Hi, I have been adding clients to our IPA domain, but on some clients 
authentication fails (looks like the first joined servers) after a period of 
time.
Seems like it is after the weekend. The sssd_<domain> log shows SIDs cannot be 
looked up while the issue is at hand:

[be[DOMAIN]] [ipa_ext_group_member_check] (0x0040): [RID#10466] Error looking 
up sid S-1-5-21-4261061953-571827306-3083867033-3726: [2]: No such file or 
directory

I do have some overrides in sssd.conf as the only change:
entry_cache_timeout = 600
entry_cache_user_timeout = 600
entry_cache_group_timeout = 600
refresh_expired_interval = 300
override_shell = /usr/bin/bash
override_homedir = /home/%u
-- 
_______________________________________________
FreeIPA-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/[email protected]
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Reply via email to