Thank you Jakub for your hints.
I created a brand new instance of FreeIPA client and connected it to the existing
servers.
Now I cannot resolve anytthing on a client (getent group $group, getent passwd $user yield
no results).
For the same exact users/groups I tested on the client, they get resolved on the server.
Awkwardly, in the sssd log files on the client I can see that the corresponding user/group
entries are present.
When I issue getent passwd ad_user(a)ad.domain on a client (I sanitized names in the log
file), entries for that user and his groups are present (Received [144] groups from the
IPA server).
Is there anything wrong in this log file from the client host?
I see some s2n exop operations fail, so the IPA server definitely has issues
returning information about AD users and groups.
Following log message may give a clue:
generic_ext_search_handler] (0x0040): sdap_get_generic_ext_recv failed [110]: Connection
timed out
it means gathering an answer for REQ_FULL_WITH_MEMBERS wasn't complete
in time SSSD on the client expected. You may want to increate timeouts.
(Thu Jun 7 13:28:23 2018) [sssd[be[ipa.domain]]] [dp_get_account_info_handler] (0x0200):
Got request for [0x1][BE_REQ_USER][name=ad_user(a)ad.domain]
(Thu Jun 7 13:28:23 2018) [sssd[be[ipa.domain]]] [dp_attach_req] (0x0400): DP Request
[Account #1]: New request. Flags [0x0001].
(Thu Jun 7 13:28:23 2018) [sssd[be[ipa.domain]]] [dp_attach_req] (0x0400): Number of
active DP request: 1
(Thu Jun 7 13:28:23 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x0400):
calling ldap_search_ext with
[(&(objectClass=ipaUserOverride)(uid=ad_user))][cn=Default Trust
View,cn=views,cn=accounts,dc=ipa,dc=domain].
(Thu Jun 7 13:28:23 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_op_finished] (0x0400):
Search result: Success(0), no errmsg set
(Thu Jun 7 13:28:23 2018) [sssd[be[ipa.domain]]] [ipa_s2n_get_acct_info_send] (0x0400):
Sending request_type: [REQ_FULL_WITH_MEMBERS] for trust user [ad_user] to IPA server
(Thu Jun 7 13:28:23 2018) [sssd[be[ipa.domain]]] [ipa_s2n_exop_send] (0x0400): Executing
extended operation
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [ipa_s2n_exop_done] (0x0400):
ldap_extended_operation result: Success(0), (null).
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [ipa_s2n_get_user_done] (0x0400):
Received [144] groups in group list from IPA Server
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [ipa_s2n_get_user_done] (0x0400):
[ad_user(a)ad.domain].
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [ipa_s2n_get_user_done] (0x0400):
[group1(a)ad.domain].
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [ipa_s2n_get_user_done] (0x0400):
[group2(a)ad.domain].
(...) sanitized other groups out of 144 groups returned (...)
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [ipa_s2n_get_user_done] (0x0400):
[ad_admins(a)ipa.domain].
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [ipa_s2n_get_list_step] (0x0400):
Sending request_type: [REQ_FULL_WITH_MEMBERS] for object [ad_user(a)ad.domain].
(Thu Jun 7 13:28:29 2018) [sssd[be[ipa.domain]]] [ipa_s2n_exop_send] (0x0400): Executing
extended operation
(Thu Jun 7 13:28:31 2018) [sssd[be[ipa.domain]]] [dp_get_account_info_handler] (0x0200):
Got request for [0x1][BE_REQ_USER][name=ad_user(a)ad.domain]
(Thu Jun 7 13:28:31 2018) [sssd[be[ipa.domain]]] [dp_attach_req] (0x0400): DP Request
[Account #2]: New request. Flags [0x0001].
(Thu Jun 7 13:28:31 2018) [sssd[be[ipa.domain]]] [dp_attach_req] (0x0400): Number of
active DP request: 2
(Thu Jun 7 13:28:31 2018) [sssd[be[ipa.domain]]] [sdap_search_user_next_base] (0x0400):
Searching for users with base [cn=accounts,dc=ipa,dc=domain]
(Thu Jun 7 13:28:31 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x0400):
calling ldap_search_ext with
[(&(|(krbPrincipalName=ad_user@ad.domain)(mail=ad_user@ad.domain)(krbPrincipalName=ad_user\\@ad.domain@ipa.domain))(objectclass=posixAccount)(uid=*)(&(uidNumber=*)(!(uidNumber=0))))][cn=accounts,dc=ipa,dc=domain].
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [ipa_s2n_get_list_next] (0x0040): s2n
exop request failed.
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [ipa_s2n_get_list_done] (0x0040): s2n
get_fqlist request failed.
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [sdap_id_op_done] (0x0200):
communication error on cached connection, moving to next server
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [fo_resolve_service_send] (0x0100):
Trying to resolve service 'IPA'
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [resolve_srv_send] (0x0200): The status
of SRV lookup is neutral
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [resolv_discover_srv_next_domain]
(0x0400): SRV resolution of service 'ldap'. Will use DNS discovery domain
'ipa.domain'
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [resolv_getsrv_send] (0x0100): Trying to
resolve SRV record of '_ldap._tcp.ipa.domain'
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [request_watch_destructor] (0x0400):
Deleting request watch
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [fo_discover_srv_done] (0x0400): Got
answer. Processing...
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [fo_discover_srv_done] (0x0400): Got 2
servers
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [fo_add_server_to_list] (0x0400):
Inserted primary server 'ipa-server.ipa.domain:389' to service 'IPA'
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [fo_add_server_to_list] (0x0400):
Inserted primary server 'ipa-server-2.ipa.domain:389' to service 'IPA'
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [set_srv_data_status] (0x0100): Marking
SRV lookup of service 'IPA' as 'resolved'
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [get_server_status] (0x0100): Hostname
resolution expired, resetting the server status of 'ipa-server.ipa.domain'
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [set_server_common_status] (0x0100):
Marking server 'ipa-server.ipa.domain' as 'name not resolved'
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [resolv_gethostbyname_files_send]
(0x0100): Trying to resolve A record of 'ipa-server.ipa.domain' in files
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [set_server_common_status] (0x0100):
Marking server 'ipa-server.ipa.domain' as 'resolving name'
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [resolv_gethostbyname_files_send]
(0x0100): Trying to resolve AAAA record of 'ipa-server.ipa.domain' in files
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [resolv_gethostbyname_next] (0x0200): No
more address families to retry
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [resolv_gethostbyname_dns_query]
(0x0100): Trying to resolve A record of 'ipa-server.ipa.domain' in DNS
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [request_watch_destructor] (0x0400):
Deleting request watch
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [set_server_common_status] (0x0100):
Marking server 'ipa-server.ipa.domain' as 'name resolved'
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [be_resolve_server_process] (0x0200):
Found address for server ipa-server.ipa.domain: [10.144.45.29] TTL 60
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [ipa_resolve_callback] (0x0400):
Constructed uri 'ldap://ipa-server.ipa.domain'
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [sssd_async_socket_init_send] (0x0400):
Setting 6 seconds timeout for connecting
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x0400):
calling ldap_search_ext with [(objectclass=*)][].
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_op_finished] (0x0400):
Search result: Success(0), no errmsg set
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [sdap_kinit_send] (0x0400): Attempting
kinit (default, host/ipa-client-centos6.ipa.domain, ipa.domain, 86400)
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [fo_resolve_service_send] (0x0100):
Trying to resolve service 'IPA'
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [resolve_srv_send] (0x0200): The status
of SRV lookup is resolved
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [be_resolve_server_process] (0x0200):
Found address for server ipa-server.ipa.domain: [10.144.45.29] TTL 60
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [create_tgt_req_send_buffer] (0x0400):
buffer size: 70
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [set_tgt_child_timeout] (0x0400):
Setting 6 seconds timeout for tgt child
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [write_pipe_handler] (0x0400): All data
has been sent!
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [read_pipe_handler] (0x0400): EOF
received, client finished
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [sdap_get_tgt_recv] (0x0400): Child
responded: 0 [FILE:/var/lib/sss/db/ccache_ipa.domain], expired on [1528457315]
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [sdap_cli_auth_step] (0x0100): expire
timeout is 900
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [sasl_bind_send] (0x0100): Executing
sasl bind mech: GSSAPI, user: host/ipa-client-centos6.ipa.domain
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [child_sig_handler] (0x0100): child
[6125] finished successfully.
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [sdap_cli_connect_recv] (0x0400):
Connection established.
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [fo_set_port_status] (0x0100): Marking
port 389 of server 'ipa-server.ipa.domain' as 'working'
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [set_server_common_status] (0x0100):
Marking server 'ipa-server.ipa.domain' as 'working'
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [fo_set_port_status] (0x0400): Marking
port 389 of duplicate server 'ipa-server.ipa.domain' as 'working'
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [ipa_s2n_get_acct_info_send] (0x0400):
Sending request_type: [REQ_FULL_WITH_MEMBERS] for trust user [ad_user] to IPA server
(Thu Jun 7 13:28:35 2018) [sssd[be[ipa.domain]]] [ipa_s2n_exop_send] (0x0400): Executing
extended operation
(Thu Jun 7 13:28:37 2018) [sssd[be[ipa.domain]]] [generic_ext_search_handler] (0x0040):
sdap_get_generic_ext_recv failed [110]: Connection timed out
(Thu Jun 7 13:28:37 2018) [sssd[be[ipa.domain]]] [sdap_get_users_done] (0x0040): Failed
to retrieve users [110][Connection timed out].
(Thu Jun 7 13:28:37 2018) [sssd[be[ipa.domain]]] [sdap_search_user_next_base] (0x0400):
Searching for users with base [cn=accounts,dc=ipa,dc=domain]
(Thu Jun 7 13:28:37 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x0400):
calling ldap_search_ext with
[(&(|(krbPrincipalName=ad_user@ad.domain)(mail=ad_user@ad.domain)(krbPrincipalName=ad_user\\@ad.domain@ipa.domain))(objectclass=posixAccount)(uid=*)(&(uidNumber=*)(!(uidNumber=0))))][cn=accounts,dc=ipa,dc=domain].
(Thu Jun 7 13:28:37 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_op_finished] (0x0400):
Search result: Success(0), no errmsg set
(Thu Jun 7 13:28:37 2018) [sssd[be[ipa.domain]]] [sdap_search_user_process] (0x0400):
Search for users, returned 0 results.
(Thu Jun 7 13:28:37 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:28:37 2018) [sssd[be[ipa.domain]]] [sysdb_delete_user] (0x0400): Error: 2
(No such file or directory)
(Thu Jun 7 13:28:37 2018) [sssd[be[ipa.domain]]] [sysdb_search_user_by_upn] (0x0400): No
entry with upn [ad_user(a)ad.domain] found.
(Thu Jun 7 13:28:37 2018) [sssd[be[ipa.domain]]] [ipa_id_get_account_info_orig_done]
(0x0080): Object not found, ending request
(Thu Jun 7 13:28:37 2018) [sssd[be[ipa.domain]]] [dp_req_done] (0x0400): DP Request
[Account #2]: Request handler finished [0]: Success
(Thu Jun 7 13:28:37 2018) [sssd[be[ipa.domain]]] [_dp_req_recv] (0x0400): DP Request
[Account #2]: Receiving request data.
(Thu Jun 7 13:28:37 2018) [sssd[be[ipa.domain]]] [dp_req_reply_list_success] (0x0400): DP
Request [Account #2]: Finished. Success.
(Thu Jun 7 13:28:37 2018) [sssd[be[ipa.domain]]] [dp_table_value_destructor] (0x0400):
Removing [0:1:0x0001:1:U:ipa.domain:name=ad_user@ad.domain] from reply table
(Thu Jun 7 13:28:37 2018) [sssd[be[ipa.domain]]] [dp_req_destructor] (0x0400): DP Request
[Account #2]: Request removed.
(Thu Jun 7 13:28:37 2018) [sssd[be[ipa.domain]]] [dp_req_destructor] (0x0400): Number of
active DP request: 1
(Thu Jun 7 13:28:37 2018) [sssd[be[ipa.domain]]] [dp_get_account_info_handler] (0x0200):
Got request for [0x1][BE_REQ_USER][name=ad_user(a)ad.domain]
(Thu Jun 7 13:28:37 2018) [sssd[be[ipa.domain]]] [dp_attach_req] (0x0400): DP Request
[Account #3]: New request. Flags [0x0001].
(Thu Jun 7 13:28:37 2018) [sssd[be[ipa.domain]]] [dp_attach_req] (0x0400): Number of
active DP request: 2
(Thu Jun 7 13:28:37 2018) [sssd[be[ipa.domain]]] [ipa_s2n_get_acct_info_send] (0x0400):
Sending request_type: [REQ_FULL_WITH_MEMBERS] for trust user [ad_user(a)ad.domain] to IPA
server
(Thu Jun 7 13:28:37 2018) [sssd[be[ipa.domain]]] [ipa_s2n_exop_send] (0x0400): Executing
extended operation
(Thu Jun 7 13:28:41 2018) [sssd[be[ipa.domain]]] [ipa_s2n_get_user_done] (0x0040): s2n
exop request failed.
(Thu Jun 7 13:28:41 2018) [sssd[be[ipa.domain]]] [sdap_id_op_done] (0x0200):
communication error on cached connection, moving to next server
(Thu Jun 7 13:28:41 2018) [sssd[be[ipa.domain]]] [fo_resolve_service_send] (0x0100):
Trying to resolve service 'IPA'
(Thu Jun 7 13:28:41 2018) [sssd[be[ipa.domain]]] [resolve_srv_send] (0x0200): The status
of SRV lookup is resolved
(Thu Jun 7 13:28:41 2018) [sssd[be[ipa.domain]]] [resolv_gethostbyname_files_send]
(0x0100): Trying to resolve A record of 'ipa-server-2.ipa.domain' in files
(Thu Jun 7 13:28:41 2018) [sssd[be[ipa.domain]]] [set_server_common_status] (0x0100):
Marking server 'ipa-server-2.ipa.domain' as 'resolving name'
(Thu Jun 7 13:28:41 2018) [sssd[be[ipa.domain]]] [resolv_gethostbyname_files_send]
(0x0100): Trying to resolve AAAA record of 'ipa-server-2.ipa.domain' in files
(Thu Jun 7 13:28:41 2018) [sssd[be[ipa.domain]]] [resolv_gethostbyname_next] (0x0200): No
more address families to retry
(Thu Jun 7 13:28:41 2018) [sssd[be[ipa.domain]]] [resolv_gethostbyname_dns_query]
(0x0100): Trying to resolve A record of 'ipa-server-2.ipa.domain' in DNS
(Thu Jun 7 13:28:41 2018) [sssd[be[ipa.domain]]] [request_watch_destructor] (0x0400):
Deleting request watch
(Thu Jun 7 13:28:41 2018) [sssd[be[ipa.domain]]] [set_server_common_status] (0x0100):
Marking server 'ipa-server-2.ipa.domain' as 'name resolved'
(Thu Jun 7 13:28:41 2018) [sssd[be[ipa.domain]]] [be_resolve_server_process] (0x0200):
Found address for server ipa-server-2.ipa.domain: [10.144.46.20] TTL 54
(Thu Jun 7 13:28:41 2018) [sssd[be[ipa.domain]]] [ipa_resolve_callback] (0x0400):
Constructed uri 'ldap://ipa-server-2.ipa.domain'
(Thu Jun 7 13:28:41 2018) [sssd[be[ipa.domain]]] [sssd_async_socket_init_send] (0x0400):
Setting 6 seconds timeout for connecting
(Thu Jun 7 13:28:43 2018) [sssd[be[ipa.domain]]] [ipa_s2n_get_user_done] (0x0040): s2n
exop request failed.
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [sssd_async_connect_done] (0x0020):
connect failed [113][No route to host].
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [sssd_async_socket_init_done] (0x0020):
sdap_async_sys_connect request failed: [113]: No route to host.
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [sssd_async_socket_state_destructor]
(0x0400): closing socket [29]
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [sss_ldap_init_sys_connect_done]
(0x0020): sssd_async_socket_init request failed: [113]: No route to host.
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [sdap_sys_connect_done] (0x0020):
sdap_async_connect_call request failed: [113]: No route to host.
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [fo_set_port_status] (0x0100): Marking
port 389 of server 'ipa-server-2.ipa.domain' as 'not working'
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [fo_set_port_status] (0x0400): Marking
port 389 of duplicate server 'ipa-server-2.ipa.domain' as 'not working'
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [fo_resolve_service_send] (0x0100):
Trying to resolve service 'IPA'
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [get_port_status] (0x0080): SSSD is
unable to complete the full connection request, this internal status does not necessarily
indicate network port issues.
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [get_port_status] (0x0100): Resetting
the status of port 0 for server 'ipa-server.ipa.domain'
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [be_resolve_server_process] (0x0200):
Found address for server ipa-server.ipa.domain: [10.144.45.29] TTL 60
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [ipa_resolve_callback] (0x0400):
Constructed uri 'ldap://ipa-server.ipa.domain'
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [sssd_async_socket_init_send] (0x0400):
Setting 6 seconds timeout for connecting
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x0400):
calling ldap_search_ext with [(objectclass=*)][].
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_op_finished] (0x0400):
Search result: Success(0), no errmsg set
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [sdap_kinit_send] (0x0400): Attempting
kinit (default, host/ipa-client-centos6.ipa.domain, ipa.domain, 86400)
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [fo_resolve_service_send] (0x0100):
Trying to resolve service 'IPA'
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [be_resolve_server_process] (0x0200):
Found address for server ipa-server.ipa.domain: [10.144.45.29] TTL 60
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [create_tgt_req_send_buffer] (0x0400):
buffer size: 70
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [set_tgt_child_timeout] (0x0400):
Setting 6 seconds timeout for tgt child
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [write_pipe_handler] (0x0400): All data
has been sent!
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [read_pipe_handler] (0x0400): EOF
received, client finished
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [sdap_get_tgt_recv] (0x0400): Child
responded: 0 [FILE:/var/lib/sss/db/ccache_ipa.domain], expired on [1528457324]
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [sdap_cli_auth_step] (0x0100): expire
timeout is 900
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [sasl_bind_send] (0x0100): Executing
sasl bind mech: GSSAPI, user: host/ipa-client-centos6.ipa.domain
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [child_sig_handler] (0x0100): child
[6126] finished successfully.
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [sdap_cli_connect_recv] (0x0400):
Connection established.
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [fo_set_port_status] (0x0100): Marking
port 0 of server 'ipa-server.ipa.domain' as 'working'
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [set_server_common_status] (0x0100):
Marking server 'ipa-server.ipa.domain' as 'working'
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [fo_set_port_status] (0x0400): Marking
port 0 of duplicate server 'ipa-server.ipa.domain' as 'working'
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [ipa_s2n_get_acct_info_send] (0x0400):
Sending request_type: [REQ_FULL_WITH_MEMBERS] for trust user [ad_user] to IPA server
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [ipa_s2n_exop_send] (0x0400): Executing
extended operation
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [ipa_s2n_get_acct_info_send] (0x0400):
Sending request_type: [REQ_FULL_WITH_MEMBERS] for trust user [ad_user(a)ad.domain] to IPA
server
(Thu Jun 7 13:28:44 2018) [sssd[be[ipa.domain]]] [ipa_s2n_exop_send] (0x0400): Executing
extended operation
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [ipa_s2n_get_user_done] (0x0040): s2n
exop request failed.
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [sdap_id_op_done] (0x0200):
communication error on cached connection, moving to next server
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [fo_resolve_service_send] (0x0100):
Trying to resolve service 'IPA'
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [get_port_status] (0x0080): SSSD is
unable to complete the full connection request, this internal status does not necessarily
indicate network port issues.
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [get_port_status] (0x0080): SSSD is
unable to complete the full connection request, this internal status does not necessarily
indicate network port issues.
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [get_port_status] (0x0080): SSSD is
unable to complete the full connection request, this internal status does not necessarily
indicate network port issues.
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [fo_resolve_service_send] (0x0020): No
available servers for service 'IPA'
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [sdap_id_op_connect_done] (0x0020):
Failed to connect, going offline (5 [Input/output error])
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [be_ptask_create] (0x0400): Periodic
task [Check if online (periodic)] was created
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [be_ptask_schedule] (0x0400): Task
[Check if online (periodic)]: scheduling task 74 seconds from now [1528371004]
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [be_run_offline_cb] (0x0080): Going
offline. Running callbacks.
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [ipa_subdomain_account_done] (0x0040):
ipa_get_*_acct request failed: [11]: Resource temporarily unavailable.
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [dp_req_done] (0x0400): DP Request
[Account #1]: Request handler finished [0]: Success
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [_dp_req_recv] (0x0400): DP Request
[Account #1]: Receiving request data.
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [dp_req_reply_list_success] (0x0400): DP
Request [Account #1]: Finished. Success.
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [dp_table_value_destructor] (0x0400):
Removing [0:1:0x0001:1::ad.domain:name=ad_user@ad.domain] from reply table
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [dp_req_destructor] (0x0400): DP Request
[Account #1]: Request removed.
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [dp_req_destructor] (0x0400): Number of
active DP request: 1
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [ipa_s2n_get_user_done] (0x0040): s2n
exop request failed.
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [ipa_subdomain_account_done] (0x0040):
ipa_get_*_acct request failed: [11]: Resource temporarily unavailable.
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [dp_req_done] (0x0400): DP Request
[Account #3]: Request handler finished [0]: Success
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [_dp_req_recv] (0x0400): DP Request
[Account #3]: Receiving request data.
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [dp_req_reply_list_success] (0x0400): DP
Request [Account #3]: Finished. Success.
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [dp_table_value_destructor] (0x0400):
Removing [0:1:0x0001:1:U:ad.domain:name=ad_user@ad.domain] from reply table
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [dp_req_destructor] (0x0400): DP Request
[Account #3]: Request removed.
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [dp_req_destructor] (0x0400): Number of
active DP request: 0
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [be_ptask_offline_cb] (0x0400): Back end
is offline
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [be_ptask_disable] (0x0400): Task
[Subdomains Refresh]: disabling task
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [be_ptask_offline_cb] (0x0400): Back end
is offline
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [be_ptask_disable] (0x0400): Task [SUDO
Smart Refresh]: disabling task
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [be_ptask_offline_cb] (0x0400): Back end
is offline
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [be_ptask_disable] (0x0400): Task [SUDO
Full Refresh]: disabling task
(Thu Jun 7 13:28:50 2018) [sssd[be[ipa.domain]]] [remove_krb5_info_files] (0x0200): Could
not remove [/var/lib/sss/pubconf/kpasswdinfo.ipa.domain], [2][No such file or directory]
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [be_ptask_execute] (0x0400): Back end is
offline
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [be_ptask_execute] (0x0400): Task [Check
if online (periodic)]: executing task, timeout 60 seconds
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [set_server_common_status] (0x0100):
Marking server 'ipa-server.ipa.domain' as 'name not resolved'
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [fo_set_port_status] (0x0100): Marking
port 0 of server 'ipa-server.ipa.domain' as 'neutral'
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [fo_set_port_status] (0x0400): Marking
port 0 of duplicate server 'ipa-server.ipa.domain' as 'neutral'
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [set_srv_data_status] (0x0100): Marking
SRV lookup of service 'IPA' as 'neutral'
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [set_server_common_status] (0x0100):
Marking server 'ipa-server.ipa.domain' as 'name not resolved'
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [fo_set_port_status] (0x0100): Marking
port 389 of server 'ipa-server.ipa.domain' as 'neutral'
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [fo_set_port_status] (0x0400): Marking
port 389 of duplicate server 'ipa-server.ipa.domain' as 'neutral'
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [set_srv_data_status] (0x0100): Marking
SRV lookup of service 'IPA' as 'neutral'
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [set_server_common_status] (0x0100):
Marking server 'ipa-server-2.ipa.domain' as 'name not resolved'
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [fo_set_port_status] (0x0100): Marking
port 389 of server 'ipa-server-2.ipa.domain' as 'neutral'
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [fo_set_port_status] (0x0400): Marking
port 389 of duplicate server 'ipa-server-2.ipa.domain' as 'neutral'
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [dp_attach_req] (0x0400): DP Request
[Online Check #4]: New request. Flags [0000].
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [dp_attach_req] (0x0400): Number of
active DP request: 1
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [fo_resolve_service_send] (0x0100):
Trying to resolve service 'IPA'
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [resolv_gethostbyname_files_send]
(0x0100): Trying to resolve A record of 'ipa-server.ipa.domain' in files
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [set_server_common_status] (0x0100):
Marking server 'ipa-server.ipa.domain' as 'resolving name'
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [resolv_gethostbyname_files_send]
(0x0100): Trying to resolve AAAA record of 'ipa-server.ipa.domain' in files
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [be_ptask_done] (0x0400): Task [Check if
online (periodic)]: finished successfully
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [be_ptask_schedule] (0x0400): Task
[Check if online (periodic)]: scheduling task 79 seconds from last execution time
[1528371083]
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [resolv_gethostbyname_next] (0x0200): No
more address families to retry
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [resolv_gethostbyname_dns_query]
(0x0100): Trying to resolve A record of 'ipa-server.ipa.domain' in DNS
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [request_watch_destructor] (0x0400):
Deleting request watch
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [set_server_common_status] (0x0100):
Marking server 'ipa-server.ipa.domain' as 'name resolved'
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [be_resolve_server_process] (0x0200):
Found address for server ipa-server.ipa.domain: [10.144.45.29] TTL 0
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [ipa_resolve_callback] (0x0400):
Constructed uri 'ldap://ipa-server.ipa.domain'
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sssd_async_socket_init_send] (0x0400):
Setting 6 seconds timeout for connecting
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x0400):
calling ldap_search_ext with [(objectclass=*)][].
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_op_finished] (0x0400):
Search result: Success(0), no errmsg set
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_kinit_send] (0x0400): Attempting
kinit (default, host/ipa-client-centos6.ipa.domain, ipa.domain, 86400)
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [fo_resolve_service_send] (0x0100):
Trying to resolve service 'IPA'
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [be_resolve_server_process] (0x0200):
Found address for server ipa-server.ipa.domain: [10.144.45.29] TTL 0
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [create_tgt_req_send_buffer] (0x0400):
buffer size: 70
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [set_tgt_child_timeout] (0x0400):
Setting 6 seconds timeout for tgt child
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [write_pipe_handler] (0x0400): All data
has been sent!
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [read_pipe_handler] (0x0400): EOF
received, client finished
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_get_tgt_recv] (0x0400): Child
responded: 0 [FILE:/var/lib/sss/db/ccache_ipa.domain], expired on [1528457404]
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_cli_auth_step] (0x0100): expire
timeout is 900
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sasl_bind_send] (0x0100): Executing
sasl bind mech: GSSAPI, user: host/ipa-client-centos6.ipa.domain
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [child_sig_handler] (0x0100): child
[6165] finished successfully.
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_cli_connect_recv] (0x0400):
Connection established.
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [fo_set_port_status] (0x0100): Marking
port 0 of server 'ipa-server.ipa.domain' as 'working'
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [set_server_common_status] (0x0100):
Marking server 'ipa-server.ipa.domain' as 'working'
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [fo_set_port_status] (0x0400): Marking
port 0 of duplicate server 'ipa-server.ipa.domain' as 'working'
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [dp_req_done] (0x0400): DP Request
[Online Check #4]: Request handler finished [0]: Success
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [_dp_req_recv] (0x0400): DP Request
[Online Check #4]: Receiving request data.
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [dp_req_destructor] (0x0400): DP Request
[Online Check #4]: Request removed.
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [dp_req_destructor] (0x0400): Number of
active DP request: 0
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [be_check_online_done] (0x0400): Backend
is online
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [be_ptask_disable] (0x0400): Task [Check
if online (periodic)]: disabling task
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [be_run_online_cb] (0x0080): Going
online. Running callbacks.
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [be_ptask_online_cb] (0x0400): Back end
is online
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [be_ptask_enable] (0x0400): Task
[Subdomains Refresh]: enabling task
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [be_ptask_schedule] (0x0400): Task
[Subdomains Refresh]: scheduling task 0 seconds from now [1528371004]
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [be_ptask_execute] (0x0400): Task
[Subdomains Refresh]: executing task, timeout 14400 seconds
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [fo_resolve_service_send] (0x0100):
Trying to resolve service 'IPA'
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [be_resolve_server_process] (0x0200):
Found address for server ipa-server.ipa.domain: [10.144.45.29] TTL 0
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sssd_async_socket_init_send] (0x0400):
Setting 6 seconds timeout for connecting
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x0400):
calling ldap_search_ext with [(objectclass=*)][].
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_op_finished] (0x0400):
Search result: Success(0), no errmsg set
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_kinit_send] (0x0400): Attempting
kinit (default, host/ipa-client-centos6.ipa.domain, ipa.domain, 86400)
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [fo_resolve_service_send] (0x0100):
Trying to resolve service 'IPA'
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [be_resolve_server_process] (0x0200):
Found address for server ipa-server.ipa.domain: [10.144.45.29] TTL 0
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [create_tgt_req_send_buffer] (0x0400):
buffer size: 70
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [set_tgt_child_timeout] (0x0400):
Setting 6 seconds timeout for tgt child
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [write_pipe_handler] (0x0400): All data
has been sent!
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [be_ptask_online_cb] (0x0400): Back end
is online
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [be_ptask_enable] (0x0400): Task [SUDO
Smart Refresh]: enabling task
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [be_ptask_schedule] (0x0400): Task [SUDO
Smart Refresh]: scheduling task 900 seconds from now [1528371904]
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [be_ptask_online_cb] (0x0400): Back end
is online
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [be_ptask_enable] (0x0400): Task [SUDO
Full Refresh]: enabling task
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [be_ptask_schedule] (0x0400): Task [SUDO
Full Refresh]: scheduling task 0 seconds from now [1528371004]
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [be_ptask_execute] (0x0400): Task [SUDO
Full Refresh]: executing task, timeout 21600 seconds
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [ipa_sudo_full_refresh_send] (0x0400):
Issuing a full refresh of sudo rules
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [delayed_online_authentication_callback]
(0x0200): Backend is online, starting delayed online authentication.
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [read_pipe_handler] (0x0400): EOF
received, client finished
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_get_tgt_recv] (0x0400): Child
responded: 0 [FILE:/var/lib/sss/db/ccache_ipa.domain], expired on [1528457404]
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_cli_auth_step] (0x0100): expire
timeout is 900
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sasl_bind_send] (0x0100): Executing
sasl bind mech: GSSAPI, user: host/ipa-client-centos6.ipa.domain
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [child_sig_handler] (0x0100): child
[6166] finished successfully.
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_cli_connect_recv] (0x0400):
Connection established.
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [fo_set_port_status] (0x0100): Marking
port 0 of server 'ipa-server.ipa.domain' as 'working'
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [set_server_common_status] (0x0100):
Marking server 'ipa-server.ipa.domain' as 'working'
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [fo_set_port_status] (0x0400): Marking
port 0 of duplicate server 'ipa-server.ipa.domain' as 'working'
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_search_bases_ex_next_base]
(0x0400): Issuing LDAP lookup with base [cn=ranges,cn=etc,dc=ipa,dc=domain]
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x0400):
calling ldap_search_ext with [objectclass=ipaIDRange][cn=ranges,cn=etc,dc=ipa,dc=domain].
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [ipa_sudo_refresh_connect_done]
(0x0400): SUDO LDAP connection successful
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [ipa_sudo_refresh_connect_done]
(0x0400): About to fetch host information
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x0400):
calling ldap_search_ext with
[(&(objectClass=ipaHost)(fqdn=ipa-client-centos6.ipa.domain))][cn=accounts,dc=ipa,dc=domain].
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_op_finished] (0x0400):
Search result: Success(0), no errmsg set
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_search_bases_ex_done] (0x0400):
Receiving data from base [cn=ranges,cn=etc,dc=ipa,dc=domain]
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x0400):
calling ldap_search_ext with
[(|(&(objectClass=ipaCertMapRule)(ipaEnabledFlag=TRUE))(objectClass=ipaCertMapConfigObject))][cn=certmap,dc=ipa,dc=domain].
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_op_finished] (0x0400):
Search result: Success(0), no errmsg set
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_has_deref_support] (0x0400): The
server supports deref method OpenLDAP
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_x_deref_search_send] (0x0400):
Dereferencing entry
[fqdn=ipa-client-centos6.ipa.domain,cn=computers,cn=accounts,dc=ipa,dc=domain] using
OpenLDAP deref
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_send] (0x0400):
WARNING: Disabling paging because scope is set to base.
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x0400):
calling ldap_search_ext with [no
filter][fqdn=ipa-client-centos6.ipa.domain,cn=computers,cn=accounts,dc=ipa,dc=domain].
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_op_finished] (0x0400):
Search result: Success(0), no errmsg set
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [ipa_subdomains_master_send] (0x0400):
Master record is up to date.
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_search_bases_ex_next_base]
(0x0400): Issuing LDAP lookup with base [cn=trusts,dc=ipa,dc=domain]
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x0400):
calling ldap_search_ext with
[objectclass=ipaNTTrustedDomain][cn=trusts,dc=ipa,dc=domain].
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_x_deref_parse_entry] (0x0400): Got
deref control
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_x_deref_parse_entry] (0x0400): All
deref results from a single control parsed
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_op_finished] (0x0400):
Search result: Success(0), no errmsg set
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [ipa_hostgroup_info_done] (0x0200): No
host groups were dereferenced
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [ipa_sudo_fetch_rules] (0x0400): About
to fetch sudo rules
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_search_bases_ex_next_base]
(0x0400): Issuing LDAP lookup with base [cn=sudo,dc=ipa,dc=domain]
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x0400):
calling ldap_search_ext with
[(&(objectClass=ipasudorule)(ipaEnabledFlag=TRUE)(|(!(memberHost=*))(hostCategory=ALL)(memberHost=fqdn=ipa-client-centos6.ipa.domain,cn=computers,cn=accounts,dc=ipa,dc=domain)))][cn=sudo,dc=ipa,dc=domain].
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_op_finished] (0x0400):
Search result: Success(0), no errmsg set
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_search_bases_ex_done] (0x0400):
Receiving data from base [cn=trusts,dc=ipa,dc=domain]
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [ipa_subdom_is_member_dom] (0x0400): 4th
component is not 'trust', not a member domain
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [ipa_enable_enterprise_principals]
(0x0100): Enterprise principals enabled.
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_deref_bases_ex_next_base]
(0x0400): Issuing LDAP deref lookup with base [cn=accounts,dc=ipa,dc=domain]
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_x_deref_search_send] (0x0400):
Dereferencing entry [cn=accounts,dc=ipa,dc=domain] using OpenLDAP deref
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x0400):
calling ldap_search_ext with
[(&(objectClass=ipaHost)(fqdn=ipa-client-centos6.ipa.domain))][cn=accounts,dc=ipa,dc=domain].
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_op_finished] (0x0400):
Search result: Success(0), no errmsg set
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_search_bases_ex_done] (0x0400):
Receiving data from base [cn=sudo,dc=ipa,dc=domain]
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [ipa_sudo_fetch_rules_done] (0x0040):
Received 0 sudo rules
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [ipa_sudo_fetch_cmdgroups] (0x0400):
About to fetch sudo command groups
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [ipa_sudo_fetch_cmdgroups] (0x0400): No
command groups needs to be downloaded
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [ipa_sudo_fetch_cmds] (0x0400): About to
fetch sudo commands
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [ipa_sudo_fetch_cmds] (0x0400): No
commands needs to be downloaded
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [ipa_sudo_fetch_done] (0x0400): About to
convert rules
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sysdb_sudo_purge_all] (0x0400):
Deleting all cached sudo rules
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_sudo_set_usn] (0x0400): SUDO USN
value is empty.
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [ipa_sudo_refresh_done] (0x0400): Sudo
rules are successfully stored in cache
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [ipa_sudo_full_refresh_done] (0x0400):
Successful full refresh of sudo rules
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [be_ptask_done] (0x0400): Task [SUDO
Full Refresh]: finished successfully
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [be_ptask_schedule] (0x0400): Task [SUDO
Full Refresh]: scheduling task 21600 seconds from last execution time [1528392604]
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_x_deref_parse_entry] (0x0400): Got
deref control
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_x_deref_parse_entry] (0x0400): All
deref results from a single control parsed
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_op_finished] (0x0400):
Search result: Success(0), no errmsg set
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_deref_bases_ex_done] (0x0400):
Receiving data from base [cn=accounts,dc=ipa,dc=domain]
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [ipa_subdomains_view_name_done]
(0x0400): No view found, using default.
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [ipa_apply_view] (0x0400): View name did
not change.
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x0400):
calling ldap_search_ext with [no
filter][cn=default,cn=views,cn=accounts,dc=ipa,dc=domain].
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_op_finished] (0x0400):
Search result: Success(0), no errmsg set
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x0400):
calling ldap_search_ext with
[(&(cn=ipaConfig)(objectClass=ipaGuiConfig))][cn=etc,dc=ipa,dc=domain].
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_op_finished] (0x0400):
Search result: Success(0), no errmsg set
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [be_ptask_done] (0x0400): Task
[Subdomains Refresh]: finished successfully
(Thu Jun 7 13:30:04 2018) [sssd[be[ipa.domain]]] [be_ptask_schedule] (0x0400): Task
[Subdomains Refresh]: scheduling task 14400 seconds from last execution time [1528385404]
(Thu Jun 7 13:31:23 2018) [sssd[be[ipa.domain]]] [dp_get_account_info_handler] (0x0200):
Got request for [0x3][BE_REQ_INITGROUPS][name=postfix(a)ipa.domain]
(Thu Jun 7 13:31:23 2018) [sssd[be[ipa.domain]]] [dp_attach_req] (0x0400): DP Request
[Initgroups #5]: New request. Flags [0x0001].
(Thu Jun 7 13:31:23 2018) [sssd[be[ipa.domain]]] [dp_attach_req] (0x0400): Number of
active DP request: 1
(Thu Jun 7 13:31:23 2018) [sssd[be[ipa.domain]]] [sdap_get_initgr_next_base] (0x0400):
Searching for users with base [cn=accounts,dc=ipa,dc=domain]
(Thu Jun 7 13:31:23 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_ext_step] (0x0400):
calling ldap_search_ext with
[(&(uid=postfix)(objectclass=posixAccount)(&(uidNumber=*)(!(uidNumber=0))))][cn=accounts,dc=ipa,dc=domain].
(Thu Jun 7 13:31:23 2018) [sssd[be[ipa.domain]]] [sdap_get_generic_op_finished] (0x0400):
Search result: Success(0), no errmsg set
(Thu Jun 7 13:31:23 2018) [sssd[be[ipa.domain]]] [sysdb_search_user_by_upn] (0x0400): No
entry with upn [postfix(a)ipa.domain] found.
(Thu Jun 7 13:31:23 2018) [sssd[be[ipa.domain]]] [sysdb_search_entry_by_sid_str]
(0x0400): No such entry
(Thu Jun 7 13:31:23 2018) [sssd[be[ipa.domain]]] [sysdb_search_object_attr] (0x0400): No
such entry.
(Thu Jun 7 13:31:23 2018) [sssd[be[ipa.domain]]] [sysdb_get_real_name] (0x0040): Cannot
find user [postfix(a)ipa.domain] in cache
(Thu Jun 7 13:31:23 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:31:23 2018) [sssd[be[ipa.domain]]] [sysdb_delete_user] (0x0400): Error: 2
(No such file or directory)
(Thu Jun 7 13:31:23 2018) [sssd[be[ipa.domain]]] [sysdb_search_by_name] (0x0400): No such
entry
(Thu Jun 7 13:31:23 2018) [sssd[be[ipa.domain]]] [ipa_id_get_account_info_orig_done]
(0x0080): Object not found, ending request
(Thu Jun 7 13:31:23 2018) [sssd[be[ipa.domain]]] [dp_req_done] (0x0400): DP Request
[Initgroups #5]: Request handler finished [0]: Success
(Thu Jun 7 13:31:23 2018) [sssd[be[ipa.domain]]] [_dp_req_recv] (0x0400): DP Request
[Initgroups #5]: Receiving request data.
(Thu Jun 7 13:31:23 2018) [sssd[be[ipa.domain]]] [dp_req_reply_list_success] (0x0400): DP
Request [Initgroups #5]: Finished. Success.
(Thu Jun 7 13:31:23 2018) [sssd[be[ipa.domain]]] [dp_table_value_destructor] (0x0400):
Removing [0:1:0x0001:3::ipa.domain:name=postfix@ipa.domain] from reply table
(Thu Jun 7 13:31:23 2018) [sssd[be[ipa.domain]]] [dp_req_destructor] (0x0400): DP Request
[Initgroups #5]: Request removed.
(Thu Jun 7 13:31:23 2018) [sssd[be[ipa.domain]]] [dp_req_destructor] (0x0400): Number of
active DP request: 0
(Thu Jun 7 13:44:58 2018) [sssd[be[ipa.domain]]] [sdap_id_conn_data_expire_handler]
(0x0080): connection is about to expire, releasing it
_______________________________________________
FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org
Fedora Code of Conduct:
https://getfedora.org/code-of-conduct.html
List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/freeipa-users@lists.fedorah...
--
/ Alexander Bokovoy
Sr. Principal Software Engineer
Security / Identity Management Engineering
Red Hat Limited, Finland