to be downloaded
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [ipa_sudo_fetch_cmds] (0x0400): About to
fetch sudo commands
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [ipa_sudo_fetch_cmds] (0x0400): No
commands needs to be downloaded
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [ipa_sudo_fetch_done] (0x0400): About to
convert rules
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sysdb_sudo_purge_all] (0x0400):
Deleting all cached sudo rules
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_sudo_set_usn] (0x0400): SUDO USN
value is empty.
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [ipa_sudo_refresh_done] (0x0400): Sudo
rules are successfully stored in cache
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [ipa_sudo_full_refresh_done] (0x0400):
Successful full refresh of sudo rules
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [be_ptask_done] (0x0400): Task [SUDO
Full Refresh]: finished successfully
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [be_ptask_schedule] (0x0400): Task [SUDO
Full Refresh]: scheduling task 21600 seconds from last execution time [1528392604]
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_x_deref_parse_entry] (0x0400): Got
deref control
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_x_deref_parse_entry] (0x0400): All
deref results from a single control parsed
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_op_finished] (0x0400):
Search result: Success(0), no errmsg set
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_deref_bases_ex_done] (0x0400):
Receiving data from base [cn=accounts,dc=ipa,dc=domain]
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [ipa_subdomains_view_name_done]
(0x0400): No view found, using default.
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [ipa_apply_view] (0x0400): View name did
not change.
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x0400):
calling ldap_search_ext with [no
filter][cn=default,cn=views,cn=accounts,dc=ipa,dc=domain].
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_op_finished] (0x0400):
Search result: Success(0), no errmsg set
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x0400):
calling ldap_search_ext with
[(&(cn=ipaConfig)(objectClass=ipaGuiConfig))][cn=etc,dc=ipa,dc=domain].
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_op_finished] (0x0400):
Search result: Success(0), no errmsg set
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [be_ptask_done] (0x0400): Task
[Subdomains Refresh]: finished successfully
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [be_ptask_schedule] (0x0400): Task
[Subdomains Refresh]: scheduling task 14400 seconds from last execution time [1528385404]
(Thu Jun 7 13:31:23 2018) [sssd[be[ipa.domain]]] [dp_get_account_info_handler] (0x0200):
Got request for [0x3][BE_REQ_INITGROUPS][name=postfix(a)ipa.domain]
(Thu Jun 7 13:31:23 2018) [sssd[be[ipa.domain]]] [dp_attach_req] (0x0400): DP Request
[Initgroups #5]: New request. Flags [0x0001].
(Thu Jun 7 13:31:23 2018) [sssd[be[ipa.domain]]] [dp_attach_req] (0x0400): Number of
active DP request: 1
(Thu Jun 7 13:31:23 2018) [sssd[be[ipa.domain]]] [sdap_get_initgr_next_base] (0x0400):
Searching for users with base [cn=accounts,dc=ipa,dc=domain]
(Thu Jun 7 13:31:23 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x0400):
calling ldap_search_ext with
[(&(uid=postfix)(objectclass=posixAccount)(&(uidNumber=*)(!(uidNumber=0))))][cn=accounts,dc=ipa,dc=domain].
(Thu Jun 7 13:31:23 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_op_finished] (0x0400):
Search result: Success(0), no errmsg set
(Thu Jun 7 13:31:23 2018) [sssd[be[ipa.domain]]] [sysdb_search_user_by_upn] (0x0400): No
entry with upn [postfix(a)ipa.domain] found.
(Thu Jun 7 13:31:23 2018) [sssd[be[ipa.domain]]] [sysdb_search_entry_by_sid_str]
(0x0400): No such entry
(Thu Jun 7 13:31:23 2018) [sssd[be[ipa.domain]]] [sysdb_search_object_attr] (0x0400): No
such entry.
(Thu Jun 7 13:31:23 2018) [sssd[be[ipa.domain]]] [sysdb_get_real_name] (0x0040): Cannot
find user [postfix(a)ipa.domain] in cache
(Thu Jun 7 13:31:23 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:31:23 2018) [sssd[be[ipa.domain]]] [sysdb_delete_user] (0x0400): Error: 2
(No such file or directory)
(Thu Jun 7 13:31:23 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:31:23 2018) [sssd[be[ipa.domain]]] [ipa_id_get_account_info_orig_done]
(0x0080): Object not found, ending request
(Thu Jun 7 13:31:23 2018) [sssd[be[ipa.domain]]] [dp_req_done] (0x0400): DP Request
[Initgroups #5]: Request handler finished [0]: Success
(Thu Jun 7 13:31:23 2018) [sssd[be[ipa.domain]]] [_dp_req_recv] (0x0400): DP Request
[Initgroups #5]: Receiving request data.
(Thu Jun 7 13:31:23 2018) [sssd[be[ipa.domain]]] [dp_req_reply_list_success] (0x0400): DP
Request [Initgroups #5]: Finished. Success.
(Thu Jun 7 13:31:23 2018) [sssd[be[ipa.domain]]] [dp_table_value_destructor] (0x0400):
Removing [0:1:0x0001:3::ipa.domain:name=postfix@ipa.domain] from reply table
(Thu Jun 7 13:31:23 2018) [sssd[be[ipa.domain]]] [dp_req_destructor] (0x0400): DP Request
[Initgroups #5]: Request removed.
(Thu Jun 7 13:31:23 2018) [sssd[be[ipa.domain]]] [dp_req_destructor] (0x0400): Number of
active DP request: 0
(Thu Jun 7 13:44:58 2018) [sssd[be[ipa.domain]]] [sdap_id_conn_data_expire_handler]
(0x0080): connection is about to expire, releasing it
_______________________________________________
FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/freeipa-users@lists.fedorah...
--
/ Alexander Bokovoy
Sr. Principal Software Engineer
Security / Identity Management Engineering
Red Hat Limited, Finland
10:48 a.m.
New subject: Cannot log in as an AD user to FreeIPA client but can log in to server
Thank you Alexander, that was the root cause. I added optimizations to my setup that you
together with Jakub described in this article:
https://jhrozek.wordpress.com/2015/08/19/performance-tuning-sssd-for-larg...
and things started working on the client side.
There is a one small glitch though. Upon a first getent passwd for a new user (one that I
didn't issue getent before) executed on a client it most likely still times out. I can
see that there is some communication on FreeIPA servers going on (judging by the log file
/var/log/sssd/sssd_ipa.domain.log). getent command times out but entries in the log file
keep on being added. When the log entries stop from being added anymore and I issue the
same getent command then it succeeds.
Could you please point me to the timeout parameter that would allow to fix this, if there
is any?
For a reference I paste my client/server sssd configs:
server:
[domain/ipa.domain]
debug_level = 9
id_provider = ipa
ipa_server_mode = True
ipa_server = ipa-server.ipa.domain
ipa_domain = ipa.domain
ipa_hostname = ipa-server.ipa.domain
auth_provider = ipa
chpass_provider = ipa
access_provider = ipa
cache_credentials = True
ldap_tls_cacert = /etc/ipa/ca.crt
krb5_store_password_if_offline = True
enumerate = False
subdomain_inherit = ignore_group_members, ldap_purge_cache_timeout
ignore_group_members = True
ldap_purge_cache_timeout = 0
[sssd]
services = nss, pam, ifp, ssh, sudo
ignore_group_members=True
domains = ipa.domain
enumerate = False
ldap_use_tokengroups = false
[nss]
homedir_substring = /home
memcache_timeout = 600
[pam]
[sudo]
[autofs]
[ssh]
[pac]
[ifp]
[secrets]
[session_recording]
----
client:
[domain/ipa.domain]
enumerate = False
debug_level=9
cache_credentials = True
krb5_store_password_if_offline = True
ipa_domain = ipa.domain
id_provider = ipa
auth_provider = ipa
access_provider = ipa
ipa_hostname = ipa-client-centos6.shec.hrs.cc
chpass_provider = ipa
ipa_server = ipa-server.ipa.domain
ldap_tls_cacert = /etc/ipa/ca.crt
krb5_auth_timeout = 3600
[sssd]
services = nss, sudo, pam, ssh
domains = ipa.domain
[nss]
homedir_substring = /home
[pam]
pam_id_timeout = 3600
[sudo]
[autofs]
[ssh]
[pac]
[ifp]
1:28 p.m.
New subject: Cannot log in as an AD user to FreeIPA client but can log in to server
On Thu, Jun 07, 2018 at 03:48:16PM -0000, Bart via FreeIPA-users wrote:
Thank you Alexander, that was the root cause. I added optimizations
to my setup that you together with Jakub described in this article:
https://jhrozek.wordpress.com/2015/08/19/performance-tuning-sssd-for-larg...
and things started working on the client side.
This still points to a performance-like issue. From some related
customer cases I've been working on lately I remember that increasing
the negative timeout (entry_negative_timeout, set this to minutes or
even hours) and also the cache_first=true options made a difference.
There's a tradeoff though with these options, please see the man pages.
There is a one small glitch though. Upon a first getent passwd for a new user (one that I
didn't issue getent before) executed on a client it most likely still times out. I can
see that there is some communication on FreeIPA servers going on (judging by the log file
/var/log/sssd/sssd_ipa.domain.log). getent command times out but entries in the log file
keep on being added. When the log entries stop from being added anymore and I issue the
same getent command then it succeeds.
Could you please point me to the timeout parameter that would allow to fix this, if there
is any?
For a reference I paste my client/server sssd configs:
server:
[domain/ipa.domain]
debug_level = 9
id_provider = ipa
ipa_server_mode = True
ipa_server = ipa-server.ipa.domain
ipa_domain = ipa.domain
ipa_hostname = ipa-server.ipa.domain
auth_provider = ipa
chpass_provider = ipa
access_provider = ipa
cache_credentials = True
ldap_tls_cacert = /etc/ipa/ca.crt
krb5_store_password_if_offline = True
enumerate = False
subdomain_inherit = ignore_group_members, ldap_purge_cache_timeout
ignore_group_members = True
ldap_purge_cache_timeout = 0
[sssd]
services = nss, pam, ifp, ssh, sudo
ignore_group_members=True
domains = ipa.domain
enumerate = False
ldap_use_tokengroups = false
Please don't disable tokengroups unless you have a verified reason to do
so (this is just a general warning, I'm not even sure if disabling
tokengroups in the main domain section would disable them for the AD
subdomain).
> [nss]
> homedir_substring = /home
> memcache_timeout = 600
>
> [pam]
>
> [sudo]
>
> [autofs]
>
> [ssh]
>
> [pac]
>
> [ifp]
>
> [secrets]
>
> [session_recording]
>
> ----
> client:
>
> [domain/ipa.domain]
> enumerate = False
> debug_level=9
> cache_credentials = True
> krb5_store_password_if_offline = True
>
> ipa_domain = ipa.domain
> id_provider = ipa
> auth_provider = ipa
> access_provider = ipa
> ipa_hostname = ipa-client-centos6.shec.hrs.cc
> chpass_provider = ipa
> ipa_server = ipa-server.ipa.domain
> ldap_tls_cacert = /etc/ipa/ca.crt
> krb5_auth_timeout = 3600
> [sssd]
> services = nss, sudo, pam, ssh
>
> domains = ipa.domain
> [nss]
> homedir_substring = /home
>
> [pam]
> pam_id_timeout = 3600
>
> [sudo]
>
> [autofs]
>
> [ssh]
>
> [pac]
>
> [ifp]
> _______________________________________________
> FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
> To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org
> Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
https://lists.fedoraproject.org/archives/list/freeipa-users@lists.fedorah...
2149
days inactive
2151
days old
freeipa-users@lists.fedorahosted.org
7 comments
3 participants
participants (3)
-
Alexander Bokovoy -
Bart -
Jakub Hrozek