I also applied this solution: https://access.redhat.com/solutions/7052703 Since ipa config-mod --enable-sid --add-sids gave me ipa: ERROR: No valid Negotiate header in server response I did python3 /usr/libexec/ipa/oddjob/org.freeipa.server.config-enable-sid --add-sids It was successful as indicated in /var/log/dirsrv/slapd-EXAMPLE-COM/errors
[14/Mar/2024:09:12:39.543473504 +0000] - ERR - sidgen_task_thread - [file ipa_sidgen_task.c, line 194]: Sidgen task starts ... [14/Mar/2024:09:12:41.706166332 +0000] - ERR - sidgen_task_thread - [file ipa_sidgen_task.c, line 199]: Sidgen task finished [0].
However, ipa -d user-find my.user --all | grep -i ipantsecurityidentifier ipa: DEBUG: Loading Index file from '/var/lib/ipa-client/sysrestore/sysrestore.index' ipa: DEBUG: Loading StateFile from '/var/lib/ipa-client/sysrestore/sysrestore.state' ipa: DEBUG: Loading StateFile from '/var/lib/ipa-client/sysrestore/sysrestore.state' ipa: DEBUG: failed to find session_cookie in persistent storage for principal 'my.user@EXAMPLE.COM' ipa: DEBUG: trying https://ipa-replica01.example.com/ipa/json ipa: DEBUG: Created connection context.rpcclient_140556515458128 ipa: DEBUG: [try 1]: Forwarding 'schema' to json server 'https://ipa-replica01.example.com/ipa/json' ipa: DEBUG: New HTTP connection (ipa-replica01.example.com) ipa: DEBUG: HTTP connection destroyed (ipa-replica01.example.com) Traceback (most recent call last): File "/usr/lib/python3.6/site-packages/ipaclient/remote_plugins/__init__.py", line 120, in get_package plugins = api._remote_plugins AttributeError: 'API' object has no attribute '_remote_plugins'
During handling of the above exception, another exception occurred:
Traceback (most recent call last): File "/usr/lib/python3.6/site-packages/ipalib/rpc.py", line 724, in single_request if not self._auth_complete(response): File "/usr/lib/python3.6/site-packages/ipalib/rpc.py", line 674, in _auth_complete message=u"No valid Negotiate header in server response") ipalib.errors.KerberosError: No valid Negotiate header in server response ipa: DEBUG: Destroyed connection context.rpcclient_140556515458128 ipa: ERROR: No valid Negotiate header in server response