You’re on the money but let me hold off on this for a bit. Something I overlooked to
check. :(
Ty
Sent from my iPhone
On Jul 26, 2018, at 2:21 PM, Lukas Slebodnik
<lslebodn(a)redhat.com> wrote:
> On (24/07/18 13:50), TomK wrote:
> Hey Guy's,
>
> After implementing the LDAP_MATCHING_RULE_IN_CHAIN , we're seeing these
> messages in the sssd domain log file:
>
> (Tue Jul 24 12:59:41 2018) [sssd[be[MYDOM]]] [child_sig_handler] (0x0020):
> child [17444] failed with status [1].
>
It would be good to see errors in *_child.log files
and maybe more context from domain log file.
>
> (Tue Jul 24 13:12:11 2018) [sssd[be[MYDOM]]] [child_sig_handler] (0x0020):
> child [34068] failed with status [2].
>
> (Tue Jul 24 13:13:54 2018) [sssd[be[MYDOM]]] [sdap_save_grpmem] (0x0020):
> Group members are ignored, nothing to do. If you see this message it might
> indicate an error in the group processing logic.
>
> (Tue Jul 24 13:15:39 2018) [sssd[be[MYDOM]]] [sdap_save_grpmem] (0x0020):
> Group members are ignored, nothing to do. If you see this message it might
> indicate an error in the group processing logic.
>
> (Tue Jul 24 13:15:39 2018) [sssd[be[MYDOM]]] [sdap_save_grpmem] (0x0020):
> Group members are ignored, nothing to do. If you see this message it might
> indicate an error in the group processing logic.
>
> (Tue Jul 24 13:16:07 2018) [sssd[be[MYDOM]]] [sdap_save_grpmem] (0x0020):
> Group members are ignored, nothing to do. If you see this message it might
> indicate an error in the group processing logic.
>
> (Tue Jul 24 13:16:07 2018) [sssd[be[MYDOM]]] [sdap_save_grpmem] (0x0020):
> Group members are ignored, nothing to do. If you see this message it might
> indicate an error in the group processing logic.
>
> (Tue Jul 24 13:17:18 2018) [sssd[be[MYDOM]]] [ad_get_slave_domain_done]
> (0x0020): Unable to lookup slave domain data [110]: Connection timed out
>
> (Tue Jul 24 13:19:20 2018) [sssd[be[MYDOM]]] [sdap_save_grpmem] (0x0020):
> Group members are ignored, nothing to do. If you see this message it might
> indicate an error in the group processing logic.
>
> (Tue Jul 24 13:19:20 2018) [sssd[be[MYDOM]]] [sdap_save_grpmem] (0x0020):
> Group members are ignored, nothing to do. If you see this message it might
> indicate an error in the group processing logic.
>
> (Tue Jul 24 13:19:20 2018) [sssd[be[MYDOM]]] [sdap_save_grpmem] (0x0020):
> Group members are ignored, nothing to do. If you see this message it might
> indicate an error in the group processing logic.
>
> (Tue Jul 24 13:19:20 2018) [sssd[be[MYDOM]]] [sdap_save_grpmem] (0x0020):
> Group members are ignored, nothing to do. If you see this message it might
> indicate an error in the group processing logic.
>
> (Tue Jul 24 13:19:20 2018) [sssd[be[MYDOM]]] [sdap_save_grpmem] (0x0020):
> Group members are ignored, nothing to do. If you see this message it might
> indicate an error in the group processing logic.
>
> (Tue Jul 24 13:19:20 2018) [sssd[be[MYDOM]]] [sdap_save_grpmem] (0x0020):
> Group members are ignored, nothing to do. If you see this message it might
> indicate an error in the group processing logic.
>
>
>
>
>
> ad_access_filter =
DOM:MYDOM:(|(memberOf=CN=group01,OU=Groups,OU=MYOU,DC=MYDOM,DC=COM)(memberOf:1.2.840.113556.1.4.1941:=CN=group02,OU=Groups,OU=MYOU,DC=MYDOM,DC=COM))
>
>
>
>
>
> python2-sssdconfig-1.15.3-0.el6.noarch
>
> sssd-ldap-1.15.3-0.el6.x86_64
>
> sssd-ad-1.15.3-0.el6.x86_64
>
> sssd-ipa-1.15.3-0.el6.x86_64
>
> sssd-1.15.3-0.el6.x86_64
>
> sssd-krb5-common-1.15.3-0.el6.x86_64
>
> sssd-krb5-1.15.3-0.el6.x86_64
>
> sssd-common-pac-1.15.3-0.el6.x86_64
>
> sssd-common-1.15.3-0.el6.x86_64
>
> sssd-client-1.15.3-0.el6.x86_64
>
> sssd-proxy-1.15.3-0.el6.x86_64
^^^^^^^^
Did you build packages yourself?
If yes then it might be good idea to use 1.16.2
LS