On (04/06/14 13:32), steve wrote:
>On Tue, 2014-06-03 at 19:50 +0200, Jakub Hrozek wrote:
>> === SSSD 1.11.6 ===
>
>Hi
>Builds OK on openSUSE 13.1. Just a bit worried by:
>
>(Wed Jun 4 13:25:47 2014) [sssd[be[hh3.site]]]
>[sdap_ad_tokengroups_initgr_posix_tg_done] (0x0080): Domain not found
>for SID S-1-5-32-545
>(Wed Jun 4 13:25:48 2014) [[sssd[krb5_child[28727]]]] [sss_send_pac]
>(0x0040): sss_pac_make_request failed [-1][2].
the first number [-1] is NSS_STATUS_UNAVAIL
the second neumber is errno ENOENT
I would say that krb5_child try to find pac unix socket (SSS_PAC_SOCKET_NAME)
in different directory.
sh-4.2$ grep pipepath Makefile
pipepath = ${prefix}/var/lib/sss/pipes
-DSSS_NSS_SOCKET_NAME=\"$(pipepath)/nss\" \
-DSSS_PAM_SOCKET_NAME=\"$(pipepath)/pam\" \
-DSSS_PAC_SOCKET_NAME=\"$(pipepath)/pac\" \
-DSSS_PAM_PRIV_SOCKET_NAME=\"$(pipepath)/private/pam\" \
-DSSS_SUDO_SOCKET_NAME=\"$(pipepath)/sudo\" \
-DSSS_AUTOFS_SOCKET_NAME=\"$(pipepath)/autofs\" \
-DSSS_SSH_SOCKET_NAME=\"$(pipepath)/ssh\" \
$(DESTDIR)$(pipepath)/private \
>(Wed Jun 4 13:25:48 2014) [[sssd[krb5_child[28727]]]] [validate_tgt]
>(0x0040): sss_send_pac failed, group membership for user with principal
>[steve2\@[email protected]] might not be correct.
>
>Thanks,
>Steve
>
LS
_______________________________________________
sssd-users mailing list
[email protected]
https://lists.fedorahosted.org/mailman/listinfo/sssd-users
