[SSSD-users] Re: ����: Re: The Direct Integration between SSSD and Active Directory , Access Control via GPO, logon to server failed uncertain

[Jakub Hrozek]

On Fri, Jul 14, 2017 at 02:31:39AM -0000, [e-mail] wrote:
> only a few logs in gpo_child.log,see below:
>
> (Tue Jul 11 15:08:25 2017) [[sssd[gpo_child[50647]]]] [main] (0x0400): gpo_child started.
> (Tue Jul 11 15:08:25 2017) [[sssd[gpo_child[50647]]]] [main] (0x0400): context initialized
> (Tue Jul 11 15:08:25 2017) [[sssd[gpo_child[50647]]]] [unpack_buffer] (0x0400): cached_gpt_version: 1179676
> (Tue Jul 11 15:08:25 2017) [[sssd[gpo_child[50647]]]] [unpack_buffer] (0x4000): smb_server length: 33
> (Tue Jul 11 15:08:25 2017) [[sssd[gpo_child[50647]]]] [unpack_buffer] (0x4000): smb_server: smb://MyDC.mydoman.com
> (Tue Jul 11 15:08:25 2017) [[sssd[gpo_child[50647]]]] [unpack_buffer] (0x4000): smb_share length: 7
> (Tue Jul 11 15:08:25 2017) [[sssd[gpo_child[50647]]]] [unpack_buffer] (0x4000): smb_share: /SysVol
> (Tue Jul 11 15:08:25 2017) [[sssd[gpo_child[50647]]]] [unpack_buffer] (0x4000): smb_path length: 62
> (Tue Jul 11 15:08:25 2017) [[sssd[gpo_child[50647]]]] [unpack_buffer] (0x4000): smb_path: /mydomain.com/Policies/{241B7E35-2AA1-4004-A82B-DA333FE6DC2C}
> (Tue Jul 11 15:08:25 2017) [[sssd[gpo_child[50647]]]] [unpack_buffer] (0x4000): smb_cse_suffix length: 49
> (Tue Jul 11 15:08:25 2017) [[sssd[gpo_child[50647]]]] [unpack_buffer] (0x4000): smb_cse_suffix: /Machine/Microsoft/Windows NT/SecEdit/GptTmpl.inf
> (Tue Jul 11 15:08:25 2017) [[sssd[gpo_child[50647]]]] [main] (0x0400): performing smb operations
> (Tue Jul 11 15:08:25 2017) [[sssd[gpo_child[50647]]]] [copy_smb_file_to_gpo_cache] (0x0400): smb_uri: smb://vwsr003105003.mydomain.com/SysVol/mydomain.com/Policies/{241B7E35-2AA1-4004-A82B-DA333FE6DC2C}/GPT.INI
> (Tue Jul 11 15:08:25 2017) [[sssd[gpo_child[50647]]]] [copy_smb_file_to_gpo_cache] (0x0020): smbc_getFunctionOpen failed [110][Connection timed out]
> (Tue Jul 11 15:08:25 2017) [[sssd[gpo_child[50647]]]] [perform_smb_operations] (0x0020): copy_smb_file_to_gpo_cache failed [110][Connection timed out]
> (Tue Jul 11 15:08:25 2017) [[sssd[gpo_child[50647]]]] [main] (0x0020): perform_smb_operations failed.[110][Connection timed out].
> (Tue Jul 11 15:08:25 2017) [[sssd[gpo_child[50647]]]] [main] (0x0020): gpo_child failed!

Well, here you go, the connection to the AD DC timed out. Is
vwsr003105003.mydomain.com the DC you would expect to be contacted?

Either way, I think this is a bug, we should not return System Error
here, but a nicer error message and switch to offline mode..