[SSSD-users] Re: ����: Re: The Direct Integration between SSSD and Active Directory , Access Control via GPO, logon to server failed uncertain
On Fri, Jul 14, 2017 at 02:31:39AM -0000, amoschb(a)hotmail.com wrote:
only a few logs in gpo_child.log,see below:
-------------
(Tue Jul 11 15:08:25 2017) [[sssd[gpo_child[50647]]]] [main] (0x0400): gpo_child
started.
(Tue Jul 11 15:08:25 2017) [[sssd[gpo_child[50647]]]] [main] (0x0400): context
initialized
(Tue Jul 11 15:08:25 2017) [[sssd[gpo_child[50647]]]] [unpack_buffer] (0x0400):
cached_gpt_version: 1179676
(Tue Jul 11 15:08:25 2017) [[sssd[gpo_child[50647]]]] [unpack_buffer] (0x4000):
smb_server length: 33
(Tue Jul 11 15:08:25 2017) [[sssd[gpo_child[50647]]]] [unpack_buffer] (0x4000):
smb_server: smb://MyDC.mydoman.com
(Tue Jul 11 15:08:25 2017) [[sssd[gpo_child[50647]]]] [unpack_buffer] (0x4000): smb_share
length: 7
(Tue Jul 11 15:08:25 2017) [[sssd[gpo_child[50647]]]] [unpack_buffer] (0x4000):
smb_share: /SysVol
(Tue Jul 11 15:08:25 2017) [[sssd[gpo_child[50647]]]] [unpack_buffer] (0x4000): smb_path
length: 62
(Tue Jul 11 15:08:25 2017) [[sssd[gpo_child[50647]]]] [unpack_buffer] (0x4000): smb_path:
/mydomain.com/Policies/{241B7E35-2AA1-4004-A82B-DA333FE6DC2C}
(Tue Jul 11 15:08:25 2017) [[sssd[gpo_child[50647]]]] [unpack_buffer] (0x4000):
smb_cse_suffix length: 49
(Tue Jul 11 15:08:25 2017) [[sssd[gpo_child[50647]]]] [unpack_buffer] (0x4000):
smb_cse_suffix: /Machine/Microsoft/Windows NT/SecEdit/GptTmpl.inf
(Tue Jul 11 15:08:25 2017) [[sssd[gpo_child[50647]]]] [main] (0x0400): performing smb
operations
(Tue Jul 11 15:08:25 2017) [[sssd[gpo_child[50647]]]] [copy_smb_file_to_gpo_cache]
(0x0400): smb_uri:
smb://vwsr003105003.mydomain.com/SysVol/mydomain.com/Policies/{241B7E35-2...
(Tue Jul 11 15:08:25 2017) [[sssd[gpo_child[50647]]]] [copy_smb_file_to_gpo_cache]
(0x0020): smbc_getFunctionOpen failed [110][Connection timed out]
(Tue Jul 11 15:08:25 2017) [[sssd[gpo_child[50647]]]] [perform_smb_operations] (0x0020):
copy_smb_file_to_gpo_cache failed [110][Connection timed out]
(Tue Jul 11 15:08:25 2017) [[sssd[gpo_child[50647]]]] [main] (0x0020):
perform_smb_operations failed.[110][Connection timed out].
(Tue Jul 11 15:08:25 2017) [[sssd[gpo_child[50647]]]] [main] (0x0020): gpo_child failed!
Well, here you go, the connection to the AD DC timed out. Is
vwsr003105003.mydomain.com the DC you would expect to be contacted?
Either way, I think this is a bug, we should not return System Error
here, but a nicer error message and switch to offline mode..