On ke, 18 marras 2020, Ronald Wimmer via FreeIPA-users wrote:
On 18.11.20 09:20, Ronald Wimmer via FreeIPA-users wrote:
>After upgrading our IPA servers AD user resolution seems to have
>stopped working.
>
>id myADUser says:
>id: ‘myADUser’: no such user
It might have something to do with:
sssctl domain-status org.mydomain.at
Online status: Offline
But why is it seen as offline?
In your original log you can see that ipa_s2n requests return an error.
Check SSSD logs on IPA masters that the client talks to. This all is
covered at
https://sssd.io/docs/users/troubleshooting.html#common-ipa-provider-issues
--
/ Alexander Bokovoy
Sr. Principal Software Engineer
Security / Identity Management Engineering
Red Hat Limited, Finland