[SSSD-users] Re: authentication failure when one domain controller is down

On Mon, Mar 20, 2023 at 6:29 PM Craig Martin craig.martin@frgsystems.com wrote:

Thanks for your response.

grep -i offline /var/log/sssd/sssd_AD.FINRCVGRP.COM.log finds nothing.

Is this with `debug_level = 9` in the domain section of sssd.conf?

Anyway, you need to set `debug_level = 9`, restart sssd truncating logs, reproduce an issue and then follow corresponding BE_REQ_* in the domain log to see why it fails. If this machine isn't too busy (i.e. no concurrent requests) it should be fairly straightforward.