On ma, 06 elo 2018, Роман Гинович via FreeIPA-users wrote:
I checked it now, all ok (output in the quote below).
How enable debug in function "find_sid_for_ldap_entry"?
Interesting this string (ipa_sidgen_common.c:444) LOG("Trying to add SID for
[%s].\n", dn_str);
You need to recompile freeipa package. Replace LOG with
LOG_FATAL. It is
not fatal but it will print at 'error' log level so you'd see it.
Alternative is to change nssldap-errorloglevel in cn=config to include
plugin level debugging. This will *significantly* slow down your
ns-slapd execution.
>[root@freeipa ~]# ldapsearch -Y GSSAPI -b cn=accounts,dc=domain
'(|(uidNumber=*)(gidNumber=*))' uidNumber gidNumber | grep -E
"gidN|uidN"
>SASL/GSSAPI authentication started
>SASL username: admin@DOMAIN
>SASL SSF: 256
>SASL data security layer installed.
># extended LDIF
>#
># LDAPv3
># base <cn=accounts,dc=domain> with scope subtree
># filter: (|(uidNumber=*)(gidNumber=*))
># requesting: uidNumber gidNumber
>#
>uidNumber: 10000
>gidNumber: 10000
>gidNumber: 10000
>gidNumber: 10159
>gidNumber: 10002
>uidNumber: 10001
>gidNumber: 10001
>gidNumber: 10001
>uidNumber: 10007
>gidNumber: 10007
>gidNumber: 10007
>uidNumber: 10009
>gidNumber: 10009
>gidNumber: 10009
>gidNumber: 10158
>uidNumber: 10010
>gidNumber: 10010
>gidNumber: 10010
>uidNumber: 10011
>gidNumber: 10011
>gidNumber: 10011
>uidNumber: 10012
>gidNumber: 10012
>gidNumber: 10012
>uidNumber: 10013
>gidNumber: 10013
>gidNumber: 10013
>uidNumber: 10015
>gidNumber: 10015
>gidNumber: 10015
>uidNumber: 10016
>gidNumber: 10016
>gidNumber: 10016
>uidNumber: 10017
>gidNumber: 10017
>gidNumber: 10017
>uidNumber: 10019
>gidNumber: 10019
>gidNumber: 10019
>gidNumber: 10023
>uidNumber: 10030
>gidNumber: 10030
>gidNumber: 10030
>uidNumber: 10032
>gidNumber: 10032
>gidNumber: 10032
>gidNumber: 10033
>uidNumber: 10035
>gidNumber: 10035
>gidNumber: 10035
>gidNumber: 10037
>uidNumber: 10038
>gidNumber: 10038
>gidNumber: 10038
>uidNumber: 10041
>gidNumber: 10041
>gidNumber: 10041
>uidNumber: 10045
>gidNumber: 10045
>gidNumber: 10045
>uidNumber: 10047
>gidNumber: 10047
>gidNumber: 10047
>uidNumber: 10048
>gidNumber: 10048
>gidNumber: 10048
>uidNumber: 10049
>gidNumber: 10049
>gidNumber: 10049
>uidNumber: 10050
>gidNumber: 10050
>gidNumber: 10050
>uidNumber: 10051
>gidNumber: 10051
>gidNumber: 10051
>uidNumber: 10054
>gidNumber: 10054
>gidNumber: 10054
>uidNumber: 10059
>gidNumber: 10059
>gidNumber: 10059
>uidNumber: 10060
>gidNumber: 10060
>gidNumber: 10060
>gidNumber: 10061
>uidNumber: 10063
>gidNumber: 10063
>gidNumber: 10063
>uidNumber: 10064
>gidNumber: 10064
>gidNumber: 10064
>uidNumber: 10066
>gidNumber: 10066
>gidNumber: 10066
>uidNumber: 10068
>gidNumber: 10068
>gidNumber: 10068
>uidNumber: 10069
>gidNumber: 10069
>gidNumber: 10069
>uidNumber: 10070
>gidNumber: 10070
>gidNumber: 10070
>uidNumber: 10071
>gidNumber: 10071
>gidNumber: 10071
>uidNumber: 10072
>gidNumber: 10072
>gidNumber: 10072
>uidNumber: 10073
>gidNumber: 10073
>gidNumber: 10073
>uidNumber: 10074
>gidNumber: 10074
>gidNumber: 10074
>uidNumber: 10075
>gidNumber: 10075
>gidNumber: 10075
>uidNumber: 10082
>gidNumber: 10082
>gidNumber: 10082
>uidNumber: 10085
>gidNumber: 10085
>gidNumber: 10085
>uidNumber: 10086
>gidNumber: 10086
>gidNumber: 10086
>uidNumber: 10087
>gidNumber: 10087
>gidNumber: 10087
>uidNumber: 10088
>gidNumber: 10088
>uidNumber: 10089
>gidNumber: 10089
>gidNumber: 10089
>uidNumber: 10090
>gidNumber: 10090
>gidNumber: 10090
>gidNumber: 10091
>uidNumber: 10092
>gidNumber: 10092
>gidNumber: 10092
>uidNumber: 10093
>gidNumber: 10093
>gidNumber: 10093
>uidNumber: 10097
>gidNumber: 10097
>gidNumber: 10097
>uidNumber: 10098
>gidNumber: 10098
>gidNumber: 10098
>uidNumber: 10099
>gidNumber: 10099
>gidNumber: 10099
>uidNumber: 10100
>gidNumber: 10100
>gidNumber: 10100
>uidNumber: 10101
>gidNumber: 10101
>gidNumber: 10101
>uidNumber: 10102
>gidNumber: 10102
>gidNumber: 10102
>uidNumber: 10103
>gidNumber: 10103
>gidNumber: 10103
>uidNumber: 10104
>gidNumber: 10104
>gidNumber: 10104
>uidNumber: 10107
>gidNumber: 10107
>gidNumber: 10107
>uidNumber: 10108
>gidNumber: 10108
>gidNumber: 10108
>uidNumber: 10110
>gidNumber: 10110
>gidNumber: 10110
>uidNumber: 10111
>gidNumber: 10111
>gidNumber: 10111
>uidNumber: 10115
>gidNumber: 10115
>gidNumber: 10115
>uidNumber: 10116
>gidNumber: 10116
>gidNumber: 10116
>uidNumber: 10117
>gidNumber: 10117
>gidNumber: 10117
>uidNumber: 10118
>gidNumber: 10118
>gidNumber: 10118
>uidNumber: 10119
>gidNumber: 10119
>gidNumber: 10119
>uidNumber: 10120
>gidNumber: 10120
>gidNumber: 10120
>uidNumber: 10121
>gidNumber: 10121
>gidNumber: 10121
>uidNumber: 10123
>gidNumber: 10123
>gidNumber: 10123
>uidNumber: 10124
>gidNumber: 10124
>gidNumber: 10124
>uidNumber: 10125
>gidNumber: 10125
>gidNumber: 10125
>uidNumber: 10126
>gidNumber: 10126
>gidNumber: 10126
>uidNumber: 10127
>gidNumber: 10127
>gidNumber: 10127
>uidNumber: 10128
>gidNumber: 10128
>gidNumber: 10128
>uidNumber: 10130
>gidNumber: 10130
>gidNumber: 10130
>uidNumber: 10131
>gidNumber: 10131
>gidNumber: 10131
>uidNumber: 10132
>gidNumber: 10132
>gidNumber: 10132
>uidNumber: 10133
>gidNumber: 10133
>gidNumber: 10133
>uidNumber: 10134
>gidNumber: 10134
>gidNumber: 10134
>uidNumber: 10137
>gidNumber: 10137
>gidNumber: 10137
>uidNumber: 10138
>gidNumber: 10138
>gidNumber: 10138
>uidNumber: 10139
>gidNumber: 10139
>gidNumber: 10139
>uidNumber: 10140
>gidNumber: 10140
>gidNumber: 10140
>uidNumber: 10141
>gidNumber: 10141
>gidNumber: 10141
>uidNumber: 10142
>gidNumber: 10142
>gidNumber: 10142
>uidNumber: 10143
>gidNumber: 10143
>gidNumber: 10143
>uidNumber: 10144
>gidNumber: 10144
>gidNumber: 10144
>uidNumber: 10145
>gidNumber: 10145
>gidNumber: 10145
>uidNumber: 10146
>gidNumber: 10146
>gidNumber: 10146
>uidNumber: 10147
>gidNumber: 10147
>gidNumber: 10147
>uidNumber: 10148
>gidNumber: 10148
>gidNumber: 10148
>uidNumber: 10149
>gidNumber: 10149
>gidNumber: 10149
>uidNumber: 10150
>gidNumber: 10150
>gidNumber: 10150
>uidNumber: 10151
>gidNumber: 10151
>gidNumber: 10151
>uidNumber: 10152
>gidNumber: 10152
>gidNumber: 10152
>gidNumber: 10088
>uidNumber: 10153
>gidNumber: 10153
>gidNumber: 10153
>uidNumber: 10154
>gidNumber: 10154
>gidNumber: 10154
>uidNumber: 10155
>gidNumber: 10155
>gidNumber: 10155
>uidNumber: 10156
>gidNumber: 10156
>gidNumber: 10156
>uidNumber: 10157
>gidNumber: 10157
>gidNumber: 10157
>gidNumber: 10160
>uidNumber: 10161
>gidNumber: 10161
>gidNumber: 10161
>gidNumber: 10163
>uidNumber: 10164
>gidNumber: 10164
>gidNumber: 10164
>uidNumber: 10165
>gidNumber: 10165
>gidNumber: 10165
_______________________________________________
FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org
Fedora Code of Conduct:
https://getfedora.org/code-of-conduct.html
List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/freeipa-users@lists.fedorah...
--
/ Alexander Bokovoy
Sr. Principal Software Engineer
Security / Identity Management Engineering
Red Hat Limited, Finland