[Freeipa-users] IPA+AD (transitive trust) - s2n exop request failed
Hi All, I've found another problem with my setup: What could be the reason of such errors on FreeIPA client side: /var/log/sssd/sssd_linux.acme.example.com.log:(Thu Oct 23 09:49:23 2014) [sssd[be[linux.acme.example.com]]] [ipa_s2n_get_user_done] (0x0040): s2n exop request failed. /var/log/sssd/sssd_linux.acme.example.com.log:(Thu Oct 23 09:50:03 2014) [sssd[be[linux.acme.example.com]]] [ipa_s2n_get_user_done] (0x0040): s2n exop request failed. /var/log/sssd/sssd_linux.acme.example.com.log:(Thu Oct 23 09:50:04 2014) [sssd[be[linux.acme.example.com]]] [ipa_s2n_get_user_done] (0x0040): s2n exop request failed. /var/log/sssd/sssd_linux.acme.example.com.log:(Thu Oct 23 09:50:06 2014) [sssd[be[linux.acme.example.com]]] [ipa_s2n_get_user_done] (0x0040): s2n exop request failed. /var/log/sssd/sssd_linux.acme.example.com.log:(Thu Oct 23 09:50:06 2014) [sssd[be[linux.acme.example.com]]] [ipa_s2n_get_user_done] (0x0040): s2n exop request failed. /var/log/sssd/sssd_linux.acme.example.com.log:(Thu Oct 23 09:50:07 2014) [sssd[be[linux.acme.example.com]]] [ipa_s2n_get_user_done] (0x0040): s2n exop request failed. /var/log/sssd/sssd_linux.acme.example.com.log:(Thu Oct 23 09:50:07 2014) [sssd[be[linux.acme.example.com]]] [ipa_s2n_get_user_done] (0x0040): s2n exop request failed. /var/log/sssd/sssd_linux.acme.example.com.log:(Thu Oct 23 09:50:08 2014) [sssd[be[linux.acme.example.com]]] [ipa_s2n_get_user_done] (0x0040): s2n exop request failed. /var/log/sssd/sssd_linux.acme.example.com.log:(Thu Oct 23 09:50:08 2014) [sssd[be[linux.acme.example.com]]] [ipa_s2n_get_user_done] (0x0040): s2n exop request failed. /var/log/sssd/sssd_linux.acme.example.com.log:(Thu Oct 23 09:50:17 2014) [sssd[be[linux.acme.example.com]]] [ipa_s2n_get_user_done] (0x0040): s2n exop request failed. /var/log/sssd/sssd_linux.acme.example.com.log:(Thu Oct 23 09:52:05 2014) [sssd[be[linux.acme.example.com]]] [ipa_s2n_get_user_done] (0x0040): s2n exop request failed. /var/log/sssd/sssd_linux.acme.example.com.log:(Thu Oct 23 09:52:08 2014) [sssd[be[linux.acme.example.com]]] [ipa_s2n_get_user_done] (0x0040): s2n exop request failed. /var/log/sssd/sssd_linux.acme.example.com.log:(Thu Oct 23 09:52:18 2014) [sssd[be[linux.acme.example.com]]] [ipa_s2n_get_user_done] (0x0040): s2n exop request failed. /var/log/sssd/sssd_linux.acme.example.com.log:(Thu Oct 23 09:57:12 2014) [sssd[be[linux.acme.example.com]]] [ipa_s2n_get_user_done] (0x0040): s2n exop request failed. /var/log/sssd/sssd_linux.acme.example.com.log:(Thu Oct 23 09:57:15 2014) [sssd[be[linux.acme.example.com]]] [ipa_s2n_get_user_done] (0x0040): s2n exop request failed. /var/log/sssd/sssd_linux.acme.example.com.log:(Thu Oct 23 09:58:29 2014) [sssd[be[linux.acme.example.com]]] [ipa_s2n_get_user_done] (0x0040): s2n exop request failed. /var/log/sssd/sssd_linux.acme.example.com.log:(Thu Oct 23 09:58:34 2014) [sssd[be[linux.acme.example.com]]] [ipa_s2n_get_user_done] (0x0040): s2n exop request failed. /var/log/sssd/sssd_linux.acme.example.com.log:(Thu Oct 23 10:02:10 2014) [sssd[be[linux.acme.example.com]]] [ipa_s2n_get_user_done] (0x0040): s2n exop request failed. /var/log/sssd/sssd_linux.acme.example.com.log:(Thu Oct 23 10:02:13 2014) [sssd[be[linux.acme.example.com]]] [ipa_s2n_get_user_done] (0x0040): s2n exop request failed. IPA 3.3.3 + RHEL7 and IPA clients: RHEL 6.4 and RHEL 6.6 - the same situation. /lm -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go To http://freeipa.org for more info on the project
Re: [Freeipa-users] IPA+AD (transitive trust) - s2n exop request failed
On Thu, 23 Oct 2014, crony wrote: Hi All, I've found another problem with my setup: What could be the reason of such errors on FreeIPA client side: You need to check sssd logs on IPA master side. IPA 3.3.3 + RHEL7 and IPA clients: RHEL 6.4 and RHEL 6.6 - the same situation. There were some bug fixes in SSSD in RHEL7 which are released upstream in 1.12.x but not yet available through RHEL 7 channels. If you have RHEL 7 subscription, feel free to raise a case with the support. The same applies to the another email you've sent. -- / Alexander Bokovoy -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go To http://freeipa.org for more info on the project
Re: [Freeipa-users] IPA+AD (transitive trust) - s2n exop request failed
Probable yes. 2014-10-23 15:59 GMT+02:00 Sumit Bose sb...@redhat.com: On Thu, Oct 23, 2014 at 03:47:31PM +0200, crony wrote: Hi All, I've found another problem with my setup: What could be the reason of such errors on FreeIPA client side: /var/log/sssd/sssd_linux.acme.example.com.log:(Thu Oct 23 09:49:23 2014) [sssd[be[linux.acme.example.com]]] [ipa_s2n_get_user_done] (0x0040): s2n exop request failed. /var/log/sssd/sssd_linux.acme.example.com.log:(Thu Oct 23 09:50:03 2014) [sssd[be[linux.acme.example.com]]] [ipa_s2n_get_user_done] (0x0040): s2n exop request failed. /var/log/sssd/sssd_linux.acme.example.com.log:(Thu Oct 23 09:50:04 2014) [sssd[be[linux.acme.example.com]]] [ipa_s2n_get_user_done] (0x0040): s2n exop request failed. /var/log/sssd/sssd_linux.acme.example.com.log:(Thu Oct 23 09:50:06 2014) [sssd[be[linux.acme.example.com]]] [ipa_s2n_get_user_done] (0x0040): s2n exop request failed. /var/log/sssd/sssd_linux.acme.example.com.log:(Thu Oct 23 09:50:06 2014) [sssd[be[linux.acme.example.com]]] [ipa_s2n_get_user_done] (0x0040): s2n exop request failed. /var/log/sssd/sssd_linux.acme.example.com.log:(Thu Oct 23 09:50:07 2014) [sssd[be[linux.acme.example.com]]] [ipa_s2n_get_user_done] (0x0040): s2n exop request failed. /var/log/sssd/sssd_linux.acme.example.com.log:(Thu Oct 23 09:50:07 2014) [sssd[be[linux.acme.example.com]]] [ipa_s2n_get_user_done] (0x0040): s2n exop request failed. /var/log/sssd/sssd_linux.acme.example.com.log:(Thu Oct 23 09:50:08 2014) [sssd[be[linux.acme.example.com]]] [ipa_s2n_get_user_done] (0x0040): s2n exop request failed. /var/log/sssd/sssd_linux.acme.example.com.log:(Thu Oct 23 09:50:08 2014) [sssd[be[linux.acme.example.com]]] [ipa_s2n_get_user_done] (0x0040): s2n exop request failed. /var/log/sssd/sssd_linux.acme.example.com.log:(Thu Oct 23 09:50:17 2014) [sssd[be[linux.acme.example.com]]] [ipa_s2n_get_user_done] (0x0040): s2n exop request failed. /var/log/sssd/sssd_linux.acme.example.com.log:(Thu Oct 23 09:52:05 2014) [sssd[be[linux.acme.example.com]]] [ipa_s2n_get_user_done] (0x0040): s2n exop request failed. /var/log/sssd/sssd_linux.acme.example.com.log:(Thu Oct 23 09:52:08 2014) [sssd[be[linux.acme.example.com]]] [ipa_s2n_get_user_done] (0x0040): s2n exop request failed. /var/log/sssd/sssd_linux.acme.example.com.log:(Thu Oct 23 09:52:18 2014) [sssd[be[linux.acme.example.com]]] [ipa_s2n_get_user_done] (0x0040): s2n exop request failed. /var/log/sssd/sssd_linux.acme.example.com.log:(Thu Oct 23 09:57:12 2014) [sssd[be[linux.acme.example.com]]] [ipa_s2n_get_user_done] (0x0040): s2n exop request failed. /var/log/sssd/sssd_linux.acme.example.com.log:(Thu Oct 23 09:57:15 2014) [sssd[be[linux.acme.example.com]]] [ipa_s2n_get_user_done] (0x0040): s2n exop request failed. /var/log/sssd/sssd_linux.acme.example.com.log:(Thu Oct 23 09:58:29 2014) [sssd[be[linux.acme.example.com]]] [ipa_s2n_get_user_done] (0x0040): s2n exop request failed. /var/log/sssd/sssd_linux.acme.example.com.log:(Thu Oct 23 09:58:34 2014) [sssd[be[linux.acme.example.com]]] [ipa_s2n_get_user_done] (0x0040): s2n exop request failed. /var/log/sssd/sssd_linux.acme.example.com.log:(Thu Oct 23 10:02:10 2014) [sssd[be[linux.acme.example.com]]] [ipa_s2n_get_user_done] (0x0040): s2n exop request failed. /var/log/sssd/sssd_linux.acme.example.com.log:(Thu Oct 23 10:02:13 2014) [sssd[be[linux.acme.example.com]]] [ipa_s2n_get_user_done] (0x0040): s2n exop request failed. This typically indicates that the user or group lookup failed in the server side. Maybe this is related to the segfaults you are seeing on the server side. bye, Sumit IPA 3.3.3 + RHEL7 and IPA clients: RHEL 6.4 and RHEL 6.6 - the same situation. /lm -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go To http://freeipa.org for more info on the project -- Pozdrawiam Leszek Miś www: http://cronylab.pl www: http://emerge.pl Nothing is secure, paranoia is your friend. -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go To http://freeipa.org for more info on the project
