https://bugzilla.redhat.com/show_bug.cgi?id=2466974
Dmitry x3v947pl@gmail.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Comment|0 |updated
--- Comment #0 has been edited ---
After upgrading Fedora 43 to 44 windows domain accounts linked via freeipa stopped working in offline mode. Also confirmed that installing fc43 packages of sssd (v.2.12) to fc44 restores normal work. And upgrading them back to fc44 (v.2.13) restores the problem. Logs are full of:
(2026-05-06 11:54:57): [ssh] [cache_req_common_process_dp_reply] (0x3f7c0): [CID#7] CR #6: Data Provider Error: 3, 13, Permission denied (2026-05-06 11:54:57): [ssh] [cache_req_common_process_dp_reply] (0x3f7c0): [CID#8] CR #7: Data Provider Error: 3, 13, Permission denied (2026-05-06 11:54:57): [nss] [cache_req_common_process_dp_reply] (0x3f7c0): [CID#16] CR #140: Data Provider Error: 3, 13, Permission denied (2026-05-06 11:55:00): [nss] [cache_req_common_process_dp_reply] (0x3f7c0): [CID#16] CR #141: Data Provider Error: 3, 13, Permission denied (2026-05-06 11:54:38): [pam] [cache_req_common_process_dp_reply] (0x3f7c0): [CID#3] CR #7: Data Provider Error: 3, 13, Permission denied (2026-05-06 11:54:57): [pam] [cache_req_common_process_dp_reply] (0x3f7c0): [CID#4] CR #11: Data Provider Error: 3, 13, Permission denied (2026-05-06 11:54:06): [sudo] [cache_req_common_process_dp_reply] (0x3f7c0): [CID#1] CR #0: Data Provider Error: 3, 13, Permission denied (2026-05-06 11:54:06): [sudo] [cache_req_common_process_dp_reply] (0x3f7c0): [CID#1] CR #1: Data Provider Error: 3, 13, Permission denied [ipa_dyndns_update_connect_done] (0x0040): Failed to connect to LDAP server: [13](Permission denied) [ipa_subdomains_refresh_connect_done] (0x0020): [RID#5] Unable to connect to LDAP [13]: Permission denied [ipa_subdomains_handler_done] (0x0020): [RID#5] Unable to refresh subdomains [13]: Permission denied
Disabling selinux doesn't change anything. If access_provider=permit - same result and errors. If sssd goes online - everything works ok, no errors. Cleaning cache - no effect. I compared file/forder permissions (/etc/sssd, /var/lib/sss) on fc43 (v2.12) and fc44 (v.2.13) - didn't find any difference. Checked also on a fresh fc44 installation - same result, if 2.13 - permission denied errors
Reproducible: Always