11:55 a.m.
hey all,
Im new to sssd and ldap so be gentle =)
I've followed some guides on how to set up sssd ldap client
authentication on Centos 6.3 but mine doesnt seem to be working here
is my sssd.conf
-----
[sssd]
config_file_version = 2
services = nss, pam
domains = default
[nss]
filter_users = root,ldap,named,avahi,haldaemon,dbus,radiusd,news,nscd
[pam]
[domain/default]
auth_provider = ldap
debug_level = 9
enumerate = True
cache_credentials = True
chpass_provider = ldap
entry_cache_timeout = 600
krb5_realm = EXAMPLE.COM
krb5_server = kerberos.example.com
ldap_chpass_uri = ldaps://xx.xx.xx.xx:<PORT>/
ldap_force_upper_case_realm = True
id_provider = ldap
ldap_group_member = uniquemember
ldap_group_object_class = group
ldap_id_use_start_tls = False
ldap_pwd_policy = none
ldap_search_base =
ou=organizationunit3,ou=organizationunit2,ou=organizationunit1,o=example
ldap_schema = rfc2307bis
ldap_tls_cacertdir = /etc/openldap/cacerts
ldap_tls_reqcert = never
ldap_uri = ldaps://xx.xx.xx.xx:<PORT>/
ldap_user_gecos = displayName
ldap_user_home_directory = unixHomeDirectory
ldap_user_name = cn
ldap_user_object_class = user
------
ldapsearcg -z 'cn=username' comes back with all the information about the user
but id username takes a really long time and then returns no such user.
here is a piece of the log:
--------------------------------------------------------------------------
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [server_setup]
(0x0400): CONFDB: /var/lib/sss/db/config.ldb
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [recreate_ares_channel]
(0x0100): Initializing new c-ares channel
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]]
[resolv_get_family_order] (0x1000): Lookup order: ipv4_first
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [fo_context_init]
(0x0400): Created new fail over context, retry timeout is 30
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]]
[confdb_get_domain_internal] (0x1000): pwd_expiration_warning is -1
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]]
[sysdb_domain_init_internal] (0x0200): DB File for default:
/var/lib/sss/db/cache_default.ldb
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [ldb] (0x4000): Added
timed event "ltdb_callback": 0x14778c0
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [ldb] (0x4000): Added
timed event "ltdb_timeout": 0x148d4d0
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [ldb] (0x4000):
Destroying timer event 0x148d4d0 "ltdb_timeout"
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [ldb] (0x4000): Ending
timer event 0x14778c0 "ltdb_callback"
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [ldb] (0x0400): asq:
Unable to register control with rootdse!
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [ldb] (0x4000): Added
timed event "ltdb_callback": 0x148f840
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [ldb] (0x4000): Added
timed event "ltdb_timeout": 0x148d4d0
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [ldb] (0x4000):
Destroying timer event 0x148d4d0 "ltdb_timeout"
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [ldb] (0x4000): Ending
timer event 0x148f840 "ltdb_callback"
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [ldb] (0x4000): Added
timed event "ltdb_callback": 0x14778c0
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [ldb] (0x4000): Added
timed event "ltdb_timeout": 0x1490390
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [ldb] (0x4000):
Destroying timer event 0x1490390 "ltdb_timeout"
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [ldb] (0x4000): Ending
timer event 0x14778c0 "ltdb_callback"
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sbus_init_connection]
(0x0200): Adding connection 14905E0
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sbus_add_watch]
(0x2000): 0x1490a30/0x148f9e0 (15), -/W (enabled)
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sbus_toggle_watch]
(0x4000): 0x1490a30/0x148d2f0 (15), R/- (disabled)
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]]
[monitor_common_send_id] (0x0100): Sending ID: (%BE_default,1)
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sbus_add_timeout]
(0x2000): 0x1490db0
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sbus_toggle_watch]
(0x4000): 0x1490a30/0x148d2f0 (15), R/- (enabled)
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sbus_toggle_watch]
(0x4000): 0x1490a30/0x148f9e0 (15), -/W (disabled)
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sss_names_init]
(0x0100): Using re [(?P<name>[^@]+)@?(?P<domain>[^@]*$)].
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [create_socket_symlink]
(0x1000): Symlinking the dbus path
/var/lib/sss/pipes/private/sbus-dp_default.639 to a link
/var/lib/sss/pipes/private/sbus-dp_default
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sbus_new_server]
(0x0400): D-BUS Server listening on
unix:path=/var/lib/sss/pipes/private/sbus-dp_default.639,guid=604ced1a38c1615f3905892500000097
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sbus_add_watch]
(0x2000): 0x148cec0/0x148da70 (16), R/- (enabled)
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [load_backend_module]
(0x1000): Loading backend [ldap] with path
[/usr/lib64/sssd/libsss_ldap.so].
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options]
(0x0400): Option ldap_uri has value ldaps://xx.xx.xx.xx:<port>/
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options]
(0x0400): Option ldap_backup_uri has no value
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options]
(0x0400): Option ldap_search_base has value
ou=organizationunit3,ou=organizationunit2,ou=organizationunit1,o=example
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options]
(0x0400): Option ldap_default_bind_dn has no value
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options]
(0x0400): Option ldap_default_authtok_type has value password
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options]
(0x0400): Option ldap_default_authtok has no binary value.
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options]
(0x0400): Option ldap_search_timeout has value 6
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options]
(0x0400): Option ldap_network_timeout has value 6
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options]
(0x0400): Option ldap_opt_timeout has value 6
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options]
(0x0400): Option ldap_tls_reqcert has value never
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options]
(0x0400): Option ldap_user_search_base has no value
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options]
(0x0400): Option ldap_user_search_scope has value sub
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options]
(0x0400): Option ldap_user_search_filter has no value
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options]
(0x0400): Option ldap_group_search_base has no value
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options]
(0x0400): Option ldap_group_search_scope has value sub
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options]
(0x0400): Option ldap_group_search_filter has no value
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options]
(0x0400): Option ldap_service_search_base has no value
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options]
(0x0400): Option ldap_sudo_search_base has no value
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options]
(0x0400): Option ldap_sudo_full_refresh_interval has value 21600
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options]
(0x0400): Option ldap_sudo_smart_refresh_interval has value 900
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options]
(0x0400): Option ldap_sudo_use_host_filter is TRUE
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options]
(0x0400): Option ldap_sudo_hostnames has no value
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options]
(0x0400): Option ldap_sudo_ip has no value
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options]
(0x0400): Option ldap_sudo_include_netgroups is TRUE
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options]
(0x0400): Option ldap_sudo_include_regexp is TRUE
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options]
(0x0400): Option ldap_autofs_search_base has no value
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options]
(0x0400): Option ldap_schema has value rfc2307bis
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options]
(0x0400): Option ldap_offline_timeout has value 60
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options]
(0x0400): Option ldap_force_upper_case_realm is FALSE
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options]
(0x0400): Option ldap_enumeration_refresh_timeout has value 300
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options]
(0x0400): Option ldap_purge_cache_timeout has value 10800
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options]
(0x0400): Option ldap_tls_cacert has no value
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options]
(0x0400): Option ldap_tls_cacertdir has value /etc/openldap/cacerts
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options]
(0x0400): Option ldap_tls_cert has no value
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options]
(0x0400): Option ldap_tls_key has no value
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options]
(0x0400): Option ldap_tls_cipher_suite has no value
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options]
(0x0400): Option ldap_id_use_start_tls is FALSE
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options]
(0x0400): Option ldap_id_mapping is FALSE
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options]
(0x0400): Option ldap_sasl_mech has no value
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options]
(0x0400): Option ldap_sasl_authid has no value
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options]
(0x0400): Option ldap_sasl_realm has no value
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options]
(0x0400): Option ldap_sasl_minssf has value -1
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options]
(0x0400): Option ldap_krb5_keytab has no value
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options]
(0x0400): Option ldap_krb5_init_creds is TRUE
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options]
(0x0400): Option krb5_server has no value
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options]
(0x0400): Option krb5_backup_server has no value
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options]
(0x0400): Option krb5_realm has no value
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options]
(0x0400): Option krb5_canonicalize is TRUE
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options]
(0x0400): Option ldap_pwd_policy has value none
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options]
(0x0400): Option ldap_referrals is TRUE
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options]
(0x0400): Option account_cache_expiration has value 0
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options]
(0x0400): Option ldap_dns_service_name has value ldap
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options]
(0x0400): Option ldap_krb5_ticket_lifetime has value 86400
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options]
(0x0400): Option ldap_access_filter has no value
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options]
(0x0400): Option ldap_netgroup_search_base has no value
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options]
(0x0400): Option ldap_group_nesting_level has value 2
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options]
(0x0400): Option ldap_deref has no value
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options]
(0x0400): Option ldap_account_expire_policy has no value
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options]
(0x0400): Option ldap_access_order has value filter
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options]
(0x0400): Option ldap_chpass_uri has value ldaps://xx.xx.xx.xx:<port>/
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options]
(0x0400): Option ldap_chpass_backup_uri has no value
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options]
(0x0400): Option ldap_chpass_dns_service_name has no value
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options]
(0x0400): Option ldap_chpass_update_last_change is FALSE
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options]
(0x0400): Option ldap_enumeration_search_timeout has value 60
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options]
(0x0400): Option ldap_auth_disable_tls_never_use_in_production is
FALSE
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options]
(0x0400): Option ldap_page_size has value 1000
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options]
(0x0400): Option ldap_deref_threshold has value 10
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options]
(0x0400): Option ldap_sasl_canonicalize is FALSE
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options]
(0x0400): Option ldap_connection_expire_timeout has value 900
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options]
(0x0400): Option ldap_disable_paging is FALSE
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options]
(0x0400): Option ldap_idmap_range_min has value 200000
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options]
(0x0400): Option ldap_idmap_range_max has value 2000200000
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options]
(0x0400): Option ldap_idmap_range_size has value 200000
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options]
(0x0400): Option ldap_idmap_autorid_compat is FALSE
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options]
(0x0400): Option ldap_idmap_default_domain has no value
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options]
(0x0400): Option ldap_idmap_default_domain_sid has no value
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options]
(0x0400): Option ldap_groups_use_matching_rule_in_chain is FALSE
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [dp_get_options]
(0x0400): Option ldap_initgroups_use_matching_rule_in_chain is FALSE
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [ldap_get_options]
(0x0400): Option ldap_user_search_base set to
ou=organizationunit3,ou=organizationunit2,ou=organizationunit1,o=example
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [ldap_get_options]
(0x0400): Option ldap_group_search_base set to
ou=organizationunit3,ou=organizationunit2,ou=organizationunit1,o=example
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [ldap_get_options]
(0x0400): Option ldap_netgroup_search_base set to
ou=organizationunit3,ou=organizationunit2,ou=organizationunit1,o=example
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [ldap_get_options]
(0x0400): Option ldap_service_search_base set to
ou=organizationunit3,ou=organizationunit2,ou=organizationunit1,o=example
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]]
[common_parse_search_base] (0x0100): Search base added:
[DEFAULT][ou=organizationunit3,ou=organizationunit2,ou=organizationunit1,o=example][SUBTREE][]
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]]
[common_parse_search_base] (0x0100): Search base added:
[USER][ou=organizationunit3,ou=organizationunit2,ou=organizationunit1,o=example][SUBTREE][]
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]]
[common_parse_search_base] (0x0100): Search base added:
[GROUP][ou=organizationunit3,ou=organizationunit2,ou=organizationunit1,o=example][SUBTREE][]
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]]
[common_parse_search_base] (0x0100): Search base added:
[NETGROUP][ou=organizationunit3,ou=organizationunit2,ou=organizationunit1,o=example][SUBTREE][]
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]]
[common_parse_search_base] (0x0100): Search base added:
[SERVICE][ou=organizationunit3,ou=organizationunit2,ou=organizationunit1,o=example][SUBTREE][]
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map]
(0x0400): Option ldap_entry_usn has no value
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map]
(0x0400): Option ldap_rootdse_last_usn has no value
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map]
(0x0400): Option ldap_user_object_class has value user
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map]
(0x0400): Option ldap_user_name has value cn
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map]
(0x0400): Option ldap_user_pwd has value userPassword
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map]
(0x0400): Option ldap_user_uid_number has value uidNumber
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map]
(0x0400): Option ldap_user_gid_number has value gidNumber
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map]
(0x0400): Option ldap_user_gecos has value displayName
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map]
(0x0400): Option ldap_user_home_directory has value unixHomeDirectory
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map]
(0x0400): Option ldap_user_shell has value loginShell
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map]
(0x0400): Option ldap_user_principal has value krbPrincipalName
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map]
(0x0400): Option ldap_user_fullname has value cn
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map]
(0x0400): Option ldap_user_member_of has value memberOf
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map]
(0x0400): Option ldap_user_uuid has value nsUniqueId
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map]
(0x0400): Option ldap_user_objectsid has no value
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map]
(0x0400): Option ldap_user_primary_group has no value
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map]
(0x0400): Option ldap_user_modify_timestamp has value modifyTimestamp
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map]
(0x0400): Option ldap_user_entry_usn has no value
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map]
(0x0400): Option ldap_user_shadow_last_change has value
shadowLastChange
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map]
(0x0400): Option ldap_user_shadow_min has value shadowMin
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map]
(0x0400): Option ldap_user_shadow_max has value shadowMax
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map]
(0x0400): Option ldap_user_shadow_warning has value shadowWarning
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map]
(0x0400): Option ldap_user_shadow_inactive has value shadowInactive
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map]
(0x0400): Option ldap_user_shadow_expire has value shadowExpire
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map]
(0x0400): Option ldap_user_shadow_flag has value shadowFlag
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map]
(0x0400): Option ldap_user_krb_last_pwd_change has value
krbLastPwdChange
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map]
(0x0400): Option ldap_user_krb_password_expiration has value
krbPasswordExpiration
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map]
(0x0400): Option ldap_pwd_attribute has value pwdAttribute
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map]
(0x0400): Option ldap_user_authorized_service has value
authorizedService
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map]
(0x0400): Option ldap_user_ad_account_expires has value accountExpires
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map]
(0x0400): Option ldap_user_ad_user_account_control has value
userAccountControl
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map]
(0x0400): Option ldap_ns_account_lock has value nsAccountLock
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map]
(0x0400): Option ldap_user_authorized_host has value host
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map]
(0x0400): Option ldap_user_nds_login_disabled has value loginDisabled
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map]
(0x0400): Option ldap_user_nds_login_expiration_time has value
loginExpirationTime
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map]
(0x0400): Option ldap_user_nds_login_allowed_time_map has value
loginAllowedTimeMap
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map]
(0x0400): Option ldap_user_ssh_public_key has no value
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map]
(0x0400): Option ldap_group_object_class has value group
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map]
(0x0400): Option ldap_group_name has value cn
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map]
(0x0400): Option ldap_group_pwd has value userPassword
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map]
(0x0400): Option ldap_group_gid_number has value gidNumber
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map]
(0x0400): Option ldap_group_member has value uniquemember
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map]
(0x0400): Option ldap_group_uuid has value nsUniqueId
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map]
(0x0400): Option ldap_group_objectsid has no value
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map]
(0x0400): Option ldap_group_modify_timestamp has value modifyTimestamp
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map]
(0x0400): Option ldap_group_entry_usn has no value
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map]
(0x0400): Option ldap_netgroup_object_class has value nisNetgroup
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map]
(0x0400): Option ldap_netgroup_name has value cn
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map]
(0x0400): Option ldap_netgroup_member has value memberNisNetgroup
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map]
(0x0400): Option ldap_netgroup_triple has value nisNetgroupTriple
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map]
(0x0400): Option ldap_netgroup_uuid has value nsUniqueId
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map]
(0x0400): Option ldap_netgroup_modify_timestamp has value
modifyTimestamp
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map]
(0x0400): Option ldap_service_object_class has value ipService
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map]
(0x0400): Option ldap_service_name has value cn
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map]
(0x0400): Option ldap_service_port has value ipServicePort
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map]
(0x0400): Option ldap_service_proto has value ipServiceProtocol
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map]
(0x0400): Option ldap_service_entry_usn has no value
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [krb5_try_kdcip]
(0x0100): No KDC found in configuration, trying legacy option
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sssm_ldap_id_init]
(0x1000): Service name for discovery set to ldap
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [fo_new_service]
(0x0400): Creating new service 'LDAP'
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_urls_init]
(0x0400): Added URI ldaps://xx.xx.xx.xx:<port>/
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [fo_add_server]
(0x0080): Adding new server 'xx.xx.xx.xx', to service 'LDAP'
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [ldb] (0x4000): Added
timed event "ltdb_callback": 0x149a4b0
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [ldb] (0x4000): Added
timed event "ltdb_timeout": 0x149a5a0
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [ldb] (0x4000):
Destroying timer event 0x149a5a0 "ltdb_timeout"
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [ldb] (0x4000): Ending
timer event 0x149a4b0 "ltdb_callback"
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]]
[ldap_id_enumerate_set_timer] (0x0400): Scheduling next enumeration at
1366735849.298624
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [be_process_init]
(0x2000): ID backend target successfully loaded from provider [ldap].
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [load_backend_module]
(0x1000): Backend [ldap] already loaded.
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sssm_ldap_id_init]
(0x2000): Re-using sdap_id_ctx for this provider
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [be_process_init]
(0x2000): AUTH backend target successfully loaded from provider
[ldap].
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [load_backend_module]
(0x0200): no module name found in confdb, using [permit].
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [be_process_init]
(0x2000): ACCESS backend target successfully loaded from provider
[permit].
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [load_backend_module]
(0x1000): Backend [ldap] already loaded.
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sssm_ldap_id_init]
(0x2000): Re-using sdap_id_ctx for this provider
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [fo_new_service]
(0x0400): Creating new service 'LDAP_CHPASS'
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_urls_init]
(0x0400): Added URI ldaps://xx.xx.xx.xx:<port>/
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [fo_add_server]
(0x0080): Adding new server 'xx.xx.xx.xx', to service 'LDAP_CHPASS'
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [be_process_init]
(0x2000): CHPASS backend target successfully loaded from provider
[ldap].
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [be_process_init_sudo]
(0x0400): SUDO is not listed in services, disabling SUDO module.
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [be_process_init]
(0x0080): No SUDO module provided for [default] !!
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [load_backend_module]
(0x0200): no module name found in confdb, using [ldap].
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [load_backend_module]
(0x1000): Backend [ldap] already loaded.
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sssm_ldap_id_init]
(0x2000): Re-using sdap_id_ctx for this provider
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_autofs_init]
(0x2000): Initializing autofs LDAP back end
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]]
[ldap_get_autofs_options] (0x0200): Option ldap_autofs_search_base set
to ou=organizationunit3,ou=organizationunit2,ou=organizationunit1,o=example
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]]
[common_parse_search_base] (0x0100): Search base added:
[AUTOFS][ou=organizationunit3,ou=organizationunit2,ou=organizationunit1,o=example][SUBTREE][]
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map]
(0x0400): Option ldap_autofs_map_object_class has value automountMap
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map]
(0x0400): Option ldap_autofs_map_name has value automountMapName
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map]
(0x0400): Option ldap_autofs_entry_object_class has value automount
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map]
(0x0400): Option ldap_autofs_entry_key has value automountKey
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sdap_get_map]
(0x0400): Option ldap_autofs_entry_value has value
automountInformation
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [be_process_init]
(0x2000): autofs backend target successfully loaded from provider
[ldap].
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [load_backend_module]
(0x0200): no module name found in confdb, using [ldap].
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [load_backend_module]
(0x1000): Backend [ldap] already loaded.
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [be_process_init]
(0x0020): No selinux module provided for [default] !!
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [load_backend_module]
(0x0200): no module name found in confdb, using [ldap].
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [load_backend_module]
(0x1000): Backend [ldap] already loaded.
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [be_process_init]
(0x0020): No host info module provided for [default] !!
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [load_backend_module]
(0x0200): no module name found in confdb, using [ldap].
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [load_backend_module]
(0x1000): Backend [ldap] already loaded.
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [be_process_init]
(0x0020): Subdomains are not supported for [default] !!
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [main] (0x0400):
Backend provider (default) started!
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sbus_dispatch]
(0x4000): dbus conn: 14905E0
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sbus_dispatch]
(0x4000): dbus conn: 14905E0
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sbus_toggle_watch]
(0x4000): 0x1490a30/0x148d2f0 (15), R/- (disabled)
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sbus_toggle_watch]
(0x4000): 0x1490a30/0x148f9e0 (15), -/W (enabled)
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sbus_toggle_watch]
(0x4000): 0x1490a30/0x148d2f0 (15), R/- (enabled)
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sbus_toggle_watch]
(0x4000): 0x1490a30/0x148f9e0 (15), -/W (disabled)
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sbus_remove_timeout]
(0x2000): 0x1490db0
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sbus_dispatch]
(0x4000): dbus conn: 14905E0
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sbus_dispatch]
(0x4000): Dispatching.
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [id_callback] (0x0100):
Got id ack and version (1) from Monitor
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]]
[sbus_server_init_new_connection] (0x0200): Entering.
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]]
[sbus_server_init_new_connection] (0x0200): Adding connection
0x149b3f0.
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sbus_init_connection]
(0x0200): Adding connection 149B3F0
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sbus_add_watch]
(0x2000): 0x149a760/0x149bb40 (18), -/W (disabled)
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sbus_toggle_watch]
(0x4000): 0x149a760/0x1499570 (18), R/- (enabled)
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]]
[sbus_server_init_new_connection] (0x0200): Got a connection
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [be_client_init]
(0x0100): Set-up Backend ID timeout [0x149be50]
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sbus_dispatch]
(0x4000): dbus conn: 149B3F0
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sbus_toggle_watch]
(0x4000): 0x149a760/0x1499570 (18), R/- (disabled)
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sbus_toggle_watch]
(0x4000): 0x149a760/0x149bb40 (18), -/W (enabled)
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sbus_toggle_watch]
(0x4000): 0x149a760/0x1499570 (18), R/- (enabled)
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sbus_toggle_watch]
(0x4000): 0x149a760/0x149bb40 (18), -/W (disabled)
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sbus_dispatch]
(0x4000): dbus conn: 149B3F0
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sbus_dispatch]
(0x4000): Dispatching.
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sbus_message_handler]
(0x4000): Received SBUS method [RegisterService]
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [client_registration]
(0x0100): Cancel DP ID timeout [0x149be50]
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [client_registration]
(0x0100): Added Frontend client [PAM]
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]]
[sbus_server_init_new_connection] (0x0200): Entering.
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]]
[sbus_server_init_new_connection] (0x0200): Adding connection
0x14a0b80.
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sbus_init_connection]
(0x0200): Adding connection 14A0B80
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sbus_add_watch]
(0x2000): 0x14a11c0/0x149c0c0 (19), -/W (disabled)
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sbus_toggle_watch]
(0x4000): 0x14a11c0/0x149c110 (19), R/- (enabled)
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]]
[sbus_server_init_new_connection] (0x0200): Got a connection
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [be_client_init]
(0x0100): Set-up Backend ID timeout [0x14a1430]
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sbus_dispatch]
(0x4000): dbus conn: 14A0B80
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sbus_toggle_watch]
(0x4000): 0x14a11c0/0x149c110 (19), R/- (disabled)
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sbus_toggle_watch]
(0x4000): 0x14a11c0/0x149c0c0 (19), -/W (enabled)
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sbus_toggle_watch]
(0x4000): 0x14a11c0/0x149c110 (19), R/- (enabled)
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sbus_toggle_watch]
(0x4000): 0x14a11c0/0x149c0c0 (19), -/W (disabled)
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sbus_dispatch]
(0x4000): dbus conn: 14A0B80
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sbus_dispatch]
(0x4000): Dispatching.
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [sbus_message_handler]
(0x4000): Received SBUS method [RegisterService]
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [client_registration]
(0x0100): Cancel DP ID timeout [0x14a1430]
(Tue Apr 23 12:50:39 2013) [sssd[be[default]]] [client_registration]
(0x0100): Added Frontend client [NSS]
(Tue Apr 23 12:50:40 2013) [sssd[be[default]]] [sbus_dispatch]
(0x4000): dbus conn: 14A0B80
(Tue Apr 23 12:50:40 2013) [sssd[be[default]]] [sbus_dispatch]
(0x4000): Dispatching.
(Tue Apr 23 12:50:40 2013) [sssd[be[default]]] [sbus_message_handler]
(0x4000): Received SBUS method [getDomains]
(Tue Apr 23 12:50:40 2013) [sssd[be[default]]] [be_get_subdomains]
(0x2000): Undefined backend target.
(Tue Apr 23 12:50:40 2013) [sssd[be[default]]] [sbus_dispatch]
(0x4000): dbus conn: 14A0B80
(Tue Apr 23 12:50:40 2013) [sssd[be[default]]] [sbus_dispatch]
(0x4000): Dispatching.
(Tue Apr 23 12:50:40 2013) [sssd[be[default]]] [sbus_message_handler]
(0x4000): Received SBUS method [getAccountInfo]
(Tue Apr 23 12:50:40 2013) [sssd[be[default]]] [be_get_account_info]
(0x0100): Got request for [4097][1][name=testuser]
(Tue Apr 23 12:50:40 2013) [sssd[be[default]]]
[sdap_id_op_connect_step] (0x4000): beginning to connect
(Tue Apr 23 12:50:40 2013) [sssd[be[default]]]
[fo_resolve_service_send] (0x0100): Trying to resolve service 'LDAP'
(Tue Apr 23 12:50:40 2013) [sssd[be[default]]] [get_server_status]
(0x1000): Status of server 'xx.xx.xx.xx' is 'name not resolved'
(Tue Apr 23 12:50:40 2013) [sssd[be[default]]] [get_port_status]
(0x1000): Port status of port <port> for server 'xx.xx.xx.xx' is
'neutral'
(Tue Apr 23 12:50:40 2013) [sssd[be[default]]]
[fo_resolve_service_activate_timeout] (0x2000): Resolve timeout set to
10 seconds
(Tue Apr 23 12:50:40 2013) [sssd[be[default]]] [get_server_status]
(0x1000): Status of server 'xx.xx.xx.xx' is 'name not resolved'
(Tue Apr 23 12:50:40 2013) [sssd[be[default]]]
[set_server_common_status] (0x0100): Marking server 'xx.xx.xx.xx' as
'resolving name'
(Tue Apr 23 12:50:40 2013) [sssd[be[default]]]
[set_server_common_status] (0x0100): Marking server 'xx.xx.xx.xx' as
'name resolved'
(Tue Apr 23 12:50:40 2013) [sssd[be[default]]]
[be_resolve_server_process] (0x1000): Saving the first resolved server
(Tue Apr 23 12:50:40 2013) [sssd[be[default]]]
[be_resolve_server_process] (0x0200): Found address for server
xx.xx.xx.xx: [xx.xx.xx.xx] TTL 7200
(Tue Apr 23 12:50:40 2013) [sssd[be[default]]] [sdap_uri_callback]
(0x0400): Constructed uri 'ldaps://xx.xx.xx.xx:<port>/'
(Tue Apr 23 12:50:40 2013) [sssd[be[default]]] [sss_ldap_init_send]
(0x4000): Using file descriptor [20] for LDAP connection.
(Tue Apr 23 12:50:40 2013) [sssd[be[default]]] [sss_ldap_init_send]
(0x0400): Setting 6 seconds timeout for connecting
(Tue Apr 23 12:51:29 2013) [sssd[be[default]]]
[sdap_ldap_connect_callback_add] (0x1000): New LDAP connection to
[ldaps://xx.xx.xx.xx:<port>/??base] with fd [20].
(Tue Apr 23 12:51:29 2013) [sssd[be[default]]] [sdap_get_rootdse_send]
(0x4000): Getting rootdse
(Tue Apr 23 12:51:29 2013) [sssd[be[default]]]
[sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with
[(objectclass=*)][].
(Tue Apr 23 12:51:29 2013) [sssd[be[default]]]
[sdap_get_generic_ext_step] (0x1000): Requesting attrs: [*]
(Tue Apr 23 12:51:29 2013) [sssd[be[default]]]
[sdap_get_generic_ext_step] (0x1000): Requesting attrs: [altServer]
(Tue Apr 23 12:51:29 2013) [sssd[be[default]]]
[sdap_get_generic_ext_step] (0x1000): Requesting attrs:
[namingContexts]
(Tue Apr 23 12:51:29 2013) [sssd[be[default]]]
[sdap_get_generic_ext_step] (0x1000): Requesting attrs:
[supportedControl]
(Tue Apr 23 12:51:29 2013) [sssd[be[default]]]
[sdap_get_generic_ext_step] (0x1000): Requesting attrs:
[supportedExtension]
(Tue Apr 23 12:51:29 2013) [sssd[be[default]]]
[sdap_get_generic_ext_step] (0x1000): Requesting attrs:
[supportedFeatures]
(Tue Apr 23 12:51:29 2013) [sssd[be[default]]]
[sdap_get_generic_ext_step] (0x1000): Requesting attrs:
[supportedLDAPVersion]
(Tue Apr 23 12:51:29 2013) [sssd[be[default]]]
[sdap_get_generic_ext_step] (0x1000): Requesting attrs:
[supportedSASLMechanisms]
(Tue Apr 23 12:51:29 2013) [sssd[be[default]]]
[sdap_get_generic_ext_step] (0x1000): Requesting attrs:
[domainControllerFunctionality]
(Tue Apr 23 12:51:29 2013) [sssd[be[default]]]
[sdap_get_generic_ext_step] (0x1000): Requesting attrs:
[defaultNamingContext]
(Tue Apr 23 12:51:29 2013) [sssd[be[default]]]
[sdap_get_generic_ext_step] (0x1000): Requesting attrs: [lastUSN]
(Tue Apr 23 12:51:29 2013) [sssd[be[default]]]
[sdap_get_generic_ext_step] (0x1000): Requesting attrs:
[highestCommittedUSN]
---------------------------------------------------------------------------
To me it looks like its searching but not finding for some reason
any help would be much appreciated.
-Brandon
noon
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On Tue 23 Apr 2013 12:55:19 PM EDT, Brandon Foster wrote:
hey all, Im new to sssd and ldap so be gentle =)
I've followed some guides on how to set up sssd ldap client
authentication on Centos 6.3 but mine doesnt seem to be working
here is my sssd.conf
----- [sssd] config_file_version = 2 services = nss, pam domains =
default
[nss] filter_users =
root,ldap,named,avahi,haldaemon,dbus,radiusd,news,nscd
[pam]
[domain/default] auth_provider = ldap debug_level = 9 enumerate =
True cache_credentials = True chpass_provider = ldap
entry_cache_timeout = 600 krb5_realm = EXAMPLE.COM krb5_server =
kerberos.example.com ldap_chpass_uri = ldaps://xx.xx.xx.xx:<PORT>/
ldap_force_upper_case_realm = True id_provider = ldap
ldap_group_member = uniquemember ldap_group_object_class = group
ldap_id_use_start_tls = False ldap_pwd_policy = none
ldap_search_base =
ou=organizationunit3,ou=organizationunit2,ou=organizationunit1,o=example
ldap_schema = rfc2307bis
ldap_tls_cacertdir = /etc/openldap/cacerts ldap_tls_reqcert =
never ldap_uri = ldaps://xx.xx.xx.xx:<PORT>/ ldap_user_gecos =
displayName ldap_user_home_directory = unixHomeDirectory
ldap_user_name = cn ldap_user_object_class = user
------
ldapsearcg -z 'cn=username' comes back with all the information
about the user
but id username takes a really long time and then returns no such
user.
here is a piece of the log:
...
(Tue Apr 23 12:51:29 2013) [sssd[be[default]]]
[sdap_get_generic_ext_step] (0x1000): Requesting attrs:
[defaultNamingContext] (Tue Apr 23 12:51:29 2013)
[sssd[be[default]]] [sdap_get_generic_ext_step] (0x1000):
Requesting attrs: [lastUSN] (Tue Apr 23 12:51:29 2013)
[sssd[be[default]]] [sdap_get_generic_ext_step] (0x1000):
Requesting attrs: [highestCommittedUSN]
---------------------------------------------------------------------------
To me it looks like its searching but not finding for some reason
any help would be much appreciated.
You truncated the log too early. It is only showing the connection to
the LDAP server (and the determination of server capabilities). Please
include the actual user search that should follow that.
I'm guessing your user might be missing something important, like
uidNumber or gidNumber (or it's stored in a non-standard attribute name).
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.13 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
iEYEARECAAYFAlF2vhMACgkQeiVVYja6o6MhFwCgq5BD+hVyPfOiTZxCJ/Hyw79U
OaAAnjc9WncvDw+IofzaQUTQgtlGZcVS
=VeAV
-----END PGP SIGNATURE-----
12:44 p.m.
On Tue, Apr 23, 2013 at 10:00 AM, Stephen Gallagher <sgallagh(a)redhat.com> wrote:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On Tue 23 Apr 2013 12:55:19 PM EDT, Brandon Foster wrote:
> hey all, Im new to sssd and ldap so be gentle =)
>
> I've followed some guides on how to set up sssd ldap client
> authentication on Centos 6.3 but mine doesnt seem to be working
> here is my sssd.conf
>
> ----- [sssd] config_file_version = 2 services = nss, pam domains =
> default
>
> [nss] filter_users =
> root,ldap,named,avahi,haldaemon,dbus,radiusd,news,nscd
>
> [pam]
>
> [domain/default] auth_provider = ldap debug_level = 9 enumerate =
> True cache_credentials = True chpass_provider = ldap
> entry_cache_timeout = 600 krb5_realm = EXAMPLE.COM krb5_server =
> kerberos.example.com ldap_chpass_uri = ldaps://xx.xx.xx.xx:<PORT>/
> ldap_force_upper_case_realm = True id_provider = ldap
> ldap_group_member = uniquemember ldap_group_object_class = group
> ldap_id_use_start_tls = False ldap_pwd_policy = none
> ldap_search_base =
> ou=organizationunit3,ou=organizationunit2,ou=organizationunit1,o=example
>
>
ldap_schema = rfc2307bis
> ldap_tls_cacertdir = /etc/openldap/cacerts ldap_tls_reqcert =
> never ldap_uri = ldaps://xx.xx.xx.xx:<PORT>/ ldap_user_gecos =
> displayName ldap_user_home_directory = unixHomeDirectory
> ldap_user_name = cn ldap_user_object_class = user
>
> ------
>
> ldapsearcg -z 'cn=username' comes back with all the information
> about the user
>
> but id username takes a really long time and then returns no such
> user.
>
> here is a piece of the log:
>
...
> (Tue Apr 23 12:51:29 2013) [sssd[be[default]]]
> [sdap_get_generic_ext_step] (0x1000): Requesting attrs:
> [defaultNamingContext] (Tue Apr 23 12:51:29 2013)
> [sssd[be[default]]] [sdap_get_generic_ext_step] (0x1000):
> Requesting attrs: [lastUSN] (Tue Apr 23 12:51:29 2013)
> [sssd[be[default]]] [sdap_get_generic_ext_step] (0x1000):
> Requesting attrs: [highestCommittedUSN]
> ---------------------------------------------------------------------------
>
>
>
To me it looks like its searching but not finding for some reason
>
> any help would be much appreciated.
>
You truncated the log too early. It is only showing the connection to
the LDAP server (and the determination of server capabilities). Please
include the actual user search that should follow that.
I'm guessing your user might be missing something important, like
uidNumber or gidNumber (or it's stored in a non-standard attribute name).
hey thanks for the quick reply.
that is the end of the log after the user search has finish. the next
line after that is:
-------------------
(Tue Apr 23 12:52:29 2013) [sssd[be[default]]] [server_setup]
(0x0400): CONFDB: /var/lib/sss/db/config.ldb
(Tue Apr 23 12:52:29 2013) [sssd[be[default]]] [recreate_ares_channel]
(0x0100): Initializing new c-ares channel
(Tue Apr 23 12:52:29 2013) [sssd[be[default]]]
[resolv_get_family_order] (0x1000): Lookup order: ipv4_first
(Tue Apr 23 12:52:29 2013) [sssd[be[default]]] [fo_context_init]
(0x0400): Created new fail over context, retry timeout is 30
(Tue Apr 23 12:52:29 2013) [sssd[be[default]]]
[confdb_get_domain_internal] (0x1000): pwd_expiration_warning is -1
(Tue Apr 23 12:52:29 2013) [sssd[be[default]]]
[sysdb_domain_init_internal] (0x0200): DB File for default:
/var/lib/sss/db/cache_default.ldb
(Tue Apr 23 12:52:29 2013) [sssd[be[default]]] [ldb] (0x4000): Added
timed event "ltdb_callback": 0x10e98c0
(Tue Apr 23 12:52:29 2013) [sssd[be[default]]] [ldb] (0x4000): Added
timed event "ltdb_timeout": 0x10ff4d0
....
---------------
which is the same as the very beginning of the log.
the start of the user search is in there near the end, but that is
where the log ends when taken after the id search has failed.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.13 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
iEYEARECAAYFAlF2vhMACgkQeiVVYja6o6MhFwCgq5BD+hVyPfOiTZxCJ/Hyw79U
OaAAnjc9WncvDw+IofzaQUTQgtlGZcVS
=VeAV
-----END PGP SIGNATURE-----
_______________________________________________
sssd-users mailing list
sssd-users(a)lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/sssd-users
2:20 p.m.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 04/23/2013 01:44 PM, Brandon Foster wrote:
hey thanks for the quick reply.
that is the end of the log after the user search has finish. the
next line after that is:
------------------- (Tue Apr 23 12:52:29 2013) [sssd[be[default]]]
[server_setup] (0x0400): CONFDB: /var/lib/sss/db/config.ldb (Tue
Apr 23 12:52:29 2013) [sssd[be[default]]] [recreate_ares_channel]
(0x0100): Initializing new c-ares channel (Tue Apr 23 12:52:29
2013) [sssd[be[default]]] [resolv_get_family_order] (0x1000):
Lookup order: ipv4_first (Tue Apr 23 12:52:29 2013)
[sssd[be[default]]] [fo_context_init] (0x0400): Created new fail
over context, retry timeout is 30 (Tue Apr 23 12:52:29 2013)
[sssd[be[default]]] [confdb_get_domain_internal] (0x1000):
pwd_expiration_warning is -1 (Tue Apr 23 12:52:29 2013)
[sssd[be[default]]] [sysdb_domain_init_internal] (0x0200): DB File
for default: /var/lib/sss/db/cache_default.ldb (Tue Apr 23 12:52:29
2013) [sssd[be[default]]] [ldb] (0x4000): Added timed event
"ltdb_callback": 0x10e98c0
(Tue Apr 23 12:52:29 2013) [sssd[be[default]]] [ldb] (0x4000):
Added timed event "ltdb_timeout": 0x10ff4d0 .... ---------------
which is the same as the very beginning of the log.
the start of the user search is in there near the end, but that is
where the log ends when taken after the id search has failed.
Well, that tells us something. It tells us that apparently you
experienced a crash and the SSSD was forced to restart the provider
daemon.
Would you mind trying out the SSSD from CentOS 6.4 to see if this
particular crash has already been fixed there? If not, please try to
get a backtrace (of the 6.4 version of SSSD) with GDB. You will need
to take the following steps:
yum install gdb
debuginfo-install sssd
gdb -p $(pidof sssd_be)
At the gdb prompt, type "continue".
When it eventually crashes and returns you to the prompt, type 'bt
full' and copy all of the backtrace data into a text file (and attach
it to an email).
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.13 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
iEYEARECAAYFAlF23w0ACgkQeiVVYja6o6N9dACgnwRKWy8pGI2tET581g7juEO2
v2MAn0QySN3yKm6KhYw/lQLadfkqChqa
=2Vmd
-----END PGP SIGNATURE-----
4:53 a.m.
On Tue, Apr 23, 2013 at 03:20:45PM -0400, Stephen Gallagher wrote:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 04/23/2013 01:44 PM, Brandon Foster wrote:
> hey thanks for the quick reply.
>
> that is the end of the log after the user search has finish. the
> next line after that is:
>
>
> ------------------- (Tue Apr 23 12:52:29 2013) [sssd[be[default]]]
> [server_setup] (0x0400): CONFDB: /var/lib/sss/db/config.ldb (Tue
> Apr 23 12:52:29 2013) [sssd[be[default]]] [recreate_ares_channel]
> (0x0100): Initializing new c-ares channel (Tue Apr 23 12:52:29
> 2013) [sssd[be[default]]] [resolv_get_family_order] (0x1000):
> Lookup order: ipv4_first (Tue Apr 23 12:52:29 2013)
> [sssd[be[default]]] [fo_context_init] (0x0400): Created new fail
> over context, retry timeout is 30 (Tue Apr 23 12:52:29 2013)
> [sssd[be[default]]] [confdb_get_domain_internal] (0x1000):
> pwd_expiration_warning is -1 (Tue Apr 23 12:52:29 2013)
> [sssd[be[default]]] [sysdb_domain_init_internal] (0x0200): DB File
> for default: /var/lib/sss/db/cache_default.ldb (Tue Apr 23 12:52:29
> 2013) [sssd[be[default]]] [ldb] (0x4000): Added timed event
> "ltdb_callback": 0x10e98c0
>
> (Tue Apr 23 12:52:29 2013) [sssd[be[default]]] [ldb] (0x4000):
> Added timed event "ltdb_timeout": 0x10ff4d0 .... ---------------
> which is the same as the very beginning of the log.
>
> the start of the user search is in there near the end, but that is
> where the log ends when taken after the id search has failed.
Well, that tells us something. It tells us that apparently you
experienced a crash and the SSSD was forced to restart the provider
daemon.
Yes, I agree. The crash occurs while retrieving the rootDSE and I
remember we had a number of issues with that in 6.3, especially if the
server on the other end was Novell eDirectory.
There are currently no known SSSD crasher bugs related to rootDSE, so I
believe the issue would be fixed when you upgrade.
Would you mind trying out the SSSD from CentOS 6.4 to see if this
particular crash has already been fixed there? If not, please try to
get a backtrace (of the 6.4 version of SSSD) with GDB. You will need
to take the following steps:
yum install gdb
debuginfo-install sssd
gdb -p $(pidof sssd_be)
At the gdb prompt, type "continue".
When it eventually crashes and returns you to the prompt, type 'bt
full' and copy all of the backtrace data into a text file (and attach
it to an email).
9:06 a.m.
On Wed, Apr 24, 2013 at 2:53 AM, Jakub Hrozek <jhrozek(a)redhat.com> wrote:
On Tue, Apr 23, 2013 at 03:20:45PM -0400, Stephen Gallagher wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> On 04/23/2013 01:44 PM, Brandon Foster wrote:
> > hey thanks for the quick reply.
> >
> > that is the end of the log after the user search has finish. the
> > next line after that is:
> >
> >
> > ------------------- (Tue Apr 23 12:52:29 2013) [sssd[be[default]]]
> > [server_setup] (0x0400): CONFDB: /var/lib/sss/db/config.ldb (Tue
> > Apr 23 12:52:29 2013) [sssd[be[default]]] [recreate_ares_channel]
> > (0x0100): Initializing new c-ares channel (Tue Apr 23 12:52:29
> > 2013) [sssd[be[default]]] [resolv_get_family_order] (0x1000):
> > Lookup order: ipv4_first (Tue Apr 23 12:52:29 2013)
> > [sssd[be[default]]] [fo_context_init] (0x0400): Created new fail
> > over context, retry timeout is 30 (Tue Apr 23 12:52:29 2013)
> > [sssd[be[default]]] [confdb_get_domain_internal] (0x1000):
> > pwd_expiration_warning is -1 (Tue Apr 23 12:52:29 2013)
> > [sssd[be[default]]] [sysdb_domain_init_internal] (0x0200): DB File
> > for default: /var/lib/sss/db/cache_default.ldb (Tue Apr 23 12:52:29
> > 2013) [sssd[be[default]]] [ldb] (0x4000): Added timed event
> > "ltdb_callback": 0x10e98c0
> >
> > (Tue Apr 23 12:52:29 2013) [sssd[be[default]]] [ldb] (0x4000):
> > Added timed event "ltdb_timeout": 0x10ff4d0 .... ---------------
> > which is the same as the very beginning of the log.
> >
> > the start of the user search is in there near the end, but that is
> > where the log ends when taken after the id search has failed.
>
>
>
> Well, that tells us something. It tells us that apparently you
> experienced a crash and the SSSD was forced to restart the provider
> daemon.
>
Yes, I agree. The crash occurs while retrieving the rootDSE and I
remember we had a number of issues with that in 6.3, especially if the
server on the other end was Novell eDirectory.
There are currently no known SSSD crasher bugs related to rootDSE, so I
believe the issue would be fixed when you upgrade.
> Would you mind trying out the SSSD from CentOS 6.4 to see if this
> particular crash has already been fixed there? If not, please try to
> get a backtrace (of the 6.4 version of SSSD) with GDB. You will need
> to take the following steps:
>
> yum install gdb
> debuginfo-install sssd
> gdb -p $(pidof sssd_be)
>
> At the gdb prompt, type "continue".
>
> When it eventually crashes and returns you to the prompt, type 'bt
> full' and copy all of the backtrace data into a text file (and attach
> it to an email).
_______________________________________________
sssd-users mailing list
sssd-users(a)lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/sssd-users
sorry for the delay got pulled away for a bit.
I can confirm that I have updated to 6.4 and all of my packages are up to date.
i'll do the debuginfo shortly
10:27 a.m.
Yep
On Apr 24, 2013 8:27 AM, "Jakub Hrozek" <jhrozek(a)redhat.com> wrote:
On Wed, Apr 24, 2013 at 07:06:27AM -0700, Brandon Foster wrote:
> sorry for the delay got pulled away for a bit.
> I can confirm that I have updated to 6.4 and all of my packages are up
to date.
>
> i'll do the debuginfo shortly
So you're seeing the same problem even with 6.4?
_______________________________________________
sssd-users mailing list
sssd-users(a)lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/sssd-users
11:49 a.m.
On Tue, Apr 23, 2013 at 12:20 PM, Stephen Gallagher <sgallagh(a)redhat.com> wrote:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 04/23/2013 01:44 PM, Brandon Foster wrote:
> hey thanks for the quick reply.
>
> that is the end of the log after the user search has finish. the
> next line after that is:
>
>
> ------------------- (Tue Apr 23 12:52:29 2013) [sssd[be[default]]]
> [server_setup] (0x0400): CONFDB: /var/lib/sss/db/config.ldb (Tue
> Apr 23 12:52:29 2013) [sssd[be[default]]] [recreate_ares_channel]
> (0x0100): Initializing new c-ares channel (Tue Apr 23 12:52:29
> 2013) [sssd[be[default]]] [resolv_get_family_order] (0x1000):
> Lookup order: ipv4_first (Tue Apr 23 12:52:29 2013)
> [sssd[be[default]]] [fo_context_init] (0x0400): Created new fail
> over context, retry timeout is 30 (Tue Apr 23 12:52:29 2013)
> [sssd[be[default]]] [confdb_get_domain_internal] (0x1000):
> pwd_expiration_warning is -1 (Tue Apr 23 12:52:29 2013)
> [sssd[be[default]]] [sysdb_domain_init_internal] (0x0200): DB File
> for default: /var/lib/sss/db/cache_default.ldb (Tue Apr 23 12:52:29
> 2013) [sssd[be[default]]] [ldb] (0x4000): Added timed event
> "ltdb_callback": 0x10e98c0
>
> (Tue Apr 23 12:52:29 2013) [sssd[be[default]]] [ldb] (0x4000):
> Added timed event "ltdb_timeout": 0x10ff4d0 .... ---------------
> which is the same as the very beginning of the log.
>
> the start of the user search is in there near the end, but that is
> where the log ends when taken after the id search has failed.
Well, that tells us something. It tells us that apparently you
experienced a crash and the SSSD was forced to restart the provider
daemon.
Would you mind trying out the SSSD from CentOS 6.4 to see if this
particular crash has already been fixed there? If not, please try to
get a backtrace (of the 6.4 version of SSSD) with GDB. You will need
to take the following steps:
yum install gdb
debuginfo-install sssd
gdb -p $(pidof sssd_be)
At the gdb prompt, type "continue".
When it eventually crashes and returns you to the prompt, type 'bt
full' and copy all of the backtrace data into a text file (and attach
it to an email).
ok.
i've updated to centos 6.4
root@virt-vm-99:~/lpm> cat /etc/*release
CentOS release 6.4 (Final)
everything is up to date
problem is persisting.
here is the gdb info
---------------------------
Attaching to process 1670
Reading symbols from /usr/libexec/sssd/sssd_be...(no debugging symbols
found)...done.
Reading symbols from /lib64/libpam.so.0...(no debugging symbols found)...done.
Loaded symbols for /lib64/libpam.so.0
Reading symbols from /usr/lib64/libcares.so.2...(no debugging symbols
found)...done.
Loaded symbols for /usr/lib64/libcares.so.2
Reading symbols from /usr/lib64/libtevent.so.0...(no debugging symbols
found)...done.
Loaded symbols for /usr/lib64/libtevent.so.0
Reading symbols from /usr/lib64/libtalloc.so.2...(no debugging symbols
found)...done.
Loaded symbols for /usr/lib64/libtalloc.so.2
Reading symbols from /lib64/libpopt.so.0...(no debugging symbols found)...done.
Loaded symbols for /lib64/libpopt.so.0
Reading symbols from /usr/lib64/libldb.so.1...(no debugging symbols
found)...done.
Loaded symbols for /usr/lib64/libldb.so.1
Reading symbols from /lib64/libdbus-1.so.3...(no debugging symbols
found)...done.
Loaded symbols for /lib64/libdbus-1.so.3
Reading symbols from /lib64/librt.so.1...(no debugging symbols found)...done.
Loaded symbols for /lib64/librt.so.1
Reading symbols from /lib64/libpcre.so.0...(no debugging symbols found)...done.
Loaded symbols for /lib64/libpcre.so.0
Reading symbols from /usr/lib64/libini_config.so.2...(no debugging
symbols found)...done.
Loaded symbols for /usr/lib64/libini_config.so.2
Reading symbols from /usr/lib64/libcollection.so.2...(no debugging
symbols found)...done.
Loaded symbols for /usr/lib64/libcollection.so.2
Reading symbols from /usr/lib64/libdhash.so.1...(no debugging symbols
found)...done.
Loaded symbols for /usr/lib64/libdhash.so.1
Reading symbols from /lib64/liblber-2.4.so.2...(no debugging symbols
found)...done.
Loaded symbols for /lib64/liblber-2.4.so.2
Reading symbols from /lib64/libldap-2.4.so.2...(no debugging symbols
found)...done.
Loaded symbols for /lib64/libldap-2.4.so.2
Reading symbols from /usr/lib64/libtdb.so.1...(no debugging symbols
found)...done.
Loaded symbols for /usr/lib64/libtdb.so.1
Reading symbols from /lib64/libglib-2.0.so.0...(no debugging symbols
found)...done.
Loaded symbols for /lib64/libglib-2.0.so.0
Reading symbols from /usr/lib64/libssl3.so...(no debugging symbols
found)...done.
Loaded symbols for /usr/lib64/libssl3.so
Reading symbols from /usr/lib64/libsmime3.so...(no debugging symbols
found)...done.
Loaded symbols for /usr/lib64/libsmime3.so
Reading symbols from /usr/lib64/libnss3.so...(no debugging symbols
found)...done.
Loaded symbols for /usr/lib64/libnss3.so
Reading symbols from /usr/lib64/libnssutil3.so...(no debugging symbols
found)...done.
Loaded symbols for /usr/lib64/libnssutil3.so
Reading symbols from /lib64/libplds4.so...(no debugging symbols found)...done.
Loaded symbols for /lib64/libplds4.so
Reading symbols from /lib64/libplc4.so...(no debugging symbols found)...done.
Loaded symbols for /lib64/libplc4.so
Reading symbols from /lib64/libnspr4.so...(no debugging symbols found)...done.
Loaded symbols for /lib64/libnspr4.so
Reading symbols from /lib64/libpthread.so.0...(no debugging symbols
found)...done.
[Thread debugging using libthread_db enabled]
Loaded symbols for /lib64/libpthread.so.0
Reading symbols from /lib64/libdl.so.2...(no debugging symbols found)...done.
Loaded symbols for /lib64/libdl.so.2
Reading symbols from /lib64/libc.so.6...(no debugging symbols found)...done.
Loaded symbols for /lib64/libc.so.6
Reading symbols from /lib64/libaudit.so.1...(no debugging symbols found)...done.
Loaded symbols for /lib64/libaudit.so.1
Reading symbols from /lib64/libcrypt.so.1...(no debugging symbols found)...done.
Loaded symbols for /lib64/libcrypt.so.1
Reading symbols from /lib64/ld-linux-x86-64.so.2...(no debugging
symbols found)...done.
Loaded symbols for /lib64/ld-linux-x86-64.so.2
Reading symbols from /usr/lib64/libpath_utils.so.1...(no debugging
symbols found)...done.
Loaded symbols for /usr/lib64/libpath_utils.so.1
Reading symbols from /usr/lib64/libref_array.so.1...(no debugging
symbols found)...done.
Loaded symbols for /usr/lib64/libref_array.so.1
Reading symbols from /lib64/libresolv.so.2...(no debugging symbols
found)...done.
Loaded symbols for /lib64/libresolv.so.2
Reading symbols from /usr/lib64/libsasl2.so.2...(no debugging symbols
found)...done.
Loaded symbols for /usr/lib64/libsasl2.so.2
Reading symbols from /lib64/libz.so.1...(no debugging symbols found)...done.
Loaded symbols for /lib64/libz.so.1
Reading symbols from /lib64/libfreebl3.so...(no debugging symbols found)...done.
Loaded symbols for /lib64/libfreebl3.so
Reading symbols from /usr/lib64/ldb/modules/ldb/asq.so...(no debugging
symbols found)...done.
Loaded symbols for /usr/lib64/ldb/modules/ldb/asq.so
Reading symbols from /usr/lib64/ldb/modules/ldb/memberof.so...(no
debugging symbols found)...done.
Loaded symbols for /usr/lib64/ldb/modules/ldb/memberof.so
Reading symbols from /usr/lib64/ldb/modules/ldb/paged_results.so...(no
debugging symbols found)...done.
Loaded symbols for /usr/lib64/ldb/modules/ldb/paged_results.so
Reading symbols from
/usr/lib64/ldb/modules/ldb/paged_searches.so...(no debugging symbols
found)...done.
Loaded symbols for /usr/lib64/ldb/modules/ldb/paged_searches.so
Reading symbols from /usr/lib64/ldb/modules/ldb/rdn_name.so...(no
debugging symbols found)...done.
Loaded symbols for /usr/lib64/ldb/modules/ldb/rdn_name.so
Reading symbols from /usr/lib64/ldb/modules/ldb/sample.so...(no
debugging symbols found)...done.
Loaded symbols for /usr/lib64/ldb/modules/ldb/sample.so
Reading symbols from /usr/lib64/ldb/modules/ldb/server_sort.so...(no
debugging symbols found)...done.
Loaded symbols for /usr/lib64/ldb/modules/ldb/server_sort.so
Reading symbols from /usr/lib64/ldb/modules/ldb/skel.so...(no
debugging symbols found)...done.
Loaded symbols for /usr/lib64/ldb/modules/ldb/skel.so
Reading symbols from /usr/lib64/ldb/modules/ldb/tdb.so...(no debugging
symbols found)...done.
Loaded symbols for /usr/lib64/ldb/modules/ldb/tdb.so
Reading symbols from /usr/lib64/sssd/libsss_ldap.so...(no debugging
symbols found)...done.
Loaded symbols for /usr/lib64/sssd/libsss_ldap.so
Reading symbols from /lib64/libkrb5.so.3...(no debugging symbols found)...done.
Loaded symbols for /lib64/libkrb5.so.3
Reading symbols from /lib64/libk5crypto.so.3...(no debugging symbols
found)...done.
Loaded symbols for /lib64/libk5crypto.so.3
Reading symbols from /lib64/libcom_err.so.2...(no debugging symbols
found)...done.
Loaded symbols for /lib64/libcom_err.so.2
Reading symbols from /usr/lib64/libsss_idmap.so.0...(no debugging
symbols found)...done.
Loaded symbols for /usr/lib64/libsss_idmap.so.0
Reading symbols from /lib64/libkrb5support.so.0...(no debugging
symbols found)...done.
Loaded symbols for /lib64/libkrb5support.so.0
Reading symbols from /lib64/libkeyutils.so.1...(no debugging symbols
found)...done.
Loaded symbols for /lib64/libkeyutils.so.1
Reading symbols from /lib64/libselinux.so.1...(no debugging symbols
found)...done.
Loaded symbols for /lib64/libselinux.so.1
Reading symbols from /lib64/libnss_files.so.2...(no debugging symbols
found)...done.
Loaded symbols for /lib64/libnss_files.so.2
Reading symbols from /usr/lib64/libsoftokn3.so...(no debugging symbols
found)...done.
Loaded symbols for /usr/lib64/libsoftokn3.so
Reading symbols from /usr/lib64/libsqlite3.so.0...(no debugging
symbols found)...done.
Loaded symbols for /usr/lib64/libsqlite3.so.0
Reading symbols from /usr/lib64/libnsspem.so...(no debugging symbols
found)...done.
Loaded symbols for /usr/lib64/libnsspem.so
warning: no loadable sections found in added symbol-file
system-supplied DSO at 0x7ffffe330000
0x00007f3b02233530 in __read_nocancel () from /lib64/libpthread.so.0
Missing separate debuginfos, use: debuginfo-install sssd-1.9.2-82.4.el6_4.x86_64
(gdb) continue
Continuing.
Program received signal SIGTERM, Terminated.
0x00007f3b02233530 in __read_nocancel () from /lib64/libpthread.so.0
(gdb) bt full
#0 0x00007f3b02233530 in __read_nocancel () from /lib64/libpthread.so.0
No symbol table info available.
#1 0x00007f3b03b9cb0c in ?? () from /lib64/liblber-2.4.so.2
No symbol table info available.
#2 0x00007f3b0397b604 in ?? () from /lib64/libldap-2.4.so.2
No symbol table info available.
#3 0x00007f3b032351ed in ?? () from /usr/lib64/libssl3.so
No symbol table info available.
#4 0x00007f3b03230480 in ?? () from /usr/lib64/libssl3.so
No symbol table info available.
#5 0x00007f3b03232ed2 in ?? () from /usr/lib64/libssl3.so
No symbol table info available.
#6 0x00007f3b03239135 in ?? () from /usr/lib64/libssl3.so
No symbol table info available.
#7 0x00007f3b0323a96f in SSL_ForceHandshake () from /usr/lib64/libssl3.so
No symbol table info available.
#8 0x00007f3b0397b34f in ?? () from /lib64/libldap-2.4.so.2
No symbol table info available.
#9 0x00007f3b03979e7a in ?? () from /lib64/libldap-2.4.so.2
No symbol table info available.
#10 0x00007f3b0397a0f8 in ldap_int_tls_start () from /lib64/libldap-2.4.so.2
No symbol table info available.
#11 0x00007f3aff502eb9 in ?? () from /usr/lib64/sssd/libsss_ldap.so
No symbol table info available.
#12 0x00007f3aff5028f7 in ?? () from /usr/lib64/sssd/libsss_ldap.so
No symbol table info available.
#13 0x00007f3b050743ff in ?? () from /usr/lib64/libtevent.so.0
No symbol table info available.
#14 0x00007f3b050708f0 in _tevent_loop_once () from /usr/lib64/libtevent.so.0
No symbol table info available.
#15 0x00007f3b0507095b in tevent_common_loop_wait () from
/usr/lib64/libtevent.so.0
No symbol table info available.
#16 0x0000000000451973 in server_loop ()
No symbol table info available.
#17 0x000000000041a066 in main ()
No symbol table info available.
(gdb)
____________________
i've also attached it in a text file
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.13 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
iEYEARECAAYFAlF23w0ACgkQeiVVYja6o6N9dACgnwRKWy8pGI2tET581g7juEO2
v2MAn0QySN3yKm6KhYw/lQLadfkqChqa
=2Vmd
-----END PGP SIGNATURE-----
_______________________________________________
sssd-users mailing list
sssd-users(a)lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/sssd-users
11:53 a.m.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 04/24/2013 12:49 PM, Brandon Foster wrote:
On Tue, Apr 23, 2013 at 12:20 PM, Stephen Gallagher
<sgallagh(a)redhat.com> wrote:
...
> Would you mind trying out the SSSD from CentOS 6.4 to see if
> this particular crash has already been fixed there? If not,
> please try to get a backtrace (of the 6.4 version of SSSD) with
> GDB. You will need to take the following steps:
>
> yum install gdb debuginfo-install sssd gdb -p $(pidof sssd_be)
...
Missing separate debuginfos, use: debuginfo-install
sssd-1.9.2-82.4.el6_4.x86_64
Spot the mistake? :)
Please run the debuginfo-install command above. Otherwise, the
backtrace output is not human-readable.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.13 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
iEYEARECAAYFAlF4DhcACgkQeiVVYja6o6OGwgCgmPZ6fXHA30fEPNzZXvViuUPv
ZekAn2RxpJQiwvPB6/pK48eKasSGMge3
=Dzyo
-----END PGP SIGNATURE-----
12:30 p.m.
On Wed, Apr 24, 2013 at 9:53 AM, Stephen Gallagher <sgallagh(a)redhat.com> wrote:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 04/24/2013 12:49 PM, Brandon Foster wrote:
> On Tue, Apr 23, 2013 at 12:20 PM, Stephen Gallagher
> <sgallagh(a)redhat.com> wrote:
...
>> Would you mind trying out the SSSD from CentOS 6.4 to see if
>> this particular crash has already been fixed there? If not,
>> please try to get a backtrace (of the 6.4 version of SSSD) with
>> GDB. You will need to take the following steps:
>>
>> yum install gdb debuginfo-install sssd gdb -p $(pidof sssd_be)
...
> Missing separate debuginfos, use: debuginfo-install
> sssd-1.9.2-82.4.el6_4.x86_64
Spot the mistake? :)
Please run the debuginfo-install command above. Otherwise, the
backtrace output is not human-readable.
I dont seem to be able to install all of the debuginfo packages it is
requiring. when i run gdb it says i need packages, but when I try to
install them they are either already installed or are not in the
centos.debuginfo repo. any ideas?
it is giving some info still, but I cant really understand it.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.13 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
iEYEARECAAYFAlF4DhcACgkQeiVVYja6o6OGwgCgmPZ6fXHA30fEPNzZXvViuUPv
ZekAn2RxpJQiwvPB6/pK48eKasSGMge3
=Dzyo
-----END PGP SIGNATURE-----
_______________________________________________
sssd-users mailing list
sssd-users(a)lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/sssd-users
1:15 p.m.
On Wed, Apr 24, 2013 at 10:30 AM, Brandon Foster
<brandon.foster(a)liferay.com> wrote:
On Wed, Apr 24, 2013 at 9:53 AM, Stephen Gallagher
<sgallagh(a)redhat.com> wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> On 04/24/2013 12:49 PM, Brandon Foster wrote:
>> On Tue, Apr 23, 2013 at 12:20 PM, Stephen Gallagher
>> <sgallagh(a)redhat.com> wrote:
> ...
>>> Would you mind trying out the SSSD from CentOS 6.4 to see if
>>> this particular crash has already been fixed there? If not,
>>> please try to get a backtrace (of the 6.4 version of SSSD) with
>>> GDB. You will need to take the following steps:
>>>
>>> yum install gdb debuginfo-install sssd gdb -p $(pidof sssd_be)
>
> ...
>
>> Missing separate debuginfos, use: debuginfo-install
>> sssd-1.9.2-82.4.el6_4.x86_64
>
>
> Spot the mistake? :)
>
> Please run the debuginfo-install command above. Otherwise, the
> backtrace output is not human-readable.
attached is the new debug info.
I cant seem to get sqlite3 or libsoftokn3 packages installed.
tried with the debug repo, with various rpm's nothing.
maybe this bt full is all you need, i dont know. it just says no stack.
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.13 (GNU/Linux)
> Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
>
> iEYEARECAAYFAlF4DhcACgkQeiVVYja6o6OGwgCgmPZ6fXHA30fEPNzZXvViuUPv
> ZekAn2RxpJQiwvPB6/pK48eKasSGMge3
> =Dzyo
> -----END PGP SIGNATURE-----
>
_______________________________________________
> sssd-users mailing list
> sssd-users(a)lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/sssd-users
I dont seem to be able to install all of the debuginfo packages it is
requiring. when i run gdb it says i need packages, but when I try to
install them they are either already installed or are not in the
centos.debuginfo repo. any ideas?
it is giving some info still, but I cant really understand it.
1:20 p.m.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On Wed 24 Apr 2013 02:15:51 PM EDT, Brandon Foster wrote:
forgot to attach *facepalm
Ah, sorry. I forgot to tell you to set 'timeout = 5400' in the
[domain/DOMAINNAME] section of sssd.conf. By default, the SSSD will
forcibly kill off the unresponsive sssd_be process after 30s (which
makes debugging hard). This gives you 90 minutes to get the results.
That should report a backtrace now.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.13 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
iEYEARECAAYFAlF4Il8ACgkQeiVVYja6o6PmhACgkH5DpKo/Hdix0A2gjsvo70zs
YJsAoJGn+u8YYTV3twEfT6tVT/OSJAv4
=tO9L
-----END PGP SIGNATURE-----
1:02 p.m.
On Wed, Apr 24, 2013 at 11:20 AM, Stephen Gallagher <sgallagh(a)redhat.com> wrote:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On Wed 24 Apr 2013 02:15:51 PM EDT, Brandon Foster wrote:
> forgot to attach *facepalm
>
Ah, sorry. I forgot to tell you to set 'timeout = 5400' in the
[domain/DOMAINNAME] section of sssd.conf. By default, the SSSD will
forcibly kill off the unresponsive sssd_be process after 30s (which
makes debugging hard). This gives you 90 minutes to get the results.
That should report a backtrace now.
Attached is my output from gdb.
not sure if its what you are looking for.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.13 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
iEYEARECAAYFAlF4Il8ACgkQeiVVYja6o6PmhACgkH5DpKo/Hdix0A2gjsvo70zs
YJsAoJGn+u8YYTV3twEfT6tVT/OSJAv4
=tO9L
-----END PGP SIGNATURE-----
2 p.m.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On Thu 25 Apr 2013 02:02:56 PM EDT, Brandon Foster wrote:
On Wed, Apr 24, 2013 at 11:20 AM, Stephen Gallagher
<sgallagh(a)redhat.com> wrote:
>
********* *BEGIN ENCRYPTED or SIGNED PART* *********
On Wed 24 Apr 2013 02:15:51 PM EDT, Brandon Foster wrote:
> forgot to attach *facepalm
>
Ah, sorry. I forgot to tell you to set 'timeout = 5400' in the
[domain/DOMAINNAME] section of sssd.conf. By default, the SSSD
will forcibly kill off the unresponsive sssd_be process after 30s
(which makes debugging hard). This gives you 90 minutes to get the
results.
That should report a backtrace now.
********** *END ENCRYPTED or SIGNED PART* **********
Attached is my output from gdb. not sure if its what you are
looking for.
This looks like you started SSSD and then shut it down without trying
to log in in the middle. Did you leave that part out?
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.13 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
iEUEARECAAYFAlF5fWUACgkQeiVVYja6o6PVwwCSAhMH3YvNl7dhv9CtSNg/PYdQ
9gCcDkVQb+e/v+1NsSXVl7BwDm6xzFw=
=VFzo
-----END PGP SIGNATURE-----
4016
days inactive
4018
days old
sssd-users@lists.fedorahosted.org
15 comments
3 participants
participants (3)
-
Brandon Foster -
Jakub Hrozek -
Stephen Gallagher