<div dir="ltr"><div><div><div>Hi Lukas,<br><br></div>Thanks!  The latest sssd-1.12.5-3.el7.centos.x86_64 did NOT work any differently.  Based on info I found in <a href="https://fedorahosted.org/freeipa/ticket/4486">https://fedorahosted.org/freeipa/ticket/4486</a> I&#39;m thinking I should bite the bullet and go with a 4.1 server (e.g. what&#39;s in CentOS 7.1) like ipa-server-4.1.0-18.el7.centos.3.x86_64 .  Might even be time to try it in a docker container ;).<br><br></div>Regards,<br><br></div>   == k+ ==<br></div><div class="gmail_extra"><br><div class="gmail_quote">On Tue, Aug 25, 2015 at 12:27 PM, Lukas Slebodnik <span dir="ltr">&lt;<a href="mailto:lslebodn@redhat.com" target="_blank">lslebodn@redhat.com</a>&gt;</span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">On (25/08/15 11:46), Ken Miller wrote:<br>
&gt;Password Prompt occurred HERE:<br>
<span class="">&gt;<br>
&gt;[ipa_host_info_done] (0x0020): Server does not support deref<br>
</span>This message is suspicious.<br>
<span class=""><br>
<br>
&gt;[sdap_id_op_done] (0x0200): communication error on cached connection,<br>
&gt;moving to next server<br>
&gt;[be_pam_handler_callback] (0x0100): Backend returned: (3, 4, &lt;NULL&gt;)<br>
&gt;[Internal Error (System error)]<br>
&gt;[be_pam_handler_callback] (0x0100): Sending result [4][<a href="http://example.com" rel="noreferrer" target="_blank">example.com</a>]<br>
&gt;[be_pam_handler_callback] (0x0100): Sent result [4][<a href="http://example.com" rel="noreferrer" target="_blank">example.com</a>]<br>
&gt;[be_run_unconditional_online_cb] (0x0400): Running unconditional online<br>
&gt;callbacks.<br>
&gt;<br>
&gt;End of debug log after error HERE<br>
&gt;<br>
</span>Could you try to re-test with the latest sssd 1.12 version?<br>
<a href="https://copr.fedoraproject.org/coprs/lslebodn/sssd-1-12/" rel="noreferrer" target="_blank">https://copr.fedoraproject.org/coprs/lslebodn/sssd-1-12/</a><br>
<br>
If it does not help then could you upgrade ipa server to the latest<br>
rhel 6.7? There is still ipa 3.0 but there were fixes to 389-ds<br>
and other components.<br>
<div class="HOEnZb"><div class="h5"><br>
LS<br>
_______________________________________________<br>
sssd-users mailing list<br>
<a href="mailto:sssd-users@lists.fedorahosted.org">sssd-users@lists.fedorahosted.org</a><br>
<a href="https://lists.fedorahosted.org/mailman/listinfo/sssd-users" rel="noreferrer" target="_blank">https://lists.fedorahosted.org/mailman/listinfo/sssd-users</a><br>
</div></div></blockquote></div><br></div>