Okay, Thank you for helping! krb5_child.log
(Fri Jan 27 15:53:36 2017) [[sssd[krb5_child[5530]]]] [main] (0x0400): krb5_child started. (Fri Jan 27 15:53:36 2017) [[sssd[krb5_child[5530]]]] [unpack_buffer] (0x1000): total buffer size: [225] (Fri Jan 27 15:53:36 2017) [[sssd[krb5_child[5530]]]] [unpack_buffer] (0x0100): cmd [241] uid [1213401232] gid [1213400513] validate [true] enterprise principal [true] offline [false] UPN [[email protected]] (Fri Jan 27 15:53:36 2017) [[sssd[krb5_child[5530]]]] [unpack_buffer] (0x0100): ccname: [KEYRING:persistent:1213401232] old_ccname: [KEYRING:persistent:1213401232] keytab: [/etc/krb5.keytab] (Fri Jan 27 15:53:36 2017) [[sssd[krb5_child[5530]]]] [check_use_fast] (0x0100): Not using FAST. (Fri Jan 27 15:53:36 2017) [[sssd[krb5_child[5530]]]] [switch_creds] (0x0200): Switch user to [1213401232][1213400513]. (Fri Jan 27 15:53:36 2017) [[sssd[krb5_child[5530]]]] [sss_krb5_cc_verify_ccache] (0x2000): TGT not found or expired. (Fri Jan 27 15:53:36 2017) [[sssd[krb5_child[5530]]]] [switch_creds] (0x0200): Switch user to [0][0]. (Fri Jan 27 15:53:36 2017) [[sssd[krb5_child[5530]]]] [privileged_krb5_setup] (0x0080): Cannot open the PAC responder socket (Fri Jan 27 15:53:36 2017) [[sssd[krb5_child[5530]]]] [become_user] (0x0200): Trying to become user [1213401232][1213400513]. (Fri Jan 27 15:53:36 2017) [[sssd[krb5_child[5530]]]] [main] (0x2000): Running as [1213401232][1213400513]. (Fri Jan 27 15:53:36 2017) [[sssd[krb5_child[5530]]]] [k5c_setup] (0x2000): Running as [1213401232][1213400513]. (Fri Jan 27 15:53:36 2017) [[sssd[krb5_child[5530]]]] [set_lifetime_options] (0x0100): Cannot read [SSSD_KRB5_RENEWABLE_LIFETIME] from environment. (Fri Jan 27 15:53:36 2017) [[sssd[krb5_child[5530]]]] [set_lifetime_options] (0x0100): Cannot read [SSSD_KRB5_LIFETIME] from environment. (Fri Jan 27 15:53:36 2017) [[sssd[krb5_child[5530]]]] [set_canonicalize_option] (0x0100): SSSD_KRB5_CANONICALIZE is set to [true] (Fri Jan 27 15:53:36 2017) [[sssd[krb5_child[5530]]]] [main] (0x0400): Will perform online auth (Fri Jan 27 15:53:36 2017) [[sssd[krb5_child[5530]]]] [tgt_req_child] (0x1000): Attempting to get a TGT (Fri Jan 27 15:53:36 2017) [[sssd[krb5_child[5530]]]] [get_and_save_tgt] (0x0400): Attempting kinit for realm [ABC.COM] (Fri Jan 27 15:53:36 2017) [[sssd[krb5_child[5530]]]] [get_and_save_tgt] (0x0020): 1234: [-1765328360][Preauthentication failed] (Fri Jan 27 15:53:36 2017) [[sssd[krb5_child[5530]]]] [map_krb5_error] (0x0020): 1303: [-1765328360][Preauthentication failed] (Fri Jan 27 15:53:36 2017) [[sssd[krb5_child[5530]]]] [k5c_send_data] (0x0200): Received error code 1432158215 (Fri Jan 27 15:53:36 2017) [[sssd[krb5_child[5530]]]] [pack_response_packet] (0x2000): response packet size: [4] (Fri Jan 27 15:53:36 2017) [[sssd[krb5_child[5530]]]] [main] (0x0400): krb5_child completed successfully sssd_abc.com.log (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_process_result] (0x2000): Trace: sh[0x7fa8ee608340], connected[1], ops[0x7fa8ee60a960], ldap[0x7fa8ee60ae70] (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_get_generic_ext_add_references] (0x1000): Additional References: ldap://AuthLite.abc.com/DC=AuthLite,DC=abc,DC=com (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_process_result] (0x2000): Trace: sh[0x7fa8ee608340], connected[1], ops[0x7fa8ee60a960], ldap[0x7fa8ee60ae70] (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_get_generic_ext_add_references] (0x1000): Additional References: ldap://a.abc.com/DC=a,DC=abc,DC=com (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_process_result] (0x2000): Trace: sh[0x7fa8ee608340], connected[1], ops[0x7fa8ee60a960], ldap[0x7fa8ee60ae70] (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_get_generic_ext_add_references] (0x1000): Additional References: ldap://ForestDnsZones.abc.com/DC=ForestDnsZones,DC=abc,DC=com (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_process_result] (0x2000): Trace: sh[0x7fa8ee608340], connected[1], ops[0x7fa8ee60a960], ldap[0x7fa8ee60ae70] (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_get_generic_ext_add_references] (0x1000): Additional References: ldap://DomainDnsZones.abc.com/DC=DomainDnsZones,DC=abc,DC=com (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_process_result] (0x2000): Trace: sh[0x7fa8ee608340], connected[1], ops[0x7fa8ee60a960], ldap[0x7fa8ee60ae70] (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_get_generic_ext_add_references] (0x1000): Additional References: ldap://abc.com/CN=Configuration,DC=abc,DC=com (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_process_result] (0x2000): Trace: sh[0x7fa8ee608340], connected[1], ops[0x7fa8ee60a960], ldap[0x7fa8ee60ae70] (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_op_destructor] (0x2000): Operation 5 finished (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_search_user_process] (0x0400): Search for users, returned 1 results. (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_save_user] (0x0400): Save user (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_get_primary_name] (0x0400): Processing object 018843 (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_save_user] (0x0400): Processing user 018843 (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_save_user] (0x1000): Mapping user [018843] objectSID [S-1-5-21-4282302023-42197789-350709537-1232] to unix ID (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_save_user] (0x2000): Adding originalDN [CN=Sonia G,OU=Employees,OU=User Accounts,DC=abc,DC=com] to attributes of [018843]. (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_save_user] (0x0400): Adding original memberOf attributes to [018843]. (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_attrs_add_ldap_attr] (0x2000): Adding original mod-Timestamp [20170119225413.0Z] to attributes of [018843]. (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_save_user] (0x0400): Adding user principal [[email protected]] to attributes of [018843]. (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_attrs_add_ldap_attr] (0x2000): shadowLastChange is not available for [018843]. (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_attrs_add_ldap_attr] (0x2000): shadowMin is not available for [018843]. (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_attrs_add_ldap_attr] (0x2000): shadowMax is not available for [018843]. (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_attrs_add_ldap_attr] (0x2000): shadowWarning is not available for [018843]. (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_attrs_add_ldap_attr] (0x2000): shadowInactive is not available for [018843]. (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_attrs_add_ldap_attr] (0x2000): shadowExpire is not available for [018843]. (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_attrs_add_ldap_attr] (0x2000): shadowFlag is not available for [018843]. (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_attrs_add_ldap_attr] (0x2000): krbLastPwdChange is not available for [018843]. (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_attrs_add_ldap_attr] (0x2000): krbPasswordExpiration is not available for [018843]. (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_attrs_add_ldap_attr] (0x2000): pwdAttribute is not available for [018843]. (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_attrs_add_ldap_attr] (0x2000): authorizedService is not available for [018843]. (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_attrs_add_ldap_attr] (0x2000): Adding adAccountExpires [9223372036854775807] to attributes of [018843]. (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_attrs_add_ldap_attr] (0x2000): Adding adUserAccountControl [512] to attributes of [018843]. (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_attrs_add_ldap_attr] (0x2000): nsAccountLock is not available for [018843]. (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_attrs_add_ldap_attr] (0x2000): authorizedHost is not available for [018843]. (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_attrs_add_ldap_attr] (0x2000): ndsLoginDisabled is not available for [018843]. (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_attrs_add_ldap_attr] (0x2000): ndsLoginExpirationTime is not available for [018843]. (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_attrs_add_ldap_attr] (0x2000): ndsLoginAllowedTimeMap is not available for [018843]. (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_attrs_add_ldap_attr] (0x2000): sshPublicKey is not available for [018843]. (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_attrs_add_ldap_attr] (0x2000): authType is not available for [018843]. (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_attrs_add_ldap_attr] (0x2000): userCertificate is not available for [018843]. (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sysdb_attrs_get_aliases] (0x2000): Domain is case-insensitive; will add lowercased aliases (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_save_user] (0x0400): Storing info for user 018843 (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sysdb_remove_attrs] (0x2000): Removing attribute [userPassword] from [018843] (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sysdb_remove_attrs] (0x2000): Removing attribute [homeDirectory] from [018843] (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sysdb_remove_attrs] (0x2000): Removing attribute [loginShell] from [018843] (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [acctinfo_callback] (0x0100): Request processed. Returned 0,0,Success (Success) (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_process_result] (0x2000): Trace: sh[0x7fa8ee608340], connected[1], ops[(nil)], ldap[0x7fa8ee60ae70] (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_process_result] (0x2000): Trace: ldap_result found nothing! (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sbus_message_handler] (0x2000): Received SBUS method org.freedesktop.sssd.dataprovider.getAccountInfo on path /org/freedesktop/sssd/dataprovider (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sbus_get_sender_id_send] (0x2000): Not a sysbus message, quit (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [be_get_account_info] (0x0200): Got request for [0x3][1][name=018843] (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [be_req_set_domain] (0x0400): Changing request domain from [abc.com] to [abc.com] (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [fo_resolve_service_send] (0x0100): Trying to resolve service 'AD_GC' (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [get_server_status] (0x1000): Status of server 'dc01.abc.com' is 'working' (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [get_port_status] (0x1000): Port status of port 0 for server 'dc01.abc.com' is 'working' (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [fo_resolve_service_activate_timeout] (0x2000): Resolve timeout set to 6 seconds (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [get_server_status] (0x1000): Status of server 'dc01.abc.com' is 'working' (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [be_resolve_server_process] (0x1000): Saving the first resolved server (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [be_resolve_server_process] (0x0200): Found address for server dc01.abc.com: [x.x.161.251] TTL 3600 (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [ad_resolve_callback] (0x0100): Constructed uri 'ldap://dc01.abc.com' (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [ad_resolve_callback] (0x0100): Constructed GC uri 'ldap://dc01.abc.com:3268' (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sss_ldap_init_send] (0x0400): Setting 6 seconds timeout for connecting (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_ldap_connect_callback_add] (0x1000): New LDAP connection to [ldap://dc01.abc.com:3268/??base] with fd [24]. (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_print_server] (0x2000): Searching x.x.161.251 (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(objectclass=*)][]. (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [*] (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [altServer] (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [namingContexts] (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [supportedControl] (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [supportedExtension] (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [supportedFeatures] (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [supportedLDAPVersion] (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [supportedSASLMechanisms] (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [domainControllerFunctionality] (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [defaultNamingContext] (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [lastUSN] (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [highestCommittedUSN] (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_get_generic_ext_step] (0x2000): ldap_search_ext called, msgid = 1 (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_op_add] (0x2000): New operation 1 timeout 6 (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_process_result] (0x2000): Trace: sh[0x7fa8ee618840], connected[1], ops[0x7fa8ee60cc00], ldap[0x7fa8ee61a020] (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_parse_entry] (0x1000): OriginalDN: []. (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_parse_range] (0x2000): No sub-attributes for [currentTime] (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_parse_range] (0x2000): No sub-attributes for [subschemaSubentry] (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_parse_range] (0x2000): No sub-attributes for [dsServiceName] (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_parse_range] (0x2000): No sub-attributes for [namingContexts] (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_parse_range] (0x2000): No sub-attributes for [defaultNamingContext] (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_parse_range] (0x2000): No sub-attributes for [schemaNamingContext] (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_parse_range] (0x2000): No sub-attributes for [configurationNamingContext] (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_parse_range] (0x2000): No sub-attributes for [rootDomainNamingContext] (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_parse_range] (0x2000): No sub-attributes for [supportedControl] (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_parse_range] (0x2000): No sub-attributes for [supportedLDAPVersion] (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_parse_range] (0x2000): No sub-attributes for [supportedLDAPPolicies] (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_parse_range] (0x2000): No sub-attributes for [highestCommittedUSN] (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_parse_range] (0x2000): No sub-attributes for [supportedSASLMechanisms] (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_parse_range] (0x2000): No sub-attributes for [dnsHostName] (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_parse_range] (0x2000): No sub-attributes for [ldapServiceName] (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_parse_range] (0x2000): No sub-attributes for [serverName] (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_parse_range] (0x2000): No sub-attributes for [supportedCapabilities] (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_parse_range] (0x2000): No sub-attributes for [isSynchronized] (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_parse_range] (0x2000): No sub-attributes for [isGlobalCatalogReady] (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_parse_range] (0x2000): No sub-attributes for [supportedExtension] (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_parse_range] (0x2000): No sub-attributes for [domainFunctionality] (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_parse_range] (0x2000): No sub-attributes for [forestFunctionality] (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_parse_range] (0x2000): No sub-attributes for [domainControllerFunctionality] (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_process_result] (0x2000): Trace: sh[0x7fa8ee618840], connected[1], ops[0x7fa8ee60cc00], ldap[0x7fa8ee61a020] (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_op_destructor] (0x2000): Operation 1 finished (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_get_rootdse_done] (0x2000): Got rootdse (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_get_rootdse_done] (0x2000): Skipping auto-detection of match rule (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_get_server_opts_from_rootdse] (0x0100): Setting AD compatibility level to [6] (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_kinit_send] (0x0400): Attempting kinit (default, LOCALSERVER$, abc.com, 86400) (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_kinit_next_kdc] (0x1000): Resolving next KDC for service AD (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [fo_resolve_service_send] (0x0100): Trying to resolve service 'AD' (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [get_server_status] (0x1000): Status of server 'dc01.abc.com' is 'working' (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [get_port_status] (0x1000): Port status of port 0 for server 'dc01.abc.com' is 'working' (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [fo_resolve_service_activate_timeout] (0x2000): Resolve timeout set to 6 seconds (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [get_server_status] (0x1000): Status of server 'dc01.abc.com' is 'working' (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [be_resolve_server_process] (0x1000): Saving the first resolved server (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [be_resolve_server_process] (0x0200): Found address for server dc01.abc.com: [x.x.161.251] TTL 3600 (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [ad_resolve_callback] (0x0100): Constructed uri 'ldap://dc01.abc.com' (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [ad_resolve_callback] (0x0100): Constructed GC uri 'ldap://dc01.abc.com' (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sss_krb5_realm_has_proxy] (0x0040): profile_get_values failed. (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_kinit_kdc_resolved] (0x1000): KDC resolved, attempting to get TGT... (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [create_tgt_req_send_buffer] (0x0400): buffer size: 51 (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [child_handler_setup] (0x2000): Setting up signal handler up for pid [5529] (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [child_handler_setup] (0x2000): Signal ha (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_op_destructor] (0x2000): Operation 1 finished (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_get_rootdse_done] (0x2000): Got rootdse (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_get_rootdse_done] (0x2000): Skipping auto-detection of match rule (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_get_server_opts_from_rootdse] (0x0100): Setting AD compatibility level to [6] (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_kinit_send] (0x0400): Attempting kinit (default, LOCALSERVER$, abc.com, 86400) (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_kinit_next_kdc] (0x1000): Resolving next KDC for service AD (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [fo_resolve_service_send] (0x0100): Trying to resolve service 'AD' (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [get_server_status] (0x1000): Status of server 'dc01.abc.com' is 'working' (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [get_port_status] (0x1000): Port status of port 0 for server 'dc01.abc.com' is 'working' (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [fo_resolve_service_activate_timeout] (0x2000): Resolve timeout set to 6 seconds (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [get_server_status] (0x1000): Status of server 'dc01.abc.com' is 'working' (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [be_resolve_server_process] (0x1000): Saving the first resolved server (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [be_resolve_server_process] (0x0200): Found address for server dc01.abc.com: [x.x.161.251] TTL 3600 (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [ad_resolve_callback] (0x0100): Constructed uri 'ldap://dc01.abc.com' (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [ad_resolve_callback] (0x0100): Constructed GC uri 'ldap://dc01.abc.com' (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sss_krb5_realm_has_proxy] (0x0040): profile_get_values failed. (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_kinit_kdc_resolved] (0x1000): KDC resolved, attempting to get TGT... (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [create_tgt_req_send_buffer] (0x0400): buffer size: 51 (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [child_handler_setup] (0x2000): Setting up signal handler up for pid [5529] (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [child_handler_setup] (0x2000): Signal handler set up for pid [5529] (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [set_tgt_child_timeout] (0x0400): Setting 6 seconds timeout for tgt child (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_process_result] (0x2000): Trace: sh[0x7fa8ee618840], connected[1], ops[(nil)], ldap[0x7fa8ee61a020] (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_process_result] (0x2000): Trace: ldap_result found nothing! (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [write_pipe_handler] (0x0400): All data has been sent! (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [child_sig_handler] (0x1000): Waiting for child [5529]. (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [child_sig_handler] (0x0100): child [5529] finished successfully. (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [read_pipe_handler] (0x0400): EOF received, client finished (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_get_tgt_recv] (0x0400): Child responded: 0 [FILE:/var/lib/sss/db/ccache_abc.com], expired on [1485593615] (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_cli_auth_step] (0x0100): expire timeout is 900 (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sdap_cli_auth_step] (0x1000): the connection will expire at 1485558515 (Fri Jan 27 15:53:35 2017) [sssd[be[abc.com]]] [sasl_bind_send] (0x0100): Executing sasl bind mech: gssapi, user: LOCALSERVER$ (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [fo_set_port_status] (0x0100): Marking port 0 of server 'dc01.abc.com' as 'working' (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [set_server_common_status] (0x0100): Marking server 'dc01.abc.com' as 'working' (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [ad_user_data_cmp] (0x1000): Comparing GC with GC (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [fo_set_port_status] (0x0400): Marking port 0 of duplicate server 'dc01.abc.com' as 'working' (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [ad_user_data_cmp] (0x1000): Comparing GC with GC (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [ad_user_data_cmp] (0x1000): Comparing GC with GC (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [sdap_id_op_connect_done] (0x2000): Old USN: 4718311, New USN: 4719151 (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [sdap_get_initgr_next_base] (0x0400): Searching for users with base [DC=abc,DC=com] (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [sdap_print_server] (0x2000): Searching x.x.161.251 (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(&(sAMAccountName=018843)(objectclass=user)(objectSID=*))][DC=abc,DC=com]. (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [objectClass] (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [sAMAccountName] (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [unixUserPassword] (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [uidNumber] (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [gidNumber] (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [gecos] (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [unixHomeDirectory] (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [loginShell] (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [userPrincipalName] (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [name] (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [memberOf] (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [objectGUID] (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [objectSID] (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [primaryGroupID] (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [whenChanged] (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [uSNChanged] (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [accountExpires] (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [userAccountControl] (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [sdap_get_generic_ext_step] (0x2000): ldap_search_ext called, msgid = 5 (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [sdap_op_add] (0x2000): New operation 5 timeout 6 (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [sdap_process_result] (0x2000): Trace: sh[0x7fa8ee618840], connected[1], ops[0x7fa8ee60d3a0], ldap[0x7fa8ee61a020] (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [sdap_parse_entry] (0x1000): OriginalDN: [CN=Sonia G,OU=Employees,OU=User Accounts,DC=abc,DC=com]. (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [sdap_parse_range] (0x2000): No sub-attributes for [objectClass] (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [sdap_parse_range] (0x2000): No sub-attributes for [whenChanged] (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [sdap_parse_range] (0x2000): No sub-attributes for [memberOf] (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [sdap_parse_range] (0x2000): No sub-attributes for [uSNChanged] (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [sdap_parse_range] (0x2000): No sub-attributes for [name] (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [sdap_parse_range] (0x2000): No sub-attributes for [objectGUID] (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [sdap_parse_range] (0x2000): No sub-attributes for [userAccountControl] (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [sdap_parse_range] (0x2000): No sub-attributes for [primaryGroupID] (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [sdap_parse_range] (0x2000): No sub-attributes for [objectSid] (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [sdap_parse_range] (0x2000): No sub-attributes for [sAMAccountName] (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [sdap_parse_range] (0x2000): No sub-attributes for [userPrincipalName] (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [sdap_process_result] (0x2000): Trace: sh[0x7fa8ee618840], connected[1], ops[0x7fa8ee60d3a0], ldap[0x7fa8ee61a020] (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [sdap_parse_entry] (0x1000): OriginalDN: [CN=Sonia G,OU=Employees,OU=User Accounts,DC=a,DC=abc,DC=com]. (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [sdap_parse_range] (0x2000): No sub-attributes for [objectClass] (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [sdap_parse_range] (0x2000): No sub-attributes for [whenChanged] (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [sdap_parse_range] (0x2000): No sub-attributes for [memberOf] (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [sdap_parse_range] (0x2000): No sub-attributes for [uSNChanged] (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [sdap_parse_range] (0x2000): No sub-attributes for [name] (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [sdap_parse_range] (0x2000): No sub-attributes for [objectGUID] (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [sdap_parse_range] (0x2000): No sub-attributes for [userAccountControl] (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [sdap_parse_range] (0x2000): No sub-attributes for [primaryGroupID] (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [sdap_parse_range] (0x2000): No sub-attributes for [objectSid] (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [sdap_parse_range] (0x2000): No sub-attributes for [sAMAccountName] (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [sdap_parse_range] (0x2000): No sub-attributes for [userPrincipalName] (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [sdap_process_result] (0x2000): Trace: sh[0x7fa8ee618840], connected[1], ops[0x7fa8ee60d3a0], ldap[0x7fa8ee61a020] (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [sdap_op_destructor] (0x2000): Operation 5 finished (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [sdap_get_initgr_user] (0x0040): Expected one user entry and got 2 (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [sdap_get_initgr_user] (0x0040): No matching DN found. (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [sbus_add_timeout] (0x2000): 0x7fa8ef626070 (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [sdap_process_result] (0x2000): Trace: sh[0x7fa8ee618840], connected[1], ops[(nil)], ldap[0x7fa8ee61a020] (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [sdap_process_result] (0x2000): Trace: ldap_result found nothing! (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [sbus_remove_timeout] (0x2000): 0x7fa8ef626070 (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [acctinfo_callback] (0x0100): Request processed. Returned 3,22,Init group lookup failed (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [sbus_message_handler] (0x2000): Received SBUS method org.freedesktop.sssd.dataprovider.pamHandler on path /org/freedesktop/sssd/dataprovider (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [sbus_get_sender_id_send] (0x2000): Not a sysbus message, quit (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [be_req_set_domain] (0x0400): Changing request domain from [abc.com] to [abc.com] (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [be_pam_handler] (0x0100): Got request with the following data (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [pam_print_data] (0x0100): command: PAM_AUTHENTICATE (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [pam_print_data] (0x0100): domain: abc.com (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [pam_print_data] (0x0100): user: 018843 (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [pam_print_data] (0x0100): service: conwrks (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [pam_print_data] (0x0100): tty: (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [pam_print_data] (0x0100): ruser: (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [pam_print_data] (0x0100): rhost: (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [pam_print_data] (0x0100): authtok type: 1 (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [pam_print_data] (0x0100): newauthtok type: 0 (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [pam_print_data] (0x0100): priv: 1 (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [pam_print_data] (0x0100): cli_pid: 557 (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [pam_print_data] (0x0100): logon name: not set (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [krb5_auth_queue_send] (0x1000): Wait queue of user [018843] is empty, running request [0x7fa8ee60ffe0] immediately. (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [krb5_auth_send] (0x0100): Home directory for user [018843] not known. (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [fo_resolve_service_send] (0x0100): Trying to resolve service 'AD' (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [get_server_status] (0x1000): Status of server 'dc01.abc.com' is 'working' (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [get_port_status] (0x1000): Port status of port 0 for server 'dc01.abc.com' is 'working' (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [fo_resolve_service_activate_timeout] (0x2000): Resolve timeout set to 6 seconds (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [get_server_status] (0x1000): Status of server 'dc01.abc.com' is 'working' (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [be_resolve_server_process] (0x1000): Saving the first resolved server (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [be_resolve_server_process] (0x0200): Found address for server dc01.abc.com: [x.x.161.251] TTL 3600 (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [ad_resolve_callback] (0x0100): Constructed uri 'ldap://dc01.abc.com' (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [ad_resolve_callback] (0x0100): Constructed GC uri 'ldap://dc01.abc.com' (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [sss_krb5_realm_has_proxy] (0x0040): profile_get_values failed. (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [child_handler_setup] (0x2000): Setting up signal handler up for pid [5530] (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [child_handler_setup] (0x2000): Signal handler set up for pid [5530] (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [write_pipe_handler] (0x0400): All data has been sent! (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [child_sig_handler] (0x1000): Waiting for child [5530]. (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [child_sig_handler] (0x0100): child [5530] finished successfully. (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [read_pipe_handler] (0x0400): EOF received, client finished (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [check_wait_queue] (0x1000): Wait queue for user [018843] is empty. (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [krb5_auth_queue_done] (0x1000): krb5_auth_queue request [0x7fa8ee60ffe0] done. (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [be_pam_handler_callback] (0x0100): Backend returned: (0, 17, <NULL>) [Success (Failure setting user credentials)] (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [be_pam_handler_callback] (0x0100): Sending result [17][abc.com] (Fri Jan 27 15:53:36 2017) [sssd[be[abc.com]]] [be_pam_handler_callback] (0x0100): Sent result [17][abc.com] (Fri Jan 27 15:53:38 2017) [sssd[be[abc.com]]] [sbus_message_handler] (0x2000): Received SBUS method org.freedesktop.sssd.service.ping on path /org/freedesktop/sssd/service (Fri Jan 27 15:53:38 2017) [sssd[be[abc.com]]] [sbus_get_sender_id_send] (0x2000): Not a sysbus message, quit _______________________________________________ sssd-users mailing list -- [email protected] To unsubscribe send an email to [email protected]
