It was my mistake, I missed [domain] section. Below is at log level 6:
It spent time on checking for SELinux mapping, avahi and polkitd.
----- sssd_mr.ric.log -----
(Wed Apr 15 10:22:31 2015) [sssd[be[mr.ric]]] [be_get_account_info]
(0x0200): Got request for [0x3][1][name=qchang]
(Wed Apr 15 10:22:31 2015) [sssd[be[mr.ric]]] [be_req_set_domain]
(0x0400): Changing request domain from [mr.ric] to [mr.ric]
(Wed Apr 15 10:22:31 2015) [sssd[be[mr.ric]]]
[sdap_idmap_domain_has_algorithmic_mapping] (0x0080): Could not parse
domain SID from [(null)]
(Wed Apr 15 10:22:31 2015) [sssd[be[mr.ric]]]
[sdap_idmap_domain_has_algorithmic_mapping] (0x0080): Could not parse
domain SID from [(null)]
(Wed Apr 15 10:22:31 2015) [sssd[be[mr.ric]]]
[sdap_get_initgr_next_base] (0x0400): Searching for users with base
[cn=accounts,dc=mr,dc=ric]
(Wed Apr 15 10:22:31 2015) [sssd[be[mr.ric]]]
[sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with
[(&(uid=qchang)(objectclass=posixAcco
unt)(&(uidNumber=*)(!(uidNumber=0))))][cn=accounts,dc=mr,dc=ric].
(Wed Apr 15 10:22:31 2015) [sssd[be[mr.ric]]]
[sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no
errmsg set
(Wed Apr 15 10:22:31 2015) [sssd[be[mr.ric]]] [sdap_save_user] (0x0400):
Save user
(Wed Apr 15 10:22:31 2015) [sssd[be[mr.ric]]] [sdap_get_primary_name]
(0x0400): Processing object qchang
(Wed Apr 15 10:22:31 2015) [sssd[be[mr.ric]]] [sdap_save_user] (0x0400):
Processing user qchang
(Wed Apr 15 10:22:31 2015) [sssd[be[mr.ric]]]
[sdap_idmap_domain_has_algorithmic_mapping] (0x0080): Could not parse
domain SID from [(null)]
(Wed Apr 15 10:22:31 2015) [sssd[be[mr.ric]]] [sdap_save_user] (0x0400):
Adding original memberOf attributes to [qchang].
(Wed Apr 15 10:22:31 2015) [sssd[be[mr.ric]]] [sdap_save_user] (0x0400):
Adding user principal [qchang(a)MR.RIC] to attributes of [qchang].
(Wed Apr 15 10:22:31 2015) [sssd[be[mr.ric]]] [sdap_save_user] (0x0400):
Storing info for user qchang
(Wed Apr 15 10:22:31 2015) [sssd[be[mr.ric]]] [sdap_get_primary_name]
(0x0400): Processing object qchang
(Wed Apr 15 10:22:31 2015) [sssd[be[mr.ric]]] [sdap_has_deref_support]
(0x0400): The server supports deref method OpenLDAP
(Wed Apr 15 10:22:31 2015) [sssd[be[mr.ric]]]
[sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with
[(&(|(objectClass=ipaUserGroup)(objec
tClass=posixGroup))(cn=*))][cn=ipausers,cn=groups,cn=accounts,dc=mr,dc=ric].
(Wed Apr 15 10:22:31 2015) [sssd[be[mr.ric]]]
[sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no
errmsg set
(Wed Apr 15 10:22:31 2015) [sssd[be[mr.ric]]]
[sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with
[(&(|(objectClass=ipaUserGroup)(objec
tClass=posixGroup))(cn=*))][ipaUniqueID=34bb1bba-de25-11e4-b4e1-000c29f4de6e,cn=sudorules,cn=sudo,dc=mr,dc=ric].
(Wed Apr 15 10:22:31 2015) [sssd[be[mr.ric]]]
[sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no
errmsg set
(Wed Apr 15 10:22:31 2015) [sssd[be[mr.ric]]]
[sdap_initgr_nested_search] (0x0040): Search for group
ipaUniqueID=34bb1bba-de25-11e4-b4e1-000c29f4de6e,
cn=sudorules,cn=sudo,dc=mr,dc=ric, returned 0 results. Skipping
(Wed Apr 15 10:22:31 2015) [sssd[be[mr.ric]]] [sdap_get_primary_name]
(0x0400): Processing object ipausers
(Wed Apr 15 10:22:31 2015) [sssd[be[mr.ric]]]
[sdap_idmap_domain_has_algorithmic_mapping] (0x0080): Could not parse
domain SID from [(null)]
(Wed Apr 15 10:22:31 2015) [sssd[be[mr.ric]]]
[sdap_get_groups_next_base] (0x0400): Searching for groups with base
[cn=accounts,dc=mr,dc=ric]
(Wed Apr 15 10:22:31 2015) [sssd[be[mr.ric]]]
[sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with
[(&(gidNumber=10001)(|(objectClass=ip
aUserGroup)(objectClass=posixGroup))(cn=*)(&(gidNumber=*)(!(gidNumber=0))))][cn=accounts,dc=mr,dc=ric].
(Wed Apr 15 10:22:31 2015) [sssd[be[mr.ric]]]
[sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no
errmsg set
(Wed Apr 15 10:22:31 2015) [sssd[be[mr.ric]]] [sdap_get_groups_process]
(0x0400): Search for groups, returned 1 results.
(Wed Apr 15 10:22:31 2015) [sssd[be[mr.ric]]] [sdap_has_deref_support]
(0x0400): The server supports deref method OpenLDAP
(Wed Apr 15 10:22:31 2015) [sssd[be[mr.ric]]]
[sdap_idmap_domain_has_algorithmic_mapping] (0x0080): Could not parse
domain SID from [(null)]
(Wed Apr 15 10:22:31 2015) [sssd[be[mr.ric]]] [sdap_nested_group_recv]
(0x0400): 0 users found in the hash table
(Wed Apr 15 10:22:31 2015) [sssd[be[mr.ric]]] [sdap_nested_group_recv]
(0x0400): 1 groups found in the hash table
(Wed Apr 15 10:22:31 2015) [sssd[be[mr.ric]]] [sdap_get_primary_name]
(0x0400): Processing object qchang
(Wed Apr 15 10:22:31 2015) [sssd[be[mr.ric]]] [sdap_save_group]
(0x0400): Processing group qchang
(Wed Apr 15 10:22:31 2015) [sssd[be[mr.ric]]]
[sdap_idmap_domain_has_algorithmic_mapping] (0x0080): Could not parse
domain SID from [(null)]
(Wed Apr 15 10:22:31 2015) [sssd[be[mr.ric]]]
[sdap_process_ghost_members] (0x0400): The group has 0 members
(Wed Apr 15 10:22:31 2015) [sssd[be[mr.ric]]]
[sdap_process_ghost_members] (0x0400): Group has 0 members
(Wed Apr 15 10:22:31 2015) [sssd[be[mr.ric]]] [sdap_save_group]
(0x0400): Storing info for group qchang
(Wed Apr 15 10:22:31 2015) [sssd[be[mr.ric]]] [sdap_get_primary_name]
(0x0400): Processing object qchang
(Wed Apr 15 10:22:31 2015) [sssd[be[mr.ric]]] [sdap_save_grpmem]
(0x0400): Processing group qchang
(Wed Apr 15 10:22:31 2015) [sssd[be[mr.ric]]] [sdap_save_grpmem]
(0x0400): Failed to get group sid
(Wed Apr 15 10:22:31 2015) [sssd[be[mr.ric]]] [sdap_save_grpmem]
(0x0400): No members for group [qchang]
(Wed Apr 15 10:22:31 2015) [sssd[be[mr.ric]]]
[sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with
[(&(objectClass=ipaOverrideAnchor)(ip
aAnchorUUID=:IPA:mr.ric:4b2724aa-d87d-11e4-93fa-000c29f4de6e))][cn=Default
Trust View,cn=views,cn=accounts,dc=mr,dc=ric].
(Wed Apr 15 10:22:31 2015) [sssd[be[mr.ric]]]
[sdap_get_generic_op_finished] (0x0400): Search result: No such
object(32), no errmsg set
(Wed Apr 15 10:22:31 2015) [sssd[be[mr.ric]]] [acctinfo_callback]
(0x0100): Request processed. Returned 0,0,Success
(Wed Apr 15 10:22:31 2015) [sssd[be[mr.ric]]] [be_req_set_domain]
(0x0400): Changing request domain from [mr.ric] to [mr.ric]
(Wed Apr 15 10:22:31 2015) [sssd[be[mr.ric]]] [be_pam_handler] (0x0100):
Got request with the following data
(Wed Apr 15 10:22:31 2015) [sssd[be[mr.ric]]] [pam_print_data] (0x0100):
command: PAM_AUTHENTICATE
(Wed Apr 15 10:22:31 2015) [sssd[be[mr.ric]]] [pam_print_data] (0x0100):
domain: mr.ric
(Wed Apr 15 10:22:31 2015) [sssd[be[mr.ric]]] [pam_print_data] (0x0100):
user: qchang
(Wed Apr 15 10:22:31 2015) [sssd[be[mr.ric]]] [pam_print_data] (0x0100):
service: sshd
(Wed Apr 15 10:22:31 2015) [sssd[be[mr.ric]]] [pam_print_data] (0x0100):
tty: ssh
(Wed Apr 15 10:22:31 2015) [sssd[be[mr.ric]]] [pam_print_data] (0x0100):
ruser:
(Wed Apr 15 10:22:31 2015) [sssd[be[mr.ric]]] [pam_print_data] (0x0100):
rhost: 172.25.12.157
(Wed Apr 15 10:22:31 2015) [sssd[be[mr.ric]]] [pam_print_data] (0x0100):
authtok type: 1
(Wed Apr 15 10:22:31 2015) [sssd[be[mr.ric]]] [pam_print_data] (0x0100):
newauthtok type: 0
(Wed Apr 15 10:22:31 2015) [sssd[be[mr.ric]]] [pam_print_data] (0x0100):
priv: 1
(Wed Apr 15 10:22:31 2015) [sssd[be[mr.ric]]] [pam_print_data] (0x0100):
cli_pid: 19776
(Wed Apr 15 10:22:31 2015) [sssd[be[mr.ric]]] [pam_print_data] (0x0100):
logon name: not set
(Wed Apr 15 10:22:31 2015) [sssd[be[mr.ric]]] [fo_resolve_service_send]
(0x0100): Trying to resolve service 'IPA'
(Wed Apr 15 10:22:31 2015) [sssd[be[mr.ric]]] [resolve_srv_send]
(0x0200): The status of SRV lookup is resolved
(Wed Apr 15 10:22:31 2015) [sssd[be[mr.ric]]]
[be_resolve_server_process] (0x0200): Found address for server
mripa1.mr.ric: [172.25.12.153] TTL 1200
(Wed Apr 15 10:22:31 2015) [sssd[be[mr.ric]]] [ipa_resolve_callback]
(0x0400): Constructed uri 'ldap://mripa1.mr.ric'
(Wed Apr 15 10:22:31 2015) [sssd[be[mr.ric]]] [write_pipe_handler]
(0x0400): All data has been sent!
(Wed Apr 15 10:22:32 2015) [sssd[be[mr.ric]]] [child_sig_handler]
(0x0100): child [19778] finished successfully.
(Wed Apr 15 10:22:32 2015) [sssd[be[mr.ric]]] [read_pipe_handler]
(0x0400): EOF received, client finished
(Wed Apr 15 10:22:32 2015) [sssd[be[mr.ric]]] [fo_set_port_status]
(0x0100): Marking port 389 of server 'mripa1.mr.ric' as 'working'
(Wed Apr 15 10:22:32 2015) [sssd[be[mr.ric]]] [set_server_common_status]
(0x0100): Marking server 'mripa1.mr.ric' as 'working'
(Wed Apr 15 10:22:32 2015) [sssd[be[mr.ric]]] [fo_set_port_status]
(0x0400): Marking port 389 of duplicate server 'mripa1.mr.ric' as
'working'
(Wed Apr 15 10:22:32 2015) [sssd[be[mr.ric]]] [be_pam_handler_callback]
(0x0100): Backend returned: (0, 0, <NULL>) [Success]
(Wed Apr 15 10:22:32 2015) [sssd[be[mr.ric]]] [be_pam_handler_callback]
(0x0100): Sending result [0][mr.ric]
(Wed Apr 15 10:22:32 2015) [sssd[be[mr.ric]]] [be_pam_handler_callback]
(0x0100): Sent result [0][mr.ric]
(Wed Apr 15 10:22:32 2015) [sssd[be[mr.ric]]] [be_req_set_domain]
(0x0400): Changing request domain from [mr.ric] to [mr.ric]
(Wed Apr 15 10:22:32 2015) [sssd[be[mr.ric]]] [be_pam_handler] (0x0100):
Got request with the following data
(Wed Apr 15 10:22:32 2015) [sssd[be[mr.ric]]] [pam_print_data] (0x0100):
command: PAM_ACCT_MGMT
(Wed Apr 15 10:22:32 2015) [sssd[be[mr.ric]]] [pam_print_data] (0x0100):
domain: mr.ric
(Wed Apr 15 10:22:32 2015) [sssd[be[mr.ric]]] [pam_print_data] (0x0100):
user: qchang
(Wed Apr 15 10:22:32 2015) [sssd[be[mr.ric]]] [pam_print_data] (0x0100):
service: sshd
(Wed Apr 15 10:22:32 2015) [sssd[be[mr.ric]]] [pam_print_data] (0x0100):
tty: ssh
(Wed Apr 15 10:22:32 2015) [sssd[be[mr.ric]]] [pam_print_data] (0x0100):
ruser:
(Wed Apr 15 10:22:32 2015) [sssd[be[mr.ric]]] [pam_print_data] (0x0100):
rhost: 172.25.12.157
(Wed Apr 15 10:22:32 2015) [sssd[be[mr.ric]]] [pam_print_data] (0x0100):
authtok type: 0
(Wed Apr 15 10:22:32 2015) [sssd[be[mr.ric]]] [pam_print_data] (0x0100):
newauthtok type: 0
(Wed Apr 15 10:22:32 2015) [sssd[be[mr.ric]]] [pam_print_data] (0x0100):
priv: 1
(Wed Apr 15 10:22:32 2015) [sssd[be[mr.ric]]] [pam_print_data] (0x0100):
cli_pid: 19776
(Wed Apr 15 10:22:32 2015) [sssd[be[mr.ric]]] [pam_print_data] (0x0100):
logon name: not set
(Wed Apr 15 10:22:32 2015) [sssd[be[mr.ric]]] [sdap_access_send]
(0x0400): Performing access check for user [qchang]
(Wed Apr 15 10:22:32 2015) [sssd[be[mr.ric]]]
[sdap_account_expired_rhds] (0x0400): Performing RHDS access check for
user [qchang]
(Wed Apr 15 10:22:32 2015) [sssd[be[mr.ric]]]
[sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with
[(&(objectClass=ipaHost)(fqdn=mripadm
.mr.ric))][cn=accounts,dc=mr,dc=ric].
(Wed Apr 15 10:22:32 2015) [sssd[be[mr.ric]]]
[sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no
errmsg set
(Wed Apr 15 10:22:32 2015) [sssd[be[mr.ric]]] [sdap_has_deref_support]
(0x0400): The server supports deref method OpenLDAP
(Wed Apr 15 10:22:32 2015) [sssd[be[mr.ric]]] [sdap_x_deref_search_send]
(0x0400): Dereferencing entry
[fqdn=mripadm.mr.ric,cn=computers,cn=accounts,d
c=mr,dc=ric] using OpenLDAP deref
(Wed Apr 15 10:22:32 2015) [sssd[be[mr.ric]]]
[sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [no
filter][fqdn=mripadm.mr.ric,cn=co
mputers,cn=accounts,dc=mr,dc=ric].
(Wed Apr 15 10:22:33 2015) [sssd[be[mr.ric]]] [sdap_x_deref_parse_entry]
(0x0400): Got deref control
(Wed Apr 15 10:22:33 2015) [sssd[be[mr.ric]]] [sdap_x_deref_parse_entry]
(0x0400): All deref results from a single control parsed
(Wed Apr 15 10:22:33 2015) [sssd[be[mr.ric]]]
[sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no
errmsg set
(Wed Apr 15 10:22:33 2015) [sssd[be[mr.ric]]] [ipa_hostgroup_info_done]
(0x0200): Dereferenced host group: mr-server-centos
(Wed Apr 15 10:22:33 2015) [sssd[be[mr.ric]]] [ipa_hostgroup_info_done]
(0x0200): Dereferenced host group: mr-nix
(Wed Apr 15 10:22:33 2015) [sssd[be[mr.ric]]]
[ipa_hbac_service_info_next] (0x0400): Sending request for next search
base: [cn=hbac,dc=mr,dc=ric][2][(
objectClass=ipaHBACService)]
(Wed Apr 15 10:22:33 2015) [sssd[be[mr.ric]]]
[sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with
[(objectClass=ipaHBACService)][cn=hba
c,dc=mr,dc=ric].
(Wed Apr 15 10:22:33 2015) [sssd[be[mr.ric]]]
[sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no
errmsg set
(Wed Apr 15 10:22:33 2015) [sssd[be[mr.ric]]]
[ipa_hbac_servicegroup_info_next] (0x0400): Sending request for next
search base: [cn=hbac,dc=mr,dc=ric]
[2][(objectClass=ipaHBACServiceGroup)]
(Wed Apr 15 10:22:33 2015) [sssd[be[mr.ric]]]
[sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with
[(objectClass=ipaHBACServiceGroup)][c
n=hbac,dc=mr,dc=ric].
(Wed Apr 15 10:22:33 2015) [sssd[be[mr.ric]]]
[sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no
errmsg set
(Wed Apr 15 10:22:33 2015) [sssd[be[mr.ric]]] [ipa_hbac_rule_info_next]
(0x0400): Sending request for next search base:
[cn=hbac,dc=mr,dc=ric][2][(&(o
bjectclass=ipaHBACRule)(ipaenabledflag=TRUE)(|(hostCategory=all)(memberHost=fqdn=mripadm.mr.ric,cn=computers,cn=accounts,dc=mr,dc=ric)(memberHost=cn=m
r-server-centos,cn=hostgroups,cn=accounts,dc=mr,dc=ric)(memberHost=cn=mr-server-centos,cn=ng,cn=alt,dc=mr,dc=ric)(memberHost=cn=mr-nix,cn=hostgroups,c
n=accounts,dc=mr,dc=ric)(memberHost=cn=mr-nix,cn=ng,cn=alt,dc=mr,dc=ric)(memberHost=ipaUniqueID=34bb1bba-de25-11e4-b4e1-000c29f4de6e,cn=sudorules,cn=s
udo,dc=mr,dc=ric)))]
(Wed Apr 15 10:22:33 2015) [sssd[be[mr.ric]]]
[sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with
[(&(objectclass=ipaHBACRule)(ipaenabl
edflag=TRUE)(|(hostCategory=all)(memberHost=fqdn=mripadm.mr.ric,cn=computers,cn=accounts,dc=mr,dc=ric)(memberHost=cn=mr-server-centos,cn=hostgroups,cn
=accounts,dc=mr,dc=ric)(memberHost=cn=mr-server-centos,cn=ng,cn=alt,dc=mr,dc=ric)(memberHost=cn=mr-nix,cn=hostgroups,cn=accounts,dc=mr,dc=ric)(memberH
ost=cn=mr-nix,cn=ng,cn=alt,dc=mr,dc=ric)(memberHost=ipaUniqueID=34bb1bba-de25-11e4-b4e1-000c29f4de6e,cn=sudorules,cn=sudo,dc=mr,dc=ric)))][cn=hbac,dc=
mr,dc=ric].
(Wed Apr 15 10:22:33 2015) [sssd[be[mr.ric]]]
[sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no
errmsg set
(Wed Apr 15 10:22:33 2015) [sssd[be[mr.ric]]] [hbac_get_category]
(0x0200): Category is set to 'all'.
(Wed Apr 15 10:22:33 2015) [sssd[be[mr.ric]]] [hbac_get_category]
(0x0200): Category is set to 'all'.
(Wed Apr 15 10:22:33 2015) [sssd[be[mr.ric]]] [hbac_get_category]
(0x0200): Category is set to 'all'.
(Wed Apr 15 10:22:33 2015) [sssd[be[mr.ric]]] [hbac_shost_attrs_to_rule]
(0x0400): Processing source hosts for rule [allow_all]
(Wed Apr 15 10:22:33 2015) [sssd[be[mr.ric]]] [ipa_hbac_evaluate_rules]
(0x0080): Access granted by HBAC rule [allow_all]
(Wed Apr 15 10:22:33 2015) [sssd[be[mr.ric]]] [be_pam_handler_callback]
(0x0100): Backend returned: (0, 0, <NULL>) [Success]
(Wed Apr 15 10:22:33 2015) [sssd[be[mr.ric]]] [ipa_get_selinux_send]
(0x0400): Retrieving SELinux user mapping
(Wed Apr 15 10:22:33 2015) [sssd[be[mr.ric]]]
[sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with
[(&(cn=ipaConfig)(objectClass=ipaGuiC
onfig))][cn=etc,dc=mr,dc=ric].
(Wed Apr 15 10:22:33 2015) [sssd[be[mr.ric]]]
[sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no
errmsg set
(Wed Apr 15 10:22:33 2015) [sssd[be[mr.ric]]]
[ipa_selinux_get_maps_next] (0x0400): Trying to fetch SELinux maps with
following parameters: [2][(&(obj
ectclass=ipaselinuxusermap)(ipaEnabledFlag=TRUE))][cn=selinux,dc=mr,dc=ric]
(Wed Apr 15 10:22:33 2015) [sssd[be[mr.ric]]]
[sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with
[(&(objectclass=ipaselinuxusermap)(ip
aEnabledFlag=TRUE))][cn=selinux,dc=mr,dc=ric].
(Wed Apr 15 10:22:33 2015) [sssd[be[mr.ric]]]
[sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no
errmsg set
(Wed Apr 15 10:22:33 2015) [sssd[be[mr.ric]]]
[ipa_selinux_get_maps_done] (0x0400): No SELinux user maps found!
(Wed Apr 15 10:22:33 2015) [sssd[be[mr.ric]]] [write_pipe_handler]
(0x0400): All data has been sent!
(Wed Apr 15 10:22:34 2015) [sssd[be[mr.ric]]] [be_get_account_info]
(0x0200): Got request for [0x1003][1][name=avahi]
(Wed Apr 15 10:22:34 2015) [sssd[be[mr.ric]]] [be_req_set_domain]
(0x0400): Changing request domain from [mr.ric] to [mr.ric]
(Wed Apr 15 10:22:34 2015) [sssd[be[mr.ric]]]
[sdap_idmap_domain_has_algorithmic_mapping] (0x0080): Could not parse
domain SID from [(null)]
(Wed Apr 15 10:22:34 2015) [sssd[be[mr.ric]]]
[sdap_idmap_domain_has_algorithmic_mapping] (0x0080): Could not parse
domain SID from [(null)]
(Wed Apr 15 10:22:34 2015) [sssd[be[mr.ric]]]
[sdap_get_initgr_next_base] (0x0400): Searching for users with base
[cn=accounts,dc=mr,dc=ric]
(Wed Apr 15 10:22:34 2015) [sssd[be[mr.ric]]]
[sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with
[(&(uid=avahi)(objectclass=posixAccou
nt)(&(uidNumber=*)(!(uidNumber=0))))][cn=accounts,dc=mr,dc=ric].
(Wed Apr 15 10:22:34 2015) [sssd[be[mr.ric]]]
[sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no
errmsg set
(Wed Apr 15 10:22:34 2015) [sssd[be[mr.ric]]] [sysdb_search_by_name]
(0x0400): No such entry
(Wed Apr 15 10:22:34 2015) [sssd[be[mr.ric]]] [sysdb_delete_user]
(0x0400): Error: 2 (No such file or directory)
(Wed Apr 15 10:22:34 2015) [sssd[be[mr.ric]]] [sysdb_search_by_name]
(0x0400): No such entry
(Wed Apr 15 10:22:34 2015) [sssd[be[mr.ric]]]
[ipa_id_get_account_info_orig_done] (0x0080): Object not found, ending
request
(Wed Apr 15 10:22:34 2015) [sssd[be[mr.ric]]] [acctinfo_callback]
(0x0100): Request processed. Returned 3,0,Account info lookup failed
(Wed Apr 15 10:22:34 2015) [sssd[be[mr.ric]]] [be_get_account_info]
(0x0200): Got request for [0x1003][1][name=polkitd]
(Wed Apr 15 10:22:34 2015) [sssd[be[mr.ric]]] [be_req_set_domain]
(0x0400): Changing request domain from [mr.ric] to [mr.ric]
(Wed Apr 15 10:22:34 2015) [sssd[be[mr.ric]]]
[sdap_idmap_domain_has_algorithmic_mapping] (0x0080): Could not parse
domain SID from [(null)]
(Wed Apr 15 10:22:34 2015) [sssd[be[mr.ric]]]
[sdap_idmap_domain_has_algorithmic_mapping] (0x0080): Could not parse
domain SID from [(null)]
(Wed Apr 15 10:22:34 2015) [sssd[be[mr.ric]]]
[sdap_get_initgr_next_base] (0x0400): Searching for users with base
[cn=accounts,dc=mr,dc=ric]
(Wed Apr 15 10:22:34 2015) [sssd[be[mr.ric]]]
[sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with
[(&(uid=polkitd)(objectclass=posixAcc
ount)(&(uidNumber=*)(!(uidNumber=0))))][cn=accounts,dc=mr,dc=ric].
(Wed Apr 15 10:22:34 2015) [sssd[be[mr.ric]]]
[sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no
errmsg set
(Wed Apr 15 10:22:34 2015) [sssd[be[mr.ric]]] [sysdb_search_by_name]
(0x0400): No such entry
(Wed Apr 15 10:22:34 2015) [sssd[be[mr.ric]]] [sysdb_delete_user]
(0x0400): Error: 2 (No such file or directory)
(Wed Apr 15 10:22:34 2015) [sssd[be[mr.ric]]] [sysdb_search_by_name]
(0x0400): No such entry
(Wed Apr 15 10:22:34 2015) [sssd[be[mr.ric]]]
[ipa_id_get_account_info_orig_done] (0x0080): Object not found, ending
request
(Wed Apr 15 10:22:34 2015) [sssd[be[mr.ric]]] [acctinfo_callback]
(0x0100): Request processed. Returned 3,0,Account info lookup failed
(Wed Apr 15 10:22:34 2015) [sssd[be[mr.ric]]] [child_sig_handler]
(0x0100): child [19779] finished successfully.
(Wed Apr 15 10:22:34 2015) [sssd[be[mr.ric]]] [read_pipe_handler]
(0x0400): EOF received, client finished
(Wed Apr 15 10:22:34 2015) [sssd[be[mr.ric]]] [be_pam_handler_callback]
(0x0100): Backend returned: (0, 0, Success) [Success]
(Wed Apr 15 10:22:34 2015) [sssd[be[mr.ric]]] [be_pam_handler_callback]
(0x0100): Sending result [0][mr.ric]
(Wed Apr 15 10:22:34 2015) [sssd[be[mr.ric]]] [be_pam_handler_callback]
(0x0100): Sent result [0][mr.ric]
(Wed Apr 15 10:22:34 2015) [sssd[be[mr.ric]]] [be_req_set_domain]
(0x0400): Changing request domain from [mr.ric] to [mr.ric]
(Wed Apr 15 10:22:34 2015) [sssd[be[mr.ric]]] [be_pam_handler] (0x0100):
Got request with the following data
(Wed Apr 15 10:22:34 2015) [sssd[be[mr.ric]]] [pam_print_data] (0x0100):
command: PAM_SETCRED
(Wed Apr 15 10:22:34 2015) [sssd[be[mr.ric]]] [pam_print_data] (0x0100):
domain: mr.ric
(Wed Apr 15 10:22:34 2015) [sssd[be[mr.ric]]] [pam_print_data] (0x0100):
user: qchang
(Wed Apr 15 10:22:34 2015) [sssd[be[mr.ric]]] [pam_print_data] (0x0100):
service: sshd
(Wed Apr 15 10:22:34 2015) [sssd[be[mr.ric]]] [pam_print_data] (0x0100):
tty: ssh
(Wed Apr 15 10:22:34 2015) [sssd[be[mr.ric]]] [pam_print_data] (0x0100):
ruser:
(Wed Apr 15 10:22:34 2015) [sssd[be[mr.ric]]] [pam_print_data] (0x0100):
rhost: 172.25.12.157
(Wed Apr 15 10:22:34 2015) [sssd[be[mr.ric]]] [pam_print_data] (0x0100):
authtok type: 0
(Wed Apr 15 10:22:34 2015) [sssd[be[mr.ric]]] [pam_print_data] (0x0100):
newauthtok type: 0
(Wed Apr 15 10:22:34 2015) [sssd[be[mr.ric]]] [pam_print_data] (0x0100):
priv: 1
(Wed Apr 15 10:22:34 2015) [sssd[be[mr.ric]]] [pam_print_data] (0x0100):
cli_pid: 19776
(Wed Apr 15 10:22:34 2015) [sssd[be[mr.ric]]] [pam_print_data] (0x0100):
logon name: not set
(Wed Apr 15 10:22:34 2015) [sssd[be[mr.ric]]] [be_pam_handler] (0x0100):
Sending result [0][mr.ric]
(Wed Apr 15 10:22:34 2015) [sssd[be[mr.ric]]] [be_req_set_domain]
(0x0400): Changing request domain from [mr.ric] to [mr.ric]
(Wed Apr 15 10:22:34 2015) [sssd[be[mr.ric]]] [be_pam_handler] (0x0100):
Got request with the following data
(Wed Apr 15 10:22:34 2015) [sssd[be[mr.ric]]] [pam_print_data] (0x0100):
command: PAM_OPEN_SESSION
(Wed Apr 15 10:22:34 2015) [sssd[be[mr.ric]]] [pam_print_data] (0x0100):
domain: mr.ric
(Wed Apr 15 10:22:34 2015) [sssd[be[mr.ric]]] [pam_print_data] (0x0100):
user: qchang
(Wed Apr 15 10:22:34 2015) [sssd[be[mr.ric]]] [pam_print_data] (0x0100):
service: sshd
(Wed Apr 15 10:22:34 2015) [sssd[be[mr.ric]]] [pam_print_data] (0x0100):
tty: ssh
(Wed Apr 15 10:22:34 2015) [sssd[be[mr.ric]]] [pam_print_data] (0x0100):
ruser:
(Wed Apr 15 10:22:34 2015) [sssd[be[mr.ric]]] [pam_print_data] (0x0100):
rhost: 172.25.12.157
(Wed Apr 15 10:22:34 2015) [sssd[be[mr.ric]]] [pam_print_data] (0x0100):
authtok type: 0
(Wed Apr 15 10:22:34 2015) [sssd[be[mr.ric]]] [pam_print_data] (0x0100):
newauthtok type: 0
(Wed Apr 15 10:22:34 2015) [sssd[be[mr.ric]]] [pam_print_data] (0x0100):
priv: 1
(Wed Apr 15 10:22:34 2015) [sssd[be[mr.ric]]] [pam_print_data] (0x0100):
cli_pid: 19776
(Wed Apr 15 10:22:34 2015) [sssd[be[mr.ric]]] [pam_print_data] (0x0100):
logon name: not set
(Wed Apr 15 10:22:34 2015) [sssd[be[mr.ric]]] [be_pam_handler] (0x0100):
Sending result [0][mr.ric]
(Wed Apr 15 10:22:34 2015) [sssd[be[mr.ric]]] [be_req_set_domain]
(0x0400): Changing request domain from [mr.ric] to [mr.ric]
(Wed Apr 15 10:22:34 2015) [sssd[be[mr.ric]]] [be_pam_handler] (0x0100):
Got request with the following data
(Wed Apr 15 10:22:34 2015) [sssd[be[mr.ric]]] [pam_print_data] (0x0100):
command: PAM_SETCRED
(Wed Apr 15 10:22:34 2015) [sssd[be[mr.ric]]] [pam_print_data] (0x0100):
domain: mr.ric
(Wed Apr 15 10:22:34 2015) [sssd[be[mr.ric]]] [pam_print_data] (0x0100):
user: qchang
(Wed Apr 15 10:22:34 2015) [sssd[be[mr.ric]]] [pam_print_data] (0x0100):
service: sshd
(Wed Apr 15 10:22:34 2015) [sssd[be[mr.ric]]] [pam_print_data] (0x0100):
tty: ssh
(Wed Apr 15 10:22:34 2015) [sssd[be[mr.ric]]] [pam_print_data] (0x0100):
ruser:
(Wed Apr 15 10:22:34 2015) [sssd[be[mr.ric]]] [pam_print_data] (0x0100):
rhost: 172.25.12.157
(Wed Apr 15 10:22:34 2015) [sssd[be[mr.ric]]] [pam_print_data] (0x0100):
authtok type: 0
(Wed Apr 15 10:22:34 2015) [sssd[be[mr.ric]]] [pam_print_data] (0x0100):
newauthtok type: 0
(Wed Apr 15 10:22:34 2015) [sssd[be[mr.ric]]] [pam_print_data] (0x0100):
priv: 0
(Wed Apr 15 10:22:34 2015) [sssd[be[mr.ric]]] [pam_print_data] (0x0100):
cli_pid: 19785
(Wed Apr 15 10:22:34 2015) [sssd[be[mr.ric]]] [pam_print_data] (0x0100):
logon name: not set
(Wed Apr 15 10:22:34 2015) [sssd[be[mr.ric]]] [be_pam_handler] (0x0100):
Sending result [0][mr.ric]
(Wed Apr 15 10:25:01 2015) [sssd[be[mr.ric]]] [be_get_account_info]
(0x0200): Got request for [0x1001][1][name=pcp]
-----
On 04/15/2015 10:23 AM, Lukas Slebodnik wrote:
On (15/04/15 10:03), tmpchq wrote:
> I did set log level to 10 for domain section too. It did not log anything
> around the gap
> shown in sssd_nss and sssd_pam.
>
> I am going to do a test again and post the logs.
>
If there is a gap then you can take a look to logs in journald.
There can be problem with other services.
LS
_______________________________________________
sssd-users mailing list
sssd-users(a)lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/sssd-users