I've got a system (probably more than one) where I've got clients who aren't able to bring up SSSD due to this error, as seen in "journalctl -xe".
I've tried unenrolling & re-enrolling. I've tried unenrolling, uninstalling, reinstalling ipa-client, and re-enrolling. I've tried unenrolling, deleting the host records from the IPA server, then re-enrolling. I've tried reinstalling SSSD. None have changed the behavior at all.
Does anyone know what this error refers to or is caused by?
Bret Wortman via FreeIPA-users wrote:
I've got a system (probably more than one) where I've got clients who aren't able to bring up SSSD due to this error, as seen in "journalctl -xe".
I've tried unenrolling & re-enrolling. I've tried unenrolling, uninstalling, reinstalling ipa-client, and re-enrolling. I've tried unenrolling, deleting the host records from the IPA server, then re-enrolling. I've tried reinstalling SSSD. None have changed the behavior at all.
Does anyone know what this error refers to or is caused by?
There isn't enough context to know what is going on. Can you provide more details including log entries, distro and package versions?
rob
I ended up unenrolling, removing some components, rebooting, reinstalling, and re-enrolling, which did the trick.
Bret Wortman Founder, Damascus Products, LLC 855-644-2783 | bret@wrapbuddies.co http://wrapbuddies.co/ 10332 Main St Suite 319 Fairfax, VA 22030
On Jul 18, 2018, 5:05 PM -0400, Rob Crittenden rcritten@redhat.com, wrote:
Bret Wortman via FreeIPA-users wrote:
I've got a system (probably more than one) where I've got clients who aren't able to bring up SSSD due to this error, as seen in "journalctl -xe".
I've tried unenrolling & re-enrolling. I've tried unenrolling, uninstalling, reinstalling ipa-client, and re-enrolling. I've tried unenrolling, deleting the host records from the IPA server, then re-enrolling. I've tried reinstalling SSSD. None have changed the behavior at all.
Does anyone know what this error refers to or is caused by?
There isn't enough context to know what is going on. Can you provide more details including log entries, distro and package versions?
rob
On (18/07/18 13:39), Bret Wortman via FreeIPA-users wrote:
I've got a system (probably more than one) where I've got clients who aren't able to bring up SSSD due to this error, as seen in "journalctl -xe".
I've tried unenrolling & re-enrolling. I've tried unenrolling, uninstalling, reinstalling ipa-client, and re-enrolling. I've tried unenrolling, deleting the host records from the IPA server, then re-enrolling. I've tried reinstalling SSSD. None have changed the behavior at all.
Does anyone know what this error refers to or is caused by?
I assume it is due to mixed version of sssd and libldb. There was ABI change in libldb 1.1.30/1.2.0
Please provide version of these pacakges. Or even better ensure you use up-to-date system. (In case of external repositories it might be more complicated)
LS
That's very possible. I ended up doing this to resolve it:
# ipa-client-install -U --uninstall # rm -f /etc/ipa/ca.crt # rm -rf /var/lib/sss/db/* # yum remove sssd sssd-common ipa-client # reboot
:
# yum install ipa-client # ipa-client-install --enable-dns-updates --mkhomedir
And voila.
On 07/19/2018 11:33 AM, Lukas Slebodnik via FreeIPA-users wrote:
On (18/07/18 13:39), Bret Wortman via FreeIPA-users wrote:
I've got a system (probably more than one) where I've got clients who aren't able to bring up SSSD due to this error, as seen in "journalctl -xe".
I've tried unenrolling & re-enrolling. I've tried unenrolling, uninstalling, reinstalling ipa-client, and re-enrolling. I've tried unenrolling, deleting the host records from the IPA server, then re-enrolling. I've tried reinstalling SSSD. None have changed the behavior at all.
Does anyone know what this error refers to or is caused by?
I assume it is due to mixed version of sssd and libldb. There was ABI change in libldb 1.1.30/1.2.0
Please provide version of these pacakges. Or even better ensure you use up-to-date system. (In case of external repositories it might be more complicated)
LS _______________________________________________ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-leave@lists.fedorahosted.org Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/freeipa-users@lists.fedorahost...
freeipa-users@lists.fedorahosted.org