Thanks for prompt reply.
(Sun Jul 1 15:21:12 2018) [sssd[nss]] [cache_req_search_ncache] (0x0400): CR #1653: Checking negative cache for [
admjesse_chan@japn.dell.com]
(Sun Jul 1 15:21:12 2018) [sssd[nss]] [cache_req_search_ncache] (0x0400): CR #1653: [
admjesse_chan@japn.dell.com] is not present in negative cache
(Sun Jul 1 15:21:12 2018) [sssd[nss]] [cache_req_search_cache] (0x0400): CR #1653: Object [
admjesse_chan@japn.dell.com] was not found in cache
(Sun Jul 1 15:21:12 2018) [sssd[nss]] [cache_req_search_dp] (0x0400): CR #1653: Looking up [
admjesse_chan@japn.dell.com] in data provider
(Sun Jul 1 15:21:12 2018) [sssd[nss]] [sss_dp_issue_request] (0x0400): Issuing request for [0x55f842febb50:1:admjesse_chan@japn.dell.com@
japn.dell.com]
(Sun Jul 1 15:21:12 2018) [sssd[nss]] [sss_dp_get_account_msg] (0x0400): Creating request for [
japn.dell.com][0x1][BE_REQ_USER][name=admjesse_chan@japn.dell.com:-]
(Sun Jul 1 15:21:12 2018) [sssd[nss]] [sss_dp_internal_get_send] (0x0400): Entering request [0x55f842febb50:1:admjesse_chan@japn.dell.com@
japn.dell.com]
(Sun Jul 1 15:21:12 2018) [sssd[nss]] [sss_dp_req_destructor] (0x0400): Deleting request: [0x55f842febb50:1:admjesse_chan@apac.dell.com@
apac.dell.com]
(Sun Jul 1 15:21:12 2018) [sssd[nss]] [cache_req_search_cache] (0x0400): CR #1653: Object [
admjesse_chan@japn.dell.com] was not found in cache
(Sun Jul 1 15:21:12 2018) [sssd[nss]] [cache_req_search_send] (0x0400): CR #1653: Looking up
admjesse_chan@dell.com(Sun Jul 1 15:21:12 2018) [sssd[nss]] [cache_req_search_ncache] (0x0400): CR #1653: Checking negative cache for [
admjesse_chan@dell.com]
(Sun Jul 1 15:21:12 2018) [sssd[nss]] [cache_req_search_ncache] (0x0400): CR #1653: [
admjesse_chan@dell.com] is not present in negative cache
(Sun Jul 1 15:21:12 2018) [sssd[nss]] [cache_req_search_cache] (0x0400): CR #1653: Looking up [
admjesse_chan@dell.com] in cache
(Sun Jul 1 15:21:12 2018) [sssd[nss]] [cache_req_search_cache] (0x0400): CR #1653: Object [
admjesse_chan@dell.com] was not found in cache
(Sun Jul 1 15:21:12 2018) [sssd[nss]] [cache_req_search_dp] (0x0400): CR #1653: Looking up [
admjesse_chan@dell.com] in data provider
(Sun Jul 1 15:21:12 2018) [sssd[nss]] [sss_dp_issue_request] (0x0400): Issuing request for [0x55f842febb50:1:admjesse_chan@dell.com@
dell.com]
(Sun Jul 1 15:21:12 2018) [sssd[nss]] [sss_dp_get_account_msg] (0x0400): Creating request for [
dell.com][0x1][BE_REQ_USER][name=admjesse_chan@dell.com:-]
(Sun Jul 1 15:21:12 2018) [sssd[nss]] [sss_dp_internal_get_send] (0x0400): Entering request [0x55f842febb50:1:admjesse_chan@dell.com@
dell.com]
(Sun Jul 1 15:21:12 2018) [sssd[nss]] [sss_dp_req_destructor] (0x0400): Deleting request: [0x55f842febb50:1:admjesse_chan@japn.dell.com@
japn.dell.com]
(Sun Jul 1 15:21:12 2018) [sssd[nss]] [cache_req_search_cache] (0x0400): CR #1653: Looking up [
admjesse_chan@dell.com] in cache
(Sun Jul 1 15:21:12 2018) [sssd[nss]] [cache_req_search_cache] (0x0400): CR #1653: Object [
admjesse_chan@dell.com] was not found in cache
(Sun Jul 1 15:21:12 2018) [sssd[nss]] [sss_dp_req_destructor] (0x0400): Deleting request: [0x55f842febb50:1:admjesse_chan@dell.com@
dell.com]
Specifically, this user is in
apac.dell.com, so I want to make sure it's querying that subdomain. It is.
[root@spikerealmd02 sssd]# grep 'admjesse_chan.*apac' sssd_nss.log
(Sun Jul 1 15:21:12 2018) [sssd[nss]] [cache_req_search_ncache] (0x0400): CR #1653: Checking negative cache for [
admjesse_chan@apac.dell.com]
(Sun Jul 1 15:21:12 2018) [sssd[nss]] [cache_req_search_ncache] (0x0400): CR #1653: [
admjesse_chan@apac.dell.com] is not present in negative cache
(Sun Jul 1 15:21:12 2018) [sssd[nss]] [cache_req_search_cache] (0x0400): CR #1653: Object [
admjesse_chan@apac.dell.com] was not found in cache
(Sun Jul 1 15:21:12 2018) [sssd[nss]] [cache_req_search_dp] (0x0400): CR #1653: Looking up [
admjesse_chan@apac.dell.com] in data provider
(Sun Jul 1 15:21:12 2018) [sssd[nss]] [sss_dp_issue_request] (0x0400): Issuing request for [0x55f842febb50:1:admjesse_chan@apac.dell.com@
apac.dell.com]
(Sun Jul 1 15:21:12 2018) [sssd[nss]] [sss_dp_get_account_msg] (0x0400): Creating request for [
apac.dell.com][0x1][BE_REQ_USER][name=admjesse_chan@apac.dell.com:-]
(Sun Jul 1 15:21:12 2018) [sssd[nss]] [sss_dp_internal_get_send] (0x0400): Entering request [0x55f842febb50:1:admjesse_chan@apac.dell.com@
apac.dell.com]
(Sun Jul 1 15:21:12 2018) [sssd[nss]] [cache_req_search_cache] (0x0400): CR #1653: Object [
admjesse_chan@apac.dell.com] was not found in cache
(Sun Jul 1 15:21:12 2018) [sssd[nss]] [sss_dp_req_destructor] (0x0400): Deleting request: [0x55f842febb50:1:admjesse_chan@apac.dell.com@
apac.dell.com]
Curiously, I see these local account lookups both in sssd_nss.log and in sssd_amer.dell.com.log (
AMER.DELL.COM is the local domain). But for that APAC user, I see the entries (above) in
sssd_nss.log, but no equiv entries in
sssd_apac.dell.com.log.[root@spikerealmd02 sssd]# systemctl status sssd
● sssd.service - System Security Services Daemon
Loaded: loaded (/usr/lib/systemd/system/sssd.service; enabled; vendor preset: disabled)
Active: active (running) since Mon 2018-06-25 00:05:10 CDT; 1 weeks 0 days ago
Main PID: 82591 (sssd)
CGroup: /system.slice/sssd.service
├─82591 /usr/sbin/sssd -i --logger=files
├─82592 /usr/libexec/sssd/sssd_be --domain
amer.dell.com --uid 0 --gid 0 --logger=files
├─82593 /usr/libexec/sssd/sssd_be --domain
apac.dell.com --uid 0 --gid 0 --logger=files
├─82594 /usr/libexec/sssd/sssd_be --domain
emea.dell.com --uid 0 --gid 0 --logger=files
├─82595 /usr/libexec/sssd/sssd_be --domain
japn.dell.com --uid 0 --gid 0 --logger=files
├─82596 /usr/libexec/sssd/sssd_nss --uid 0 --gid 0 --logger=files
└─82597 /usr/libexec/sssd/sssd_pam --uid 0 --gid 0 --logger=files