On Thu, Jul 13, 2017 at 07:22:58PM -0000, bogusmaster--- via FreeIPA-users 
wrote:
> I've uploaded them here: goo.gl/hiFHKE

Thanks.

[ipa_s2n_exop_done] (0x0040): ldap_extended_operation result: No such 
object(32), (null).

This indicates that the user cannot be found on the server. There are
two reasons for this. Either the user itself cannot be looked up at all
or the group memberships cannot be resolved completely.

Can you do a test on the server by calling

    id username@ad.domain

and collect sssd_nss.log and sssd_your.ipa.domain.log on the server as
well?

In the id output all groups should have a GID and a name, if there are
groups with only a GID this might have caused the issue on the client as
well.

bye,
Sumit

> 
> Thank you,
> Bart
> _______________________________________________
> FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
> To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org
_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org

Reply via email to