Hi,
I'm looking at a logfile from one sssd installation and I'm wondering if
it's a GPO bug. The relevant part of the logs is:
[sssd[be[example.com]]] [sdap_parse_entry] (0x1000): OriginalDN:
[cn={BCB10A5A-630C-477E-8E2D-996F06E36DBD},cn=policies,cn=system,DC=example,DC=com].
[sssd[be[example.com]]] [sdap_parse_entry] (0x1000): Entry has no attributes
[0(Success)]!?
[sssd[be[example.com]]] [sdap_get_generic_op_finished] (0x0400): Search result:
Success(0), no errmsg set
[sssd[be[example.com]]] [ad_gpo_sd_process_attrs] (0x0040): sysdb_attrs_get_string failed:
[2](No such file or directory)
[sssd[be[example.com]]] [ad_gpo_process_gpo_done] (0x0040): Unable to get GPO list: [2](No
such file or directory)
[sssd[be[example.com]]] [ad_gpo_access_done] (0x0040): GPO-based access control failed.
[sssd[be[example.com]]] [ad_gpo_access_done] (0x0040): Ignoring error: [2](No such file or
directory); GPO-based access control failed, but GPO is not in enforcing mode.
[sssd[be[example.com]]] [be_pam_handler_callback] (0x0100): Backend returned: (0, 0,
<NULL>) [Success (Success)]
[sssd[be[example.com]]] [be_pam_handler_callback] (0x0400): SELinux provider doesn't
exist, not sending the request to it.
[sssd[be[example.com]]] [be_pam_handler_callback] (0x0100): Sending result
[
0][example.com]
Did anyone see something like this before? Could it be some permissions issue?
I guess we should try searching the policy with ldapsearch, but I wanted
to check if anyone encountered this before..