sssd-users February 2018

sssd-users@lists.fedorahosted.org

11 participants
10 discussions

sssd performance on large domains
by zfnoctis＠gmail.com 03 Feb '22

03 Feb '22

Hi, I'm wondering if there are any plans to improve sssd performance on large active directory domains (100k+ users, 40k+ groups), or if there are settings I am not aware of that can greatly improve performance, specifically for workstation use cases. Currently if I do not set "ignore_group_members = True" in sssd.conf, logins can take upwards of 6 minutes and "sssd_be" will max the CPU for up to 20 minutes after logon, which makes it a non-starter. The reason I want to allow group members to be seen is that I want certain domain groups to be able to perform elevated actions using polkit. If I ignore group members, polkit reports that the group is empty and so no one can elevate in the graphical environment. Ultimately this means that Linux workstations are at a severe disadvantage since they cannot be bound to the domain and have the normal set of access features users and IT expect from macOS or Windows. Distributions used: Ubuntu 16.04 (sssd 1.13.4-1ubuntu1.1), Ubuntu 16.10 (sssd 1.13.4-3) and Fedora 24 (sssd-1.13.4-3.fc24). All exhibit the same problems. I've also tried "ldap_group_nesting_level = 1" without seeing any noticeable improvement with respect to performance. Putting the database on /tmp isn't viable as these are workstations that will reboot semi-frequently, and I don't believe this is an I/O bound performance issue anyways. Thanks for your time.

6 29

Enumerate users from external group from AD trust
by Bolke de Bruin 29 Nov '19

29 Nov '19

Hello, I have sssd 1.13.00 working against FreeIPA 4.2 domain. This domain has a trust relationship with a active directory domain. One of the systems we are using requires to enumerate all users in groups by (unfortunate) design (Apache Ranger). This is done by using “getent group”. During this enumeration the full user list for a group that has a nested external member group* is not always returned so we thought to add “getent group mygroup” in order to get more details. Unfortunately this does not seem to work consistently: sometimes this gives information sometimes it does not: [root@master centos]# getent group ad_users ad_users:*:1950000004: [root@master centos]# id bolke(a)ad.local UID=1796201107(bolke(a)ad.local) GID=1796201107(bolke(a)ad.local) groepen=1796201107(bolke(a)ad.local),1796200513(domain users@ad.local),1796201108(test@ad.local) [root@master centos]# getent group ad_users ad_users:*:1950000004:bolke@ad.local <mailto:bolke@ad.local> If I clear the cache (sss_cache -E) the entry is gone again: [root@master centos]# getent group ad_users ad_users:*:1950000004: My question is how do I get sssd to enumerate *all users* in a group consistently? Thanks! Bolke * https://docs.fedoraproject.org/en-US/Fedora/18/html/FreeIPA_Guide/trust-gro…

3 15

SSSD for one-way trusted AD domain
by Ondrej Valousek 15 May '18

15 May '18

Hi List, Question, we have joined machine into AD domain B. This domain has one way trust to domain A. No direct connection from domain B network to DCs in domain A is possible. Can we use SSSD to authenticate members in domain A. In windows, this works - but can't get it working in Linux via SSSD (Fedora 25, used realmd for AD join). Thanks, Ondrej ----- The information contained in this e-mail and in any attachments is confidential and is designated solely for the attention of the intended recipient(s). If you are not an intended recipient, you must not use, disclose, copy, distribute or retain this e-mail or any part thereof. If you have received this e-mail in error, please notify the sender by return e-mail and delete all copies of this e-mail from your computer system(s). Please direct any additional queries to: communications(a)s3group.com. Thank You. Silicon and Software Systems Limited (S3 Group). Registered in Ireland no. 378073. Registered Office: South County Business Park, Leopardstown, Dublin 18.

3 2

Re: [Freeipa-users] Re: Auto create NFS home folders on IPA Server.
by TomK 14 Mar '18

14 Mar '18

On 2/26/2018 1:27 AM, Alexander Bokovoy via FreeIPA-users wrote: Thanks Alex. + SSSD mailing list. Two remaining questions. 1) Creating the NFS user folders on the server itself is not a problem however I would like to trap events that indicate USER logged into a client host. On this event, a home directory could then be created on the FreeIPA side. Without such an event I can't precreate it. So when a user logs into a client machine, is there any SSSD call initiated to the FreeIPA server that would show up in a log for example that I could in turn use to run a small shell script to precreate the user's home folder, if it doesn't exist? 2) Is there a way to get SSSD to retrieve the unixHomeDirectory that's defined in the UNIX Attribute on the AD side? Would be handy if I want to control all home directory locations on the AD side. The override_homedir works to force a folder but when I try the %o option to override_homedir, it appears to take the FreeIPA default home directory, not the AD one. Cheers, Tom > On su, 25 helmi 2018, TomK via FreeIPA-users wrote: >> Hey Guy's, >> >> For newly added AD or IPA users, is there a way to automatically >> create the user folders on the FreeIPA server under say >> /nfs/home/bill, for example so that when the remote client logs in, it >> sees the NFS mounted folder? >> >> Instructions that I can find right now require precreating the >> folders. Need them precreated via the FreeIPA master servers anytime >> someone attempts to login on a client using their AD credentials. Is >> this possible? Assume the NFS server will be local to the FreeIPA >> masters. > One needs to create home directories on the NFS server itself. If home > directories are mounted via NFS, then you need to have enough permission > to create the folder at the NFS root which is not what you'd want to > allow a regular user. Thus, it needs to be solved outside of a log-in > flow. > > We don't provide any means to solve this in FreeIPA because file > sharing/hosting is not a FreeIPA problem. If your NFS server is running > on an IPA master, though, you might want to consider not using NFS > mounts on that server itself. In this case a normal oddjob-based > pam_mkhomedir would create the directories just fine. > >> >> Found steps like the one below but step 5) still requires pre creation >> of the folders. >> >> https://www.redhat.com/archives/freeipa-users/2016-May/msg00380.html >> >> https://serverfault.com/questions/705039/how-to-automate-directory-creation… >> >> >> -- >> Cheers, >> Tom K. >> ------------------------------------------------------------------------------------- >> >> >> Living on earth is expensive, but it includes a free trip around the sun. >> _______________________________________________ >> FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org >> To unsubscribe send an email to >> freeipa-users-leave(a)lists.fedorahosted.org > -- Cheers, Tom K. ------------------------------------------------------------------------------------- Living on earth is expensive, but it includes a free trip around the sun.

5 9

Experiencing a bug on users' name and ID
by Asif Iqbal 08 Mar '18

08 Mar '18

I have 300 out of 3000 users whose /home/<username> dir shows uid and gid instead of username and groupname. It seems to be behaving like a bug As soon I become a user with `sudo su - username' the uid of the home dir changes to username but gid still does not change to groupname. I also get an error message, but still successfully become that user $ ls -ld /home/mbniels drwx------. 3 80974 80974 4096 Feb 27 02:15 /home/mbniels $ su - mbniels Last login: Tue Feb 27 02:34:04 UTC 2018 on pts/39 /usr/bin/id: cannot find name for group ID 80974 groups: cannot find name for group ID 80974 $ ls -ld /home/mbniels drwx------. 3 mbniels 80974 4096 Feb 27 02:15 /home/mbniels Then to check the groups of username I get another error which then gets cleared by next command. $ groups mbniels mbniels : groups: cannot find name for group ID 80974 80974 users $ getent group mbniels mbniels:*:80974 $ groups mbniels mbniels : mbniels users It also fixes the gid to groupname $ ls -ld /home/mbniels/ drwx------. 3 mbniels mbniels 4096 Feb 27 02:15 /home/mbniels/ I noticed it reverts after may be within half an hour, not exact sure when. Almost behaves like `quantum entanglement'. As soon as I try to check by trying to become that user the issue disappears. This is not just cosmetic issue, when the home dir shows ownership with uid, instead of username, the user fails some commands. We just started noticing today, since we just built this box and only few months ago and users are being invited to start using this server Some annoying error it is showing like below and user then fails to ssh $ ssh remote No user exists for uid 80974 I am using centos 7 and sssd 1.15.2 $ cat /etc/redhat-release CentOS Linux release 7.4.1708 (Core) $ sssd --version 1.15.2 Here are some relevant logs https://paste.fedoraproject.org/paste/gBaZ-Vr8Urh-M5ABpaRNuA Appreciate any help -- Asif Iqbal PGP Key: 0xE62693C5 KeyServer: pgp.mit.edu A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing?

3 9

ETA release ?
by Joakim Tjernlund 19 Feb '18

19 Feb '18

Seem to recall a new release of sssd was planned some time ago but I don't see one. Change of plans? To what? Jocke

2 1

System error with free-ipa on login
by Iaroslav 16 Feb '18

16 Feb '18

We have many workstation with fedora 27 and freeipa, and every 10-18 days one of user can't log in. I do not understand why this happens. Reinstalling free-ipa, cleaning /var/lib/sssd folder does not help, only totally reinstall with / wipe (user /home does not change) solve this problem. Some logs with debug 9 (Tue Feb 6 13:13:43 2018) [sssd[pam]] [cache_req_search_send] (0x0400): CR #2: Returning [test1(a)example.com] from cache (Tue Feb 6 13:13:43 2018) [sssd[pam]] [cache_req_search_ncache_filter] (0x0400): CR #2: This request type does not support filtering result by negative cache (Tue Feb 6 13:13:43 2018) [sssd[pam]] [cache_req_create_and_add_result] (0x0400): CR #2: Found 2 entries in domain example.com (Tue Feb 6 13:13:43 2018) [sssd[pam]] [cache_req_done] (0x0400): CR #2: Finished: Success (Tue Feb 6 13:13:43 2018) [sssd[pam]] [pd_set_primary_name] (0x0400): User's primary name is test1(a)example.com (Tue Feb 6 13:13:43 2018) [sssd[pam]] [pam_initgr_cache_set] (0x2000): [test1] added to PAM initgroup cache (Tue Feb 6 13:13:43 2018) [sssd[pam]] [pam_dp_send_req] (0x0100): Sending request with the following data: (Tue Feb 6 13:13:43 2018) [sssd[pam]] [pam_print_data] (0x0100): command: SSS_PAM_ACCT_MGMT (Tue Feb 6 13:13:43 2018) [sssd[pam]] [pam_print_data] (0x0100): domain: example.com (Tue Feb 6 13:13:43 2018) [sssd[pam]] [pam_print_data] (0x0100): user: test1(a)example.com (Tue Feb 6 13:13:43 2018) [sssd[pam]] [pam_print_data] (0x0100): service: login (Tue Feb 6 13:13:43 2018) [sssd[pam]] [pam_print_data] (0x0100): tty: tty4 (Tue Feb 6 13:13:43 2018) [sssd[pam]] [pam_print_data] (0x0100): ruser: not set (Tue Feb 6 13:13:43 2018) [sssd[pam]] [pam_print_data] (0x0100): rhost: not set (Tue Feb 6 13:13:43 2018) [sssd[pam]] [pam_print_data] (0x0100): authtok type: 0 (Tue Feb 6 13:13:43 2018) [sssd[pam]] [pam_print_data] (0x0100): newauthtok type: 0 (Tue Feb 6 13:13:43 2018) [sssd[pam]] [pam_print_data] (0x0100): priv: 1 (Tue Feb 6 13:13:43 2018) [sssd[pam]] [pam_print_data] (0x0100): cli_pid: 3012 (Tue Feb 6 13:13:43 2018) [sssd[pam]] [pam_print_data] (0x0100): logon name: test1 (Tue Feb 6 13:13:43 2018) [sssd[pam]] [sbus_add_timeout] (0x2000): 0x55f5f30fb5d0 (Tue Feb 6 13:13:43 2018) [sssd[pam]] [pam_dom_forwarder] (0x0100): pam_dp_send_req returned 0 (Tue Feb 6 13:13:43 2018) [sssd[pam]] [sbus_remove_timeout] (0x2000): 0x55f5f30fb5d0 (Tue Feb 6 13:13:43 2018) [sssd[pam]] [sbus_dispatch] (0x4000): dbus conn: 0x55f5f30e7620 (Tue Feb 6 13:13:43 2018) [sssd[pam]] [sbus_dispatch] (0x4000): Dispatching. (Tue Feb 6 13:13:43 2018) [sssd[pam]] [pam_dp_process_reply] (0x0200): received: [4 (System error)][example.com] (Tue Feb 6 13:13:43 2018) [sssd[pam]] [ldb] (0x4000): Added timed event "ltdb_callback": 0x55f5f30fde90 pam system-auth #%PAM-1.0 # This file is auto-generated. # User changes will be destroyed the next time authconfig is run. auth required pam_env.so auth required pam_faildelay.so delay=2000000 auth [default=1 ignore=ignore success=ok] pam_succeed_if.so uid >= 1000 quiet auth [default=1 ignore=ignore success=ok] pam_localuser.so auth sufficient pam_unix.so nullok try_first_pass auth requisite pam_succeed_if.so uid >= 1000 quiet_success auth sufficient pam_sss.so forward_pass auth required pam_deny.so account required pam_unix.so account sufficient pam_localuser.so account sufficient pam_succeed_if.so uid < 1000 quiet account [default=bad success=ok user_unknown=ignore] pam_sss.so account required pam_permit.so password requisite pam_pwquality.so try_first_pass local_users_only retry=3 authtok_type= password sufficient pam_unix.so sha512 shadow nullok try_first_pass use_authtok password sufficient pam_sss.so use_authtok password required pam_deny.so session optional pam_keyinit.so revoke session required pam_limits.so -session optional pam_systemd.so session optional pam_oddjob_mkhomedir.so umask=0077 session [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid session required pam_unix.so session optional pam_sss.so

3 8

Re: Ang: Re: problems to get sssd started: Solved!
by Eloka Agajelu 14 Feb '18

14 Feb '18

All Thank you for keeping this thread active with your comments. They sure kept me focused on the sssd.conf file without distractions and helped me notice that my [domain/MY.DOMAIN Was missing the close bracket [] (as you can see above) SSSD can really be finicky ________________________________ Eloka Agajelu Inovalon, Inc (301) 809-4000 x3560 4321 Collington Rd cagajelu(a)inovalon.com<mailto:cagajelu@inovalon.com> Bowie, MD 20716 CONFIDENTIALITY NOTICE: This email and any attachments are confidential and may contain privileged information. If you are not the intended recipient or have otherwise received this email in error, please be advised that any review, dissemination, distribution, or copying of this communication is strictly prohibited. If you have received this email in error, please delete all copies of the email and all attachments (and destroy any hard-copy printouts), and promptly contact us by email (info(a)inovalon.com<mailto:info@inovalon.com>) or by telephone (800.390.3180).

1 0

sssd and samba for DOMAIN\user display
by Edouard Guigné 08 Feb '18

08 Feb '18

Dear SSSD Users, I configured a samba share with sssd and kerberos against an Active Directory server (Windows 2012 R2) The share is well working. I just looking for an adjustement. On Windows client, permissions are displayed like DOMAIN\group for group and user(a)domain.local for users on files and directories. I would like it displayed DOMAIN\user for users also (like for groups). I thought this was possible with adding full_name_format = %2$s\%1$s re_expression = (?P<domain>[^\\]*?)\\?(?P<name>[^\\]+$) in [global] and [domain] section of my sssd.conf But it does not work... I flush the sssd cache and the samba cache also (sss_cache -E and net cache flush). Does someone have an idea ? Best Regards, Ed

2 1

SSSD/AD Issues After 1.14 to 1.15 upgrade in CentOS 7
by Simon Engelbert 02 Feb '18

02 Feb '18

Hello, We are having issues with SSSD and SSHD after upgrading our package versions of SSSD from 1.14.0 to 1.15.2. The configurations are the same. From what we can tell the issue revolves around the keys returned by the /usr/bin/sss_ssh_authorizedkeys toolset. Our server that still has 1.14.0 returns the keys with all different permutations of the command below: /usr/bin/sss_ssh_authorizedkeys user -d DOMAIN.AD Returns keys /usr/bin/sss_ssh_authorizedkeys user Returns keys /usr/bin/sss_ssh_authorizedkeys user(a)DOMAIN.AD -d DOMAIN.AD Returns keys /usr/bin/sss_ssh_authorizedkeys user(a)DOMAIN.AD Returns keys However, our server with 1.15.2 returns keys for 2 of the permutations and fails for the other 2, and those are the 2 we believe need to function. Below are the commands and logs (redacted/altered). We have tried altering various configs around the domain and other areas but nothing seems to help. The ones that are failing seem to be finding a new domain and searching through it (PRD.AD), this is not happening in 1.14.0. Is there a way to blacklist domains? Is there a way to tell it to not search for new domains? No auto-dscovery? /usr/bin/sss_ssh_authorizedkeys user -d DOMAIN.AD Returns keys /usr/bin/sss_ssh_authorizedkeys user Returns keys (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sbus_message_handler] (0x2000): Received SBUS method org.freedesktop.sssd.dataprovider.getAccountInfo on path /org/freedesktop/sssd/dataprovider (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sbus_get_sender_id_send] (0x2000): Not a sysbus message, quit (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [dp_get_account_info_handler] (0x0200): Got request for [0x1][BE_REQ_USER][name=user(a)DOMAIN.ad] (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [dp_attach_req] (0x0400): DP Request [Account #1403]: New request. Flags [0x0001]. (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [dp_attach_req] (0x0400): Number of active DP request: 1 (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sss_domain_get_state] (0x1000): Domain DOMAIN.AD is Active (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sss_domain_get_state] (0x1000): Domain DOMAIN.AD is Active (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sdap_search_user_next_base] (0x0400): Searching for users with base [DC=DOMAIN,DC=AD] (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sdap_print_server] (0x2000): Searching 170.0.0.2:389 (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(&(sAMAccountName=user)(objectclass=user)(sAMAccountName=*)(objectSID=*))][DC=DOMAIN,DC=AD]. (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [objectClass] (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [sAMAccountName] (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [unixUserPassword] (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [uidNumber] (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [gidNumber] (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [gecos] (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [unixHomeDirectory] (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [loginShell] (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [sAMAccountName] (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [name] (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [memberOf] (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [objectGUID] (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [objectSID] (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [primaryGroupID] (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [whenChanged] (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [uSNChanged] (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [accountExpires] (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [userAccountControl] (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [shawUser-sshPublicKey] (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [userCertificate;binary] (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [mail] (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [shawUser-sshPublicKey] (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x2000): ldap_search_ext called, msgid = 12 (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sdap_op_add] (0x2000): New operation 12 timeout 6 (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sdap_process_result] (0x2000): Trace: sh[0x5622d7eb7160], connected[1], ops[0x5622d7ebef10], ldap[0x5622d6c9a790] (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_entry] (0x1000): OriginalDN: [CN=Simon Engelbert,OU=Non-VIP,OU=Users,OU=Accounts,OU=Corp,DC=DOMAIN,DC=AD]. (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [objectClass] (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [whenChanged] (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [memberOf] (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [uSNChanged] (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [name] (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [objectGUID] (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [userAccountControl] (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [primaryGroupID] (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [objectSid] (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [accountExpires] (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [sAMAccountName] (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [mail] (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [shawUser-sshPublicKey] (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sdap_process_result] (0x2000): Trace: sh[0x5622d7eb7160], connected[1], ops[0x5622d7ebef10], ldap[0x5622d6c9a790] (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_add_references] (0x1000): Additional References: ldap://DomainDnsZones.DOMAIN.AD/DC=DomainDnsZones,DC=DOMAIN,DC=AD (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sdap_process_result] (0x2000): Trace: sh[0x5622d7eb7160], connected[1], ops[0x5622d7ebef10], ldap[0x5622d6c9a790] (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sdap_op_destructor] (0x2000): Operation 12 finished (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sdap_search_user_process] (0x0400): Search for users, returned 1 results. (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sdap_search_user_process] (0x2000): Retrieved total 1 users (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sdap_save_user] (0x0400): Save user (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sss_domain_get_state] (0x1000): Domain DOMAIN.AD is Active (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_primary_name] (0x0400): Processing object user (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sdap_save_user] (0x0400): Processing user user(a)DOMAIN.ad (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sdap_save_user] (0x1000): Mapping user [user(a)DOMAIN.ad] objectSID [S-1-5-21-1916243804-2947104764-1996252313-179441] to unix ID (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sdap_save_user] (0x2000): Adding originalDN [CN=Simon Engelbert,OU=Non-VIP,OU=Users,OU=Accounts,OU=Corp,DC=DOMAIN,DC=AD] to attributes of [user(a)DOMAIN.ad] (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sdap_save_user] (0x0400): Adding original memberOf attributes to [user(a)DOMAIN.ad] (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sdap_attrs_add_ldap_attr] (0x2000): Adding original mod-Timestamp [20180122182213.0Z] to attributes of [user(a)DOMAIN.ad] (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sdap_save_user] (0x0400): Adding user principal [user] to attributes of [user(a)DOMAIN.ad] (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sdap_attrs_add_ldap_attr] (0x2000): shadowLastChange is not available for [user(a)DOMAIN.ad] (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sdap_attrs_add_ldap_attr] (0x2000): shadowMin is not available for [user(a)DOMAIN.ad] (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sdap_attrs_add_ldap_attr] (0x2000): shadowMax is not available for [user(a)DOMAIN.ad] (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sdap_attrs_add_ldap_attr] (0x2000): shadowWarning is not available for [user(a)DOMAIN.ad] (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sdap_attrs_add_ldap_attr] (0x2000): shadowInactive is not available for [user(a)DOMAIN.ad] (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sdap_attrs_add_ldap_attr] (0x2000): shadowExpire is not available for [user(a)DOMAIN.ad] (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sdap_attrs_add_ldap_attr] (0x2000): shadowFlag is not available for [user(a)DOMAIN.ad] (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sdap_attrs_add_ldap_attr] (0x2000): krbLastPwdChange is not available for [user(a)DOMAIN.ad] (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sdap_attrs_add_ldap_attr] (0x2000): krbPasswordExpiration is not available for [user(a)DOMAIN.ad] (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sdap_attrs_add_ldap_attr] (0x2000): pwdAttribute is not available for [user(a)DOMAIN.ad] (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sdap_attrs_add_ldap_attr] (0x2000): authorizedService is not available for [user(a)DOMAIN.ad] (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sdap_attrs_add_ldap_attr] (0x2000): Adding adAccountExpires [9223372036854775807] to attributes of [user(a)DOMAIN.ad] (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sdap_attrs_add_ldap_attr] (0x2000): Adding adUserAccountControl [512] to attributes of [user(a)DOMAIN.ad] (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sdap_attrs_add_ldap_attr] (0x2000): nsAccountLock is not available for [user(a)DOMAIN.ad] (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sdap_attrs_add_ldap_attr] (0x2000): authorizedHost is not available for [user(a)DOMAIN.ad] (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sdap_attrs_add_ldap_attr] (0x2000): ndsLoginDisabled is not available for [user(a)DOMAIN.ad] (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sdap_attrs_add_ldap_attr] (0x2000): ndsLoginExpirationTime is not available for [user(a)DOMAIN.ad] (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sdap_attrs_add_ldap_attr] (0x2000): ndsLoginAllowedTimeMap is not available for [user(a)DOMAIN.ad] (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sdap_attrs_add_ldap_attr] (0x2000): Adding sshPublicKey [<redacted>] to attributes of [user(a)DOMAIN.ad] (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sdap_attrs_add_ldap_attr] (0x2000): Adding sshPublicKey [<redacted>] to attributes of [user(a)DOMAIN.ad] (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sdap_attrs_add_ldap_attr] (0x2000): authType is not available for [user(a)DOMAIN.ad] (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sdap_attrs_add_ldap_attr] (0x2000): userCertificate is not available for [user(a)DOMAIN.ad] (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sdap_attrs_add_ldap_attr] (0x2000): Adding mail [Simon.Engelbert(a)DOMAIN.ca] to attributes of [user(a)DOMAIN.ad] (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sdap_attrs_add_ldap_attr] (0x2000): Adding shawUser-sshPublicKey [<redacted>] to attributes of [user(a)DOMAIN.ad] (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sdap_attrs_add_ldap_attr] (0x2000): Adding shawUser-sshPublicKey [<redacted>] to attributes of [user(a)DOMAIN.ad] (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sysdb_attrs_get_aliases] (0x2000): Domain is case-insensitive; will add lowercased aliases (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sdap_save_user] (0x0400): Storing info for user user(a)DOMAIN.ad (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sysdb_search_by_name] (0x0400): No such entry (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sysdb_store_user] (0x1000): User user(a)DOMAIN.ad does not exist. (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sysdb_search_user_by_uid] (0x0400): No such entry (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sysdb_ldb_msg_difference] (0x2000): Added attr [objectSIDString] to entry [name=user(a)DOMAIN.ad,cn=users,cn=DOMAIN.AD,cn=sysdb] (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sysdb_set_entry_attr] (0x0200): Entry [name=user(a)DOMAIN.ad,cn=users,cn=DOMAIN.AD,cn=sysdb] has set [cache, ts_cache] attrs. (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [dp_req_done] (0x0400): DP Request [Account #1403]: Request handler finished [0]: Success (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [_dp_req_recv] (0x0400): DP Request [Account #1403]: Receiving request data. (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [dp_req_reply_list_success] (0x0400): DP Request [Account #1403]: Finished. Success. (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [dp_req_reply_std] (0x1000): DP Request [Account #1403]: Returning [Success]: 0,0,Success (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [dp_table_value_destructor] (0x0400): Removing [0:1:0x0001:1::DOMAIN.AD:name=user@DOMAIN.ad] from reply table (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [dp_req_destructor] (0x0400): DP Request [Account #1403]: Request removed. (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [dp_req_destructor] (0x0400): Number of active DP request: 0 (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sdap_process_result] (0x2000): Trace: sh[0x5622d7eb7160], connected[1], ops[(nil)], ldap[0x5622d6c9a790] (Wed Jan 31 18:26:46 2018) [sssd[be[DOMAIN.AD]]] [sdap_process_result] (0x2000): Trace: end of ldap_result list /usr/bin/sss_ssh_authorizedkeys user(a)DOMAIN.AD -d DOMAIN.AD Error looking up public keys /usr/bin/sss_ssh_authorizedkeys user(a)DOMAIN.AD Error looking up public keys (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sbus_message_handler] (0x2000): Received SBUS method org.freedesktop.sssd.dataprovider.getAccountInfo on path /org/freedesktop/sssd/dataprovider (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sbus_get_sender_id_send] (0x2000): Not a sysbus message, quit (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [dp_get_account_info_handler] (0x0200): Got request for [0x1][BE_REQ_USER][name=user@DOMAIN.ad@DOMAIN.ad] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [dp_attach_req] (0x0400): DP Request [Account #1409]: New request. Flags [0x0001]. (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [dp_attach_req] (0x0400): Number of active DP request: 1 (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sss_domain_get_state] (0x1000): Domain DOMAIN.AD is Active (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sss_domain_get_state] (0x1000): Domain DOMAIN.AD is Active (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [fo_resolve_service_send] (0x0100): Trying to resolve service 'AD' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [get_server_status] (0x1000): Status of server 'ADSERVER.DOMAIN.ad' is 'working' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [get_port_status] (0x1000): Port status of port 0 for server 'ADSERVER.DOMAIN.ad' is 'working' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [fo_resolve_service_activate_timeout] (0x2000): Resolve timeout set to 6 seconds (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [get_server_status] (0x1000): Status of server 'ADSERVER.DOMAIN.ad' is 'working' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [be_resolve_server_process] (0x1000): Saving the first resolved server (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [be_resolve_server_process] (0x0200): Found address for server ADSERVER.DOMAIN.ad: [170.0.0.2] TTL 3600 (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sssd_async_socket_init_send] (0x0400): Setting 6 seconds timeout for connecting (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_ldap_connect_callback_add] (0x1000): New LDAP connection to [ldap://ADSERVER.DOMAIN.ad:389/??base] with fd [19]. (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_print_server] (0x2000): Searching 170.0.0.2:389 (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(objectclass=*)][]. (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [*] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [altServer] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [namingContexts] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [supportedControl] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [supportedExtension] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [supportedFeatures] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [supportedLDAPVersion] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [supportedSASLMechanisms] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [domainControllerFunctionality] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [defaultNamingContext] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [lastUSN] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [highestCommittedUSN] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x2000): ldap_search_ext called, msgid = 1 (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_op_add] (0x2000): New operation 1 timeout 6 (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_process_result] (0x2000): Trace: sh[0x5622d7e94550], connected[1], ops[0x5622d7ebef10], ldap[0x5622d6c9a790] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_entry] (0x1000): OriginalDN: []. (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [currentTime] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [subschemaSubentry] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [dsServiceName] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [namingContexts] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [defaultNamingContext] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [schemaNamingContext] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [configurationNamingContext] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [rootDomainNamingContext] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [supportedControl] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [supportedLDAPVersion] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [supportedLDAPPolicies] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [highestCommittedUSN] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [supportedSASLMechanisms] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [dnsHostName] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [ldapServiceName] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [serverName] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [supportedCapabilities] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [isSynchronized] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [isGlobalCatalogReady] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [supportedExtension] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [domainFunctionality] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [forestFunctionality] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [domainControllerFunctionality] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_process_result] (0x2000): Trace: sh[0x5622d7e94550], connected[1], ops[0x5622d7ebef10], ldap[0x5622d6c9a790] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_op_destructor] (0x2000): Operation 1 finished (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_rootdse_done] (0x2000): Got rootdse (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_rootdse_done] (0x2000): Skipping auto-detection of match rule (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_server_opts_from_rootdse] (0x0100): Setting AD compatibility level to [6] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_kinit_send] (0x0400): Attempting kinit (default, host/server.DOMAIN.ad, DOMAIN.AD, 86400) (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_kinit_next_kdc] (0x1000): Resolving next KDC for service AD (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [fo_resolve_service_send] (0x0100): Trying to resolve service 'AD' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [get_server_status] (0x1000): Status of server 'ADSERVER.DOMAIN.ad' is 'working' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [get_port_status] (0x1000): Port status of port 0 for server 'ADSERVER.DOMAIN.ad' is 'working' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [fo_resolve_service_activate_timeout] (0x2000): Resolve timeout set to 6 seconds (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [get_server_status] (0x1000): Status of server 'ADSERVER.DOMAIN.ad' is 'working' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [be_resolve_server_process] (0x1000): Saving the first resolved server (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [be_resolve_server_process] (0x0200): Found address for server ADSERVER.DOMAIN.ad: [170.0.0.2] TTL 3600 (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_kinit_kdc_resolved] (0x1000): KDC resolved, attempting to get TGT... (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [create_tgt_req_send_buffer] (0x0400): buffer size: 55 (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [child_handler_setup] (0x2000): Setting up signal handler up for pid [19453] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [child_handler_setup] (0x2000): Signal handler set up for pid [19453] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [set_tgt_child_timeout] (0x0400): Setting 6 seconds timeout for tgt child (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_process_result] (0x2000): Trace: sh[0x5622d7e94550], connected[1], ops[(nil)], ldap[0x5622d6c9a790] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_process_result] (0x2000): Trace: end of ldap_result list (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [write_pipe_handler] (0x0400): All data has been sent! (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [read_pipe_handler] (0x0400): EOF received, client finished (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_tgt_recv] (0x0400): Child responded: 0 [FILE:/var/lib/sss/db/ccache_DOMAIN.AD], expired on [1517459477] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_cli_auth_step] (0x0100): expire timeout is 900 (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_cli_auth_step] (0x1000): the connection will expire at 1517424377 (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sasl_bind_send] (0x0100): Executing sasl bind mech: gssapi, user: host/server.DOMAIN.ad (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [child_sig_handler] (0x1000): Waiting for child [19453]. (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [child_sig_handler] (0x0100): child [19453] finished successfully. (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_cli_connect_recv] (0x0400): Connection established. (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [fo_set_port_status] (0x0100): Marking port 0 of server 'ADSERVER.DOMAIN.ad' as 'working' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [set_server_common_status] (0x0100): Marking server 'ADSERVER.DOMAIN.ad' as 'working' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [fo_set_port_status] (0x0400): Marking port 0 of duplicate server 'ADSERVER.DOMAIN.ad' as 'working' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_id_op_connect_done] (0x2000): Old USN: 75028237, New USN: 75031468 (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_search_user_next_base] (0x0400): Searching for users with base [DC=DOMAIN,DC=AD] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_print_server] (0x2000): Searching 170.0.0.2:389 (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(&(sAMAccountName=user@DOMAIN.ad)(objectclass=user)(sAMAccountName=*)(objectSID=*))][DC=DOMAIN,DC=AD]. (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [objectClass] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [sAMAccountName] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [unixUserPassword] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [uidNumber] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [gidNumber] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [gecos] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [unixHomeDirectory] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [loginShell] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [sAMAccountName] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [name] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [memberOf] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [objectGUID] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [objectSID] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [primaryGroupID] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [whenChanged] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [uSNChanged] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [accountExpires] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [userAccountControl] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [shawUser-sshPublicKey] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [userCertificate;binary] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [mail] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [shawUser-sshPublicKey] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x2000): ldap_search_ext called, msgid = 5 (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_op_add] (0x2000): New operation 5 timeout 6 (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_process_result] (0x2000): Trace: sh[0x5622d7e94550], connected[1], ops[0x5622d7e96670], ldap[0x5622d6c9a790] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_add_references] (0x1000): Additional References: ldap://DomainDnsZones.DOMAIN.AD/DC=DomainDnsZones,DC=DOMAIN,DC=AD (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_process_result] (0x2000): Trace: sh[0x5622d7e94550], connected[1], ops[0x5622d7e96670], ldap[0x5622d6c9a790] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_op_destructor] (0x2000): Operation 5 finished (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_search_user_process] (0x0400): Search for users, returned 0 results. (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_search_user_process] (0x2000): Retrieved total 0 users (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sysdb_search_by_name] (0x0400): No such entry (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sysdb_cache_search_groups] (0x2000): Search groups with filter: (&(objectclass=group)(ghost=user@DOMAIN.ad@DOMAIN.ad)) (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sysdb_cache_search_groups] (0x2000): No such entry (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sysdb_delete_user] (0x0400): Error: 2 (No such file or directory) (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [dp_req_done] (0x0400): DP Request [Account #1409]: Request handler finished [0]: Success (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [_dp_req_recv] (0x0400): DP Request [Account #1409]: Receiving request data. (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [dp_req_reply_list_success] (0x0400): DP Request [Account #1409]: Finished. Success. (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [dp_req_reply_std] (0x1000): DP Request [Account #1409]: Returning [Success]: 0,0,Success (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [dp_table_value_destructor] (0x0400): Removing [0:1:0x0001:1::DOMAIN.AD:name=user@DOMAIN.ad@DOMAIN.ad] from reply table (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [dp_req_destructor] (0x0400): DP Request [Account #1409]: Request removed. (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [dp_req_destructor] (0x0400): Number of active DP request: 0 (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_process_result] (0x2000): Trace: sh[0x5622d7e94550], connected[1], ops[(nil)], ldap[0x5622d6c9a790] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_process_result] (0x2000): Trace: end of ldap_result list (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sbus_message_handler] (0x2000): Received SBUS method org.freedesktop.sssd.dataprovider.getAccountInfo on path /org/freedesktop/sssd/dataprovider (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sbus_get_sender_id_send] (0x2000): Not a sysbus message, quit (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [dp_get_account_info_handler] (0x0200): Got request for [0x1][BE_REQ_USER][name=user(a)DOMAIN.AD] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [dp_attach_req] (0x0400): DP Request [Account #1410]: New request. Flags [0x0001]. (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [dp_attach_req] (0x0400): Number of active DP request: 1 (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sss_domain_get_state] (0x1000): Domain DOMAIN.AD is Active (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sss_domain_get_state] (0x1000): Domain DOMAIN.AD is Active (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_search_user_next_base] (0x0400): Searching for users with base [DC=DOMAIN,DC=AD] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_print_server] (0x2000): Searching 170.0.0.2:389 (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(&(|(sAMAccountName=user@DOMAIN.AD)(mail=user@DOMAIN.AD)(sAMAccountName=user\\@DOMAIN.AD@DOMAIN.AD))(objectclass=user)(sAMAccountName=*)(objectSID=*))][DC=DOMAIN,DC=AD]. (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [objectClass] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [sAMAccountName] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [unixUserPassword] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [uidNumber] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [gidNumber] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [gecos] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [unixHomeDirectory] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [loginShell] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [sAMAccountName] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [name] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [memberOf] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [objectGUID] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [objectSID] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [primaryGroupID] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [whenChanged] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [uSNChanged] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [accountExpires] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [userAccountControl] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [shawUser-sshPublicKey] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [userCertificate;binary] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [mail] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [shawUser-sshPublicKey] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x2000): ldap_search_ext called, msgid = 6 (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_op_add] (0x2000): New operation 6 timeout 6 (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_process_result] (0x2000): Trace: sh[0x5622d7e94550], connected[1], ops[0x5622d7e96670], ldap[0x5622d6c9a790] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_add_references] (0x1000): Additional References: ldap://DomainDnsZones.DOMAIN.AD/DC=DomainDnsZones,DC=DOMAIN,DC=AD (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_process_result] (0x2000): Trace: sh[0x5622d7e94550], connected[1], ops[0x5622d7e96670], ldap[0x5622d6c9a790] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_op_destructor] (0x2000): Operation 6 finished (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_search_user_process] (0x0400): Search for users, returned 0 results. (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_search_user_process] (0x2000): Retrieved total 0 users (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [dp_req_done] (0x0400): DP Request [Account #1410]: Request handler finished [0]: Success (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [_dp_req_recv] (0x0400): DP Request [Account #1410]: Receiving request data. (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [dp_req_reply_list_success] (0x0400): DP Request [Account #1410]: Finished. Success. (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [dp_req_reply_std] (0x1000): DP Request [Account #1410]: Returning [Success]: 0,0,Success (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [dp_table_value_destructor] (0x0400): Removing [0:1:0x0001:1:U:DOMAIN.AD:name=user@DOMAIN.AD] from reply table (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [dp_req_destructor] (0x0400): DP Request [Account #1410]: Request removed. (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [dp_req_destructor] (0x0400): Number of active DP request: 0 (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_process_result] (0x2000): Trace: sh[0x5622d7e94550], connected[1], ops[(nil)], ldap[0x5622d6c9a790] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_process_result] (0x2000): Trace: end of ldap_result list (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sbus_message_handler] (0x2000): Received SBUS method org.freedesktop.sssd.dataprovider.getAccountInfo on path /org/freedesktop/sssd/dataprovider (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sbus_get_sender_id_send] (0x2000): Not a sysbus message, quit (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [dp_get_account_info_handler] (0x0200): Got request for [0x1][BE_REQ_USER][name=user(a)DOMAIN.AD] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [dp_attach_req] (0x0400): DP Request [Account #1411]: New request. Flags [0x0001]. (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [dp_attach_req] (0x0400): Number of active DP request: 1 (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sss_domain_get_state] (0x1000): Domain DOMAIN.AD is Active (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sss_domain_get_state] (0x1000): Domain PRD.AD is Active (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sss_domain_get_state] (0x1000): Domain DOMAIN.AD is Active (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sss_domain_get_state] (0x1000): Domain PRD.AD is Active (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sss_domain_get_state] (0x1000): Domain PRD.AD is Active (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [fo_resolve_service_send] (0x0100): Trying to resolve service 'AD_GC' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [get_server_status] (0x1000): Status of server 'ADSERVER.DOMAIN.ad' is 'working' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [get_port_status] (0x1000): Port status of port 0 for server 'ADSERVER.DOMAIN.ad' is 'working' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [fo_resolve_service_activate_timeout] (0x2000): Resolve timeout set to 6 seconds (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [get_server_status] (0x1000): Status of server 'ADSERVER.DOMAIN.ad' is 'working' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [be_resolve_server_process] (0x1000): Saving the first resolved server (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [be_resolve_server_process] (0x0200): Found address for server ADSERVER.DOMAIN.ad: [170.0.0.2] TTL 3600 (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [ad_resolve_callback] (0x0100): Constructed uri 'ldap://ADSERVER.DOMAIN.ad' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [ad_resolve_callback] (0x0100): Constructed GC uri 'ldap://ADSERVER.DOMAIN.ad:3268' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sssd_async_socket_init_send] (0x0400): Setting 6 seconds timeout for connecting (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_ldap_connect_callback_add] (0x1000): New LDAP connection to [ldap://ADSERVER.DOMAIN.ad:3268/??base] with fd [25]. (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_print_server] (0x2000): Searching 170.0.0.2:3268 (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(objectclass=*)][]. (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [*] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [altServer] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [namingContexts] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [supportedControl] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [supportedExtension] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [supportedFeatures] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [supportedLDAPVersion] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [supportedSASLMechanisms] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [domainControllerFunctionality] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [defaultNamingContext] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [lastUSN] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [highestCommittedUSN] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x2000): ldap_search_ext called, msgid = 1 (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_op_add] (0x2000): New operation 1 timeout 6 (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_process_result] (0x2000): Trace: sh[0x5622d7e7a9a0], connected[1], ops[0x5622d7d32e90], ldap[0x5622d7d76f00] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_entry] (0x1000): OriginalDN: []. (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [currentTime] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [subschemaSubentry] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [dsServiceName] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [namingContexts] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [defaultNamingContext] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [schemaNamingContext] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [configurationNamingContext] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [rootDomainNamingContext] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [supportedControl] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [supportedLDAPVersion] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [supportedLDAPPolicies] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [highestCommittedUSN] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [supportedSASLMechanisms] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [dnsHostName] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [ldapServiceName] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [serverName] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [supportedCapabilities] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [isSynchronized] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [isGlobalCatalogReady] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [supportedExtension] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [domainFunctionality] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [forestFunctionality] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [domainControllerFunctionality] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_process_result] (0x2000): Trace: sh[0x5622d7e7a9a0], connected[1], ops[0x5622d7d32e90], ldap[0x5622d7d76f00] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_op_destructor] (0x2000): Operation 1 finished (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_rootdse_done] (0x2000): Got rootdse (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_rootdse_done] (0x2000): Skipping auto-detection of match rule (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_server_opts_from_rootdse] (0x0100): Setting AD compatibility level to [6] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_kinit_send] (0x0400): Attempting kinit (default, host/server.DOMAIN.ad, DOMAIN.AD, 86400) (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_kinit_next_kdc] (0x1000): Resolving next KDC for service AD (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [fo_resolve_service_send] (0x0100): Trying to resolve service 'AD' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [get_server_status] (0x1000): Status of server 'ADSERVER.DOMAIN.ad' is 'working' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [get_port_status] (0x1000): Port status of port 0 for server 'ADSERVER.DOMAIN.ad' is 'working' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [fo_resolve_service_activate_timeout] (0x2000): Resolve timeout set to 6 seconds (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [get_server_status] (0x1000): Status of server 'ADSERVER.DOMAIN.ad' is 'working' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [be_resolve_server_process] (0x1000): Saving the first resolved server (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [be_resolve_server_process] (0x0200): Found address for server ADSERVER.DOMAIN.ad: [170.0.0.2] TTL 3600 (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [ad_resolve_callback] (0x0100): Constructed uri 'ldap://ADSERVER.DOMAIN.ad' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [ad_resolve_callback] (0x0100): Constructed GC uri 'ldap://ADSERVER.DOMAIN.ad' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [unique_filename_destructor] (0x2000): Unlinking [/var/lib/sss/pubconf/.krb5info_dummy_IYm1jO] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [unlink_dbg] (0x2000): File already removed: [/var/lib/sss/pubconf/.krb5info_dummy_IYm1jO] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_kinit_kdc_resolved] (0x1000): KDC resolved, attempting to get TGT... (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [create_tgt_req_send_buffer] (0x0400): buffer size: 55 (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [child_handler_setup] (0x2000): Setting up signal handler up for pid [19454] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [child_handler_setup] (0x2000): Signal handler set up for pid [19454] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [set_tgt_child_timeout] (0x0400): Setting 6 seconds timeout for tgt child (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_process_result] (0x2000): Trace: sh[0x5622d7e7a9a0], connected[1], ops[(nil)], ldap[0x5622d7d76f00] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_process_result] (0x2000): Trace: end of ldap_result list (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [write_pipe_handler] (0x0400): All data has been sent! (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [child_sig_handler] (0x1000): Waiting for child [19454]. (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [child_sig_handler] (0x0100): child [19454] finished successfully. (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [read_pipe_handler] (0x0400): EOF received, client finished (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_tgt_recv] (0x0400): Child responded: 0 [FILE:/var/lib/sss/db/ccache_DOMAIN.AD], expired on [1517459477] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_cli_auth_step] (0x0100): expire timeout is 900 (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_cli_auth_step] (0x1000): the connection will expire at 1517424377 (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sasl_bind_send] (0x0100): Executing sasl bind mech: gssapi, user: host/server.DOMAIN.ad (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_cli_connect_recv] (0x0400): Connection established. (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [fo_set_port_status] (0x0100): Marking port 0 of server 'ADSERVER.DOMAIN.ad' as 'working' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [set_server_common_status] (0x0100): Marking server 'ADSERVER.DOMAIN.ad' as 'working' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [fo_set_port_status] (0x0400): Marking port 0 of duplicate server 'ADSERVER.DOMAIN.ad' as 'working' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_id_op_connect_done] (0x2000): Old USN: 75028237, New USN: 75031469 (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_search_user_next_base] (0x0400): Searching for users with base [dc=prd,dc=ad] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_print_server] (0x2000): Searching 170.0.0.2:3268 (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(&(|(sAMAccountName=user@DOMAIN.AD)(mail=user@DOMAIN.AD)(sAMAccountName=user\\@DOMAIN.AD@DOMAIN.AD))(objectclass=user)(sAMAccountName=*)(objectSID=*))][dc=prd,dc=ad]. (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [objectClass] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [sAMAccountName] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [unixUserPassword] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [uidNumber] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [gidNumber] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [gecos] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [unixHomeDirectory] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [loginShell] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [sAMAccountName] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [name] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [memberOf] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [objectGUID] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [objectSID] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [primaryGroupID] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [whenChanged] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [uSNChanged] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [accountExpires] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [userAccountControl] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [shawUser-sshPublicKey] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [userCertificate;binary] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [mail] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [shawUser-sshPublicKey] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x2000): ldap_search_ext called, msgid = 5 (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_op_add] (0x2000): New operation 5 timeout 6 (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_process_result] (0x2000): Trace: sh[0x5622d7e7a9a0], connected[1], ops[0x5622d7e96670], ldap[0x5622d7d76f00] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_op_destructor] (0x2000): Operation 5 finished (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_search_user_process] (0x0400): Search for users, returned 0 results. (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_search_user_process] (0x2000): Retrieved total 0 users (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [fo_resolve_service_send] (0x0100): Trying to resolve service 'sd_PRD.AD' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [get_server_status] (0x1000): Status of server 'dc02.PRD.AD' is 'name resolved' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [get_server_status] (0x0100): Hostname resolution expired, resetting the server status of 'dc02.PRD.AD' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [set_server_common_status] (0x0100): Marking server 'dc02.PRD.AD' as 'name not resolved' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [fo_resolve_service_activate_timeout] (0x2000): Resolve timeout set to 6 seconds (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [resolve_srv_send] (0x0200): The status of SRV lookup is expired (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [collapse_srv_lookup] (0x0100): Need to refresh SRV lookup for domain AWS._sites.PRD.AD (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [ad_srv_plugin_send] (0x0400): About to find domain controllers (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [ad_get_dc_servers_send] (0x0400): Looking up domain controllers in domain PRD.AD (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [resolv_discover_srv_next_domain] (0x0400): SRV resolution of service 'ldap'. Will use DNS discovery domain 'PRD.AD' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [resolv_getsrv_send] (0x0100): Trying to resolve SRV record of '_ldap._tcp.PRD.AD' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_process_result] (0x2000): Trace: sh[0x5622d7e7a9a0], connected[1], ops[(nil)], ldap[0x5622d7d76f00] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_process_result] (0x2000): Trace: end of ldap_result list (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [schedule_request_timeout] (0x2000): Scheduling a timeout of 6 seconds (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [schedule_timeout_watcher] (0x2000): Scheduling DNS timeout watcher (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [resolv_getsrv_done] (0x1000): Using TTL [600] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [request_watch_destructor] (0x0400): Deleting request watch (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [fo_discover_srv_done] (0x0400): Got answer. Processing... (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [fo_discover_srv_done] (0x0400): Got 7 servers (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [ad_get_dc_servers_done] (0x0400): Found 7 domain controllers in domain PRD.AD (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [ad_srv_plugin_dcs_done] (0x0400): About to locate suitable site (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_connect_host_send] (0x0400): Resolving host dc02.prd.ad (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [resolv_gethostbyname_step] (0x2000): Querying files (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [resolv_gethostbyname_files_send] (0x0100): Trying to resolve A record of 'dc02.prd.ad' in files (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [resolv_gethostbyname_step] (0x2000): Querying files (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [resolv_gethostbyname_files_send] (0x0100): Trying to resolve AAAA record of 'dc02.prd.ad' in files (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [resolv_gethostbyname_next] (0x0200): No more address families to retry (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [resolv_gethostbyname_step] (0x2000): Querying DNS (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [resolv_gethostbyname_dns_query] (0x0100): Trying to resolve A record of 'dc02.prd.ad' in DNS (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [schedule_request_timeout] (0x2000): Scheduling a timeout of 6 seconds (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [schedule_timeout_watcher] (0x2000): Scheduling DNS timeout watcher (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [resolv_gethostbyname_dns_parse] (0x1000): Parsing an A reply (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [request_watch_destructor] (0x0400): Deleting request watch (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_connect_host_resolv_done] (0x0400): Connecting to ldap://dc02.prd.ad:389 (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sssd_async_socket_init_send] (0x0400): Setting 6 seconds timeout for connecting (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_ldap_connect_callback_add] (0x1000): New LDAP connection to [ldap://dc02.prd.ad:389/??base] with fd [27]. (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_connect_host_done] (0x0400): Successful connection to ldap://dc02.prd.ad:389 (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_print_server] (0x2000): Searching 10.0.0.2:389 (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(&(DnsDomain=PRD.AD)(NtVer=\14\00\00\00))][]. (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [netlogon] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x2000): ldap_search_ext called, msgid = 1 (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_op_add] (0x2000): New operation 1 timeout 6 (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_process_result] (0x2000): Trace: sh[0x5622d7edd820], connected[1], ops[0x5622d7ece270], ldap[0x5622d7cebd40] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_entry] (0x1000): OriginalDN: []. (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [netlogon] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_process_result] (0x2000): Trace: sh[0x5622d7edd820], connected[1], ops[0x5622d7ece270], ldap[0x5622d7cebd40] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_op_destructor] (0x2000): Operation 1 finished (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_handle_release] (0x2000): Trace: sh[0x5622d7edd820], connected[1], ops[(nil)], ldap[0x5622d7cebd40], destructor_lock[0], release_memory[0] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [ad_get_client_site_done] (0x0400): Found site: AWS (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [ad_get_client_site_done] (0x0400): Found forest: PRD.AD (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [ad_srv_plugin_site_done] (0x0400): About to discover primary and backup servers (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [fo_discover_servers_send] (0x0400): Looking up primary servers (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [resolv_discover_srv_next_domain] (0x0400): SRV resolution of service 'ldap'. Will use DNS discovery domain 'AWS._sites.PRD.AD' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [resolv_getsrv_send] (0x0100): Trying to resolve SRV record of '_ldap._tcp.AWS._sites.PRD.AD' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [schedule_request_timeout] (0x2000): Scheduling a timeout of 6 seconds (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [schedule_timeout_watcher] (0x2000): Scheduling DNS timeout watcher (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [resolv_getsrv_done] (0x1000): Using TTL [600] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [request_watch_destructor] (0x0400): Deleting request watch (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [fo_discover_srv_done] (0x0400): Got answer. Processing... (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [fo_discover_srv_done] (0x0400): Got 6 servers (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [fo_discover_servers_primary_done] (0x0400): Looking up backup servers (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [resolv_discover_srv_next_domain] (0x0400): SRV resolution of service 'ldap'. Will use DNS discovery domain 'PRD.AD' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [resolv_getsrv_send] (0x0100): Trying to resolve SRV record of '_ldap._tcp.PRD.AD' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [schedule_request_timeout] (0x2000): Scheduling a timeout of 6 seconds (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [schedule_timeout_watcher] (0x2000): Scheduling DNS timeout watcher (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [resolv_getsrv_done] (0x1000): Using TTL [600] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [request_watch_destructor] (0x0400): Deleting request watch (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [fo_discover_srv_done] (0x0400): Got answer. Processing... (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [fo_discover_srv_done] (0x0400): Got 7 servers (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [ad_srv_plugin_servers_done] (0x0400): Got 6 primary and 7 backup servers (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [fo_add_server_to_list] (0x0400): Inserted primary server 'dc02.PRD.AD:389' to service 'sd_PRD.AD' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [fo_add_server_to_list] (0x0400): Inserted primary server 'dc11.PRD.AD:389' to service 'sd_PRD.AD' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [fo_add_server_to_list] (0x0400): Inserted primary server 'dc11.PRD.AD:389' to service 'sd_PRD.AD' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [fo_add_server_to_list] (0x0400): Inserted primary server 'dc02.PRD.AD:389' to service 'sd_PRD.AD' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [fo_add_server_to_list] (0x0400): Inserted primary server 'dc05.prd.ad:389' to service 'sd_PRD.AD' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [fo_add_server_to_list] (0x0400): Inserted primary server 'dc06.prd.ad:389' to service 'sd_PRD.AD' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [fo_add_server_to_list] (0x0400): Server 'dc02.PRD.AD:389' for service 'sd_PRD.AD' is already present (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [fo_add_server_to_list] (0x0400): Server 'dc11.PRD.AD:389' for service 'sd_PRD.AD' is already present (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [fo_add_server_to_list] (0x0400): Server 'dc05.prd.ad:389' for service 'sd_PRD.AD' is already present (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [fo_add_server_to_list] (0x0400): Server 'dc11.PRD.AD:389' for service 'sd_PRD.AD' is already present (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [fo_add_server_to_list] (0x0400): Server 'dc02.PRD.AD:389' for service 'sd_PRD.AD' is already present (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [fo_add_server_to_list] (0x0400): Server 'dc06.prd.ad:389' for service 'sd_PRD.AD' is already present (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [fo_add_server_to_list] (0x0400): Inserted backup server 'dc07.prd.ad:389' to service 'sd_PRD.AD' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [set_srv_data_status] (0x0100): Marking SRV lookup of service 'sd_PRD.AD' as 'resolved' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [get_server_status] (0x1000): Status of server 'dc02.PRD.AD' is 'name not resolved' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [resolv_gethostbyname_step] (0x2000): Querying files (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [resolv_gethostbyname_files_send] (0x0100): Trying to resolve A record of 'dc02.PRD.AD' in files (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [set_server_common_status] (0x0100): Marking server 'dc02.PRD.AD' as 'resolving name' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [resolv_gethostbyname_step] (0x2000): Querying files (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [resolv_gethostbyname_files_send] (0x0100): Trying to resolve AAAA record of 'dc02.PRD.AD' in files (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [resolv_gethostbyname_next] (0x0200): No more address families to retry (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [resolv_gethostbyname_step] (0x2000): Querying DNS (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [resolv_gethostbyname_dns_query] (0x0100): Trying to resolve A record of 'dc02.PRD.AD' in DNS (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [schedule_request_timeout] (0x2000): Scheduling a timeout of 6 seconds (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [schedule_timeout_watcher] (0x2000): Scheduling DNS timeout watcher (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [resolv_gethostbyname_dns_parse] (0x1000): Parsing an A reply (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [request_watch_destructor] (0x0400): Deleting request watch (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [set_server_common_status] (0x0100): Marking server 'dc02.PRD.AD' as 'name resolved' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [be_resolve_server_process] (0x1000): Saving the first resolved server (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [be_resolve_server_process] (0x0200): Found address for server dc02.PRD.AD: [10.0.0.2] TTL 3600 (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [ad_resolve_callback] (0x0100): Constructed uri 'ldap://dc02.PRD.AD' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [ad_resolve_callback] (0x0100): Constructed GC uri 'ldap://dc02.PRD.AD' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sssd_async_socket_init_send] (0x0400): Setting 6 seconds timeout for connecting (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_ldap_connect_callback_add] (0x1000): New LDAP connection to [ldap://dc02.PRD.AD:389/??base] with fd [26]. (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_print_server] (0x2000): Searching 10.0.0.2:389 (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(objectclass=*)][]. (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [*] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [altServer] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [namingContexts] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [supportedControl] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [supportedExtension] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [supportedFeatures] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [supportedLDAPVersion] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [supportedSASLMechanisms] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [domainControllerFunctionality] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [defaultNamingContext] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [lastUSN] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [highestCommittedUSN] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x2000): ldap_search_ext called, msgid = 1 (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_op_add] (0x2000): New operation 1 timeout 6 (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_process_result] (0x2000): Trace: sh[0x5622d7edd820], connected[1], ops[0x5622d7e8ae00], ldap[0x5622d7cebd40] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_entry] (0x1000): OriginalDN: []. (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [currentTime] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [subschemaSubentry] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [dsServiceName] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [namingContexts] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [defaultNamingContext] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [schemaNamingContext] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [configurationNamingContext] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [rootDomainNamingContext] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [supportedControl] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [supportedLDAPVersion] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [supportedLDAPPolicies] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [highestCommittedUSN] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [supportedSASLMechanisms] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [dnsHostName] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [ldapServiceName] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [serverName] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [supportedCapabilities] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [isSynchronized] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [isGlobalCatalogReady] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [supportedExtension] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [domainFunctionality] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [forestFunctionality] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [domainControllerFunctionality] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_process_result] (0x2000): Trace: sh[0x5622d7edd820], connected[1], ops[0x5622d7e8ae00], ldap[0x5622d7cebd40] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_op_destructor] (0x2000): Operation 1 finished (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_rootdse_done] (0x2000): Got rootdse (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_rootdse_done] (0x2000): Skipping auto-detection of match rule (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_server_opts_from_rootdse] (0x0100): Setting AD compatibility level to [6] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_kinit_send] (0x0400): Attempting kinit (default, server$, DOMAIN.AD, 86400) (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_kinit_next_kdc] (0x1000): Resolving next KDC for service sd_PRD.AD (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [fo_resolve_service_send] (0x0100): Trying to resolve service 'sd_PRD.AD' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [get_server_status] (0x1000): Status of server 'dc02.PRD.AD' is 'name resolved' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [fo_resolve_service_activate_timeout] (0x2000): Resolve timeout set to 6 seconds (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [resolve_srv_send] (0x0200): The status of SRV lookup is resolved (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [get_server_status] (0x1000): Status of server 'dc02.PRD.AD' is 'name resolved' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [be_resolve_server_process] (0x1000): Saving the first resolved server (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [be_resolve_server_process] (0x0200): Found address for server dc02.PRD.AD: [10.0.0.2] TTL 3600 (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_kinit_kdc_resolved] (0x1000): KDC resolved, attempting to get TGT... (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [create_tgt_req_send_buffer] (0x0400): buffer size: 43 (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [child_handler_setup] (0x2000): Setting up signal handler up for pid [19455] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [child_handler_setup] (0x2000): Signal handler set up for pid [19455] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [set_tgt_child_timeout] (0x0400): Setting 6 seconds timeout for tgt child (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_process_result] (0x2000): Trace: sh[0x5622d7edd820], connected[1], ops[(nil)], ldap[0x5622d7cebd40] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_process_result] (0x2000): Trace: end of ldap_result list (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [write_pipe_handler] (0x0400): All data has been sent! (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [read_pipe_handler] (0x0400): EOF received, client finished (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_tgt_recv] (0x0400): Child responded: 0 [FILE:/var/lib/sss/db/ccache_DOMAIN.AD], expired on [1517459477] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_cli_auth_step] (0x0100): expire timeout is 900 (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_cli_auth_step] (0x1000): the connection will expire at 1517424377 (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sasl_bind_send] (0x0100): Executing sasl bind mech: gssapi, user: server$ (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [ad_sasl_log] (0x0040): SASL: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (Cannot find KDC for realm "PRD.AD") (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sasl_bind_send] (0x0020): ldap_sasl_bind failed (-2)[Local error] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sasl_bind_send] (0x0080): Extended failure message: [SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (Cannot find KDC for realm "PRD.AD")] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [child_sig_handler] (0x1000): Waiting for child [19455]. (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [child_sig_handler] (0x0100): child [19455] finished successfully. (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_cli_connect_recv] (0x0040): Unable to establish connection [1432158226]: Authentication Failed (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [fo_set_port_status] (0x0100): Marking port 389 of server 'dc02.PRD.AD' as 'not working' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [fo_set_port_status] (0x0400): Marking port 389 of duplicate server 'dc02.PRD.AD' as 'not working' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [fo_set_port_status] (0x0400): Marking port 389 of duplicate server 'dc02.PRD.AD' as 'not working' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_handle_release] (0x2000): Trace: sh[0x5622d7edd820], connected[1], ops[(nil)], ldap[0x5622d7cebd40], destructor_lock[0], release_memory[0] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [fo_resolve_service_send] (0x0100): Trying to resolve service 'sd_PRD.AD' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [get_server_status] (0x1000): Status of server 'dc11.PRD.AD' is 'name resolved' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [get_server_status] (0x0100): Hostname resolution expired, resetting the server status of 'dc11.PRD.AD' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [set_server_common_status] (0x0100): Marking server 'dc11.PRD.AD' as 'name not resolved' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [get_port_status] (0x1000): Port status of port 389 for server 'dc11.PRD.AD' is 'neutral' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [fo_resolve_service_activate_timeout] (0x2000): Resolve timeout set to 6 seconds (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [resolve_srv_send] (0x0200): The status of SRV lookup is resolved (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [get_server_status] (0x1000): Status of server 'dc11.PRD.AD' is 'name not resolved' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [resolv_gethostbyname_step] (0x2000): Querying files (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [resolv_gethostbyname_files_send] (0x0100): Trying to resolve A record of 'dc11.PRD.AD' in files (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [set_server_common_status] (0x0100): Marking server 'dc11.PRD.AD' as 'resolving name' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [resolv_gethostbyname_step] (0x2000): Querying files (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [resolv_gethostbyname_files_send] (0x0100): Trying to resolve AAAA record of 'dc11.PRD.AD' in files (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [resolv_gethostbyname_next] (0x0200): No more address families to retry (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [resolv_gethostbyname_step] (0x2000): Querying DNS (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [resolv_gethostbyname_dns_query] (0x0100): Trying to resolve A record of 'dc11.PRD.AD' in DNS (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [schedule_request_timeout] (0x2000): Scheduling a timeout of 6 seconds (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [schedule_timeout_watcher] (0x2000): Scheduling DNS timeout watcher (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [resolv_gethostbyname_dns_parse] (0x1000): Parsing an A reply (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [request_watch_destructor] (0x0400): Deleting request watch (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [set_server_common_status] (0x0100): Marking server 'dc11.PRD.AD' as 'name resolved' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [be_resolve_server_process] (0x1000): Saving the first resolved server (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [be_resolve_server_process] (0x0200): Found address for server dc11.PRD.AD: [10.0.0.3] TTL 3600 (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [ad_resolve_callback] (0x0100): Constructed uri 'ldap://dc11.PRD.AD' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [ad_resolve_callback] (0x0100): Constructed GC uri 'ldap://dc11.PRD.AD' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sssd_async_socket_init_send] (0x0400): Setting 6 seconds timeout for connecting (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_ldap_connect_callback_add] (0x1000): New LDAP connection to [ldap://dc11.PRD.AD:389/??base] with fd [26]. (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_print_server] (0x2000): Searching 10.0.0.3:389 (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(objectclass=*)][]. (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [*] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [altServer] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [namingContexts] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [supportedControl] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [supportedExtension] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [supportedFeatures] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [supportedLDAPVersion] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [supportedSASLMechanisms] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [domainControllerFunctionality] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [defaultNamingContext] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [lastUSN] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [highestCommittedUSN] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x2000): ldap_search_ext called, msgid = 1 (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_op_add] (0x2000): New operation 1 timeout 6 (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_process_result] (0x2000): Trace: sh[0x5622d7edd820], connected[1], ops[0x5622d7e96670], ldap[0x5622d7e7b5c0] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_entry] (0x1000): OriginalDN: []. (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [currentTime] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [subschemaSubentry] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [dsServiceName] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [namingContexts] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [defaultNamingContext] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [schemaNamingContext] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [configurationNamingContext] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [rootDomainNamingContext] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [supportedControl] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [supportedLDAPVersion] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [supportedLDAPPolicies] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [highestCommittedUSN] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [supportedSASLMechanisms] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [dnsHostName] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [ldapServiceName] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [serverName] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [supportedCapabilities] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [isSynchronized] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [isGlobalCatalogReady] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [supportedExtension] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [domainFunctionality] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [forestFunctionality] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [domainControllerFunctionality] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_process_result] (0x2000): Trace: sh[0x5622d7edd820], connected[1], ops[0x5622d7e96670], ldap[0x5622d7e7b5c0] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_op_destructor] (0x2000): Operation 1 finished (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_rootdse_done] (0x2000): Got rootdse (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_rootdse_done] (0x2000): Skipping auto-detection of match rule (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_server_opts_from_rootdse] (0x0100): Setting AD compatibility level to [7] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_kinit_send] (0x0400): Attempting kinit (default, server$, DOMAIN.AD, 86400) (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_kinit_next_kdc] (0x1000): Resolving next KDC for service sd_PRD.AD (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [fo_resolve_service_send] (0x0100): Trying to resolve service 'sd_PRD.AD' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [get_server_status] (0x1000): Status of server 'dc11.PRD.AD' is 'name resolved' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [fo_resolve_service_activate_timeout] (0x2000): Resolve timeout set to 6 seconds (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [resolve_srv_send] (0x0200): The status of SRV lookup is resolved (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [get_server_status] (0x1000): Status of server 'dc11.PRD.AD' is 'name resolved' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [be_resolve_server_process] (0x1000): Saving the first resolved server (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [be_resolve_server_process] (0x0200): Found address for server dc11.PRD.AD: [10.0.0.3] TTL 3600 (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_kinit_kdc_resolved] (0x1000): KDC resolved, attempting to get TGT... (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [create_tgt_req_send_buffer] (0x0400): buffer size: 43 (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [child_handler_setup] (0x2000): Setting up signal handler up for pid [19456] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [child_handler_setup] (0x2000): Signal handler set up for pid [19456] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [set_tgt_child_timeout] (0x0400): Setting 6 seconds timeout for tgt child (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_process_result] (0x2000): Trace: sh[0x5622d7edd820], connected[1], ops[(nil)], ldap[0x5622d7e7b5c0] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_process_result] (0x2000): Trace: end of ldap_result list (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [write_pipe_handler] (0x0400): All data has been sent! (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [read_pipe_handler] (0x0400): EOF received, client finished (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_tgt_recv] (0x0400): Child responded: 0 [FILE:/var/lib/sss/db/ccache_DOMAIN.AD], expired on [1517459477] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_cli_auth_step] (0x0100): expire timeout is 900 (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_cli_auth_step] (0x1000): the connection will expire at 1517424377 (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sasl_bind_send] (0x0100): Executing sasl bind mech: gssapi, user: server$ (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [ad_sasl_log] (0x0040): SASL: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (Cannot find KDC for realm "PRD.AD") (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sasl_bind_send] (0x0020): ldap_sasl_bind failed (-2)[Local error] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sasl_bind_send] (0x0080): Extended failure message: [SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (Cannot find KDC for realm "PRD.AD")] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [child_sig_handler] (0x1000): Waiting for child [19456]. (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [child_sig_handler] (0x0100): child [19456] finished successfully. (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_cli_connect_recv] (0x0040): Unable to establish connection [1432158226]: Authentication Failed (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [fo_set_port_status] (0x0100): Marking port 389 of server 'dc11.PRD.AD' as 'not working' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [fo_set_port_status] (0x0400): Marking port 389 of duplicate server 'dc11.PRD.AD' as 'not working' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [fo_set_port_status] (0x0400): Marking port 389 of duplicate server 'dc11.PRD.AD' as 'not working' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_handle_release] (0x2000): Trace: sh[0x5622d7edd820], connected[1], ops[(nil)], ldap[0x5622d7e7b5c0], destructor_lock[0], release_memory[0] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [fo_resolve_service_send] (0x0100): Trying to resolve service 'sd_PRD.AD' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [get_server_status] (0x1000): Status of server 'dc11.PRD.AD' is 'name resolved' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [get_port_status] (0x1000): Port status of port 389 for server 'dc11.PRD.AD' is 'not working' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [get_port_status] (0x0080): SSSD is unable to complete the full connection request, this internal status does not necessarily indicate network port issues. (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [get_server_status] (0x1000): Status of server 'dc02.PRD.AD' is 'name resolved' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [get_port_status] (0x1000): Port status of port 389 for server 'dc02.PRD.AD' is 'not working' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [get_port_status] (0x0080): SSSD is unable to complete the full connection request, this internal status does not necessarily indicate network port issues. (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [get_server_status] (0x1000): Status of server 'dc05.prd.ad' is 'name not resolved' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [get_port_status] (0x1000): Port status of port 389 for server 'dc05.prd.ad' is 'neutral' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [fo_resolve_service_activate_timeout] (0x2000): Resolve timeout set to 6 seconds (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [resolve_srv_send] (0x0200): The status of SRV lookup is resolved (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [get_server_status] (0x1000): Status of server 'dc05.prd.ad' is 'name not resolved' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [resolv_gethostbyname_step] (0x2000): Querying files (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [resolv_gethostbyname_files_send] (0x0100): Trying to resolve A record of 'dc05.prd.ad' in files (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [set_server_common_status] (0x0100): Marking server 'dc05.prd.ad' as 'resolving name' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [resolv_gethostbyname_step] (0x2000): Querying files (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [resolv_gethostbyname_files_send] (0x0100): Trying to resolve AAAA record of 'dc05.prd.ad' in files (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [resolv_gethostbyname_next] (0x0200): No more address families to retry (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [resolv_gethostbyname_step] (0x2000): Querying DNS (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [resolv_gethostbyname_dns_query] (0x0100): Trying to resolve A record of 'dc05.prd.ad' in DNS (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [schedule_request_timeout] (0x2000): Scheduling a timeout of 6 seconds (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [schedule_timeout_watcher] (0x2000): Scheduling DNS timeout watcher (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [resolv_gethostbyname_dns_parse] (0x1000): Parsing an A reply (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [request_watch_destructor] (0x0400): Deleting request watch (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [set_server_common_status] (0x0100): Marking server 'dc05.prd.ad' as 'name resolved' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [be_resolve_server_process] (0x1000): Saving the first resolved server (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [be_resolve_server_process] (0x0200): Found address for server dc05.prd.ad: [10.0.0.1] TTL 3600 (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [ad_resolve_callback] (0x0100): Constructed uri 'ldap://dc05.prd.ad' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [ad_resolve_callback] (0x0100): Constructed GC uri 'ldap://dc05.prd.ad' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sssd_async_socket_init_send] (0x0400): Setting 6 seconds timeout for connecting (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_ldap_connect_callback_add] (0x1000): New LDAP connection to [ldap://dc05.prd.ad:389/??base] with fd [26]. (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_print_server] (0x2000): Searching 10.0.0.1:389 (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(objectclass=*)][]. (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [*] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [altServer] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [namingContexts] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [supportedControl] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [supportedExtension] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [supportedFeatures] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [supportedLDAPVersion] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [supportedSASLMechanisms] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [domainControllerFunctionality] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [defaultNamingContext] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [lastUSN] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [highestCommittedUSN] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x2000): ldap_search_ext called, msgid = 1 (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_op_add] (0x2000): New operation 1 timeout 6 (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_process_result] (0x2000): Trace: sh[0x5622d7edd820], connected[1], ops[0x5622d7e96670], ldap[0x5622d8cb2600] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_process_result] (0x2000): Trace: end of ldap_result list (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_process_result] (0x2000): Trace: sh[0x5622d7edd820], connected[1], ops[0x5622d7e96670], ldap[0x5622d8cb2600] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_entry] (0x1000): OriginalDN: []. (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [currentTime] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [subschemaSubentry] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [dsServiceName] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [namingContexts] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [defaultNamingContext] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [schemaNamingContext] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [configurationNamingContext] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [rootDomainNamingContext] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [supportedControl] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [supportedLDAPVersion] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [supportedLDAPPolicies] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [highestCommittedUSN] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [supportedSASLMechanisms] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [dnsHostName] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [ldapServiceName] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [serverName] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [supportedCapabilities] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [isSynchronized] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [isGlobalCatalogReady] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [supportedExtension] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [domainFunctionality] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [forestFunctionality] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [domainControllerFunctionality] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_process_result] (0x2000): Trace: sh[0x5622d7edd820], connected[1], ops[0x5622d7e96670], ldap[0x5622d8cb2600] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_op_destructor] (0x2000): Operation 1 finished (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_rootdse_done] (0x2000): Got rootdse (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_rootdse_done] (0x2000): Skipping auto-detection of match rule (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_server_opts_from_rootdse] (0x0100): Setting AD compatibility level to [6] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_kinit_send] (0x0400): Attempting kinit (default, server$, DOMAIN.AD, 86400) (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_kinit_next_kdc] (0x1000): Resolving next KDC for service sd_PRD.AD (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [fo_resolve_service_send] (0x0100): Trying to resolve service 'sd_PRD.AD' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [get_server_status] (0x1000): Status of server 'dc05.prd.ad' is 'name resolved' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [fo_resolve_service_activate_timeout] (0x2000): Resolve timeout set to 6 seconds (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [resolve_srv_send] (0x0200): The status of SRV lookup is resolved (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [get_server_status] (0x1000): Status of server 'dc05.prd.ad' is 'name resolved' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [be_resolve_server_process] (0x1000): Saving the first resolved server (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [be_resolve_server_process] (0x0200): Found address for server dc05.prd.ad: [10.0.0.1] TTL 3600 (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_kinit_kdc_resolved] (0x1000): KDC resolved, attempting to get TGT... (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [create_tgt_req_send_buffer] (0x0400): buffer size: 43 (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [child_handler_setup] (0x2000): Setting up signal handler up for pid [19457] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [child_handler_setup] (0x2000): Signal handler set up for pid [19457] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [set_tgt_child_timeout] (0x0400): Setting 6 seconds timeout for tgt child (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_process_result] (0x2000): Trace: sh[0x5622d7edd820], connected[1], ops[(nil)], ldap[0x5622d8cb2600] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_process_result] (0x2000): Trace: end of ldap_result list (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [write_pipe_handler] (0x0400): All data has been sent! (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [read_pipe_handler] (0x0400): EOF received, client finished (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_tgt_recv] (0x0400): Child responded: 0 [FILE:/var/lib/sss/db/ccache_DOMAIN.AD], expired on [1517459477] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_cli_auth_step] (0x0100): expire timeout is 900 (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_cli_auth_step] (0x1000): the connection will expire at 1517424377 (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sasl_bind_send] (0x0100): Executing sasl bind mech: gssapi, user: server$ (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [ad_sasl_log] (0x0040): SASL: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (Cannot find KDC for realm "PRD.AD") (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sasl_bind_send] (0x0020): ldap_sasl_bind failed (-2)[Local error] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sasl_bind_send] (0x0080): Extended failure message: [SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (Cannot find KDC for realm "PRD.AD")] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [child_sig_handler] (0x1000): Waiting for child [19457]. (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [child_sig_handler] (0x0100): child [19457] finished successfully. (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_cli_connect_recv] (0x0040): Unable to establish connection [1432158226]: Authentication Failed (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [fo_set_port_status] (0x0100): Marking port 389 of server 'dc05.prd.ad' as 'not working' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [fo_set_port_status] (0x0400): Marking port 389 of duplicate server 'dc05.prd.ad' as 'not working' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_handle_release] (0x2000): Trace: sh[0x5622d7edd820], connected[1], ops[(nil)], ldap[0x5622d8cb2600], destructor_lock[0], release_memory[0] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [fo_resolve_service_send] (0x0100): Trying to resolve service 'sd_PRD.AD' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [get_server_status] (0x1000): Status of server 'dc06.prd.ad' is 'name not resolved' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [get_port_status] (0x1000): Port status of port 389 for server 'dc06.prd.ad' is 'neutral' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [fo_resolve_service_activate_timeout] (0x2000): Resolve timeout set to 6 seconds (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [resolve_srv_send] (0x0200): The status of SRV lookup is resolved (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [get_server_status] (0x1000): Status of server 'dc06.prd.ad' is 'name not resolved' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [resolv_gethostbyname_step] (0x2000): Querying files (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [resolv_gethostbyname_files_send] (0x0100): Trying to resolve A record of 'dc06.prd.ad' in files (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [set_server_common_status] (0x0100): Marking server 'dc06.prd.ad' as 'resolving name' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [resolv_gethostbyname_step] (0x2000): Querying files (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [resolv_gethostbyname_files_send] (0x0100): Trying to resolve AAAA record of 'dc06.prd.ad' in files (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [resolv_gethostbyname_next] (0x0200): No more address families to retry (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [resolv_gethostbyname_step] (0x2000): Querying DNS (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [resolv_gethostbyname_dns_query] (0x0100): Trying to resolve A record of 'dc06.prd.ad' in DNS (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [schedule_request_timeout] (0x2000): Scheduling a timeout of 6 seconds (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [schedule_timeout_watcher] (0x2000): Scheduling DNS timeout watcher (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [resolv_gethostbyname_dns_parse] (0x1000): Parsing an A reply (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [request_watch_destructor] (0x0400): Deleting request watch (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [set_server_common_status] (0x0100): Marking server 'dc06.prd.ad' as 'name resolved' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [be_resolve_server_process] (0x1000): Saving the first resolved server (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [be_resolve_server_process] (0x0200): Found address for server dc06.prd.ad: [10.0.0.4] TTL 3600 (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [ad_resolve_callback] (0x0100): Constructed uri 'ldap://dc06.prd.ad' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [ad_resolve_callback] (0x0100): Constructed GC uri 'ldap://dc06.prd.ad' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sssd_async_socket_init_send] (0x0400): Setting 6 seconds timeout for connecting (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_ldap_connect_callback_add] (0x1000): New LDAP connection to [ldap://dc06.prd.ad:389/??base] with fd [26]. (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_print_server] (0x2000): Searching 10.0.0.4:389 (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(objectclass=*)][]. (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [*] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [altServer] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [namingContexts] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [supportedControl] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [supportedExtension] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [supportedFeatures] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [supportedLDAPVersion] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [supportedSASLMechanisms] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [domainControllerFunctionality] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [defaultNamingContext] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [lastUSN] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [highestCommittedUSN] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_ext_step] (0x2000): ldap_search_ext called, msgid = 1 (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_op_add] (0x2000): New operation 1 timeout 6 (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_process_result] (0x2000): Trace: sh[0x5622d7edd820], connected[1], ops[0x5622d7e96670], ldap[0x5622d8cc07b0] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_entry] (0x1000): OriginalDN: []. (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [currentTime] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [subschemaSubentry] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [dsServiceName] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [namingContexts] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [defaultNamingContext] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [schemaNamingContext] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [configurationNamingContext] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [rootDomainNamingContext] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [supportedControl] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [supportedLDAPVersion] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [supportedLDAPPolicies] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [highestCommittedUSN] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [supportedSASLMechanisms] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [dnsHostName] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [ldapServiceName] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [serverName] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [supportedCapabilities] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [isSynchronized] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [isGlobalCatalogReady] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [supportedExtension] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [domainFunctionality] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [forestFunctionality] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_parse_range] (0x2000): No sub-attributes for [domainControllerFunctionality] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_process_result] (0x2000): Trace: sh[0x5622d7edd820], connected[1], ops[0x5622d7e96670], ldap[0x5622d8cc07b0] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_op_destructor] (0x2000): Operation 1 finished (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_rootdse_done] (0x2000): Got rootdse (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_rootdse_done] (0x2000): Skipping auto-detection of match rule (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_server_opts_from_rootdse] (0x0100): Setting AD compatibility level to [6] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_kinit_send] (0x0400): Attempting kinit (default, server$, DOMAIN.AD, 86400) (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_kinit_next_kdc] (0x1000): Resolving next KDC for service sd_PRD.AD (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [fo_resolve_service_send] (0x0100): Trying to resolve service 'sd_PRD.AD' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [get_server_status] (0x1000): Status of server 'dc06.prd.ad' is 'name resolved' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [fo_resolve_service_activate_timeout] (0x2000): Resolve timeout set to 6 seconds (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [resolve_srv_send] (0x0200): The status of SRV lookup is resolved (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [get_server_status] (0x1000): Status of server 'dc06.prd.ad' is 'name resolved' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [be_resolve_server_process] (0x1000): Saving the first resolved server (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [be_resolve_server_process] (0x0200): Found address for server dc06.prd.ad: [10.0.0.4] TTL 3600 (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_kinit_kdc_resolved] (0x1000): KDC resolved, attempting to get TGT... (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [create_tgt_req_send_buffer] (0x0400): buffer size: 43 (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [child_handler_setup] (0x2000): Setting up signal handler up for pid [19458] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [child_handler_setup] (0x2000): Signal handler set up for pid [19458] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [set_tgt_child_timeout] (0x0400): Setting 6 seconds timeout for tgt child (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_process_result] (0x2000): Trace: sh[0x5622d7edd820], connected[1], ops[(nil)], ldap[0x5622d8cc07b0] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_process_result] (0x2000): Trace: end of ldap_result list (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [write_pipe_handler] (0x0400): All data has been sent! (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [read_pipe_handler] (0x0400): EOF received, client finished (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_get_tgt_recv] (0x0400): Child responded: 0 [FILE:/var/lib/sss/db/ccache_DOMAIN.AD], expired on [1517459477] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_cli_auth_step] (0x0100): expire timeout is 900 (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_cli_auth_step] (0x1000): the connection will expire at 1517424377 (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sasl_bind_send] (0x0100): Executing sasl bind mech: gssapi, user: server$ (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [ad_sasl_log] (0x0040): SASL: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (Cannot find KDC for realm "PRD.AD") (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sasl_bind_send] (0x0020): ldap_sasl_bind failed (-2)[Local error] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sasl_bind_send] (0x0080): Extended failure message: [SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (Cannot find KDC for realm "PRD.AD")] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [child_sig_handler] (0x1000): Waiting for child [19458]. (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [child_sig_handler] (0x0100): child [19458] finished successfully. (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_cli_connect_recv] (0x0040): Unable to establish connection [1432158226]: Authentication Failed (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [fo_set_port_status] (0x0100): Marking port 389 of server 'dc06.prd.ad' as 'not working' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [fo_set_port_status] (0x0400): Marking port 389 of duplicate server 'dc06.prd.ad' as 'not working' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_handle_release] (0x2000): Trace: sh[0x5622d7edd820], connected[1], ops[(nil)], ldap[0x5622d8cc07b0], destructor_lock[0], release_memory[0] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [fo_resolve_service_send] (0x0100): Trying to resolve service 'sd_PRD.AD' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [get_server_status] (0x1000): Status of server 'dc02.PRD.AD' is 'name resolved' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [get_port_status] (0x1000): Port status of port 389 for server 'dc02.PRD.AD' is 'not working' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [get_port_status] (0x0080): SSSD is unable to complete the full connection request, this internal status does not necessarily indicate network port issues. (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [get_server_status] (0x1000): Status of server 'dc11.PRD.AD' is 'name resolved' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [get_port_status] (0x1000): Port status of port 389 for server 'dc11.PRD.AD' is 'not working' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [get_port_status] (0x0080): SSSD is unable to complete the full connection request, this internal status does not necessarily indicate network port issues. (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [get_server_status] (0x1000): Status of server 'dc11.PRD.AD' is 'name resolved' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [get_port_status] (0x1000): Port status of port 389 for server 'dc11.PRD.AD' is 'not working' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [get_port_status] (0x0080): SSSD is unable to complete the full connection request, this internal status does not necessarily indicate network port issues. (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [get_server_status] (0x1000): Status of server 'dc02.PRD.AD' is 'name resolved' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [get_port_status] (0x1000): Port status of port 389 for server 'dc02.PRD.AD' is 'not working' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [get_port_status] (0x0080): SSSD is unable to complete the full connection request, this internal status does not necessarily indicate network port issues. (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [get_server_status] (0x1000): Status of server 'dc05.prd.ad' is 'name resolved' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [get_port_status] (0x1000): Port status of port 389 for server 'dc05.prd.ad' is 'not working' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [get_port_status] (0x0080): SSSD is unable to complete the full connection request, this internal status does not necessarily indicate network port issues. (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [get_server_status] (0x1000): Status of server 'dc06.prd.ad' is 'name resolved' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [get_port_status] (0x1000): Port status of port 389 for server 'dc06.prd.ad' is 'not working' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [get_port_status] (0x0080): SSSD is unable to complete the full connection request, this internal status does not necessarily indicate network port issues. (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [get_server_status] (0x1000): Status of server 'dc07.prd.ad' is 'name not resolved' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [get_port_status] (0x1000): Port status of port 389 for server 'dc07.prd.ad' is 'neutral' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [fo_resolve_service_activate_timeout] (0x2000): Resolve timeout set to 6 seconds (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [resolve_srv_send] (0x0200): The status of SRV lookup is resolved (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [get_server_status] (0x1000): Status of server 'dc07.prd.ad' is 'name not resolved' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [resolv_gethostbyname_step] (0x2000): Querying files (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [resolv_gethostbyname_files_send] (0x0100): Trying to resolve A record of 'dc07.prd.ad' in files (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [set_server_common_status] (0x0100): Marking server 'dc07.prd.ad' as 'resolving name' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [resolv_gethostbyname_step] (0x2000): Querying files (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [resolv_gethostbyname_files_send] (0x0100): Trying to resolve AAAA record of 'dc07.prd.ad' in files (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [resolv_gethostbyname_next] (0x0200): No more address families to retry (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [resolv_gethostbyname_step] (0x2000): Querying DNS (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [resolv_gethostbyname_dns_query] (0x0100): Trying to resolve A record of 'dc07.prd.ad' in DNS (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [schedule_request_timeout] (0x2000): Scheduling a timeout of 6 seconds (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [schedule_timeout_watcher] (0x2000): Scheduling DNS timeout watcher (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [resolv_gethostbyname_dns_parse] (0x1000): Parsing an A reply (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [request_watch_destructor] (0x0400): Deleting request watch (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [set_server_common_status] (0x0100): Marking server 'dc07.prd.ad' as 'name resolved' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [be_resolve_server_process] (0x1000): Saving the first resolved server (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [be_resolve_server_process] (0x0200): Found address for server dc07.prd.ad: [10.200.80.12] TTL 3600 (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [ad_resolve_callback] (0x0100): Constructed uri 'ldap://dc07.prd.ad' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [ad_resolve_callback] (0x0100): Constructed GC uri 'ldap://dc07.prd.ad' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [be_primary_server_timeout_activate] (0x2000): Primary server reactivation timeout set to 31 seconds (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sssd_async_socket_init_send] (0x0400): Setting 6 seconds timeout for connecting (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sssd_async_connect_done] (0x0020): connect failed [113][No route to host]. (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sssd_async_socket_init_done] (0x0020): sdap_async_sys_connect request failed: [113]: No route to host. (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sssd_async_socket_state_destructor] (0x0400): closing socket [26] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sss_ldap_init_sys_connect_done] (0x0020): sssd_async_socket_init request failed: [113]: No route to host. (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_sys_connect_done] (0x0020): sdap_async_connect_call request failed: [113]: No route to host. (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_handle_release] (0x2000): Trace: sh[0x5622d7edd820], connected[0], ops[(nil)], ldap[(nil)], destructor_lock[0], release_memory[0] (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [fo_set_port_status] (0x0100): Marking port 389 of server 'dc07.prd.ad' as 'not working' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [fo_set_port_status] (0x0400): Marking port 389 of duplicate server 'dc07.prd.ad' as 'not working' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [fo_resolve_service_send] (0x0100): Trying to resolve service 'sd_PRD.AD' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [get_server_status] (0x1000): Status of server 'dc02.PRD.AD' is 'name resolved' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [get_port_status] (0x1000): Port status of port 389 for server 'dc02.PRD.AD' is 'not working' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [get_port_status] (0x0080): SSSD is unable to complete the full connection request, this internal status does not necessarily indicate network port issues. (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [get_server_status] (0x1000): Status of server 'dc11.PRD.AD' is 'name resolved' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [get_port_status] (0x1000): Port status of port 389 for server 'dc11.PRD.AD' is 'not working' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [get_port_status] (0x0080): SSSD is unable to complete the full connection request, this internal status does not necessarily indicate network port issues. (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [get_server_status] (0x1000): Status of server 'dc11.PRD.AD' is 'name resolved' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [get_port_status] (0x1000): Port status of port 389 for server 'dc11.PRD.AD' is 'not working' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [get_port_status] (0x0080): SSSD is unable to complete the full connection request, this internal status does not necessarily indicate network port issues. (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [get_server_status] (0x1000): Status of server 'dc02.PRD.AD' is 'name resolved' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [get_port_status] (0x1000): Port status of port 389 for server 'dc02.PRD.AD' is 'not working' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [get_port_status] (0x0080): SSSD is unable to complete the full connection request, this internal status does not necessarily indicate network port issues. (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [get_server_status] (0x1000): Status of server 'dc05.prd.ad' is 'name resolved' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [get_port_status] (0x1000): Port status of port 389 for server 'dc05.prd.ad' is 'not working' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [get_port_status] (0x0080): SSSD is unable to complete the full connection request, this internal status does not necessarily indicate network port issues. (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [get_server_status] (0x1000): Status of server 'dc06.prd.ad' is 'name resolved' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [get_port_status] (0x1000): Port status of port 389 for server 'dc06.prd.ad' is 'not working' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [get_port_status] (0x0080): SSSD is unable to complete the full connection request, this internal status does not necessarily indicate network port issues. (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [get_server_status] (0x1000): Status of server 'dc07.prd.ad' is 'name resolved' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [get_port_status] (0x1000): Port status of port 389 for server 'dc07.prd.ad' is 'not working' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [get_port_status] (0x0080): SSSD is unable to complete the full connection request, this internal status does not necessarily indicate network port issues. (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [fo_resolve_service_send] (0x0020): No available servers for service 'sd_PRD.AD' (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [be_resolve_server_done] (0x1000): Server resolution failed: [5]: Input/output error (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [sdap_id_op_connect_done] (0x0400): Failed to connect to server, but ignore mark offline is enabled. (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [dp_req_done] (0x0400): DP Request [Account #1411]: Request handler finished [0]: Success (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [_dp_req_recv] (0x0400): DP Request [Account #1411]: Receiving request data. (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [dp_req_reply_list_success] (0x0400): DP Request [Account #1411]: Finished. Success. (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [dp_req_reply_std] (0x1000): DP Request [Account #1411]: Returning [Internal Error]: 3,1432158272,User lookup failed (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [dp_table_value_destructor] (0x0400): Removing [0:1:0x0001:1:U:PRD.AD:name=user@DOMAIN.AD] from reply table (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [dp_req_destructor] (0x0400): DP Request [Account #1411]: Request removed. (Wed Jan 31 18:31:17 2018) [sssd[be[DOMAIN.AD]]] [dp_req_destructor] (0x0400): Number of active DP request: 0

3 6

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

sssd-users February 2018