Sumit,
Ok, so on the server and the client I've set the use_fully_qualified_names to True,
restarted sssd and cleared the cache.
On the client I did id aduser(a)ad.domain - logs are here:
(Fri Oct 11 11:36:47 2019) [sssd[be[ipa.domain]]] [sbus_dispatch] (0x4000): dbus conn:
0x55ded6099250
(Fri Oct 11 11:36:47 2019) [sssd[be[ipa.domain]]] [sbus_dispatch] (0x4000): Dispatching.
(Fri Oct 11 11:36:47 2019) [sssd[be[ipa.domain]]] [sbus_message_handler] (0x2000):
Received SBUS method org.freedesktop.sssd.dataprovider.getAccountInfo on path
/org/freedesktop/sssd/dataprovider
(Fri Oct 11 11:36:47 2019) [sssd[be[ipa.domain]]] [sbus_get_sender_id_send] (0x2000): Not
a sysbus message, quit
(Fri Oct 11 11:36:47 2019) [sssd[be[ipa.domain]]] [dp_get_account_info_handler] (0x0200):
Got request for [0x1][BE_REQ_USER][name=aduser(a)ad.domain]
(Fri Oct 11 11:36:47 2019) [sssd[be[ipa.domain]]] [dp_attach_req] (0x0400): DP Request
[Account #1]: New request. Flags [0x0001].
(Fri Oct 11 11:36:47 2019) [sssd[be[ipa.domain]]] [dp_attach_req] (0x0400): Number of
active DP request: 1
(Fri Oct 11 11:36:47 2019) [sssd[be[ipa.domain]]] [sss_domain_get_state] (0x1000): Domain
ipa.domain is Active
(Fri Oct 11 11:36:47 2019) [sssd[be[ipa.domain]]] [sss_domain_get_state] (0x1000): Domain
ad.domain.root is Active
(Fri Oct 11 11:36:47 2019) [sssd[be[ipa.domain]]] [sss_domain_get_state] (0x1000): Domain
ad.domain is Active
(Fri Oct 11 11:36:47 2019) [sssd[be[ipa.domain]]] [sss_domain_get_state] (0x1000): Domain
ipa.domain is Active
(Fri Oct 11 11:36:47 2019) [sssd[be[ipa.domain]]] [sss_domain_get_state] (0x1000): Domain
ad.domain.root is Active
(Fri Oct 11 11:36:47 2019) [sssd[be[ipa.domain]]] [sss_domain_get_state] (0x1000): Domain
ad.domain is Active
(Fri Oct 11 11:36:47 2019) [sssd[be[ipa.domain]]] [sdap_id_op_connect_step] (0x4000):
reusing cached connection
(Fri Oct 11 11:36:47 2019) [sssd[be[ipa.domain]]] [sdap_id_op_connect_step] (0x4000):
reusing cached connection
(Fri Oct 11 11:36:47 2019) [sssd[be[ipa.domain]]] [ipa_get_ad_override_connect_done]
(0x4000): Searching for overrides in view [Default Trust View] with filter
[(&(objectClass=ipaUserOverride)(uid=aduser))].
(Fri Oct 11 11:36:47 2019) [sssd[be[ipa.domain]]] [sdap_print_server] (0x2000): Searching
10.100.22.178:389
(Fri Oct 11 11:36:47 2019) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x0400):
calling ldap_search_ext with [(&(objectClass=ipaUserOverride)(uid=aduser))][cn=Default
Trust View,cn=views,cn=accounts,dc=internal,dc=ipa,dc=bc].
(Fri Oct 11 11:36:47 2019) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x2000):
ldap_search_ext called, msgid = 17
(Fri Oct 11 11:36:47 2019) [sssd[be[ipa.domain]]] [sdap_op_add] (0x2000): New operation 17
timeout 6
(Fri Oct 11 11:36:47 2019) [sssd[be[ipa.domain]]] [sdap_process_result] (0x2000): Trace:
sh[0x55ded6075c90], connected[1], ops[0x55ded60ca7f0], ldap[0x55ded604a720]
(Fri Oct 11 11:36:47 2019) [sssd[be[ipa.domain]]] [sdap_process_message] (0x4000): Message
type: [LDAP_RES_SEARCH_RESULT]
(Fri Oct 11 11:36:47 2019) [sssd[be[ipa.domain]]] [sdap_get_generic_op_finished] (0x0400):
Search result: Success(0), no errmsg set
(Fri Oct 11 11:36:47 2019) [sssd[be[ipa.domain]]] [sdap_op_destructor] (0x2000): Operation
17 finished
(Fri Oct 11 11:36:47 2019) [sssd[be[ipa.domain]]] [ipa_get_ad_override_done] (0x4000): No
override found with filter [(&(objectClass=ipaUserOverride)(uid=aduser))].
(Fri Oct 11 11:36:47 2019) [sssd[be[ipa.domain]]] [sdap_id_op_destroy] (0x4000): releasing
operation connection
(Fri Oct 11 11:36:47 2019) [sssd[be[ipa.domain]]] [sss_domain_get_state] (0x1000): Domain
ipa.domain is Active
(Fri Oct 11 11:36:47 2019) [sssd[be[ipa.domain]]] [sss_domain_get_state] (0x1000): Domain
ad.domain.root is Active
(Fri Oct 11 11:36:47 2019) [sssd[be[ipa.domain]]] [sss_domain_get_state] (0x1000): Domain
ad.domain is Active
(Fri Oct 11 11:36:47 2019) [sssd[be[ipa.domain]]] [sdap_id_op_connect_step] (0x4000):
reusing cached connection
(Fri Oct 11 11:36:47 2019) [sssd[be[ipa.domain]]] [ipa_s2n_get_acct_info_send] (0x0400):
Sending request_type: [REQ_FULL_WITH_MEMBERS] for trust user [aduser] to IPA server
(Fri Oct 11 11:36:47 2019) [sssd[be[ipa.domain]]] [ipa_s2n_exop_send] (0x0400): Executing
extended operation
(Fri Oct 11 11:36:47 2019) [sssd[be[ipa.domain]]] [ipa_s2n_exop_send] (0x2000):
ldap_extended_operation sent, msgid = 18
(Fri Oct 11 11:36:47 2019) [sssd[be[ipa.domain]]] [sdap_op_add] (0x2000): New operation 18
timeout 6
(Fri Oct 11 11:36:47 2019) [sssd[be[ipa.domain]]] [sdap_process_result] (0x2000): Trace:
sh[0x55ded6075c90], connected[1], ops[0x55ded60a09b0], ldap[0x55ded604a720]
(Fri Oct 11 11:36:47 2019) [sssd[be[ipa.domain]]] [sdap_process_result] (0x2000): Trace:
end of ldap_result list
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sdap_process_result] (0x2000): Trace:
sh[0x55ded6075c90], connected[1], ops[0x55ded60a09b0], ldap[0x55ded604a720]
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sdap_process_message] (0x4000): Message
type: [LDAP_RES_EXTENDED]
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [ipa_s2n_exop_done] (0x0040):
ldap_extended_operation result: No such object(32), (null).
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sdap_op_destructor] (0x2000): Operation
18 finished
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sysdb_cache_search_groups] (0x2000):
Search groups with filter: (&(objectCategory=group)(ghost=aduser(a)ad.domain))
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sysdb_cache_search_groups] (0x2000): No
such entry
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sysdb_delete_user] (0x0400): Error: 2
(No such file or directory)
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sdap_id_op_done] (0x4000): releasing
operation connection
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sdap_id_op_destroy] (0x4000): releasing
operation connection
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [dp_req_done] (0x0400): DP Request
[Account #1]: Request handler finished [0]: Success
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [_dp_req_recv] (0x0400): DP Request
[Account #1]: Receiving request data.
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [dp_req_reply_list_success] (0x0400): DP
Request [Account #1]: Finished. Success.
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [dp_req_reply_std] (0x1000): DP Request
[Account #1]: Returning [Success]: 0,0,Success
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [dp_table_value_destructor] (0x0400):
Removing [0:1:0x0001:1::ad.domain:name=aduser@ad.domain] from reply table
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [dp_req_destructor] (0x0400): DP Request
[Account #1]: Request removed.
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [dp_req_destructor] (0x0400): Number of
active DP request: 0
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sdap_process_result] (0x2000): Trace:
sh[0x55ded6075c90], connected[1], ops[(nil)], ldap[0x55ded604a720]
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sdap_process_result] (0x2000): Trace:
end of ldap_result list
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sbus_dispatch] (0x4000): dbus conn:
0x55ded6099250
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sbus_dispatch] (0x4000): Dispatching.
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sbus_message_handler] (0x2000):
Received SBUS method org.freedesktop.sssd.dataprovider.getAccountInfo on path
/org/freedesktop/sssd/dataprovider
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sbus_get_sender_id_send] (0x2000): Not
a sysbus message, quit
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [dp_get_account_info_handler] (0x0200):
Got request for [0x1][BE_REQ_USER][name=aduser(a)ad.domain]
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [dp_attach_req] (0x0400): DP Request
[Account #2]: New request. Flags [0x0001].
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [dp_attach_req] (0x0400): Number of
active DP request: 1
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sss_domain_get_state] (0x1000): Domain
ipa.domain is Active
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sss_domain_get_state] (0x1000): Domain
ipa.domain is Active
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sdap_id_op_connect_step] (0x4000):
reusing cached connection
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sdap_search_user_next_base] (0x0400):
Searching for users with base [cn=accounts,dc=internal,dc=ipa,dc=bc]
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sdap_print_server] (0x2000): Searching
10.100.22.178:389
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x0400):
calling ldap_search_ext with
[(&(|(krbPrincipalName=aduser@ad.domain)(mail=aduser@ad.domain)(krbPrincipalName=aduser\\@ad.domain@ipa.domain))(objectclass=posixAccount)(uid=*)(&(uidNumber=*)(!(uidNumber=0))))][cn=accounts,dc=internal,dc=ipa,dc=bc].
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x1000):
Requesting attrs: [objectClass]
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x1000):
Requesting attrs: [uid]
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x1000):
Requesting attrs: [userPassword]
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x1000):
Requesting attrs: [uidNumber]
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x1000):
Requesting attrs: [gidNumber]
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x1000):
Requesting attrs: [gecos]
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x1000):
Requesting attrs: [homeDirectory]
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x1000):
Requesting attrs: [loginShell]
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x1000):
Requesting attrs: [krbPrincipalName]
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x1000):
Requesting attrs: [cn]
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x1000):
Requesting attrs: [memberOf]
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x1000):
Requesting attrs: [ipaUniqueID]
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x1000):
Requesting attrs: [ipaNTSecurityIdentifier]
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x1000):
Requesting attrs: [modifyTimestamp]
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x1000):
Requesting attrs: [entryUSN]
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x1000):
Requesting attrs: [shadowLastChange]
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x1000):
Requesting attrs: [shadowMin]
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x1000):
Requesting attrs: [shadowMax]
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x1000):
Requesting attrs: [shadowWarning]
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x1000):
Requesting attrs: [shadowInactive]
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x1000):
Requesting attrs: [shadowExpire]
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x1000):
Requesting attrs: [shadowFlag]
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x1000):
Requesting attrs: [krbLastPwdChange]
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x1000):
Requesting attrs: [krbPasswordExpiration]
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x1000):
Requesting attrs: [pwdAttribute]
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x1000):
Requesting attrs: [authorizedService]
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x1000):
Requesting attrs: [accountExpires]
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x1000):
Requesting attrs: [userAccountControl]
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x1000):
Requesting attrs: [nsAccountLock]
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x1000):
Requesting attrs: [host]
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x1000):
Requesting attrs: [loginDisabled]
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x1000):
Requesting attrs: [loginExpirationTime]
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x1000):
Requesting attrs: [loginAllowedTimeMap]
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x1000):
Requesting attrs: [ipaSshPubKey]
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x1000):
Requesting attrs: [ipaUserAuthType]
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x1000):
Requesting attrs: [userCertificate;binary]
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x1000):
Requesting attrs: [mail]
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x2000):
ldap_search_ext called, msgid = 19
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sdap_op_add] (0x2000): New operation 19
timeout 6
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sdap_process_result] (0x2000): Trace:
sh[0x55ded6075c90], connected[1], ops[0x55ded607f940], ldap[0x55ded604a720]
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sdap_process_message] (0x4000): Message
type: [LDAP_RES_SEARCH_RESULT]
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sdap_get_generic_op_finished] (0x0400):
Search result: Success(0), no errmsg set
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sdap_op_destructor] (0x2000): Operation
19 finished
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sdap_search_user_process] (0x0400):
Search for users, returned 0 results.
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sdap_search_user_process] (0x2000):
Retrieved total 0 users
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sdap_id_op_done] (0x4000): releasing
operation connection
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sysdb_cache_search_groups] (0x2000):
Search groups with filter: (&(objectCategory=group)(ghost=aduser(a)ad.domain))
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sysdb_cache_search_groups] (0x2000): No
such entry
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sysdb_delete_user] (0x0400): Error: 2
(No such file or directory)
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sysdb_search_user_by_upn] (0x0400): No
entry with upn [aduser(a)ad.domain] found.
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [ipa_id_get_account_info_orig_done]
(0x0080): Object not found, ending request
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [dp_req_done] (0x0400): DP Request
[Account #2]: Request handler finished [0]: Success
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [_dp_req_recv] (0x0400): DP Request
[Account #2]: Receiving request data.
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [dp_req_reply_list_success] (0x0400): DP
Request [Account #2]: Finished. Success.
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [dp_req_reply_std] (0x1000): DP Request
[Account #2]: Returning [Success]: 0,0,Success
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [dp_table_value_destructor] (0x0400):
Removing [0:1:0x0001:1:U:ipa.domain:name=aduser@ad.domain] from reply table
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [dp_req_destructor] (0x0400): DP Request
[Account #2]: Request removed.
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [dp_req_destructor] (0x0400): Number of
active DP request: 0
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sdap_process_result] (0x2000): Trace:
sh[0x55ded6075c90], connected[1], ops[(nil)], ldap[0x55ded604a720]
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sdap_process_result] (0x2000): Trace:
end of ldap_result list
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sbus_dispatch] (0x4000): dbus conn:
0x55ded6099250
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sbus_dispatch] (0x4000): Dispatching.
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sbus_message_handler] (0x2000):
Received SBUS method org.freedesktop.sssd.dataprovider.getAccountInfo on path
/org/freedesktop/sssd/dataprovider
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sbus_get_sender_id_send] (0x2000): Not
a sysbus message, quit
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [dp_get_account_info_handler] (0x0200):
Got request for [0x1][BE_REQ_USER][name=aduser(a)ad.domain]
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [dp_attach_req] (0x0400): DP Request
[Account #3]: New request. Flags [0x0001].
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [dp_attach_req] (0x0400): Number of
active DP request: 1
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sss_domain_get_state] (0x1000): Domain
ipa.domain is Active
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sss_domain_get_state] (0x1000): Domain
ad.domain.root is Active
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sss_domain_get_state] (0x1000): Domain
ad.domain is Active
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sss_domain_get_state] (0x1000): Domain
ipa.domain is Active
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sss_domain_get_state] (0x1000): Domain
ad.domain.root is Active
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sss_domain_get_state] (0x1000): Domain
ad.domain is Active
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sss_domain_get_state] (0x1000): Domain
ipa.domain is Active
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sss_domain_get_state] (0x1000): Domain
ad.domain.root is Active
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sss_domain_get_state] (0x1000): Domain
ad.domain is Active
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sdap_id_op_connect_step] (0x4000):
reusing cached connection
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [ipa_s2n_get_acct_info_send] (0x0400):
Sending request_type: [REQ_FULL_WITH_MEMBERS] for trust user [aduser(a)ad.domain] to IPA
server
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [ipa_s2n_exop_send] (0x0400): Executing
extended operation
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [ipa_s2n_exop_send] (0x2000):
ldap_extended_operation sent, msgid = 20
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sdap_op_add] (0x2000): New operation 20
timeout 6
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sdap_process_result] (0x2000): Trace:
sh[0x55ded6075c90], connected[1], ops[0x55ded6085280], ldap[0x55ded604a720]
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sdap_process_message] (0x4000): Message
type: [LDAP_RES_EXTENDED]
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [ipa_s2n_exop_done] (0x0040):
ldap_extended_operation result: No such object(32), (null).
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sdap_op_destructor] (0x2000): Operation
20 finished
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sysdb_search_user_by_upn] (0x0400): No
entry with upn [aduser(a)ad.domain] found.
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sdap_id_op_done] (0x4000): releasing
operation connection
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [dp_req_done] (0x0400): DP Request
[Account #3]: Request handler finished [0]: Success
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [_dp_req_recv] (0x0400): DP Request
[Account #3]: Receiving request data.
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [dp_req_reply_list_success] (0x0400): DP
Request [Account #3]: Finished. Success.
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [dp_req_reply_std] (0x1000): DP Request
[Account #3]: Returning [Success]: 0,0,Success
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [dp_table_value_destructor] (0x0400):
Removing [0:1:0x0001:1:U:ad.domain:name=aduser@ad.domain] from reply table
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [dp_req_destructor] (0x0400): DP Request
[Account #3]: Request removed.
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [dp_req_destructor] (0x0400): Number of
active DP request: 0
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sdap_process_result] (0x2000): Trace:
sh[0x55ded6075c90], connected[1], ops[(nil)], ldap[0x55ded604a720]
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sdap_process_result] (0x2000): Trace:
end of ldap_result list
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sbus_dispatch] (0x4000): dbus conn:
0x55ded6099250
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sbus_dispatch] (0x4000): Dispatching.
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sbus_message_handler] (0x2000):
Received SBUS method org.freedesktop.sssd.dataprovider.getAccountInfo on path
/org/freedesktop/sssd/dataprovider
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sbus_get_sender_id_send] (0x2000): Not
a sysbus message, quit
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [dp_get_account_info_handler] (0x0200):
Got request for [0x1][BE_REQ_USER][name=aduser(a)ad.domain]
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [dp_attach_req] (0x0400): DP Request
[Account #4]: New request. Flags [0x0001].
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [dp_attach_req] (0x0400): Number of
active DP request: 1
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sss_domain_get_state] (0x1000): Domain
ipa.domain is Active
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sss_domain_get_state] (0x1000): Domain
ad.domain.root is Active
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sss_domain_get_state] (0x1000): Domain
ipa.domain is Active
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sss_domain_get_state] (0x1000): Domain
ad.domain.root is Active
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sss_domain_get_state] (0x1000): Domain
ipa.domain is Active
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sss_domain_get_state] (0x1000): Domain
ad.domain.root is Active
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sdap_id_op_connect_step] (0x4000):
reusing cached connection
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [ipa_s2n_get_acct_info_send] (0x0400):
Sending request_type: [REQ_FULL_WITH_MEMBERS] for trust user [aduser(a)ad.domain] to IPA
server
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [ipa_s2n_exop_send] (0x0400): Executing
extended operation
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [ipa_s2n_exop_send] (0x2000):
ldap_extended_operation sent, msgid = 21
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sdap_op_add] (0x2000): New operation 21
timeout 6
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sdap_process_result] (0x2000): Trace:
sh[0x55ded6075c90], connected[1], ops[0x55ded609c5e0], ldap[0x55ded604a720]
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sdap_process_message] (0x4000): Message
type: [LDAP_RES_EXTENDED]
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [ipa_s2n_exop_done] (0x0040):
ldap_extended_operation result: No such object(32), (null).
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sdap_op_destructor] (0x2000): Operation
21 finished
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sysdb_search_user_by_upn] (0x0400): No
entry with upn [aduser(a)ad.domain] found.
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sdap_id_op_done] (0x4000): releasing
operation connection
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [dp_req_done] (0x0400): DP Request
[Account #4]: Request handler finished [0]: Success
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [_dp_req_recv] (0x0400): DP Request
[Account #4]: Receiving request data.
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [dp_req_reply_list_success] (0x0400): DP
Request [Account #4]: Finished. Success.
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [dp_req_reply_std] (0x1000): DP Request
[Account #4]: Returning [Success]: 0,0,Success
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [dp_table_value_destructor] (0x0400):
Removing [0:1:0x0001:1:U:ad.domain.root:name=aduser@ad.domain] from reply table
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [dp_req_destructor] (0x0400): DP Request
[Account #4]: Request removed.
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [dp_req_destructor] (0x0400): Number of
active DP request: 0
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sdap_process_result] (0x2000): Trace:
sh[0x55ded6075c90], connected[1], ops[(nil)], ldap[0x55ded604a720]
(Fri Oct 11 11:36:49 2019) [sssd[be[ipa.domain]]] [sdap_process_result] (0x2000): Trace:
end of ldap_result list
For the server-side, here goes:
[root@el6376 sssd]# id aduser(a)ad.domain
uid=94844(aduser(a)ad.domain) gid=7000(devel(a)ipa.domain)
groups=7000(devel@ipa.domain),6004109(bgcdelegategrantsendonbehalfmailboxes(a)ad.domain.root),4813542(usr
prd juap pusr ipram uat-itt(a)ad.domain),4722070(usr prd juap pusr ipram
telco(a)ad.domain),4747365(usr prd fs ior retail only r(a)ad.domain),4813548(usr prd juap pusr
ipram prd(a)ad.domain),4565737(usr prd juap sadm linux ops(a)ad.domain),4724885(usr prd bc
allow internet(a)ad.domain),4669613(usr prd fs tls project m(a)ad.domain),4701260(usr prd fs
wfm_scanner r(a)ad.domain),4685097(usr prd juap pusr archer(a)ad.domain),4511203(usr prd
ldap_browser_x(a)ad.domain),4741913(usr prd bi cop retail(a)ad.domain),4631994(usr prd fs
uts_uti r(a)ad.domain),4634811(usr prd fs uts_uti w(a)ad.domain),4592707(usr prd dct
rousers(a)ad.domain),4727774(usr prd arch users(a)ad.domain),4745707(usr prd mxp
user@ad.domain),1862800016(acc-el3844-grp@ipa.domain),4000513,1862800000(admins@ipa.domain),1862800840(sd-linux@ipa.domain),1862800014(ipa-test-hbac(a)ipa.domain),1862800055(
hl-is_linux_servers@ipa.domain),1862800023(acc-el6988-grp(a)ipa.domain)
Thanks again,
Seb.