On ti, 03 heinä 2018, Michael Gusek via FreeIPA-users wrote:
Hi Alexander,
its SSSD, we check it with id -u user(a)example.com.
Then you need to gather logs from
SSSD on IPA master.
Basically, add
debug_level = 9
in domain and nss sections to /etc/sssd/sssd.conf and restart sssd.
Logs will be large so it would be good to gather them and put somewhere.
General troubleshooting notes apply:
https://docs.pagure.org/SSSD.sssd/users/troubleshooting.html
--
/ Alexander Bokovoy
Sr. Principal Software Engineer
Security / Identity Management Engineering
Red Hat Limited, Finland