On a CentOS 6 system we recently implemented sssd auth against an AD domain (Samba 4 AD, specifically). The system messages log often shows flurries of these GSSAPI errors:

sssd[be[notarealdomain.com]]: GSSAPI Error: Invalid token was supplied (Token header is malformed or corrupt)

Any idea what might be wrong? Troubleshooting tips? (We don't have much experience with sssd, admittedly.)

When the flurries happen, system load increases markedly, and we suspect that a recent system crash was related.

Our sssd.conf:

----------
[sssd]
services = nss, pam
config_file_version = 2
domains = notarealdomain.com
[nss]
[pam]
[domain/notarealdomain.com]
id_provider = ad
access_provider = ad
ldap_id_mapping=false
krb5_keytab=/etc/krb5.sssd.keytab
----------

thanks in advance,
-r
_______________________________________________
sssd-users mailing list
[email protected]
https://lists.fedorahosted.org/admin/lists/[email protected]

Reply via email to