On Mon, Mar 06, 2017 at 01:30:25PM -0600, Brenden Morgenthaler wrote:
It does appear to be GPO access, from the gpo_child.log (getting a
tarball up somewhere to download also).
(Mon Mar 6 13:18:13 2017) [[sssd[gpo_child[24538]]]] [main] (0x0400): gpo_child
started.
(Mon Mar 6 13:18:13 2017) [[sssd[gpo_child[24538]]]] [main] (0x0400): context
initialized
(Mon Mar 6 13:18:13 2017) [[sssd[gpo_child[24538]]]] [unpack_buffer] (0x0400):
cached_gpt_version: 327788
(Mon Mar 6 13:18:13 2017) [[sssd[gpo_child[24538]]]] [main] (0x0400): performing smb
operations
(Mon Mar 6 13:18:13 2017) [[sssd[gpo_child[24538]]]] [copy_smb_file_to_gpo_cache]
(0x0400): smb_uri:
smb://dc2.internal.example.domain/sysvol/internal.example.domain/Policies/{31B2F340-016D-11D2-945F-00C04FB984F9}/GPT.INI
(Mon Mar 6 13:18:13 2017) [[sssd[gpo_child[24538]]]] [copy_smb_file_to_gpo_cache]
(0x0020): smbc_getFunctionOpen failed [2][No such file or directory]
(Mon Mar 6 13:18:13 2017) [[sssd[gpo_child[24538]]]] [perform_smb_operations] (0x0020):
copy_smb_file_to_gpo_cache failed [2][No such file or directory]
(Mon Mar 6 13:18:13 2017) [[sssd[gpo_child[24538]]]] [main] (0x0020):
perform_smb_operations failed.[2][No such file or directory].
(Mon Mar 6 13:18:13 2017) [[sssd[gpo_child[24538]]]] [main] (0x0020): gpo_child failed!
I'm sorry I didn't notice your e-mail was stuck in moderation.
You can temporarily disable GPO processing if you don't use it with:
ad_gpo_access_control = permissive
But honestly I can't tell if this is a bug in SSSD we should handle more
gracafully.