https://bugzilla.redhat.com/show_bug.cgi?id=2168743
Alexander Bokovoy <abokovoy(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Doc Type|--- |If docs needed, set a value
--- Comment #1 from Alexander Bokovoy <abokovoy(a)redhat.com> ---
Looks like GPO policy has syntax errors that prevent it parsing properly and as
a result no matching rights to login.
Authentication is not a problem, but access control is denied.
* (2023-02-09 15:26:26): [be[TCLC.org]] [ad_gpo_cse_step] (0x0400): [RID#5]
smb_server:
smb://aequitas.tclc.org
* (2023-02-09 15:26:26): [be[TCLC.org]] [ad_gpo_cse_step] (0x0400): [RID#5]
smb_share: /SysVol
* (2023-02-09 15:26:26): [be[TCLC.org]] [ad_gpo_cse_step] (0x0400): [RID#5]
smb_path: /TCLC.org/Policies/{B2C631AC-A2F1-41F7-B55C-6C85870D44BD}
* (2023-02-09 15:26:26): [be[TCLC.org]] [ad_gpo_cse_step] (0x0400): [RID#5]
gpo_guid: {B2C631AC-A2F1-41F7-B55C-6C85870D44BD}
* (2023-02-09 15:26:26): [be[TCLC.org]] [ad_gpo_cse_step] (0x0400): [RID#5]
retrieving GPO from cache [{B2C631AC-A2F1-41F7-B55C-6C85870D44BD}]
....
* (2023-02-09 15:26:27): [be[TCLC.org]] [ad_gpo_store_policy_settings]
(0x0020): [RID#5]
[/var/lib/sss/gpo_cache/TCLC.org/Policies/{B2C631AC-A2F1-41F7-B55C-6C85870D44BD}/Machine/Microsoft/Windows
NT/SecEdit/GptTmpl.inf]: ini_config_parse failed [5][Input/output error]
********************** BACKTRACE DUMP ENDS HERE
*********************************
(2023-02-09 15:26:27): [be[TCLC.org]] [ad_gpo_store_policy_settings] (0x0020):
[RID#5] Error (5) on line 16: Equal sign is missing.
(2023-02-09 15:26:27): [be[TCLC.org]] [ad_gpo_store_policy_settings] (0x0020):
[RID#5] Error (5) on line 17: Equal sign is missing.
* ... skipping repetitive backtrace ...
(2023-02-09 15:26:27): [be[TCLC.org]] [ad_gpo_store_policy_settings] (0x0020):
[RID#5] Error (5) on line 18: Equal sign is missing.
* ... skipping repetitive backtrace ...
(2023-02-09 15:26:27): [be[TCLC.org]] [ad_gpo_perform_hbac_processing]
(0x0040): [RID#5] GPO access check failed: [1432158236](Host Access Denied)
Can you please check that policy is syntactically correct?
--
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2168743