Hi , [20/Dec/2022:08:49:29.637099418 +0800] conn=2892 op=9 UNBIND [20/Dec/2022:08:49:29.637145006 +0800] conn=2892 op=9 fd=124 closed error - U1 [20/Dec/2022:08:49:32.043506909 +0800] conn=27 op=3410 SRCH base="ou=sessions,ou=Security Domain,o=ipaca" scope=2 filter="(objectClass=securityDomainSessionEntry)" attrs="cn" [20/Dec/2022:08:49:32.043782127 +0800] conn=27 op=3410 RESULT err=32 tag=101 nentries=0 wtime=0.000153439 optime=0.000279769 etime=0.000430437 [20/Dec/2022:08:49:38.148322772 +0800] conn=28 op=6817 SRCH base="ou=authorizations,ou=acme,o=ipaca" scope=2 filter="(acmeExpires<=20221220004938+0000)" attrs="1.1" [20/Dec/2022:08:49:38.148586175 +0800] conn=28 op=6817 RESULT err=0 tag=101 nentries=0 wtime=0.000138301 optime=0.000273350 etime=0.000408659 [20/Dec/2022:08:49:38.148943213 +0800] conn=28 op=6818 SRCH base="ou=orders,ou=acme,o=ipaca" scope=2 filter="(acmeExpires<=20221220004938+0000)" attrs="1.1" [20/Dec/2022:08:49:38.149071009 +0800] conn=28 op=6818 RESULT err=0 tag=101 nentries=0 wtime=0.000206338 optime=0.000129557 etime=0.000333928 [20/Dec/2022:08:49:38.149274125 +0800] conn=28 op=6819 SRCH base="ou=certificates,ou=acme,o=ipaca" scope=2 filter="(acmeExpires<=20221220004938+0000)" attrs="1.1" [20/Dec/2022:08:49:38.149379198 +0800] conn=28 op=6819 RESULT err=0 tag=101 nentries=0 wtime=0.000130714 optime=0.000106250 etime=0.000235350 [20/Dec/2022:08:52:01.986729492 +0800] conn=2888 op=8 UNBIND [20/Dec/2022:08:52:01.986771904 +0800] conn=2888 op=8 fd=73 closed error - U1 [20/Dec/2022:08:52:07.702869314 +0800] conn=4 op=13990 SRCH base="dc=wingon,dc=hk" scope=2 filter="(&(|(objectClass=krbprincipalaux)(objectClass=krbprincipal)(objectClass=ipakrbprincipal))(|([email protected])(krbPrincipalName:caseIgnoreIA5Match:[email protected])))" attrs="krbPrincipalName krbCanonicalName krbUPEnabled krbPrincipalKey krbTicketPolicyReference krbPrincipalExpiration krbPasswordExpiration krbPwdPolicyReference krbPrincipalType krbPwdHistory krbLastPwdChange krbPrincipalAliases krbLastSuccessfulAuth krbLastFailedAuth krbLoginFailedCount krbPrincipalAuthInd krbExtraData krbLastAdminUnlock krbObjectReferences krbTicketFlags krbMaxTicketLife krbMaxRenewableAge uid nsAccountLock passwordHistory ipaKrbAuthzData ipaUserAuthType ipatokenRadiusConfigLink krbAuthIndMaxT..." [20/Dec/2022:08:52:07.703402545 +0800] conn=4 op=13990 RESULT err=0 tag=101 nentries=1 wtime=0.000193320 optime=0.000543635 etime=0.000734611 [20/Dec/2022:08:52:07.703507147 +0800] conn=4 op=13991 SRCH base="cn=ipaConfig,cn=etc,dc=wingon,dc=hk" scope=0 filter="(objectClass=*)" attrs="ipaConfigString ipaKrbAuthzData ipaUserAuthType" [20/Dec/2022:08:52:07.703570031 +0800] conn=4 op=13991 RESULT err=0 tag=101 nentries=1 wtime=0.000021034 optime=0.000063839 etime=0.000083694 [20/Dec/2022:08:52:07.703713585 +0800] conn=4 op=13992 SRCH base="cn=WINGON.HK,cn=kerberos,dc=wingon,dc=hk" scope=0 filter="(objectClass=krbticketpolicyaux)" attrs="krbMaxTicketLife krbMaxRenewableAge krbTicketFlags krbAuthIndMaxTicketLife krbAuthIndMaxRenewableAge" [20/Dec/2022:08:52:07.703808511 +0800] conn=4 op=13992 RESULT err=0 tag=101 nentries=1 wtime=0.000023489 optime=0.000095938 etime=0.000118208 [20/Dec/2022:08:52:07.703932548 +0800] conn=4 op=13993 SRCH base="dc=wingon,dc=hk" scope=2 filter="(&(|(objectClass=krbprincipalaux)(objectClass=krbprincipal)(objectClass=ipakrbprincipal))(|(ipaKrbPrincipalAlias=krbtgt/[email protected])(krbPrincipalName:caseIgnoreIA5Match:=krbtgt/[email protected])))" attrs="krbPrincipalName krbCanonicalName krbUPEnabled krbPrincipalKey krbTicketPolicyReference krbPrincipalExpiration krbPasswordExpiration krbPwdPolicyReference krbPrincipalType krbPwdHistory krbLastPwdChange krbPrincipalAliases krbLastSuccessfulAuth krbLastFailedAuth krbLoginFailedCount krbPrincipalAuthInd krbExtraData krbLastAdminUnlock krbObjectReferences krbTicketFlags krbMaxTicketLife krbMaxRenewableAge uid nsAccountLock passwordHistory ipaKrbAuthzData ipaUserAuthType ipatokenRadiusConfigLink krbAuthIndMaxT..." [20/Dec/2022:08:52:07.704164824 +0800] conn=4 op=13993 RESULT err=0 tag=101 nentries=1 wtime=0.000055700 optime=0.000233831 etime=0.000288007 [20/Dec/2022:08:52:07.704454880 +0800] conn=4 op=13994 SRCH base="cn=global_policy,cn=WINGON.HK,cn=kerberos,dc=wingon,dc=hk" scope=0 filter="(objectClass=*)" attrs="krbMaxPwdLife krbMinPwdLife krbPwdMinDiffChars krbPwdMinLength krbPwdHistoryLength krbPwdMaxFailure krbPwdFailureCountInterval krbPwdLockoutDuration ipaPwdMaxRepeat ipaPwdMaxSequence ipaPwdDictCheck ipaPwdUserCheck" [20/Dec/2022:08:52:07.704543319 +0800] conn=4 op=13994 RESULT err=0 tag=101 nentries=1 wtime=0.000041266 optime=0.000090343 etime=0.000130370 [20/Dec/2022:08:52:09.990863586 +0800] conn=2893 fd=73 slot=73 connection from 10.99.16.212 to 10.100.0.213 [20/Dec/2022:08:52:09.991284876 +0800] conn=2893 op=0 SRCH base="" scope=0 filter="(objectClass=*)" attrs="* altServer namingContexts supportedControl supportedExtension supportedFeatures supportedLDAPVersion supportedSASLMechanisms domaincontrollerfunctionality defaultnamingcontext lastusn highestcommittedusn aci" [20/Dec/2022:08:52:09.992883383 +0800] conn=2893 op=0 RESULT err=0 tag=101 nentries=1 wtime=0.000306908 optime=0.001598916 etime=0.001904660 [20/Dec/2022:08:52:10.020345323 +0800] conn=5 op=14421 SRCH base="dc=wingon,dc=hk" scope=2 filter="(&(|(objectClass=krbprincipalaux)(objectClass=krbprincipal)(objectClass=ipakrbprincipal))(|(ipaKrbPrincipalAlias=host/[email protected])(krbPrincipalName:caseIgnoreIA5Match:=host/[email protected])))" attrs="krbPrincipalName krbCanonicalName krbUPEnabled krbPrincipalKey krbTicketPolicyReference krbPrincipalExpiration krbPasswordExpiration krbPwdPolicyReference krbPrincipalType krbPwdHistory krbLastPwdChange krbPrincipalAliases krbLastSuccessfulAuth krbLastFailedAuth krbLoginFailedCount krbPrincipalAuthInd krbExtraData krbLastAdminUnlock krbObjectReferences krbTicketFlags krbMaxTicketLife krbMaxRenewableAge uid nsAccountLock passwordHistory ipaKrbAuthzData ipaUserAuthType ipatokenRadiusConfigLink krbAuthIndMaxT..." [20/Dec/2022:08:52:10.020685934 +0800] conn=5 op=14421 RESULT err=0 tag=101 nentries=1 wtime=0.000148639 optime=0.000343867 etime=0.000490293 [20/Dec/2022:08:52:10.020796954 +0800] conn=5 op=14422 SRCH base="cn=ipaConfig,cn=etc,dc=wingon,dc=hk" scope=0 filter="(objectClass=*)" attrs="ipaConfigString ipaKrbAuthzData ipaUserAuthType" [20/Dec/2022:08:52:10.020859631 +0800] conn=5 op=14422 RESULT err=0 tag=101 nentries=1 wtime=0.000024022 optime=0.000063922 etime=0.000086660 [20/Dec/2022:08:52:10.021013120 +0800] conn=5 op=14423 SRCH base="cn=WINGON.HK,cn=kerberos,dc=wingon,dc=hk" scope=0 filter="(objectClass=krbticketpolicyaux)" attrs="krbMaxTicketLife krbMaxRenewableAge krbTicketFlags krbAuthIndMaxTicketLife krbAuthIndMaxRenewableAge" [20/Dec/2022:08:52:10.021076265 +0800] conn=5 op=14423 RESULT err=0 tag=101 nentries=1 wtime=0.000021565 optime=0.000064169 etime=0.000084552 [20/Dec/2022:08:52:10.021190460 +0800] conn=5 op=14424 SRCH base="dc=wingon,dc=hk" scope=2 filter="(&(|(objectClass=krbprincipalaux)(objectClass=krbprincipal)(objectClass=ipakrbprincipal))(|(ipaKrbPrincipalAlias=krbtgt/[email protected])(krbPrincipalName:caseIgnoreIA5Match:=krbtgt/[email protected])))" attrs="krbPrincipalName krbCanonicalName krbUPEnabled krbPrincipalKey krbTicketPolicyReference krbPrincipalExpiration krbPasswordExpiration krbPwdPolicyReference krbPrincipalType krbPwdHistory krbLastPwdChange krbPrincipalAliases krbLastSuccessfulAuth krbLastFailedAuth krbLoginFailedCount krbPrincipalAuthInd krbExtraData krbLastAdminUnlock krbObjectReferences krbTicketFlags krbMaxTicketLife krbMaxRenewableAge uid nsAccountLock passwordHistory ipaKrbAuthzData ipaUserAuthType ipatokenRadiusConfigLink krbAuthIndMaxT..." [20/Dec/2022:08:52:10.021431298 +0800] conn=5 op=14424 RESULT err=0 tag=101 nentries=1 wtime=0.000054189 optime=0.000242208 etime=0.000294767 [20/Dec/2022:08:52:10.021663559 +0800] conn=5 op=14425 SRCH base="cn=Default Host Password Policy,cn=computers,cn=accounts,dc=wingon,dc=hk" scope=0 filter="(objectClass=*)" attrs="krbMaxPwdLife krbMinPwdLife krbPwdMinDiffChars krbPwdMinLength krbPwdHistoryLength krbPwdMaxFailure krbPwdFailureCountInterval krbPwdLockoutDuration ipaPwdMaxRepeat ipaPwdMaxSequence ipaPwdDictCheck ipaPwdUserCheck" [20/Dec/2022:08:52:10.021749877 +0800] conn=5 op=14425 RESULT err=0 tag=101 nentries=1 wtime=0.000032347 optime=0.000088078 etime=0.000119139 [20/Dec/2022:08:52:10.033772246 +0800] conn=5 op=14426 SRCH base="dc=wingon,dc=hk" scope=2 filter="(&(|(objectClass=krbprincipalaux)(objectClass=krbprincipal)(objectClass=ipakrbprincipal))(|(ipaKrbPrincipalAlias=host/[email protected])(krbPrincipalName:caseIgnoreIA5Match:=host/[email protected])))" attrs="krbPrincipalName krbCanonicalName krbUPEnabled krbPrincipalKey krbTicketPolicyReference krbPrincipalExpiration krbPasswordExpiration krbPwdPolicyReference krbPrincipalType krbPwdHistory krbLastPwdChange krbPrincipalAliases krbLastSuccessfulAuth krbLastFailedAuth krbLoginFailedCount krbPrincipalAuthInd krbExtraData krbLastAdminUnlock krbObjectReferences krbTicketFlags krbMaxTicketLife krbMaxRenewableAge uid nsAccountLock passwordHistory ipaKrbAuthzData ipaUserAuthType ipatokenRadiusConfigLink krbAuthIndMaxT..." [20/Dec/2022:08:52:10.034022601 +0800] conn=5 op=14426 RESULT err=0 tag=101 nentries=1 wtime=0.011565691 optime=0.000252782 etime=0.011816585 [20/Dec/2022:08:52:10.034170111 +0800] conn=5 op=14427 SRCH base="cn=WINGON.HK,cn=kerberos,dc=wingon,dc=hk" scope=0 filter="(objectClass=krbticketpolicyaux)" attrs="krbMaxTicketLife krbMaxRenewableAge krbTicketFlags krbAuthIndMaxTicketLife krbAuthIndMaxRenewableAge" [20/Dec/2022:08:52:10.034236031 +0800] conn=5 op=14427 RESULT err=0 tag=101 nentries=1 wtime=0.000022773 optime=0.000067234 etime=0.000088827 [20/Dec/2022:08:52:10.034349405 +0800] conn=5 op=14428 SRCH base="dc=wingon,dc=hk" scope=2 filter="(&(|(objectClass=krbprincipalaux)(objectClass=krbprincipal)(objectClass=ipakrbprincipal))(|(ipaKrbPrincipalAlias=krbtgt/[email protected])(krbPrincipalName:caseIgnoreIA5Match:=krbtgt/[email protected])))" attrs="krbPrincipalName krbCanonicalName krbUPEnabled krbPrincipalKey krbTicketPolicyReference krbPrincipalExpiration krbPasswordExpiration krbPwdPolicyReference krbPrincipalType krbPwdHistory krbLastPwdChange krbPrincipalAliases krbLastSuccessfulAuth krbLastFailedAuth krbLoginFailedCount krbPrincipalAuthInd krbExtraData krbLastAdminUnlock krbObjectReferences krbTicketFlags krbMaxTicketLife krbMaxRenewableAge uid nsAccountLock passwordHistory ipaKrbAuthzData ipaUserAuthType ipatokenRadiusConfigLink krbAuthIndMaxT..." [20/Dec/2022:08:52:10.034560533 +0800] conn=5 op=14428 RESULT err=0 tag=101 nentries=1 wtime=0.000062169 optime=0.000212339 etime=0.000273015 [20/Dec/2022:08:52:10.034725055 +0800] conn=5 op=14429 SRCH base="cn=Default Host Password Policy,cn=computers,cn=accounts,dc=wingon,dc=hk" scope=0 filter="(objectClass=*)" attrs="krbMaxPwdLife krbMinPwdLife krbPwdMinDiffChars krbPwdMinLength krbPwdHistoryLength krbPwdMaxFailure krbPwdFailureCountInterval krbPwdLockoutDuration ipaPwdMaxRepeat ipaPwdMaxSequence ipaPwdDictCheck ipaPwdUserCheck" [20/Dec/2022:08:52:10.034805632 +0800] conn=5 op=14429 RESULT err=0 tag=101 nentries=1 wtime=0.000027824 optime=0.000081903 etime=0.000108561 [20/Dec/2022:08:52:10.035180909 +0800] conn=5 op=14430 SRCH base="cn=ad,cn=trusts,dc=wingon,dc=hk" scope=2 filter="(objectClass=ipaNTTrustedDomain)" attrs=ALL [20/Dec/2022:08:52:10.035239166 +0800] conn=5 op=14430 RESULT err=0 tag=101 nentries=0 wtime=0.000016420 optime=0.000058741 etime=0.000073879 [20/Dec/2022:08:52:10.035287403 +0800] conn=5 op=14431 SRCH base="dc=wingon,dc=hk" scope=2 filter="(objectClass=ipaNTDomainAttrs)" attrs="ipaNTFlatName ipaNTFallbackPrimaryGroup ipaNTSecurityIdentifier" [20/Dec/2022:08:52:10.035383748 +0800] conn=5 op=14431 RESULT err=0 tag=101 nentries=1 wtime=0.000017953 optime=0.000096850 etime=0.000113571 [20/Dec/2022:08:52:10.035441566 +0800] conn=5 op=14432 SRCH base="cn=Default SMB Group,cn=groups,cn=accounts,dc=wingon,dc=hk" scope=0 filter="(objectClass=posixGroup)" attrs="ipaNTSecurityIdentifier" [20/Dec/2022:08:52:10.035491471 +0800] conn=5 op=14432 RESULT err=0 tag=101 nentries=1 wtime=0.000015040 optime=0.000050416 etime=0.000064443 [20/Dec/2022:08:52:10.035545178 +0800] conn=5 op=14433 SRCH base="cn=ad,cn=trusts,dc=wingon,dc=hk" scope=2 filter="(objectClass=ipaNTTrustedDomain)" attrs="cn ipaNTTrustPartner ipaNTFlatName ipaNTTrustedDomainSID ipaNTSIDBlacklistIncoming ipaNTSIDBlacklistOutgoing ipaNTAdditionalSuffixes" [20/Dec/2022:08:52:10.035587789 +0800] conn=5 op=14433 RESULT err=0 tag=101 nentries=0 wtime=0.000017675 optime=0.000043192 etime=0.000059863 [20/Dec/2022:08:52:10.035672369 +0800] conn=5 op=14434 SRCH base="fqdn=wocfreeipa-rep.wingon.hk,cn=computers,cn=accounts,dc=wingon,dc=hk" scope=0 filter="(objectClass=*)" attrs="objectClass uid cn fqdn gidNumber krbPrincipalName krbCanonicalName krbTicketPolicyReference krbPrincipalExpiration krbPasswordExpiration krbPwdPolicyReference krbPrincipalType krbLastPwdChange krbPrincipalAliases krbLastSuccessfulAuth krbLastFailedAuth krbLoginFailedCount krbLastAdminUnlock krbTicketFlags ipaNTSecurityIdentifier ipaNTLogonScript ipaNTProfilePath ipaNTHomeDirectory ipaNTHomeDirectoryDrive" [20/Dec/2022:08:52:10.036234906 +0800] conn=5 op=14434 RESULT err=0 tag=101 nentries=1 wtime=0.000033128 optime=0.000563748 etime=0.000595431 [20/Dec/2022:08:52:10.036351846 +0800] conn=5 op=14435 SRCH base="cn=wocfreeipa-rep.wingon.hk,cn=masters,cn=ipa,cn=etc,dc=wingon,dc=hk" scope=0 filter="(objectClass=*)" attrs=ALL [20/Dec/2022:08:52:10.036415781 +0800] conn=5 op=14435 RESULT err=0 tag=101 nentries=1 wtime=0.000017116 optime=0.000064859 etime=0.000080843 [20/Dec/2022:08:52:10.054500251 +0800] conn=5 op=14436 SRCH base="dc=wingon,dc=hk" scope=2 filter="(&(|(objectClass=krbprincipalaux)(objectClass=krbprincipal)(objectClass=ipakrbprincipal))(|(ipaKrbPrincipalAlias=krbtgt/[email protected])(krbPrincipalName:caseIgnoreIA5Match:=krbtgt/[email protected])))" attrs="krbPrincipalName krbCanonicalName krbUPEnabled krbPrincipalKey krbTicketPolicyReference krbPrincipalExpiration krbPasswordExpiration krbPwdPolicyReference krbPrincipalType krbPwdHistory krbLastPwdChange krbPrincipalAliases krbLastSuccessfulAuth krbLastFailedAuth krbLoginFailedCount krbPrincipalAuthInd krbExtraData krbLastAdminUnlock krbObjectReferences krbTicketFlags krbMaxTicketLife krbMaxRenewableAge uid nsAccountLock passwordHistory ipaKrbAuthzData ipaUserAuthType ipatokenRadiusConfigLink krbAuthIndMaxT..." [20/Dec/2022:08:52:10.054733532 +0800] conn=5 op=14436 RESULT err=0 tag=101 nentries=1 wtime=0.017673549 optime=0.000235438 etime=0.017907231 [20/Dec/2022:08:52:10.055075637 +0800] conn=5 op=14437 SRCH base="dc=wingon,dc=hk" scope=2 filter="(&(|(objectClass=krbprincipalaux)(objectClass=krbprincipal)(objectClass=ipakrbprincipal))(|(ipaKrbPrincipalAlias=ldap/[email protected])(krbPrincipalName:caseIgnoreIA5Match:=ldap/[email protected])))" attrs="krbPrincipalName krbCanonicalName krbUPEnabled krbPrincipalKey krbTicketPolicyReference krbPrincipalExpiration krbPasswordExpiration krbPwdPolicyReference krbPrincipalType krbPwdHistory krbLastPwdChange krbPrincipalAliases krbLastSuccessfulAuth krbLastFailedAuth krbLoginFailedCount krbPrincipalAuthInd krbExtraData krbLastAdminUnlock krbObjectReferences krbTicketFlags krbMaxTicketLife krbMaxRenewableAge uid nsAccountLock passwordHistory ipaKrbAuthzData ipaUserAuthType ipatokenRadiusConfigLink krbAuthIndMaxT..." [20/Dec/2022:08:52:10.055292342 +0800] conn=5 op=14437 RESULT err=0 tag=101 nentries=1 wtime=0.000052636 optime=0.000218403 etime=0.000269568 [20/Dec/2022:08:52:10.055431453 +0800] conn=5 op=14438 SRCH base="cn=WINGON.HK,cn=kerberos,dc=wingon,dc=hk" scope=0 filter="(objectClass=krbticketpolicyaux)" attrs="krbMaxTicketLife krbMaxRenewableAge krbTicketFlags krbAuthIndMaxTicketLife krbAuthIndMaxRenewableAge" [20/Dec/2022:08:52:10.055491849 +0800] conn=5 op=14438 RESULT err=0 tag=101 nentries=1 wtime=0.000020352 optime=0.000061341 etime=0.000080566 [20/Dec/2022:08:52:10.055663216 +0800] conn=5 op=14439 SRCH base="dc=wingon,dc=hk" scope=2 filter="(&(|(objectClass=krbprincipalaux)(objectClass=krbprincipal)(objectClass=ipakrbprincipal))(|(ipaKrbPrincipalAlias=host/[email protected])(krbPrincipalName:caseIgnoreIA5Match:=host/[email protected])))" attrs="krbPrincipalName krbCanonicalName krbUPEnabled krbPrincipalKey krbTicketPolicyReference krbPrincipalExpiration krbPasswordExpiration krbPwdPolicyReference krbPrincipalType krbPwdHistory krbLastPwdChange krbPrincipalAliases krbLastSuccessfulAuth krbLastFailedAuth krbLoginFailedCount krbPrincipalAuthInd krbExtraData krbLastAdminUnlock krbObjectReferences krbTicketFlags krbMaxTicketLife krbMaxRenewableAge uid nsAccountLock passwordHistory ipaKrbAuthzData ipaUserAuthType ipatokenRadiusConfigLink krbAuthIndMaxT..." [20/Dec/2022:08:52:10.055880149 +0800] conn=5 op=14439 RESULT err=0 tag=101 nentries=1 wtime=0.000048562 optime=0.000218419 etime=0.000265458 [20/Dec/2022:08:52:10.056004896 +0800] conn=5 op=14440 SRCH base="cn=WINGON.HK,cn=kerberos,dc=wingon,dc=hk" scope=0 filter="(objectClass=krbticketpolicyaux)" attrs="krbMaxTicketLife krbMaxRenewableAge krbTicketFlags krbAuthIndMaxTicketLife krbAuthIndMaxRenewableAge" [20/Dec/2022:08:52:10.056062326 +0800] conn=5 op=14440 RESULT err=0 tag=101 nentries=1 wtime=0.000018653 optime=0.000058227 etime=0.000075792 [20/Dec/2022:08:52:10.056230702 +0800] conn=5 op=14441 SRCH base="dc=wingon,dc=hk" scope=2 filter="(&(|(objectClass=krbprincipalaux)(objectClass=krbprincipal)(objectClass=ipakrbprincipal))(|(ipaKrbPrincipalAlias=host/[email protected])(krbPrincipalName:caseIgnoreIA5Match:=host/[email protected])))" attrs="krbPrincipalName krbCanonicalName krbUPEnabled krbPrincipalKey krbTicketPolicyReference krbPrincipalExpiration krbPasswordExpiration krbPwdPolicyReference krbPrincipalType krbPwdHistory krbLastPwdChange krbPrincipalAliases krbLastSuccessfulAuth krbLastFailedAuth krbLoginFailedCount krbPrincipalAuthInd krbExtraData krbLastAdminUnlock krbObjectReferences krbTicketFlags krbMaxTicketLife krbMaxRenewableAge uid nsAccountLock passwordHistory ipaKrbAuthzData ipaUserAuthType ipatokenRadiusConfigLink krbAuthIndMaxT..." [20/Dec/2022:08:52:10.056463992 +0800] conn=5 op=14441 RESULT err=0 tag=101 nentries=1 wtime=0.000052619 optime=0.000234983 etime=0.000285946 [20/Dec/2022:08:52:10.056592816 +0800] conn=5 op=14442 SRCH base="cn=WINGON.HK,cn=kerberos,dc=wingon,dc=hk" scope=0 filter="(objectClass=krbticketpolicyaux)" attrs="krbMaxTicketLife krbMaxRenewableAge krbTicketFlags krbAuthIndMaxTicketLife krbAuthIndMaxRenewableAge" [20/Dec/2022:08:52:10.056651155 +0800] conn=5 op=14442 RESULT err=0 tag=101 nentries=1 wtime=0.000019182 optime=0.000059079 etime=0.000077173 [20/Dec/2022:08:52:10.058554640 +0800] conn=2893 op=1 BIND dn="" method=sasl version=3 mech=GSSAPI [20/Dec/2022:08:52:10.061134122 +0800] conn=2893 op=1 RESULT err=14 tag=97 nentries=0 wtime=0.000059172 optime=0.002585693 etime=0.002643652, SASL bind in progress [20/Dec/2022:08:52:10.062668409 +0800] conn=2893 op=2 BIND dn="" method=sasl version=3 mech=GSSAPI [20/Dec/2022:08:52:10.064085004 +0800] conn=2893 op=2 RESULT err=14 tag=97 nentries=0 wtime=0.000050077 optime=0.001419041 etime=0.001467480, SASL bind in progress [20/Dec/2022:08:52:10.065014341 +0800] conn=2893 op=3 BIND dn="" method=sasl version=3 mech=GSSAPI [20/Dec/2022:08:52:10.065666815 +0800] conn=2893 op=3 RESULT err=0 tag=97 nentries=0 wtime=0.000041031 optime=0.000660380 etime=0.000700410 dn="fqdn=wocfreeipa-rep.wingon.hk,cn=computers,cn=accounts,dc=wingon,dc=hk" [20/Dec/2022:08:52:10.067604557 +0800] conn=2893 op=4 SRCH base="cn=accounts,dc=wingon,dc=hk" scope=2 filter="(&(objectClass=ipaHost)(fqdn=wocfreeipa-rep.wingon.hk))" attrs="objectClass cn fqdn serverHostName memberOf ipaSshPubKey ipaUniqueID" [20/Dec/2022:08:52:10.068161053 +0800] conn=2893 op=4 RESULT err=0 tag=101 nentries=1 wtime=0.000095350 optime=0.000556958 etime=0.000650469 notes=P details="Paged Search" pr_idx=0 pr_cookie=-1 [20/Dec/2022:08:52:10.071342521 +0800] conn=2893 op=5 SRCH base="fqdn=wocfreeipa-rep.wingon.hk,cn=computers,cn=accounts,dc=wingon,dc=hk" scope=0 filter="(objectClass=*)" attrs="objectClass cn memberOf ipaUniqueID" [20/Dec/2022:08:52:10.073536868 +0800] conn=2893 op=5 RESULT err=0 tag=101 nentries=1 wtime=0.000104954 optime=0.002194820 etime=0.002297765 notes=P details="Paged Search" pr_idx=0 pr_cookie=-1 [20/Dec/2022:08:52:10.074690660 +0800] conn=2893 op=6 SRCH base="cn=sudo,dc=wingon,dc=hk" scope=2 filter="(&(objectClass=ipasudocmdgrp)(entryusn>=48491))" attrs="objectClass ipaUniqueID cn member entryusn" [20/Dec/2022:08:52:10.074851580 +0800] conn=2893 op=6 RESULT err=0 tag=101 nentries=0 wtime=0.000076126 optime=0.000161713 etime=0.000235912 notes=P details="Paged Search" pr_idx=0 pr_cookie=-1 [20/Dec/2022:08:52:10.075980709 +0800] conn=2893 op=7 SRCH base="cn=sudo,dc=wingon,dc=hk" scope=2 filter="(&(objectClass=ipasudorule)(ipaEnabledFlag=TRUE)(|(&(!(memberHost=*))(cn=defaults))(hostCategory=ALL)(memberHost=fqdn=wocfreeipa-rep.wingon.hk,cn=computers,cn=accounts,dc=wingon,dc=hk)(memberHost=cn=ipaservers,cn=hostgroups,cn=accounts,dc=wingon,dc=hk))(entryusn>=48491))" attrs="objectClass cn ipaUniqueID ipaEnabledFlag ipaSudoOpt ipaSudoRunAs ipaSudoRunAsGroup memberAllowCmd memberDenyCmd memberHost memberUser sudoNotAfter sudoNotBefore sudoOrder cmdCategory hostCategory userCategory ipaSudoRunAsUserCategory ipaSudoRunAsGroupCategory ipaSudoRunAsExtUser ipaSudoRunAsExtGroup ipaSudoRunAsExtUserGroup externalUser entryusn" [20/Dec/2022:08:52:10.076123960 +0800] conn=2893 op=7 RESULT err=0 tag=101 nentries=0 wtime=0.000130861 optime=0.000144629 etime=0.000273690 notes=P details="Paged Search" pr_idx=0 pr_cookie=-1 [20/Dec/2022:08:52:32.207041120 +0800] conn=4 op=13996 SRCH base="dc=wingon,dc=hk" scope=2 filter="(&(|(objectClass=krbprincipalaux)(objectClass=krbprincipal)(objectClass=ipakrbprincipal))(|([email protected])(krbPrincipalName:caseIgnoreIA5Match:[email protected])))" attrs="krbPrincipalName krbCanonicalName krbUPEnabled krbPrincipalKey krbTicketPolicyReference krbPrincipalExpiration krbPasswordExpiration krbPwdPolicyReference krbPrincipalType krbPwdHistory krbLastPwdChange krbPrincipalAliases krbLastSuccessfulAuth krbLastFailedAuth krbLoginFailedCount krbPrincipalAuthInd krbExtraData krbLastAdminUnlock krbObjectReferences krbTicketFlags krbMaxTicketLife krbMaxRenewableAge uid nsAccountLock passwordHistory ipaKrbAuthzData ipaUserAuthType ipatokenRadiusConfigLink krbAuthIndMaxT..." [20/Dec/2022:08:52:32.207436448 +0800] conn=4 op=13996 RESULT err=0 tag=101 nentries=1 wtime=0.000184164 optime=0.000398522 etime=0.000580416 [20/Dec/2022:08:52:32.207620899 +0800] conn=4 op=13997 SRCH base="cn=WINGON.HK,cn=kerberos,dc=wingon,dc=hk" scope=0 filter="(objectClass=krbticketpolicyaux)" attrs="krbMaxTicketLife krbMaxRenewableAge krbTicketFlags krbAuthIndMaxTicketLife krbAuthIndMaxRenewableAge" [20/Dec/2022:08:52:32.207691911 +0800] conn=4 op=13997 RESULT err=0 tag=101 nentries=1 wtime=0.000025598 optime=0.000071976 etime=0.000096282 [20/Dec/2022:08:52:32.207801336 +0800] conn=4 op=13998 SRCH base="dc=wingon,dc=hk" scope=2 filter="(&(|(objectClass=krbprincipalaux)(objectClass=krbprincipal)(objectClass=ipakrbprincipal))(|(ipaKrbPrincipalAlias=krbtgt/[email protected])(krbPrincipalName:caseIgnoreIA5Match:=krbtgt/[email protected])))" attrs="krbPrincipalName krbCanonicalName krbUPEnabled krbPrincipalKey krbTicketPolicyReference krbPrincipalExpiration krbPasswordExpiration krbPwdPolicyReference krbPrincipalType krbPwdHistory krbLastPwdChange krbPrincipalAliases krbLastSuccessfulAuth krbLastFailedAuth krbLoginFailedCount krbPrincipalAuthInd krbExtraData krbLastAdminUnlock krbObjectReferences krbTicketFlags krbMaxTicketLife krbMaxRenewableAge uid nsAccountLock passwordHistory ipaKrbAuthzData ipaUserAuthType ipatokenRadiusConfigLink krbAuthIndMaxT..." [20/Dec/2022:08:52:32.208021391 +0800] conn=4 op=13998 RESULT err=0 tag=101 nentries=1 wtime=0.000052053 optime=0.000221186 etime=0.000271763 [20/Dec/2022:08:52:32.208202844 +0800] conn=4 op=13999 SRCH base="cn=global_policy,cn=WINGON.HK,cn=kerberos,dc=wingon,dc=hk" scope=0 filter="(objectClass=*)" attrs="krbMaxPwdLife krbMinPwdLife krbPwdMinDiffChars krbPwdMinLength krbPwdHistoryLength krbPwdMaxFailure krbPwdFailureCountInterval krbPwdLockoutDuration ipaPwdMaxRepeat ipaPwdMaxSequence ipaPwdDictCheck ipaPwdUserCheck" [20/Dec/2022:08:52:32.208281042 +0800] conn=4 op=13999 RESULT err=0 tag=101 nentries=1 wtime=0.000025947 optime=0.000079289 etime=0.000104134 [20/Dec/2022:08:52:32.208927398 +0800] conn=4 op=14000 MOD dn="uid=admin,cn=users,cn=accounts,dc=wingon,dc=hk" [20/Dec/2022:08:52:32.211568960 +0800] conn=4 op=14000 RESULT err=0 tag=103 nentries=0 wtime=0.000025634 optime=0.002676202 etime=0.002699217 csn=63a10750000000040000 [20/Dec/2022:08:52:32.231157156 +0800] conn=2894 fd=124 slot=124 connection from 10.99.16.212 to 10.100.0.213 [20/Dec/2022:08:52:32.232013797 +0800] conn=2894 op=0 BIND dn="" method=sasl version=3 mech=GSSAPI [20/Dec/2022:08:52:32.234288495 +0800] conn=2894 op=0 RESULT err=14 tag=97 nentries=0 wtime=0.000150079 optime=0.002278046 etime=0.002426942, SASL bind in progress [20/Dec/2022:08:52:32.235513263 +0800] conn=2894 op=1 BIND dn="" method=sasl version=3 mech=GSSAPI [20/Dec/2022:08:52:32.236845298 +0800] conn=2894 op=1 RESULT err=14 tag=97 nentries=0 wtime=0.000037369 optime=0.001335839 etime=0.001371806, SASL bind in progress [20/Dec/2022:08:52:32.237928434 +0800] conn=2894 op=2 BIND dn="" method=sasl version=3 mech=GSSAPI [20/Dec/2022:08:52:32.238454184 +0800] conn=2894 op=2 RESULT err=0 tag=97 nentries=0 wtime=0.000043487 optime=0.000527945 etime=0.000570516 dn="krbprincipalname=ldap/[email protected],cn=services,cn=accounts,dc=wingon,dc=hk" [20/Dec/2022:08:52:32.239497939 +0800] conn=2894 op=3 SRCH base="" scope=0 filter="(objectClass=*)" attrs="supportedControl supportedExtension" [20/Dec/2022:08:52:32.240756122 +0800] conn=2894 op=3 RESULT err=0 tag=101 nentries=1 wtime=0.000097432 optime=0.001259187 etime=0.001355087 [20/Dec/2022:08:52:32.241878758 +0800] conn=2894 op=4 SRCH base="" scope=0 filter="(objectClass=*)" attrs="supportedControl supportedExtension" [20/Dec/2022:08:52:32.243259798 +0800] conn=2894 op=4 RESULT err=0 tag=101 nentries=1 wtime=0.000074483 optime=0.001382703 etime=0.001455708 [20/Dec/2022:08:52:32.244444126 +0800] conn=2894 op=5 EXT oid="2.16.840.1.113730.3.5.12" name="replication-multimaster-extop" [20/Dec/2022:08:52:32.244844812 +0800] conn=2894 op=5 RESULT err=0 tag=120 nentries=0 wtime=0.000064757 optime=0.000409643 etime=0.000473545 [20/Dec/2022:08:52:32.249159483 +0800] conn=2894 op=6 EXT oid="2.16.840.1.113730.3.5.5" name="replication-multimaster-extop" [20/Dec/2022:08:52:32.250374739 +0800] conn=2894 op=6 RESULT err=0 tag=120 nentries=0 wtime=0.000049054 optime=0.001218454 etime=0.001265266 [20/Dec/2022:08:52:41.889724553 +0800] conn=5 op=14444 SRCH base="dc=wingon,dc=hk" scope=2 filter="(&(|(objectClass=krbprincipalaux)(objectClass=krbprincipal)(objectClass=ipakrbprincipal))(|([email protected])(krbPrincipalName:caseIgnoreIA5Match:[email protected])))" attrs="krbPrincipalName krbCanonicalName krbUPEnabled krbPrincipalKey krbTicketPolicyReference krbPrincipalExpiration krbPasswordExpiration krbPwdPolicyReference krbPrincipalType krbPwdHistory krbLastPwdChange krbPrincipalAliases krbLastSuccessfulAuth krbLastFailedAuth krbLoginFailedCount krbPrincipalAuthInd krbExtraData krbLastAdminUnlock krbObjectReferences krbTicketFlags krbMaxTicketLife krbMaxRenewableAge uid nsAccountLock passwordHistory ipaKrbAuthzData ipaUserAuthType ipatokenRadiusConfigLink krbAuthIndMaxT..." [20/Dec/2022:08:52:41.890119744 +0800] conn=5 op=14444 RESULT err=0 tag=101 nentries=1 wtime=0.000160221 optime=0.000399400 etime=0.000557213 [20/Dec/2022:08:52:41.890244009 +0800] conn=5 op=14445 SRCH base="cn=WINGON.HK,cn=kerberos,dc=wingon,dc=hk" scope=0 filter="(objectClass=krbticketpolicyaux)" attrs="krbMaxTicketLife krbMaxRenewableAge krbTicketFlags krbAuthIndMaxTicketLife krbAuthIndMaxRenewableAge" [20/Dec/2022:08:52:41.890324635 +0800] conn=5 op=14445 RESULT err=0 tag=101 nentries=1 wtime=0.000103005 optime=0.000081280 etime=0.000183062 [20/Dec/2022:08:52:41.890417311 +0800] conn=5 op=14446 SRCH base="dc=wingon,dc=hk" scope=2 filter="(&(|(objectClass=krbprincipalaux)(objectClass=krbprincipal)(objectClass=ipakrbprincipal))(|(ipaKrbPrincipalAlias=krbtgt/[email protected])(krbPrincipalName:caseIgnoreIA5Match:=krbtgt/[email protected])))" attrs="krbPrincipalName krbCanonicalName krbUPEnabled krbPrincipalKey krbTicketPolicyReference krbPrincipalExpiration krbPasswordExpiration krbPwdPolicyReference krbPrincipalType krbPwdHistory krbLastPwdChange krbPrincipalAliases krbLastSuccessfulAuth krbLastFailedAuth krbLoginFailedCount krbPrincipalAuthInd krbExtraData krbLastAdminUnlock krbObjectReferences krbTicketFlags krbMaxTicketLife krbMaxRenewableAge uid nsAccountLock passwordHistory ipaKrbAuthzData ipaUserAuthType ipatokenRadiusConfigLink krbAuthIndMaxT..." [20/Dec/2022:08:52:41.890647152 +0800] conn=5 op=14446 RESULT err=0 tag=101 nentries=1 wtime=0.000081474 optime=0.000231296 etime=0.000311348 [20/Dec/2022:08:52:41.890804201 +0800] conn=5 op=14447 SRCH base="cn=global_policy,cn=WINGON.HK,cn=kerberos,dc=wingon,dc=hk" scope=0 filter="(objectClass=*)" attrs="krbMaxPwdLife krbMinPwdLife krbPwdMinDiffChars krbPwdMinLength krbPwdHistoryLength krbPwdMaxFailure krbPwdFailureCountInterval krbPwdLockoutDuration ipaPwdMaxRepeat ipaPwdMaxSequence ipaPwdDictCheck ipaPwdUserCheck" [20/Dec/2022:08:52:41.890881404 +0800] conn=5 op=14447 RESULT err=0 tag=101 nentries=1 wtime=0.000143403 optime=0.000078113 etime=0.000220491 [20/Dec/2022:08:52:42.636723558 +0800] conn=5 op=14449 SRCH base="dc=wingon,dc=hk" scope=2 filter="(&(|(objectClass=krbprincipalaux)(objectClass=krbprincipal)(objectClass=ipakrbprincipal))(|([email protected])(krbPrincipalName:caseIgnoreIA5Match:[email protected])))" attrs="krbPrincipalName krbCanonicalName krbUPEnabled krbPrincipalKey krbTicketPolicyReference krbPrincipalExpiration krbPasswordExpiration krbPwdPolicyReference krbPrincipalType krbPwdHistory krbLastPwdChange krbPrincipalAliases krbLastSuccessfulAuth krbLastFailedAuth krbLoginFailedCount krbPrincipalAuthInd krbExtraData krbLastAdminUnlock krbObjectReferences krbTicketFlags krbMaxTicketLife krbMaxRenewableAge uid nsAccountLock passwordHistory ipaKrbAuthzData ipaUserAuthType ipatokenRadiusConfigLink krbAuthIndMaxT..." [20/Dec/2022:08:52:42.637112855 +0800] conn=5 op=14449 RESULT err=0 tag=101 nentries=1 wtime=0.000169636 optime=0.000392788 etime=0.000560196 [20/Dec/2022:08:52:42.637273602 +0800] conn=5 op=14450 SRCH base="cn=WINGON.HK,cn=kerberos,dc=wingon,dc=hk" scope=0 filter="(objectClass=krbticketpolicyaux)" attrs="krbMaxTicketLife krbMaxRenewableAge krbTicketFlags krbAuthIndMaxTicketLife krbAuthIndMaxRenewableAge" [20/Dec/2022:08:52:42.637392989 +0800] conn=5 op=14450 RESULT err=0 tag=101 nentries=1 wtime=0.000057304 optime=0.000121591 etime=0.000176898 [20/Dec/2022:08:52:42.637564989 +0800] conn=5 op=14451 SRCH base="dc=wingon,dc=hk" scope=2 filter="(&(|(objectClass=krbprincipalaux)(objectClass=krbprincipal)(objectClass=ipakrbprincipal))(|(ipaKrbPrincipalAlias=krbtgt/[email protected])(krbPrincipalName:caseIgnoreIA5Match:=krbtgt/[email protected])))" attrs="krbPrincipalName krbCanonicalName krbUPEnabled krbPrincipalKey krbTicketPolicyReference krbPrincipalExpiration krbPasswordExpiration krbPwdPolicyReference krbPrincipalType krbPwdHistory krbLastPwdChange krbPrincipalAliases krbLastSuccessfulAuth krbLastFailedAuth krbLoginFailedCount krbPrincipalAuthInd krbExtraData krbLastAdminUnlock krbObjectReferences krbTicketFlags krbMaxTicketLife krbMaxRenewableAge uid nsAccountLock passwordHistory ipaKrbAuthzData ipaUserAuthType ipatokenRadiusConfigLink krbAuthIndMaxT..." [20/Dec/2022:08:52:42.637820305 +0800] conn=5 op=14451 RESULT err=0 tag=101 nentries=1 wtime=0.000081079 optime=0.000257073 etime=0.000336411 [20/Dec/2022:08:52:42.638067947 +0800] conn=5 op=14452 SRCH base="cn=global_policy,cn=WINGON.HK,cn=kerberos,dc=wingon,dc=hk" scope=0 filter="(objectClass=*)" attrs="krbMaxPwdLife krbMinPwdLife krbPwdMinDiffChars krbPwdMinLength krbPwdHistoryLength krbPwdMaxFailure krbPwdFailureCountInterval krbPwdLockoutDuration ipaPwdMaxRepeat ipaPwdMaxSequence ipaPwdDictCheck ipaPwdUserCheck" [20/Dec/2022:08:52:42.638154921 +0800] conn=5 op=14452 RESULT err=0 tag=101 nentries=1 wtime=0.000059305 optime=0.000088255 etime=0.000146268 [20/Dec/2022:08:52:42.638626346 +0800] conn=5 op=14453 SRCH base="uid=admin,cn=users,cn=accounts,dc=wingon,dc=hk" scope=0 filter="(objectClass=*)" attrs="objectClass uid cn fqdn gidNumber krbPrincipalName krbCanonicalName krbTicketPolicyReference krbPrincipalExpiration krbPasswordExpiration krbPwdPolicyReference krbPrincipalType krbLastPwdChange krbPrincipalAliases krbLastSuccessfulAuth krbLastFailedAuth krbLoginFailedCount krbLastAdminUnlock krbTicketFlags ipaNTSecurityIdentifier ipaNTLogonScript ipaNTProfilePath ipaNTHomeDirectory ipaNTHomeDirectoryDrive" [20/Dec/2022:08:52:42.639725669 +0800] conn=5 op=14453 RESULT err=0 tag=101 nentries=1 wtime=0.000080443 optime=0.001101205 etime=0.001179279 [20/Dec/2022:08:52:42.640187185 +0800] conn=5 op=14454 MOD dn="uid=admin,cn=users,cn=accounts,dc=wingon,dc=hk" [20/Dec/2022:08:52:42.642756394 +0800] conn=5 op=14454 RESULT err=0 tag=103 nentries=0 wtime=0.000046214 optime=0.002569881 etime=0.002613811 csn=63a1075a000000040000 [20/Dec/2022:08:52:49.488094006 +0800] conn=5 op=14455 SRCH base="dc=wingon,dc=hk" scope=2 filter="(&(|(objectClass=krbprincipalaux)(objectClass=krbprincipal)(objectClass=ipakrbprincipal))(|(ipaKrbPrincipalAlias=krbtgt/[email protected])(krbPrincipalName:caseIgnoreIA5Match:=krbtgt/[email protected])))" attrs="krbPrincipalName krbCanonicalName krbUPEnabled krbPrincipalKey krbTicketPolicyReference krbPrincipalExpiration krbPasswordExpiration krbPwdPolicyReference krbPrincipalType krbPwdHistory krbLastPwdChange krbPrincipalAliases krbLastSuccessfulAuth krbLastFailedAuth krbLoginFailedCount krbPrincipalAuthInd krbExtraData krbLastAdminUnlock krbObjectReferences krbTicketFlags krbMaxTicketLife krbMaxRenewableAge uid nsAccountLock passwordHistory ipaKrbAuthzData ipaUserAuthType ipatokenRadiusConfigLink krbAuthIndMaxT..." [20/Dec/2022:08:52:49.488470833 +0800] conn=5 op=14455 RESULT err=0 tag=101 nentries=1 wtime=0.000157093 optime=0.000380307 etime=0.000535171 [20/Dec/2022:08:52:49.488907989 +0800] conn=5 op=14456 SRCH base="dc=wingon,dc=hk" scope=2 filter="(&(|(objectClass=krbprincipalaux)(objectClass=krbprincipal)(objectClass=ipakrbprincipal))(|(ipaKrbPrincipalAlias=HTTP/[email protected])(krbPrincipalName:caseIgnoreIA5Match:=HTTP/[email protected])))" attrs="krbPrincipalName krbCanonicalName krbUPEnabled krbPrincipalKey krbTicketPolicyReference krbPrincipalExpiration krbPasswordExpiration krbPwdPolicyReference krbPrincipalType krbPwdHistory krbLastPwdChange krbPrincipalAliases krbLastSuccessfulAuth krbLastFailedAuth krbLoginFailedCount krbPrincipalAuthInd krbExtraData krbLastAdminUnlock krbObjectReferences krbTicketFlags krbMaxTicketLife krbMaxRenewableAge uid nsAccountLock passwordHistory ipaKrbAuthzData ipaUserAuthType ipatokenRadiusConfigLink krbAuthIndMaxT..." [20/Dec/2022:08:52:49.489168159 +0800] conn=5 op=14456 RESULT err=0 tag=101 nentries=1 wtime=0.000071892 optime=0.000261987 etime=0.000332048 [20/Dec/2022:08:52:49.489291527 +0800] conn=5 op=14457 SRCH base="cn=WINGON.HK,cn=kerberos,dc=wingon,dc=hk" scope=0 filter="(objectClass=krbticketpolicyaux)" attrs="krbMaxTicketLife krbMaxRenewableAge krbTicketFlags krbAuthIndMaxTicketLife krbAuthIndMaxRenewableAge" [20/Dec/2022:08:52:49.489368891 +0800] conn=5 op=14457 RESULT err=0 tag=101 nentries=1 wtime=0.000020002 optime=0.000078100 etime=0.000096852 [20/Dec/2022:08:52:49.489551000 +0800] conn=5 op=14458 SRCH base="dc=wingon,dc=hk" scope=2 filter="(&(|(objectClass=krbprincipalaux)(objectClass=krbprincipal)(objectClass=ipakrbprincipal))(|([email protected])(krbPrincipalName:caseIgnoreIA5Match:[email protected])))" attrs="krbPrincipalName krbCanonicalName krbUPEnabled krbPrincipalKey krbTicketPolicyReference krbPrincipalExpiration krbPasswordExpiration krbPwdPolicyReference krbPrincipalType krbPwdHistory krbLastPwdChange krbPrincipalAliases krbLastSuccessfulAuth krbLastFailedAuth krbLoginFailedCount krbPrincipalAuthInd krbExtraData krbLastAdminUnlock krbObjectReferences krbTicketFlags krbMaxTicketLife krbMaxRenewableAge uid nsAccountLock passwordHistory ipaKrbAuthzData ipaUserAuthType ipatokenRadiusConfigLink krbAuthIndMaxT..." [20/Dec/2022:08:52:49.489784444 +0800] conn=5 op=14458 RESULT err=0 tag=101 nentries=1 wtime=0.000050301 optime=0.000234939 etime=0.000283911 [20/Dec/2022:08:52:49.489907838 +0800] conn=5 op=14459 SRCH base="cn=WINGON.HK,cn=kerberos,dc=wingon,dc=hk" scope=0 filter="(objectClass=krbticketpolicyaux)" attrs="krbMaxTicketLife krbMaxRenewableAge krbTicketFlags krbAuthIndMaxTicketLife krbAuthIndMaxRenewableAge" [20/Dec/2022:08:52:49.489966334 +0800] conn=5 op=14459 RESULT err=0 tag=101 nentries=1 wtime=0.000018656 optime=0.000059311 etime=0.000076873 [20/Dec/2022:08:52:49.490140654 +0800] conn=5 op=14460 SRCH base="dc=wingon,dc=hk" scope=2 filter="(&(|(objectClass=krbprincipalaux)(objectClass=krbprincipal)(objectClass=ipakrbprincipal))(|([email protected])(krbPrincipalName:caseIgnoreIA5Match:[email protected])))" attrs="krbPrincipalName krbCanonicalName krbUPEnabled krbPrincipalKey krbTicketPolicyReference krbPrincipalExpiration krbPasswordExpiration krbPwdPolicyReference krbPrincipalType krbPwdHistory krbLastPwdChange krbPrincipalAliases krbLastSuccessfulAuth krbLastFailedAuth krbLoginFailedCount krbPrincipalAuthInd krbExtraData krbLastAdminUnlock krbObjectReferences krbTicketFlags krbMaxTicketLife krbMaxRenewableAge uid nsAccountLock passwordHistory ipaKrbAuthzData ipaUserAuthType ipatokenRadiusConfigLink krbAuthIndMaxT..." [20/Dec/2022:08:52:49.490385645 +0800] conn=5 op=14460 RESULT err=0 tag=101 nentries=1 wtime=0.000054201 optime=0.000246462 etime=0.000298996 [20/Dec/2022:08:52:49.490509791 +0800] conn=5 op=14461 SRCH base="cn=WINGON.HK,cn=kerberos,dc=wingon,dc=hk" scope=0 filter="(objectClass=krbticketpolicyaux)" attrs="krbMaxTicketLife krbMaxRenewableAge krbTicketFlags krbAuthIndMaxTicketLife krbAuthIndMaxRenewableAge" [20/Dec/2022:08:52:49.490567976 +0800] conn=5 op=14461 RESULT err=0 tag=101 nentries=1 wtime=0.000018766 optime=0.000059023 etime=0.000076742 [20/Dec/2022:08:52:49.502954845 +0800] conn=2891 op=8 SRCH base="cn=accounts,dc=wingon,dc=hk" scope=2 filter="(&(ipaNTSecurityIdentifier=S-1-5-21-1621352465-573684049-3234178885-500)(|(objectClass=ipaUserGroup)(objectClass=posixGroup))(cn=*))" attrs="objectClass posixgroup cn userPassword gidNumber member ipaUniqueID ipaNTSecurityIdentifier modifyTimestamp entryusn ipaExternalMember" [20/Dec/2022:08:52:49.503266323 +0800] conn=2891 op=8 RESULT err=0 tag=101 nentries=0 wtime=0.000119232 optime=0.000313682 etime=0.000431068 [20/Dec/2022:08:52:49.503619808 +0800] conn=2891 op=9 SRCH base="cn=accounts,dc=wingon,dc=hk" scope=2 filter="(&(ipaNTSecurityIdentifier=S-1-5-21-1621352465-573684049-3234178885-500)(objectClass=posixAccount)(uid=*)(ipaNTSecurityIdentifier=*))" attrs="objectClass uid userPassword uidNumber gidNumber gecos homeDirectory loginShell krbPrincipalName cn memberOf ipaUniqueID ipaNTSecurityIdentifier modifyTimestamp entryusn shadowLastChange shadowMin shadowMax shadowWarning shadowInactive shadowExpire shadowFlag krbLastPwdChange krbPasswordExpiration pwdattribute authorizedService accountexpires useraccountcontrol nsAccountLock host logindisabled loginexpirationtime loginallowedtimemap ipaSshPubKey ipaUserAuthType usercertificate;binary mail" [20/Dec/2022:08:52:49.504338874 +0800] conn=2891 op=9 RESULT err=0 tag=101 nentries=1 wtime=0.000087825 optime=0.000720696 etime=0.000806775 [20/Dec/2022:08:52:49.506016991 +0800] conn=2891 op=10 SRCH base="cn=Default Trust View,cn=views,cn=accounts,dc=wingon,dc=hk" scope=2 filter="(&(objectClass=ipaOverrideAnchor)(ipaAnchorUUID=:IPA:wingon.hk:ac4db316-6556-11ed-aade-0050568cee48))" attrs=ALL [20/Dec/2022:08:52:49.506233036 +0800] conn=2891 op=10 RESULT err=0 tag=101 nentries=0 wtime=0.001656902 optime=0.000216580 etime=0.001872020 [20/Dec/2022:08:52:49.524857089 +0800] conn=2895 fd=125 slot=125 connection from 10.100.0.213 to 10.100.0.213 [20/Dec/2022:08:52:49.526453626 +0800] conn=5 op=14462 SRCH base="dc=wingon,dc=hk" scope=2 filter="(&(|(objectClass=krbprincipalaux)(objectClass=krbprincipal)(objectClass=ipakrbprincipal))(|(ipaKrbPrincipalAlias=krbtgt/[email protected])(krbPrincipalName:caseIgnoreIA5Match:=krbtgt/[email protected])))" attrs="krbPrincipalName krbCanonicalName krbUPEnabled krbPrincipalKey krbTicketPolicyReference krbPrincipalExpiration krbPasswordExpiration krbPwdPolicyReference krbPrincipalType krbPwdHistory krbLastPwdChange krbPrincipalAliases krbLastSuccessfulAuth krbLastFailedAuth krbLoginFailedCount krbPrincipalAuthInd krbExtraData krbLastAdminUnlock krbObjectReferences krbTicketFlags krbMaxTicketLife krbMaxRenewableAge uid nsAccountLock passwordHistory ipaKrbAuthzData ipaUserAuthType ipatokenRadiusConfigLink krbAuthIndMaxT..." [20/Dec/2022:08:52:49.526704890 +0800] conn=5 op=14462 RESULT err=0 tag=101 nentries=1 wtime=0.035436543 optime=0.000253370 etime=0.035688066 [20/Dec/2022:08:52:49.527116018 +0800] conn=5 op=14463 SRCH base="dc=wingon,dc=hk" scope=2 filter="(&(|(objectClass=krbprincipalaux)(objectClass=krbprincipal)(objectClass=ipakrbprincipal))(|(ipaKrbPrincipalAlias=ldap/[email protected])(krbPrincipalName:caseIgnoreIA5Match:=ldap/[email protected])))" attrs="krbPrincipalName krbCanonicalName krbUPEnabled krbPrincipalKey krbTicketPolicyReference krbPrincipalExpiration krbPasswordExpiration krbPwdPolicyReference krbPrincipalType krbPwdHistory krbLastPwdChange krbPrincipalAliases krbLastSuccessfulAuth krbLastFailedAuth krbLoginFailedCount krbPrincipalAuthInd krbExtraData krbLastAdminUnlock krbObjectReferences krbTicketFlags krbMaxTicketLife krbMaxRenewableAge uid nsAccountLock passwordHistory ipaKrbAuthzData ipaUserAuthType ipatokenRadiusConfigLink krbAuthIndMaxT..." [20/Dec/2022:08:52:49.527385120 +0800] conn=5 op=14463 RESULT err=0 tag=101 nentries=1 wtime=0.000059414 optime=0.000270825 etime=0.000328165 [20/Dec/2022:08:52:49.527514613 +0800] conn=5 op=14464 SRCH base="cn=WINGON.HK,cn=kerberos,dc=wingon,dc=hk" scope=0 filter="(objectClass=krbticketpolicyaux)" attrs="krbMaxTicketLife krbMaxRenewableAge krbTicketFlags krbAuthIndMaxTicketLife krbAuthIndMaxRenewableAge" [20/Dec/2022:08:52:49.527577322 +0800] conn=5 op=14464 RESULT err=0 tag=101 nentries=1 wtime=0.000020653 optime=0.000063723 etime=0.000083249 [20/Dec/2022:08:52:49.527677215 +0800] conn=5 op=14465 SRCH base="dc=wingon,dc=hk" scope=2 filter="(&(|(objectClass=krbprincipalaux)(objectClass=krbprincipal)(objectClass=ipakrbprincipal))(|(ipaKrbPrincipalAlias=HTTP/[email protected])(krbPrincipalName:caseIgnoreIA5Match:=HTTP/[email protected])))" attrs="krbPrincipalName krbCanonicalName krbUPEnabled krbPrincipalKey krbTicketPolicyReference krbPrincipalExpiration krbPasswordExpiration krbPwdPolicyReference krbPrincipalType krbPwdHistory krbLastPwdChange krbPrincipalAliases krbLastSuccessfulAuth krbLastFailedAuth krbLoginFailedCount krbPrincipalAuthInd krbExtraData krbLastAdminUnlock krbObjectReferences krbTicketFlags krbMaxTicketLife krbMaxRenewableAge uid nsAccountLock passwordHistory ipaKrbAuthzData ipaUserAuthType ipatokenRadiusConfigLink krbAuthIndMaxT..." [20/Dec/2022:08:52:49.527885167 +0800] conn=5 op=14465 RESULT err=0 tag=101 nentries=1 wtime=0.000044833 optime=0.000209291 etime=0.000252701 [20/Dec/2022:08:52:49.527998710 +0800] conn=5 op=14466 SRCH base="cn=WINGON.HK,cn=kerberos,dc=wingon,dc=hk" scope=0 filter="(objectClass=krbticketpolicyaux)" attrs="krbMaxTicketLife krbMaxRenewableAge krbTicketFlags krbAuthIndMaxTicketLife krbAuthIndMaxRenewableAge" [20/Dec/2022:08:52:49.528055668 +0800] conn=5 op=14466 RESULT err=0 tag=101 nentries=1 wtime=0.000018253 optime=0.000057676 etime=0.000074875 [20/Dec/2022:08:52:49.528225172 +0800] conn=5 op=14467 SRCH base="dc=wingon,dc=hk" scope=2 filter="(&(|(objectClass=krbprincipalaux)(objectClass=krbprincipal)(objectClass=ipakrbprincipal))(|(ipaKrbPrincipalAlias=ldap/[email protected])(krbPrincipalName:caseIgnoreIA5Match:=ldap/[email protected])))" attrs="krbPrincipalName krbCanonicalName krbUPEnabled krbPrincipalKey krbTicketPolicyReference krbPrincipalExpiration krbPasswordExpiration krbPwdPolicyReference krbPrincipalType krbPwdHistory krbLastPwdChange krbPrincipalAliases krbLastSuccessfulAuth krbLastFailedAuth krbLoginFailedCount krbPrincipalAuthInd krbExtraData krbLastAdminUnlock krbObjectReferences krbTicketFlags krbMaxTicketLife krbMaxRenewableAge uid nsAccountLock passwordHistory ipaKrbAuthzData ipaUserAuthType ipatokenRadiusConfigLink krbAuthIndMaxT..." [20/Dec/2022:08:52:49.528452770 +0800] conn=5 op=14467 RESULT err=0 tag=101 nentries=1 wtime=0.000047130 optime=0.000228796 etime=0.000274314 [20/Dec/2022:08:52:49.528582893 +0800] conn=5 op=14468 SRCH base="cn=WINGON.HK,cn=kerberos,dc=wingon,dc=hk" scope=0 filter="(objectClass=krbticketpolicyaux)" attrs="krbMaxTicketLife krbMaxRenewableAge krbTicketFlags krbAuthIndMaxTicketLife krbAuthIndMaxRenewableAge" [20/Dec/2022:08:52:49.528657241 +0800] conn=5 op=14468 RESULT err=0 tag=101 nentries=1 wtime=0.000021675 optime=0.000075366 etime=0.000095870 [20/Dec/2022:08:52:49.528737699 +0800] conn=5 op=14469 SRCH base="dc=wingon,dc=hk" scope=2 filter="(&(objectClass=ipaKrb5DelegationACL)(memberPrincipal=HTTP/[email protected]))" attrs="objectClass memberPrincipal" [20/Dec/2022:08:52:49.528946342 +0800] conn=5 op=14469 RESULT err=0 tag=101 nentries=1 wtime=0.000023138 optime=0.000209311 etime=0.000231098 [20/Dec/2022:08:52:49.529144680 +0800] conn=5 op=14470 SRCH base="dc=wingon,dc=hk" scope=2 filter="(&(|(objectClass=krbprincipalaux)(objectClass=krbprincipal)(objectClass=ipakrbprincipal))(|([email protected])(krbPrincipalName:caseIgnoreIA5Match:[email protected])))" attrs="krbPrincipalName krbCanonicalName krbUPEnabled krbPrincipalKey krbTicketPolicyReference krbPrincipalExpiration krbPasswordExpiration krbPwdPolicyReference krbPrincipalType krbPwdHistory krbLastPwdChange krbPrincipalAliases krbLastSuccessfulAuth krbLastFailedAuth krbLoginFailedCount krbPrincipalAuthInd krbExtraData krbLastAdminUnlock krbObjectReferences krbTicketFlags krbMaxTicketLife krbMaxRenewableAge uid nsAccountLock passwordHistory ipaKrbAuthzData ipaUserAuthType ipatokenRadiusConfigLink krbAuthIndMaxT..." [20/Dec/2022:08:52:49.529395979 +0800] conn=5 op=14470 RESULT err=0 tag=101 nentries=1 wtime=0.000050806 optime=0.000252739 etime=0.000301948 [20/Dec/2022:08:52:49.529520417 +0800] conn=5 op=14471 SRCH base="cn=WINGON.HK,cn=kerberos,dc=wingon,dc=hk" scope=0 filter="(objectClass=krbticketpolicyaux)" attrs="krbMaxTicketLife krbMaxRenewableAge krbTicketFlags krbAuthIndMaxTicketLife krbAuthIndMaxRenewableAge" [20/Dec/2022:08:52:49.529578243 +0800] conn=5 op=14471 RESULT err=0 tag=101 nentries=1 wtime=0.000019205 optime=0.000058676 etime=0.000076783 [20/Dec/2022:08:52:49.529678150 +0800] conn=5 op=14472 SRCH base="dc=wingon,dc=hk" scope=2 filter="(&(|(objectClass=krbprincipalaux)(objectClass=krbprincipal)(objectClass=ipakrbprincipal))(|([email protected])(krbPrincipalName:caseIgnoreIA5Match:[email protected])))" attrs="krbPrincipalName krbCanonicalName krbUPEnabled krbPrincipalKey krbTicketPolicyReference krbPrincipalExpiration krbPasswordExpiration krbPwdPolicyReference krbPrincipalType krbPwdHistory krbLastPwdChange krbPrincipalAliases krbLastSuccessfulAuth krbLastFailedAuth krbLoginFailedCount krbPrincipalAuthInd krbExtraData krbLastAdminUnlock krbObjectReferences krbTicketFlags krbMaxTicketLife krbMaxRenewableAge uid nsAccountLock passwordHistory ipaKrbAuthzData ipaUserAuthType ipatokenRadiusConfigLink krbAuthIndMaxT..." [20/Dec/2022:08:52:49.529889528 +0800] conn=5 op=14472 RESULT err=0 tag=101 nentries=1 wtime=0.000044447 optime=0.000212677 etime=0.000255851 [20/Dec/2022:08:52:49.530005152 +0800] conn=5 op=14473 SRCH base="cn=WINGON.HK,cn=kerberos,dc=wingon,dc=hk" scope=0 filter="(objectClass=krbticketpolicyaux)" attrs="krbMaxTicketLife krbMaxRenewableAge krbTicketFlags krbAuthIndMaxTicketLife krbAuthIndMaxRenewableAge" [20/Dec/2022:08:52:49.530060858 +0800] conn=5 op=14473 RESULT err=0 tag=101 nentries=1 wtime=0.000017671 optime=0.000056385 etime=0.000072954 [20/Dec/2022:08:52:49.530199859 +0800] conn=5 op=14474 SRCH base="dc=wingon,dc=hk" scope=2 filter="(&(|(objectClass=krbprincipalaux)(objectClass=krbprincipal)(objectClass=ipakrbprincipal))(|([email protected])(krbPrincipalName:caseIgnoreIA5Match:[email protected])))" attrs="krbPrincipalName krbCanonicalName krbUPEnabled krbPrincipalKey krbTicketPolicyReference krbPrincipalExpiration krbPasswordExpiration krbPwdPolicyReference krbPrincipalType krbPwdHistory krbLastPwdChange krbPrincipalAliases krbLastSuccessfulAuth krbLastFailedAuth krbLoginFailedCount krbPrincipalAuthInd krbExtraData krbLastAdminUnlock krbObjectReferences krbTicketFlags krbMaxTicketLife krbMaxRenewableAge uid nsAccountLock passwordHistory ipaKrbAuthzData ipaUserAuthType ipatokenRadiusConfigLink krbAuthIndMaxT..." [20/Dec/2022:08:52:49.530428986 +0800] conn=5 op=14474 RESULT err=0 tag=101 nentries=1 wtime=0.000044995 optime=0.000230426 etime=0.000274012 [20/Dec/2022:08:52:49.530549346 +0800] conn=5 op=14475 SRCH base="cn=WINGON.HK,cn=kerberos,dc=wingon,dc=hk" scope=0 filter="(objectClass=krbticketpolicyaux)" attrs="krbMaxTicketLife krbMaxRenewableAge krbTicketFlags krbAuthIndMaxTicketLife krbAuthIndMaxRenewableAge" [20/Dec/2022:08:52:49.530606840 +0800] conn=5 op=14475 RESULT err=0 tag=101 nentries=1 wtime=0.000018279 optime=0.000058130 etime=0.000075356 [20/Dec/2022:08:52:49.532758492 +0800] conn=2895 op=0 BIND dn="" method=sasl version=3 mech=GSS-SPNEGO [20/Dec/2022:08:52:49.534731861 +0800] conn=2895 op=0 RESULT err=0 tag=97 nentries=0 wtime=0.000153862 optime=0.001976947 etime=0.002129681 dn="uid=admin,cn=users,cn=accounts,dc=wingon,dc=hk" [20/Dec/2022:08:52:49.712276555 +0800] conn=2895 op=1 UNBIND [20/Dec/2022:08:52:49.712315443 +0800] conn=2895 op=1 fd=125 closed error - U1 [20/Dec/2022:08:52:50.054092304 +0800] conn=2896 fd=125 slot=125 connection from 10.100.0.213 to 10.100.0.213 [20/Dec/2022:08:52:50.056611957 +0800] conn=2896 op=0 BIND dn="" method=sasl version=3 mech=GSS-SPNEGO [20/Dec/2022:08:52:50.058603263 +0800] conn=2896 op=0 RESULT err=0 tag=97 nentries=0 wtime=0.000214021 optime=0.002000265 etime=0.002213084 dn="uid=admin,cn=users,cn=accounts,dc=wingon,dc=hk" [20/Dec/2022:08:52:50.061270916 +0800] conn=2896 op=1 SRCH base="cn=ipaconfig,cn=etc,dc=wingon,dc=hk" scope=0 filter="(objectClass=*)" attrs=ALL [20/Dec/2022:08:52:50.061915250 +0800] conn=2896 op=1 RESULT err=0 tag=101 nentries=1 wtime=0.000148286 optime=0.000645753 etime=0.000791691 [20/Dec/2022:08:52:50.062877341 +0800] conn=2896 op=2 SRCH base="cn=masters,cn=ipa,cn=etc,dc=wingon,dc=hk" scope=2 filter="(&(objectClass=ipaConfigObject)(cn=CA))" attrs=ALL [20/Dec/2022:08:52:50.063452183 +0800] conn=2896 op=2 RESULT err=0 tag=101 nentries=1 wtime=0.000069136 optime=0.000575594 etime=0.000642941 [20/Dec/2022:08:52:50.081855339 +0800] conn=19 op=5318 SRCH base="cn=1,ou=certificateRepository,ou=ca,o=ipaca" scope=0 filter="(objectClass=*)" attrs=ALL [20/Dec/2022:08:52:50.082050056 +0800] conn=19 op=5318 RESULT err=0 tag=101 nentries=1 wtime=0.000079328 optime=0.000196505 etime=0.000273764 [20/Dec/2022:08:52:50.095406104 +0800] conn=2896 op=3 EXT oid="1.3.6.1.4.1.4203.1.11.3" name="whoami-plugin" [20/Dec/2022:08:52:50.095474423 +0800] conn=2896 op=3 RESULT err=0 tag=120 nentries=0 wtime=0.000087708 optime=0.000084261 etime=0.000170131 [20/Dec/2022:08:52:50.095683671 +0800] conn=2896 op=4 SRCH base="cn=retrieve certificate,cn=virtual operations,cn=etc,dc=wingon,dc=hk" scope=0 filter="(objectClass=*)" attrs="objectClass" [20/Dec/2022:08:52:50.096598124 +0800] conn=2896 op=4 RESULT err=0 tag=101 nentries=1 wtime=0.000063023 optime=0.000914785 etime=0.000976007 - entryLevelRights: vadn [20/Dec/2022:08:52:50.098460393 +0800] conn=2896 op=5 SRCH base="cn=cas,cn=ca,dc=wingon,dc=hk" scope=2 filter="(&(cn=ipa)(objectClass=ipaca))" attrs="" [20/Dec/2022:08:52:50.098819481 +0800] conn=2896 op=5 RESULT err=0 tag=101 nentries=1 wtime=0.000088228 optime=0.000360094 etime=0.000446755 [20/Dec/2022:08:52:50.099423444 +0800] conn=2896 op=6 SRCH base="cn=ipa,cn=cas,cn=ca,dc=wingon,dc=hk" scope=0 filter="(objectClass=*)" attrs="ipaCaIssuerDN cn ipaCaId ipaCaSubjectDN description" [20/Dec/2022:08:52:50.099679002 +0800] conn=2896 op=6 RESULT err=0 tag=101 nentries=1 wtime=0.000082454 optime=0.000257939 etime=0.000338566 [20/Dec/2022:08:52:50.101141986 +0800] conn=2896 op=7 SRCH base="cn=masters,cn=ipa,cn=etc,dc=wingon,dc=hk" scope=2 filter="(&(&(objectClass=ipaConfigObject)(cn=CA))(|(ipaConfigString=enabledService)(ipaConfigString=hiddenService)))" attrs="ipaConfigString" [20/Dec/2022:08:52:50.101621396 +0800] conn=2896 op=7 RESULT err=0 tag=101 nentries=1 wtime=0.000089009 optime=0.000480845 etime=0.000568114 [20/Dec/2022:08:52:50.117215381 +0800] conn=2896 op=8 UNBIND [20/Dec/2022:08:52:50.117237108 +0800] conn=2896 op=8 fd=125 closed error - U1 [20/Dec/2022:08:53:32.266556934 +0800] conn=2894 op=7 UNBIND [20/Dec/2022:08:53:32.266593638 +0800] conn=2894 op=7 fd=124 closed error - U1
thanks, Junhou _______________________________________________ FreeIPA-users mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/[email protected] Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
