(Mon Oct 24 12:44:17 2016) [sssd[be[LDAP]]] [dp_get_account_info_handler] (0x0200): Got request for [0x3][BE_REQ_INITGROUPS][1][name=someuser@ldap] (Mon Oct 24 12:44:17 2016) [sssd[be[LDAP]]] [dp_attach_req] (0x0400): DP Request [Initgroups #13]: New request. Flags [0000]. (Mon Oct 24 12:44:17 2016) [sssd[be[LDAP]]] [dp_attach_req] (0x0400): Number of active DP request: 1 (Mon Oct 24 12:44:17 2016) [sssd[be[LDAP]]] [sdap_get_initgr_next_base] (0x0400): Searching for users with base [ou=user,dc=Sub,dc=Domain,dc=TLD] (Mon Oct 24 12:44:17 2016) [sssd[be[LDAP]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(&(uid=someuser)(objectclass=posixAccount)(&(uidNumber=*)(!(uidNumber=0))))][ou=user,dc=Sub,dc=Domain,dc=TLD]. (Mon Oct 24 12:44:17 2016) [sssd[be[LDAP]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set (Mon Oct 24 12:44:17 2016) [sssd[be[LDAP]]] [sdap_save_user] (0x0400): Save user (Mon Oct 24 12:44:17 2016) [sssd[be[LDAP]]] [sdap_get_primary_name] (0x0400): Processing object someuser (Mon Oct 24 12:44:17 2016) [sssd[be[LDAP]]] [sdap_save_user] (0x0400): Processing user someuser@ldap (Mon Oct 24 12:44:17 2016) [sssd[be[LDAP]]] [sdap_save_user] (0x0400): Original memberOf is not available for [someuser@ldap]. (Mon Oct 24 12:44:17 2016) [sssd[be[LDAP]]] [sdap_save_user] (0x0400): User principal is not available for [someuser@ldap]. (Mon Oct 24 12:44:17 2016) [sssd[be[LDAP]]] [sdap_save_user] (0x0400): Storing info for user someuser@ldap (Mon Oct 24 12:44:17 2016) [sssd[be[LDAP]]] [sdap_initgr_rfc2307_next_base] (0x0400): Searching for groups with base [ou=group,dc=Sub,dc=Domain,dc=TLD] (Mon Oct 24 12:44:17 2016) [sssd[be[LDAP]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(&(memberuid=someuser)(objectClass=posixGroup)(cn=*)(&(gidNumber=*)(!(gidNumber=0))))][ou=group,dc=Sub,dc=Domain,dc=TLD]. (Mon Oct 24 12:44:17 2016) [sssd[be[LDAP]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set (Mon Oct 24 12:44:17 2016) [sssd[be[LDAP]]] [sdap_get_initgr_done] (0x0400): Primary group already cached, nothing to do. (Mon Oct 24 12:44:17 2016) [sssd[be[LDAP]]] [dp_req_done] (0x0400): DP Request [Initgroups #13]: Request handler finished [0]: Success (Mon Oct 24 12:44:17 2016) [sssd[be[LDAP]]] [_dp_req_recv] (0x0400): DP Request [Initgroups #13]: Receiving request data. (Mon Oct 24 12:44:17 2016) [sssd[be[LDAP]]] [dp_req_initgr_pp] (0x0400): Ordering NSS responder to update memory cache (Mon Oct 24 12:44:17 2016) [sssd[be[LDAP]]] [dp_req_reply_list_success] (0x0400): DP Request [Initgroups #13]: Finished. Success. (Mon Oct 24 12:44:17 2016) [sssd[be[LDAP]]] [dp_table_value_destructor] (0x0400): Removing [0:1:0000:3:1::LDAP:name=someuser@ldap] from reply table (Mon Oct 24 12:44:17 2016) [sssd[be[LDAP]]] [dp_req_destructor] (0x0400): DP Request [Initgroups #13]: Request removed. (Mon Oct 24 12:44:17 2016) [sssd[be[LDAP]]] [dp_req_destructor] (0x0400): Number of active DP request: 0 (Mon Oct 24 12:44:17 2016) [sssd[be[LDAP]]] [dp_pam_handler] (0x0100): Got request with the following data (Mon Oct 24 12:44:17 2016) [sssd[be[LDAP]]] [pam_print_data] (0x0100): command: SSS_PAM_AUTHENTICATE (Mon Oct 24 12:44:17 2016) [sssd[be[LDAP]]] [pam_print_data] (0x0100): domain: LDAP (Mon Oct 24 12:44:17 2016) [sssd[be[LDAP]]] [pam_print_data] (0x0100): user: someuser@ldap (Mon Oct 24 12:44:17 2016) [sssd[be[LDAP]]] [pam_print_data] (0x0100): service: sshd (Mon Oct 24 12:44:17 2016) [sssd[be[LDAP]]] [pam_print_data] (0x0100): tty: ssh (Mon Oct 24 12:44:17 2016) [sssd[be[LDAP]]] [pam_print_data] (0x0100): ruser: (Mon Oct 24 12:44:17 2016) [sssd[be[LDAP]]] [pam_print_data] (0x0100): rhost: 192.168.200.11 (Mon Oct 24 12:44:17 2016) [sssd[be[LDAP]]] [pam_print_data] (0x0100): authtok type: 1 (Mon Oct 24 12:44:17 2016) [sssd[be[LDAP]]] [pam_print_data] (0x0100): newauthtok type: 0 (Mon Oct 24 12:44:17 2016) [sssd[be[LDAP]]] [pam_print_data] (0x0100): priv: 1 (Mon Oct 24 12:44:17 2016) [sssd[be[LDAP]]] [pam_print_data] (0x0100): cli_pid: 13510 (Mon Oct 24 12:44:17 2016) [sssd[be[LDAP]]] [pam_print_data] (0x0100): logon name: not set (Mon Oct 24 12:44:17 2016) [sssd[be[LDAP]]] [dp_attach_req] (0x0400): DP Request [PAM Authenticate #14]: New request. Flags [0000]. (Mon Oct 24 12:44:17 2016) [sssd[be[LDAP]]] [dp_attach_req] (0x0400): Number of active DP request: 1 (Mon Oct 24 12:44:17 2016) [sssd[be[LDAP]]] [fo_resolve_service_send] (0x0100): Trying to resolve service 'LDAP' (Mon Oct 24 12:44:17 2016) [sssd[be[LDAP]]] [resolve_srv_send] (0x0200): The status of SRV lookup is resolved (Mon Oct 24 12:44:17 2016) [sssd[be[LDAP]]] [be_resolve_server_process] (0x0200): Found address for server ldap2.Domain.TLD: [192.168.100.40] TTL 86400 (Mon Oct 24 12:44:17 2016) [sssd[be[LDAP]]] [sdap_uri_callback] (0x0400): Constructed uri 'ldap://ldap2.Domain.TLD:389' (Mon Oct 24 12:44:17 2016) [sssd[be[LDAP]]] [sssd_async_socket_init_send] (0x0400): Setting 6 seconds timeout for connecting (Mon Oct 24 12:44:17 2016) [sssd[be[LDAP]]] [sdap_sys_connect_done] (0x0100): Executing START TLS (Mon Oct 24 12:44:17 2016) [sssd[be[LDAP]]] [sdap_connect_done] (0x0080): START TLS result: Success(0), (null) (Mon Oct 24 12:44:17 2016) [sssd[be[LDAP]]] [fo_set_port_status] (0x0100): Marking port 389 of server 'ldap2.Domain.TLD' as 'working' (Mon Oct 24 12:44:17 2016) [sssd[be[LDAP]]] [set_server_common_status] (0x0100): Marking server 'ldap2.Domain.TLD' as 'working' (Mon Oct 24 12:44:17 2016) [sssd[be[LDAP]]] [fo_set_port_status] (0x0400): Marking port 389 of duplicate server 'ldap2.Domain.TLD' as 'working' (Mon Oct 24 12:44:17 2016) [sssd[be[LDAP]]] [simple_bind_send] (0x0100): Executing simple bind as: uid=someuser,ou=user,dc=Sub,dc=Domain,dc=TLD (Mon Oct 24 12:44:17 2016) [sssd[be[LDAP]]] [sdap_process_result] (0x0040): ldap_result error: [Can't contact LDAP server] (Mon Oct 24 12:44:17 2016) [sssd[be[LDAP]]] [dp_req_done] (0x0400): DP Request [PAM Authenticate #14]: Request handler finished [0]: Success (Mon Oct 24 12:44:17 2016) [sssd[be[LDAP]]] [_dp_req_recv] (0x0400): DP Request [PAM Authenticate #14]: Receiving request data. (Mon Oct 24 12:44:17 2016) [sssd[be[LDAP]]] [dp_req_destructor] (0x0400): DP Request [PAM Authenticate #14]: Request removed. (Mon Oct 24 12:44:17 2016) [sssd[be[LDAP]]] [dp_req_destructor] (0x0400): Number of active DP request: 0 (Mon Oct 24 12:44:17 2016) [sssd[be[LDAP]]] [dp_method_enabled] (0x0400): Target selinux is not configured