On Thu, Mar 09, 2017 at 10:05:33AM +0100, Jakub Hrozek wrote:
On Mon, Mar 06, 2017 at 01:30:25PM -0600, Brenden Morgenthaler
wrote:
> It does appear to be GPO access, from the gpo_child.log (getting a tarball up
somewhere to download also).
>
> (Mon Mar 6 13:18:13 2017) [[sssd[gpo_child[24538]]]] [main] (0x0400): gpo_child
started.
> (Mon Mar 6 13:18:13 2017) [[sssd[gpo_child[24538]]]] [main] (0x0400): context
initialized
> (Mon Mar 6 13:18:13 2017) [[sssd[gpo_child[24538]]]] [unpack_buffer] (0x0400):
cached_gpt_version: 327788
> (Mon Mar 6 13:18:13 2017) [[sssd[gpo_child[24538]]]] [main] (0x0400): performing
smb operations
> (Mon Mar 6 13:18:13 2017) [[sssd[gpo_child[24538]]]] [copy_smb_file_to_gpo_cache]
(0x0400): smb_uri:
smb://dc2.internal.example.domain/sysvol/internal.example.domain/Policies/{31B2F340-016D-11D2-945F-00C04FB984F9}/GPT.INI
> (Mon Mar 6 13:18:13 2017) [[sssd[gpo_child[24538]]]] [copy_smb_file_to_gpo_cache]
(0x0020): smbc_getFunctionOpen failed [2][No such file or directory]
> (Mon Mar 6 13:18:13 2017) [[sssd[gpo_child[24538]]]] [perform_smb_operations]
(0x0020): copy_smb_file_to_gpo_cache failed [2][No such file or directory]
> (Mon Mar 6 13:18:13 2017) [[sssd[gpo_child[24538]]]] [main] (0x0020):
perform_smb_operations failed.[2][No such file or directory].
> (Mon Mar 6 13:18:13 2017) [[sssd[gpo_child[24538]]]] [main] (0x0020): gpo_child
failed!
I'm sorry I didn't notice your e-mail was stuck in moderation.
You can temporarily disable GPO processing if you don't use it with:
ad_gpo_access_control = permissive
But honestly I can't tell if this is a bug in SSSD we should handle more
gracafully.
In general libsmbclient should be capable to handle the newer version of
the SMB protocol correctly, but maybe we have to set some other option
or use libsmbclient differently?
bye,
Sumit
> _______________________________________________
> sssd-users mailing list -- sssd-users(a)lists.fedorahosted.org
> To unsubscribe send an email to sssd-users-leave(a)lists.fedorahosted.org