Here's what I get in the sssd nss log with debug level set to 6;
(Thu Jan 4 14:35:56 2018) [sssd[nss]] [sss_parse_name_for_domains]
(0x0200): using default domain [(null)]
(Thu Jan 4 14:35:56 2018) [sssd[nss]] [nss_cmd_getbynam] (0x0100):
Requesting info for [*] from [<ALL>]
(Thu Jan 4 14:35:56 2018) [sssd[nss]] [nss_cmd_getpwnam_search] (0x0100):
Requesting info for [*@redacted.net]
(Thu Jan 4 14:35:56 2018) [sssd[nss]] [sss_dp_issue_request] (0x0400):
Issuing request for [0x417c90:1:*@redacted.net]
(Thu Jan 4 14:35:56 2018) [sssd[nss]] [sss_dp_get_account_msg] (0x0400):
Creating request for [redacted.net][name=*]
(Thu Jan 4 14:35:56 2018) [sssd[nss]] [sss_dp_internal_get_send] (0x0400):
Entering request [0x417c90:1:*@redacted.net]
(Thu Jan 4 14:35:56 2018) [sssd[nss]] [nss_cmd_getby_dp_callback]
(0x0040): Unable to get information from Data Provider
Error: 1, 11, Fast reply - offline
Now i know the data provider is up because the 16.04 machines can get to
it, all the "redacted.net"s are the proper domain, the clients can resolve
everything fine. is the using default domain [(null)]
At the top something I should be worried about? kinit admin username also
works so I know kerberos is working fine.
On Thu, Jan 4, 2018 at 2:20 PM, Rob Crittenden <rcrit...@redhat.com> wrote:
> Cody Rathgeber via FreeIPA-users wrote:
> > Hello,
> > I'm trying to deploy freeipa to an environment running a mix of ubuntu
> > 16.04 and 14.04 servers.
> > on 16.04 the servers join and can pull down users no problem, on 14.04
> > when joining it'll throw a
> > "Unable to find 'admin' user with 'getent passwd ad...@redacted.net
> > <mailto:ad...@redacted.net>'!:"
> > And sure enough getent passwd won't pull details, and thus no accounts
> > can be pulled down as far as I can tell.
> > It works on every 16.04 machine and fails on every 14.04. Anyone have
> > any tips/ideas on how i'd go about troubleshooting this? This is with
> > doing an apt-get install freeipa-client and ipa-client-install.
FreeIPA-users mailing list -- email@example.com
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org