Hello,

--------
(2023-05-18 13:03:13): [be[test.com]] [generic_ext_search_handler] (0x0020): sdap_get_generic_ext_recv request failed: [5]: Input/output error <--
   *  ... skipping repetitive backtrace ...
(2023-05-18 13:03:13): [be[test.com]] [ad_cldap_ping_dc_done] (0x0040): dc2.test.com:3268: unable to get netlogon information <---
   *  ... skipping repetitive backtrace ...
(2023-05-18 13:03:13): [be[test.com]] [ad_cldap_ping_done] (0x0040): Unable to get site and forest information [2]: No such file or directory <---
---------

- Looks like an issue with DNS/network. sssd is not able to list the AD site or server details. Please enable sssd debugging to get the details. Moreover, you could check if SRV records are working fine.

-   To verify the DNS SRV LDAP records:
    # dig -t SRV _ldap._tcp.ad.example.com 

- Alternatively, you can try hardcoding `ad_server` under the [$domain] section of the /etc/sssd/sssd.conf

Thank you,

Roy




On Thu, May 18, 2023 at 4:41 PM Maverick . <mvrk@sapo.pt> wrote:
Hi,

I have my Fedora 36 laptop joined to an AD with sssd-2.7.4.

AD DCs are Fedora 37 servers with Samba 4.17.8.

Everything seems to be working fine, though i see this cldap error messages on my sssd_test.com.log:

   *  ... skipping repetitive backtrace ...
(2023-05-18 13:03:13): [be[test.com]] [sdap_process_result] (0x0040): ldap_result error: [Can't contact LDAP server]
   *  ... skipping repetitive backtrace ...
(2023-05-18 13:03:13): [be[test.com]] [generic_ext_search_handler] (0x0020): sdap_get_generic_ext_recv request failed: [5]: Input/output error
   *  ... skipping repetitive backtrace ...
(2023-05-18 13:03:13): [be[test.com]] [ad_cldap_ping_dc_done] (0x0040): dc1.test.com:3268: unable to get netlogon information
   *  ... skipping repetitive backtrace ...
(2023-05-18 13:03:13): [be[test.com]] [sdap_process_result] (0x0040): ldap_result error: [Can't contact LDAP server]
   *  ... skipping repetitive backtrace ...
(2023-05-18 13:03:13): [be[test.com]] [generic_ext_search_handler] (0x0020): sdap_get_generic_ext_recv request failed: [5]: Input/output error
   *  ... skipping repetitive backtrace ...
(2023-05-18 13:03:13): [be[test.com]] [ad_cldap_ping_dc_done] (0x0040): dc2.test.com:3268: unable to get netlogon information
   *  ... skipping repetitive backtrace ...
(2023-05-18 13:03:13): [be[test.com]] [sdap_process_result] (0x0040): ldap_result error: [Can't contact LDAP server]
   *  ... skipping repetitive backtrace ...
(2023-05-18 13:03:13): [be[test.com]] [generic_ext_search_handler] (0x0020): sdap_get_generic_ext_recv request failed: [5]: Input/output error
   *  ... skipping repetitive backtrace ...
(2023-05-18 13:03:13): [be[test.com]] [ad_cldap_ping_dc_done] (0x0040): dc1.test.com:3268: unable to get netlogon information
   *  ... skipping repetitive backtrace ...
(2023-05-18 13:03:13): [be[test.com]] [sdap_process_result] (0x0040): ldap_result error: [Can't contact LDAP server]
   *  ... skipping repetitive backtrace ...
(2023-05-18 13:03:13): [be[test.com]] [generic_ext_search_handler] (0x0020): sdap_get_generic_ext_recv request failed: [5]: Input/output error
   *  ... skipping repetitive backtrace ...
(2023-05-18 13:03:13): [be[test.com]] [ad_cldap_ping_dc_done] (0x0040): dc2.test.com:3268: unable to get netlogon information
   *  ... skipping repetitive backtrace ...
(2023-05-18 13:03:13): [be[test.com]] [ad_cldap_ping_done] (0x0040): Unable to get site and forest information [2]: No such file or directory
   *  ... skipping repetitive backtrace ...
(2023-05-18 13:03:13): [be[test.com]] [sdap_process_result] (0x0040): ldap_result error: [Can't contact LDAP server]
   *  ... skipping repetitive backtrace ...
(2023-05-18 13:03:13): [be[test.com]] [generic_ext_search_handler] (0x0020): sdap_get_generic_ext_recv request failed: [5]: Input/output error
   *  ... skipping repetitive backtrace ...
(2023-05-18 13:03:13): [be[test.com]] [ad_cldap_ping_dc_done] (0x0040): dc1.test.com:3268: unable to get netlogon information
   *  ... skipping repetitive backtrace ...
(2023-05-18 13:03:13): [be[test.com]] [sdap_process_result] (0x0040): ldap_result error: [Can't contact LDAP server]
   *  ... skipping repetitive backtrace ...
(2023-05-18 13:03:13): [be[test.com]] [generic_ext_search_handler] (0x0020): sdap_get_generic_ext_recv request failed: [5]: Input/output error
   *  ... skipping repetitive backtrace ...
(2023-05-18 13:03:13): [be[test.com]] [ad_cldap_ping_dc_done] (0x0040): dc2.test.com:3268: unable to get netlogon information
   *  ... skipping repetitive backtrace ...
(2023-05-18 13:03:13): [be[test.com]] [sdap_process_result] (0x0040): ldap_result error: [Can't contact LDAP server]
   *  ... skipping repetitive backtrace ...
(2023-05-18 13:03:13): [be[test.com]] [generic_ext_search_handler] (0x0020): sdap_get_generic_ext_recv request failed: [5]: Input/output error
   *  ... skipping repetitive backtrace ...
(2023-05-18 13:03:13): [be[test.com]] [ad_cldap_ping_dc_done] (0x0040): dc1.test.com:3268: unable to get netlogon information
   *  ... skipping repetitive backtrace ...
(2023-05-18 13:03:13): [be[test.com]] [sdap_process_result] (0x0040): ldap_result error: [Can't contact LDAP server]
   *  ... skipping repetitive backtrace ...
(2023-05-18 13:03:13): [be[test.com]] [generic_ext_search_handler] (0x0020): sdap_get_generic_ext_recv request failed: [5]: Input/output error
   *  ... skipping repetitive backtrace ...
(2023-05-18 13:03:13): [be[test.com]] [ad_cldap_ping_dc_done] (0x0040): dc2.test.com:3268: unable to get netlogon information
   *  ... skipping repetitive backtrace ...
(2023-05-18 13:03:13): [be[test.com]] [ad_cldap_ping_done] (0x0040): Unable to get site and forest information [2]: No such file or directory

Anyone knows what this might be?
_______________________________________________
sssd-users mailing list -- sssd-users@lists.fedorahosted.org
To unsubscribe send an email to sssd-users-leave@lists.fedorahosted.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedorahosted.org/archives/list/sssd-users@lists.fedorahosted.org
Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue