[SSSD-users] System Error 4 with CentOS 7.1 IPA clients attempting password authentication

Ken Miller kenmiller316 at gmail.com
Tue Aug 25 19:01:12 UTC 2015


Hi Lukas,

Thanks!  The latest sssd-1.12.5-3.el7.centos.x86_64 did NOT work any
differently.  Based on info I found in
https://fedorahosted.org/freeipa/ticket/4486 I'm thinking I should bite the
bullet and go with a 4.1 server (e.g. what's in CentOS 7.1) like
ipa-server-4.1.0-18.el7.centos.3.x86_64 .  Might even be time to try it in
a docker container ;).

Regards,

   == k+ ==

On Tue, Aug 25, 2015 at 12:27 PM, Lukas Slebodnik <lslebodn at redhat.com>
wrote:

> On (25/08/15 11:46), Ken Miller wrote:
> >Password Prompt occurred HERE:
> >
> >[ipa_host_info_done] (0x0020): Server does not support deref
> This message is suspicious.
>
>
> >[sdap_id_op_done] (0x0200): communication error on cached connection,
> >moving to next server
> >[be_pam_handler_callback] (0x0100): Backend returned: (3, 4, <NULL>)
> >[Internal Error (System error)]
> >[be_pam_handler_callback] (0x0100): Sending result [4][example.com]
> >[be_pam_handler_callback] (0x0100): Sent result [4][example.com]
> >[be_run_unconditional_online_cb] (0x0400): Running unconditional online
> >callbacks.
> >
> >End of debug log after error HERE
> >
> Could you try to re-test with the latest sssd 1.12 version?
> https://copr.fedoraproject.org/coprs/lslebodn/sssd-1-12/
>
> If it does not help then could you upgrade ipa server to the latest
> rhel 6.7? There is still ipa 3.0 but there were fixes to 389-ds
> and other components.
>
> LS
> _______________________________________________
> sssd-users mailing list
> sssd-users at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/sssd-users
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/sssd-users/attachments/20150825/83e34d72/attachment-0001.html>


More information about the sssd-users mailing list