Solved.
On Thu, Apr 21, 2016 at 7:16 AM, Rolla Matthieu <rolla.matthieu(a)gmail.com>
wrote:
Hello,
I use debian jessy with the testing package for sssd as I did not find a
version in the backport above 1.12, as I need the GPO functionnality.
The debuginfo seems to be available only with RPM.
However, I configured a 2012 DC and got other issue, some that I could fix
but I got similar situation with the GPO.
I decided to installed a Centos 7 with sssd and the GPO are working fine.
I will give a try and build a VM with a new DC with samba 4. Maybe it will
be better wilt the centos 7.
Just one question, I can authenticate with user@domain, is there a way to
omit the suffix ( @domain ) ?
thanks by advance.
On Wed, Apr 20, 2016 at 5:43 PM, Sumit Bose <sbose(a)redhat.com> wrote:
> On Wed, Apr 20, 2016 at 03:54:46PM +0200, Rolla Matthieu wrote:
> > Hello,
> >
> > I think the problem come from my DC and the GPO part. I can install a
>
> That's what I'm thinking too. But I expect that the response from your DC
> is valid but unexpected by SSSD. So it would be good to see what data
> the DC returned which SSSD failed to parse. The gdb steps below should
> show this data. If you prefer to just run a test build with additional
> debug output please let me know which version you currently use.
>
> > windows DC to perform test, would you recommend 2008 or 2012 ?
>
> I think it is not necessary to perform additional tests here.
>
> bye,
> Sumit
>
> >
> > Thanks by advance.
> >
> > On Wed, Apr 20, 2016 at 1:39 PM, Sumit Bose <sbose(a)redhat.com> wrote:
> >
> > > On Wed, Apr 20, 2016 at 12:11:05PM +0200, Rolla Matthieu wrote:
> > > > Hello,
> > > >
> > > > Thank you for your answer. The file gpo_child is empty :
> > > >
> > > > root@gtw-template:/var/log/sssd# ls -ltr
> > > > total 14656
> > > > -rw------- 1 root root 0 Apr 19 21:44 gpo_child.log
> > > > -rw------- 1 root root 3050 Apr 19 23:16 sssd_pam.log
> > > > -rw------- 1 root root 3050 Apr 19 23:16 sssd_nss.log
> > > > -rw------- 1 root root 21970 Apr 19 23:22 sssd.log
> > > > -rw------- 1 root root 49771 Apr 19 23:22 ldap_child.log
> > > > -rw------- 1 root root 112878 Apr 19 23:22 krb5_child.log
> > > > -rw------- 1 root root 14800060 Apr 20 00:33 sssd_hq.mydc.com.log
> > > >
> > > > Do you want me to attach an other one ?
> > >
> > > No, I just realized that the error happens even before the child is
> > > called. It looks like some unexpected data is received.
> > >
> > > I wonder if you can try to following using gdb after installing the
> sssd
> > > debuginfo file?
> > >
> > > gdb -p $(pidof sssd_be)
> > > (gdb) break ad_gpo_parse_machine_ext_names
> > > (gdb) continue
> > >
> > > try to authenticate while keeping gdb running, whenever gdb show the
> > > prompt again please type
> > >
> > > (gdb) bt full
> > > (gdb) continue
> > >
> > > until the authentication finally fails. Please send me the gdb output.
> > >
> > > If this won't work for you I can try to prepare an instrumented build
> > > for you which writes the needed data into the logs. For this I need to
> > > know the exact version of the SSSD package you are using.
> > >
> > > bye,
> > > Sumit
> > >
> > > >
> > > > Thank you by advance.
> > >
> > > > _______________________________________________
> > > > sssd-users mailing list
> > > > sssd-users(a)lists.fedorahosted.org
> > > >
> > >
>
https://lists.fedorahosted.org/admin/lists/sssd-users@lists.fedorahosted.org
> > > _______________________________________________
> > > sssd-users mailing list
> > > sssd-users(a)lists.fedorahosted.org
> > >
> > >
>
https://lists.fedorahosted.org/admin/lists/sssd-users@lists.fedorahosted.org
> > >
>
> > _______________________________________________
> > sssd-users mailing list
> > sssd-users(a)lists.fedorahosted.org
> >
>
https://lists.fedorahosted.org/admin/lists/sssd-users@lists.fedorahosted.org
> _______________________________________________
> sssd-users mailing list
> sssd-users(a)lists.fedorahosted.org
>
>
https://lists.fedorahosted.org/admin/lists/sssd-users@lists.fedorahosted.org
>