Hi Lukas,

Thanks!  The latest sssd-1.12.5-3.el7.centos.x86_64 did NOT work any differently.  Based on info I found in https://fedorahosted.org/freeipa/ticket/4486 I'm thinking I should bite the bullet and go with a 4.1 server (e.g. what's in CentOS 7.1) like ipa-server-4.1.0-18.el7.centos.3.x86_64 .  Might even be time to try it in a docker container ;).

Regards,

   == k+ ==

On Tue, Aug 25, 2015 at 12:27 PM, Lukas Slebodnik <lslebodn@redhat.com> wrote:
On (25/08/15 11:46), Ken Miller wrote:
>Password Prompt occurred HERE:
>
>[ipa_host_info_done] (0x0020): Server does not support deref
This message is suspicious.


>[sdap_id_op_done] (0x0200): communication error on cached connection,
>moving to next server
>[be_pam_handler_callback] (0x0100): Backend returned: (3, 4, <NULL>)
>[Internal Error (System error)]
>[be_pam_handler_callback] (0x0100): Sending result [4][example.com]
>[be_pam_handler_callback] (0x0100): Sent result [4][example.com]
>[be_run_unconditional_online_cb] (0x0400): Running unconditional online
>callbacks.
>
>End of debug log after error HERE
>
Could you try to re-test with the latest sssd 1.12 version?
https://copr.fedoraproject.org/coprs/lslebodn/sssd-1-12/

If it does not help then could you upgrade ipa server to the latest
rhel 6.7? There is still ipa 3.0 but there were fixes to 389-ds
and other components.

LS
_______________________________________________
sssd-users mailing list
sssd-users@lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/sssd-users