On Tue, Dec 29, 2020 at 8:44 PM Orion Poplawski <orion@nwra.com> wrote:
My laptop has gotten itself into a bad state and won't let me log in:

(2020-12-29 12:32:37): [pam] [sss_cmd_get_version] (0x0200): Received client
version [3].
(2020-12-29 12:32:37): [pam] [sss_cmd_get_version] (0x0200): Offered version [3].
(2020-12-29 12:32:37): [pam] [pam_cmd_acct_mgmt] (0x0100): entering
pam_cmd_acct_mgmt
(2020-12-29 12:32:37): [pam] [sss_parse_name_for_domains] (0x0200): name
'orion' matched without domain, user is orion
(2020-12-29 12:32:37): [pam] [sss_parse_name_for_domains] (0x0200): using
default domain [ad.nwra.com]
(2020-12-29 12:32:37): [pam] [pam_print_data] (0x0100): command: SSS_PAM_ACCT_MGMT
(2020-12-29 12:32:37): [pam] [pam_print_data] (0x0100): domain: ad.nwra.com
(2020-12-29 12:32:37): [pam] [pam_print_data] (0x0100): user: orion
(2020-12-29 12:32:37): [pam] [pam_print_data] (0x0100): service: sshd
(2020-12-29 12:32:37): [pam] [pam_print_data] (0x0100): tty: ssh
(2020-12-29 12:32:37): [pam] [pam_print_data] (0x0100): ruser: not set
(2020-12-29 12:32:37): [pam] [pam_print_data] (0x0100): rhost: 10.10.20.7
(2020-12-29 12:32:37): [pam] [pam_print_data] (0x0100): authtok type: 0
(2020-12-29 12:32:37): [pam] [pam_print_data] (0x0100): newauthtok type: 0
(2020-12-29 12:32:37): [pam] [pam_print_data] (0x0100): priv: 1
(2020-12-29 12:32:37): [pam] [pam_print_data] (0x0100): cli_pid: 194899
(2020-12-29 12:32:37): [pam] [pam_print_data] (0x0100): logon name: orion
(2020-12-29 12:32:37): [pam] [pam_print_data] (0x0100): flags: 0
(2020-12-29 12:32:37): [pam] [sss_parse_name_for_domains] (0x0200): name
'orion' matched without domain, user is orion
(2020-12-29 12:32:37): [pam] [sss_parse_name_for_domains] (0x0200): using
default domain [ad.nwra.com]
(2020-12-29 12:32:37): [pam] [sss_parse_name_for_domains] (0x0200): name
'orion' matched without domain, user is orion
(2020-12-29 12:32:37): [pam] [sss_parse_name_for_domains] (0x0200): using
default domain [ad.nwra.com]
(2020-12-29 12:32:37): [pam] [cache_req_common_process_dp_reply] (0x0040): CR
#256: Could not get account info [1432158212]: SSSD is offline

Hi,

could you please what happens in sssd_$domain.log at this moment?

 
(2020-12-29 12:32:37): [pam] [pam_dp_send_req] (0x0100): Sending request with
the following data:
(2020-12-29 12:32:37): [pam] [pam_print_data] (0x0100): command: SSS_PAM_ACCT_MGMT
(2020-12-29 12:32:37): [pam] [pam_print_data] (0x0100): domain: ad.nwra.com
(2020-12-29 12:32:37): [pam] [pam_print_data] (0x0100): user: orion@ad.nwra.com
(2020-12-29 12:32:37): [pam] [pam_print_data] (0x0100): service: sshd
(2020-12-29 12:32:37): [pam] [pam_print_data] (0x0100): tty: ssh
(2020-12-29 12:32:37): [pam] [pam_print_data] (0x0100): ruser: not set
(2020-12-29 12:32:37): [pam] [pam_print_data] (0x0100): rhost: 10.10.20.7
(2020-12-29 12:32:37): [pam] [pam_print_data] (0x0100): authtok type: 0
(2020-12-29 12:32:37): [pam] [pam_print_data] (0x0100): newauthtok type: 0
(2020-12-29 12:32:37): [pam] [pam_print_data] (0x0100): priv: 1
(2020-12-29 12:32:37): [pam] [pam_print_data] (0x0100): cli_pid: 194899
(2020-12-29 12:32:37): [pam] [pam_print_data] (0x0100): logon name: orion
(2020-12-29 12:32:37): [pam] [pam_print_data] (0x0100): flags: 0
(2020-12-29 12:32:37): [pam] [pam_dom_forwarder] (0x0100): pam_dp_send_req
returned 0
(2020-12-29 12:32:37): [pam] [pam_dp_send_req_done] (0x0020): PAM handler
failed [1432158212]: SSSD is offline
(2020-12-29 12:32:37): [pam] [filter_responses] (0x0100):
[pam_response_filter] not available, not fatal.
(2020-12-29 12:32:37): [pam] [pam_reply] (0x0200): blen: 28
(2020-12-29 12:32:37): [pam] [pam_reply] (0x0200): Returning [4]: System error
to the client
(2020-12-29 12:32:37): [pam] [client_recv] (0x0200): Client disconnected!


Users are in AD via trust.  SSSD should not be offline...

(2020-12-29 11:05:35): [be[nwra.com]] [be_run_online_cb] (0x0080): Going
online. Running callbacks.


--
Orion Poplawski
Manager of NWRA Technical Systems          720-772-5637
NWRA, Boulder/CoRA Office             FAX: 303-415-9702
3380 Mitchell Lane                       orion@nwra.com
Boulder, CO 80301                 https://www.nwra.com/
_______________________________________________
sssd-users mailing list -- sssd-users@lists.fedorahosted.org
To unsubscribe send an email to sssd-users-leave@lists.fedorahosted.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedorahosted.org/archives/list/sssd-users@lists.fedorahosted.org