5:39 p.m.
Wondering if somebody can help me decipher why I don't get a anything back
when I run a getent group command, but in the SSSD logs I see that SSSD
finds a group in Active Directory. I'm running this command, which returns
nothing.
root@ultralisk:~# getent group 'WINNT\Domain Admins'
When I run that command, two SSSD logs get updated; my domain's log
(sssd_WINNT.log) and the nss service log (sssd_nss.log). In the domain log
I get the following
(Tue Apr 11 16:13:42 2017) [sssd[be[WINNT]]] [sbus_get_sender_id_send]
(0x2000): Not a sysbus message, quit
(Tue Apr 11 16:13:42 2017) [sssd[be[WINNT]]] [be_get_account_info]
(0x0100): Got request for [4098][1][name=domain admins]
(Tue Apr 11 16:13:42 2017) [sssd[be[WINNT]]] [be_req_set_domain]
(0x0400): Changing request domain from [WINNT] to [WINNT]
(Tue Apr 11 16:13:42 2017) [sssd[be[WINNT]]]
[sdap_get_groups_next_base] (0x0400): Searching for groups with base
[DC=winnt,DC=harmonywave,DC=com]
(Tue Apr 11 16:13:42 2017) [sssd[be[WINNT]]]
[sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with
[(&(name=domain\20admins)(objectClass=group)(name=*))][DC=winnt,DC=harmonywave,DC=com].
(Tue Apr 11 16:13:42 2017) [sssd[be[WINNT]]]
[sdap_get_generic_ext_step] (0x1000): Requesting attrs: [objectClass]
(Tue Apr 11 16:13:42 2017) [sssd[be[WINNT]]]
[sdap_get_generic_ext_step] (0x1000): Requesting attrs: [name]
(Tue Apr 11 16:13:42 2017) [sssd[be[WINNT]]]
[sdap_get_generic_ext_step] (0x1000): Requesting attrs: [gidNumber]
(Tue Apr 11 16:13:42 2017) [sssd[be[WINNT]]]
[sdap_get_generic_ext_step] (0x1000): Requesting attrs: [member]
(Tue Apr 11 16:13:42 2017) [sssd[be[WINNT]]]
[sdap_get_generic_ext_step] (0x1000): Requesting attrs: [objectSID]
(Tue Apr 11 16:13:42 2017) [sssd[be[WINNT]]]
[sdap_get_generic_ext_step] (0x1000): Requesting attrs: [whenChanged]
(Tue Apr 11 16:13:42 2017) [sssd[be[WINNT]]]
[sdap_get_generic_ext_step] (0x1000): Requesting attrs: [uSNChanged]
(Tue Apr 11 16:13:42 2017) [sssd[be[WINNT]]]
[sdap_get_generic_ext_step] (0x1000): Requesting attrs: [groupType]
(Tue Apr 11 16:13:42 2017) [sssd[be[WINNT]]]
[sdap_get_generic_ext_step] (0x2000): ldap_search_ext called, msgid = 10
(Tue Apr 11 16:13:42 2017) [sssd[be[WINNT]]] [sdap_process_result]
(0x2000): Trace: sh[0x1de3360], connected[1], ops[0x1df69b0],
ldap[0x1de9a20]
(Tue Apr 11 16:13:42 2017) [sssd[be[WINNT]]] [sdap_parse_range]
(0x2000): No sub-attributes for [objectClass]
(Tue Apr 11 16:13:42 2017) [sssd[be[WINNT]]] [sdap_parse_range]
(0x2000): No sub-attributes for [member]
(Tue Apr 11 16:13:42 2017) [sssd[be[WINNT]]] [sdap_parse_range]
(0x2000): No sub-attributes for [whenChanged]
(Tue Apr 11 16:13:42 2017) [sssd[be[WINNT]]] [sdap_parse_range]
(0x2000): No sub-attributes for [uSNChanged]
(Tue Apr 11 16:13:42 2017) [sssd[be[WINNT]]] [sdap_parse_range]
(0x2000): No sub-attributes for [name]
(Tue Apr 11 16:13:42 2017) [sssd[be[WINNT]]] [sdap_parse_range]
(0x2000): No sub-attributes for [objectSid]
(Tue Apr 11 16:13:42 2017) [sssd[be[WINNT]]] [sdap_parse_range]
(0x2000): No sub-attributes for [groupType]
(Tue Apr 11 16:13:42 2017) [sssd[be[WINNT]]] [sdap_process_result]
(0x2000): Trace: sh[0x1de3360], connected[1], ops[0x1df69b0],
ldap[0x1de9a20]
(Tue Apr 11 16:13:42 2017) [sssd[be[WINNT]]] [sdap_process_result]
(0x2000): Trace: sh[0x1de3360], connected[1], ops[0x1df69b0],
ldap[0x1de9a20]
(Tue Apr 11 16:13:42 2017) [sssd[be[WINNT]]] [sdap_process_result]
(0x2000): Trace: sh[0x1de3360], connected[1], ops[0x1df69b0],
ldap[0x1de9a20]
(Tue Apr 11 16:13:42 2017) [sssd[be[WINNT]]] [sdap_process_result]
(0x2000): Trace: sh[0x1de3360], connected[1], ops[0x1df69b0],
ldap[0x1de9a20]
(Tue Apr 11 16:13:42 2017) [sssd[be[WINNT]]]
[sdap_get_generic_ext_done] (0x0400): Search result: Success(0), no errmsg
set
* (Tue Apr 11 16:13:42 2017) [sssd[be[WINNT]]] [sdap_get_groups_process]
(0x0400): Search for groups, returned 1 results.*
(Tue Apr 11 16:13:42 2017) [sssd[be[WINNT]]] [sdap_has_deref_support]
(0x0400): The server supports deref method ASQ
(Tue Apr 11 16:13:42 2017) [sssd[be[WINNT]]]
[sdap_nested_group_hash_group] (0x2000): Marking group as non-posix and
setting GID=0!
(Tue Apr 11 16:13:42 2017) [sssd[be[WINNT]]]
[sdap_nested_group_process_send] (0x2000): About to process group
[CN=Domain Admins,CN=Users,DC=winnt,DC=harmonywave,DC=com]
(Tue Apr 11 16:13:42 2017) [sssd[be[WINNT]]] [sysdb_search_users]
(0x2000): Search users with filter:
(&(objectclass=user)(originalDN=CN=Administrator,CN=Users,DC=winnt,DC=harmonywave,DC=com))
(Tue Apr 11 16:13:42 2017) [sssd[be[WINNT]]] [sysdb_search_users]
(0x2000): No such entry
(Tue Apr 11 16:13:42 2017) [sssd[be[WINNT]]] [sysdb_search_groups]
(0x2000): Search groups with filter:
(&(objectclass=group)(originalDN=CN=Administrator,CN=Users,DC=winnt,DC=harmonywave,DC=com))
(Tue Apr 11 16:13:42 2017) [sssd[be[WINNT]]] [sysdb_search_groups]
(0x2000): No such entry
(Tue Apr 11 16:13:42 2017) [sssd[be[WINNT]]]
[sdap_nested_group_process_send] (0x2000): Looking up 1/1 members of group
[CN=Domain Admins,CN=Users,DC=winnt,DC=harmonywave,DC=com]
(Tue Apr 11 16:13:42 2017) [sssd[be[WINNT]]]
[sdap_nested_group_process_send] (0x2000): Members of group [CN=Domain
Admins,CN=Users,DC=winnt,DC=harmonywave,DC=com] will be processed
individually
(Tue Apr 11 16:13:42 2017) [sssd[be[WINNT]]]
[sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with
[(objectclass=user)][CN=Administrator,CN=Users,DC=winnt,DC=harmonywave,DC=com].
(Tue Apr 11 16:13:42 2017) [sssd[be[WINNT]]]
[sdap_get_generic_ext_step] (0x1000): Requesting attrs: [objectClass]
(Tue Apr 11 16:13:42 2017) [sssd[be[WINNT]]]
[sdap_get_generic_ext_step] (0x1000): Requesting attrs: [sAMAccountName]
(Tue Apr 11 16:13:42 2017) [sssd[be[WINNT]]]
[sdap_get_generic_ext_step] (0x2000): ldap_search_ext called, msgid = 8
(Tue Apr 11 16:13:42 2017) [sssd[be[WINNT]]] [sdap_process_result]
(0x2000): Trace: sh[0x1de3360], connected[1], ops[(nil)], ldap[0x1de9a20]
(Tue Apr 11 16:13:42 2017) [sssd[be[WINNT]]] [sdap_process_result]
(0x2000): Trace: ldap_result found nothing!
(Tue Apr 11 16:13:42 2017) [sssd[be[WINNT]]] [sdap_process_result]
(0x2000): Trace: sh[0x1ddff30], connected[1], ops[0x1df7fe0],
ldap[0x1de7fd0]
(Tue Apr 11 16:13:42 2017) [sssd[be[WINNT]]] [sdap_parse_range]
(0x2000): No sub-attributes for [objectClass]
(Tue Apr 11 16:13:42 2017) [sssd[be[WINNT]]] [sdap_parse_range]
(0x2000): No sub-attributes for [sAMAccountName]
(Tue Apr 11 16:13:42 2017) [sssd[be[WINNT]]] [sdap_process_result]
(0x2000): Trace: sh[0x1ddff30], connected[1], ops[0x1df7fe0],
ldap[0x1de7fd0]
(Tue Apr 11 16:13:42 2017) [sssd[be[WINNT]]]
[sdap_get_generic_ext_done] (0x0400): Search result: Success(0), no errmsg
set
(Tue Apr 11 16:13:42 2017) [sssd[be[WINNT]]] [sdap_nested_group_recv]
(0x0400): 1 users found in the hash table
(Tue Apr 11 16:13:42 2017) [sssd[be[WINNT]]] [sdap_nested_group_recv]
(0x0400): 1 groups found in the hash table
(Tue Apr 11 16:13:42 2017) [sssd[be[WINNT]]] [sdap_get_primary_name]
(0x0400): Processing object Administrator
(Tue Apr 11 16:13:42 2017) [sssd[be[WINNT]]] [sysdb_search_users]
(0x2000): Search users with filter:
(&(objectclass=user)(originalDN=CN=Administrator,CN=Users,DC=winnt,DC=harmonywave,DC=com))
(Tue Apr 11 16:13:42 2017) [sssd[be[WINNT]]] [sysdb_search_users]
(0x2000): No such entry
(Tue Apr 11 16:13:42 2017) [sssd[be[WINNT]]] [sdap_get_primary_name]
(0x0400): Processing object Domain Admins
(Tue Apr 11 16:13:42 2017) [sssd[be[WINNT]]] [sdap_save_group]
(0x0400): Processing group Domain Admins
(Tue Apr 11 16:13:42 2017) [sssd[be[WINNT]]] [sdap_save_group]
(0x1000): Mapping group [Domain Admins] objectSID
[S-1-5-21-2962426039-599259981-477356674-512] to unix ID
(Tue Apr 11 16:13:42 2017) [sssd[be[WINNT]]] [sdap_attrs_add_ldap_attr]
(0x2000): Adding original DN [CN=Domain
Admins,CN=Users,DC=winnt,DC=harmonywave,DC=com] to attributes of [Domain
Admins].
(Tue Apr 11 16:13:42 2017) [sssd[be[WINNT]]] [sdap_attrs_add_ldap_attr]
(0x2000): Adding original mod-Timestamp [20170410191631.0Z] to attributes
of [Domain Admins].
(Tue Apr 11 16:13:42 2017) [sssd[be[WINNT]]]
[sdap_process_ghost_members] (0x0400): The group has 1 members
(Tue Apr 11 16:13:42 2017) [sssd[be[WINNT]]]
[sdap_process_ghost_members] (0x0400): Group has 1 members
(Tue Apr 11 16:13:42 2017) [sssd[be[WINNT]]]
[sdap_process_ghost_members] (0x0400): Adding ghost member for group
[Administrator]
(Tue Apr 11 16:13:42 2017) [sssd[be[WINNT]]] [sdap_save_group]
(0x0400): Storing info for group Domain Admins
(Tue Apr 11 16:13:42 2017) [sssd[be[WINNT]]] [sdap_get_primary_name]
(0x0400): Processing object Domain Admins
(Tue Apr 11 16:13:42 2017) [sssd[be[WINNT]]] [sdap_save_grpmem]
(0x0400): Processing group Domain Admins
(Tue Apr 11 16:13:42 2017) [sssd[be[WINNT]]] [sysdb_search_users]
(0x2000): Search users with filter:
(&(objectclass=user)(gidNumber=526800512))
(Tue Apr 11 16:13:42 2017) [sssd[be[WINNT]]] [sysdb_search_users]
(0x2000): No such entry
(Tue Apr 11 16:13:42 2017) [sssd[be[WINNT]]] [sdap_save_grpmem]
(0x0400): Adding member users to group [Domain Admins]
(Tue Apr 11 16:13:42 2017) [sssd[be[WINNT]]] [acctinfo_callback]
(0x0100): Request processed. Returned 0,0,Success
(Tue Apr 11 16:13:42 2017) [sssd[be[WINNT]]] [sdap_process_result]
(0x2000): Trace: sh[0x1ddff30], connected[1], ops[(nil)], ldap[0x1de7fd0]
(Tue Apr 11 16:13:42 2017) [sssd[be[WINNT]]] [sdap_process_result]
(0x2000): Trace: ldap_result found nothing!
You can see a result is returned and I can perform the an ldapsearch with
the same filter and get results myself. The sssd_nss.log file shows the
following.
(Tue Apr 11 16:19:12 2017) [sssd[nss]] [accept_fd_handler] (0x0400):
Client connected!
(Tue Apr 11 16:19:12 2017) [sssd[nss]] [sss_cmd_get_version] (0x0200):
Received client version [1].
(Tue Apr 11 16:19:12 2017) [sssd[nss]] [sss_cmd_get_version] (0x0200):
Offered version [1].
(Tue Apr 11 16:19:12 2017) [sssd[nss]] [nss_cmd_getbynam] (0x0400):
Running command [33] with input [WINNT\Domain Admins].
(Tue Apr 11 16:19:12 2017) [sssd[nss]] [sss_parse_name_for_domains]
(0x0200): name 'WINNT\Domain Admins' matched expression for domain
'WINNT',
user is Domain Admins
(Tue Apr 11 16:19:12 2017) [sssd[nss]] [nss_cmd_getbynam] (0x0100):
Requesting info for [Domain Admins] from [WINNT]
(Tue Apr 11 16:19:12 2017) [sssd[nss]] [sss_ncache_check_str] (0x2000):
Checking negative cache for [NCE/GROUP/WINNT/domain admins]
(Tue Apr 11 16:19:12 2017) [sssd[nss]] [nss_cmd_getgrnam_search]
(0x0100): Requesting info for [domain admins@WINNT]
(Tue Apr 11 16:19:12 2017) [sssd[nss]] [sss_dp_issue_request] (0x0400):
Issuing request for [0x4189f0:2:domain admins@WINNT]
(Tue Apr 11 16:19:12 2017) [sssd[nss]] [sss_dp_get_account_msg]
(0x0400): Creating request for [WINNT][4098][1][name=domain admins]
(Tue Apr 11 16:19:12 2017) [sssd[nss]] [sbus_add_timeout] (0x2000):
0x225c8e0
(Tue Apr 11 16:19:12 2017) [sssd[nss]] [sss_dp_internal_get_send]
(0x0400): Entering request [0x4189f0:2:domain admins@WINNT]
(Tue Apr 11 16:19:12 2017) [sssd[nss]] [sbus_remove_timeout] (0x2000):
0x225c8e0
(Tue Apr 11 16:19:12 2017) [sssd[nss]] [sss_dp_get_reply] (0x1000): Got
reply from Data Provider - DP error code: 0 errno: 0 error message: Success
(Tue Apr 11 16:19:12 2017) [sssd[nss]] [sss_ncache_check_str] (0x2000):
Checking negative cache for [NCE/GROUP/WINNT/domain admins]
(Tue Apr 11 16:19:12 2017) [sssd[nss]] [nss_cmd_getgrnam_search]
(0x0100): Requesting info for [domain admins@WINNT]
(Tue Apr 11 16:19:12 2017) [sssd[nss]] [sss_ncache_set_str] (0x0400):
Adding [NCE/GROUP/WINNT/domain admins] to negative cache
(Tue Apr 11 16:19:12 2017) [sssd[nss]] [nss_cmd_getgrnam_search]
(0x0040): No results for getgrnam call
(Tue Apr 11 16:19:12 2017) [sssd[nss]] [sss_dp_req_destructor]
(0x0400): Deleting request: [0x4189f0:2:domain admins@WINNT]
(Tue Apr 11 16:19:12 2017) [sssd[nss]] [client_recv] (0x0200): Client
disconnected!
(Tue Apr 11 16:19:12 2017) [sssd[nss]] [client_destructor] (0x2000):
Terminated client [0x226bc00][24]
I see a few odd items in the logs, but not really sure I understand what
they're saying. Does anyone see why I wouldn't get anything back from
getent? By the way I can do a getent on users and I get results back.
Thanks,
Joshua Schaeffer
2:26 a.m.
On Tue, Apr 11, 2017 at 04:39:49PM -0600, Joshua Schaeffer wrote:
Wondering if somebody can help me decipher why I don't get a
anything back
when I run a getent group command, but in the SSSD logs I see that SSSD
finds a group in Active Directory. I'm running this command, which returns
nothing.
root@ultralisk:~# getent group 'WINNT\Domain Admins'
When I run that command, two SSSD logs get updated; my domain's log
(sssd_WINNT.log) and the nss service log (sssd_nss.log). In the domain log
I get the following
[...]
Here is the reason:
(Tue Apr 11 16:13:42 2017) [sssd[be[WINNT]]]
[sdap_nested_group_hash_group] (0x2000): Marking group as non-posix and
setting GID=0!
So the group was found and saved, but SSSD decided the group is not
eligible to be returned for the OS. This could be because SSSD filtered
the group type (domain-local groups from trusted domains are filtered)
or because the sssd is configured to use POSIX attributes, but the
object doesn't have them.
Increasing the debug_level some more would show more messages,
9:59 a.m.
On Wed, Apr 12, 2017 at 1:26 AM, Jakub Hrozek <jhrozek(a)redhat.com> wrote:
[...]
Here is the reason:
> (Tue Apr 11 16:13:42 2017) [sssd[be[WINNT]]]
> [sdap_nested_group_hash_group] (0x2000): Marking group as non-posix and
> setting GID=0!
So the group was found and saved, but SSSD decided the group is not
eligible to be returned for the OS. This could be because SSSD filtered
the group type (domain-local groups from trusted domains are filtered)
or because the sssd is configured to use POSIX attributes, but the
object doesn't have them.
Increasing the debug_level some more would show more messages,
Thanks Jakub. I have the debug_level at 8 right now. I was wary of turning
it to 9 as that may have outputted a lot of trace messages, but I could
definitely try that and see what messages I get. Should I configure this
domain to not use POSIX attributes? Is that a wise decision and/or
recommended? What settings controls this? I've currently read through the
man pages for sssd.conf, sssd-ldap, sssd-krb5, and sssd-ad. Would you
recommend any other man pages or documentation? Here is my complete
sssd.conf file:
root@ultralisk:/var/log/sssd# cat /etc/sssd/sssd.conf
#########################
# GENERAL SSSD SETTINGS #
#########################
[sssd]
debug_level = 8
config_file_version = 2
services = nss,pam
domains = HARMONYWAVE,WINNT
re_expression = (?P<name>[^@]+)(a)(?P<domain>.+$)
[nss]
debug_level = 8
filter_users = root
filter_groups = root
#fallback_homedir = /home/%u
[pam]
debug_level = 8
pam_verbosity = 1
pam_pwd_expiration_warning = 10
#@@@@@@@@@@@@@@@@@@@@#
#@ HARMONYWAVE DOMAIN SETTINGS @#
#@@@@@@@@@@@@@@@@@@@@#
[domain/HARMONYWAVE]
debug_level = 8
cache_credentials = false
pwd_expiration_warning = 10
#########################
# HARMONYWAVE PROVIDERS #
#########################
auth_provider = krb5
id_provider = ldap
access_provider = simple
chpass_provider = krb5
sudo_provider = ldap
#################################
# HARMONYWAVE KERBEROS SETTINGS #
#################################
krb5_server = immortal.harmonywave.com
krb5_realm = HARMONYWAVE.COM
#############################
# HARMONYWAVE LDAP SETTINGS #
#############################
ldap_uri = ldap://baneling.harmonywave.com
ldap_schema = rfc2307bis
ldap_search_base = dc=harmonywave,dc=com
ldap_user_search_base = ou=People,dc=harmonywave,dc=com
ldap_group_search_base = ou=Group,dc=harmonywave,dc=com
ldap_sudo_search_base = ou=SUDOers,dc=harmonywave,dc=com
ldap_user_object_class = posixAccount
ldap_user_name = uid
ldap_user_home_directory = homeDirectory
ldap_group_object_class = posixGroup
ldap_group_name = cn
ldap_group_nesting_level = 4
ldap_fullname = cn
ldap_tls_reqcert = demand
ldap_tls_cacert = /etc/ssl/certs/ca.harmonywave.com.pem
ldap_id_use_start_tls = true
ldap_sasl_mech = GSSAPI
ldap_pwd_policy = mit_kerberos
#@@@@@@@@@@@@@@@@#
#@ WINNT DOMAIN SETTINGS @#
#@@@@@@@@@@@@@@@@#
[domain/WINNT]
debug_level = 8
use_fully_qualified_names = true
re_expression =
(((?P<domain>[^\\]+)\\(?P<name>.+$))|((?P<name>[^@]+)@(?P<domain>.+$))|(^(?P<name>[^(a)\\]+)$))
dns_discovery_domain = winnt.harmonywave.com
###################
# WINNT PROVIDERS #
###################
auth_provider = ad
id_provider = ad
access_provider = ad
sudo_provider = none
#####################
# WINNT AD SETTINGS #
#####################
ad_domain = winnt.harmonywave.com
ad_server = _srv_, firebat.winnt.harmonywave.com
override_homedir = /home/%d/%u
dyndns_update = false
Thanks,
Joshua Schaeffer
2:56 a.m.
On Wed, Apr 12, 2017 at 08:59:51AM -0600, Joshua Schaeffer wrote:
On Wed, Apr 12, 2017 at 1:26 AM, Jakub Hrozek
<jhrozek(a)redhat.com> wrote:
> [...]
>
> Here is the reason:
>
> > (Tue Apr 11 16:13:42 2017) [sssd[be[WINNT]]]
> > [sdap_nested_group_hash_group] (0x2000): Marking group as non-posix and
> > setting GID=0!
>
> So the group was found and saved, but SSSD decided the group is not
> eligible to be returned for the OS. This could be because SSSD filtered
> the group type (domain-local groups from trusted domains are filtered)
> or because the sssd is configured to use POSIX attributes, but the
> object doesn't have them.
>
> Increasing the debug_level some more would show more messages,
>
Thanks Jakub. I have the debug_level at 8 right now. I was wary of turning
it to 9 as that may have outputted a lot of trace messages, but I could
definitely try that and see what messages I get.
You can try:
truncate --size 0 /var/log/sssd/*
sss_debuglevel 9
sss_cache -E
getent group $groupname
sss_debuglevel 0
That way the debug logs would only contain the single lookup of the
group..
Should I configure this
domain to not use POSIX attributes? Is that a wise decision and/or
recommended?
It's already done, actually. The id_provider=ad defaults to
altorithmically mapping UIDs and GIDs from Windows SIDs (see the section
"ID MAPPING" in the sssd-ad manpage). So I think the only reason the
group could have been marked as non-POSIX (and at that point, the group
being non-POSIX is just internal SSSD lingo) could be the group type
which would only be shown with a higher debug level I think.
2:38 p.m.
On Thu, Apr 13, 2017 at 1:56 AM, Jakub Hrozek <jhrozek(a)redhat.com> wrote:
You can try:
truncate --size 0 /var/log/sssd/*
sss_debuglevel 9
sss_cache -E
getent group $groupname
sss_debuglevel 0
Thanks, I did not know about the sss_debuglevel command. I will give this a
try.
It's already done, actually. The id_provider=ad defaults to
altorithmically mapping UIDs and GIDs from Windows SIDs (see the section
"ID MAPPING" in the sssd-ad manpage). So I think the only reason the
group could have been marked as non-POSIX (and at that point, the group
being non-POSIX is just internal SSSD lingo) could be the group type
which would only be shown with a higher debug level I think.
Joshua Schaeffer
3 p.m.
Okay, I ran the query again with the debug_level on 9 and I got more info.
I think the relevant parts are these lines:
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_get_groups_process]
(0x0400): Search for groups, returned 1 results.
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_has_deref_support]
(0x0400): The server supports deref method ASQ
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]]
[sdap_nested_group_hash_group] (0x4000): AD group has type flags 0x80000002.
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]]
[sdap_nested_group_hash_group] (0x4000): The group's gid was missing
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]]
[sdap_nested_group_hash_group] (0x2000): Marking group as non-posix and
setting GID=0!
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]]
[sdap_nested_group_hash_entry] (0x4000): Inserting [CN=Domain
Admins,CN=Users,DC=winnt,DC=harmonywave,DC=com] into hash table [groups]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]]
[sdap_nested_group_process_send] (0x2000): About to process group
[CN=Domain Admins,CN=Users,DC=winnt,DC=harmonywave,DC=com]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sysdb_search_users]
(0x2000): Search users with filter:
(&(objectclass=user)(originalDN=CN=Administrator,CN=Users,DC=winnt,DC=harmonywave,DC=com))
...[snip]...
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_save_group]
(0x0400): Processing group Domain Admins
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_save_group]
(0x4000): AD group [Domain Admins] has type flags 0x80000002.
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_save_group]
(0x1000): Mapping group [Domain Admins] objectSID
[S-1-5-21-2962426039-599259981-477356674-512] to unix ID
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_attrs_add_ldap_attr]
(0x2000): Adding original DN [CN=Domain
Admins,CN=Users,DC=winnt,DC=harmonywave,DC=com] to attributes of [Domain
Admins].
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_attrs_add_ldap_attr]
(0x2000): Adding original mod-Timestamp [20170410191631.0Z] to attributes
of [Domain Admins].
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]]
[sdap_process_ghost_members] (0x0400): The group has 1 members
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]]
[sdap_process_ghost_members] (0x0400): Group has 1 members
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]]
[sdap_process_ghost_members] (0x0400): Adding ghost member for group
[Administrator]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_save_group]
(0x0400): Storing info for group Domain Admins
...[snip]...
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_save_groups]
(0x4000): Group 0 processed!
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_get_primary_name]
(0x0400): Processing object Domain Admins
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_save_grpmem]
(0x0400): Processing group Domain Admins
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sysdb_search_users]
(0x2000): Search users with filter:
(&(objectclass=user)(gidNumber=526800512))
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [ldb] (0x4000): Added
timed event "ltdb_callback": 0xb459c0
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [ldb] (0x4000): Added
timed event "ltdb_timeout": 0xb3cb10
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [ldb] (0x4000): Running
timer event 0xb459c0 "ltdb_callback"
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [ldb] (0x4000): Destroying
timer event 0xb3cb10 "ltdb_timeout"
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [ldb] (0x4000): Ending
timer event 0xb459c0 "ltdb_callback"
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sysdb_search_users]
(0x2000): No such entry
...[snip]...
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [ldb] (0x4000): commit ldb
transaction (nesting: 2)
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_save_groups]
(0x4000): Group 0 members processed!
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [ldb] (0x4000): commit ldb
transaction (nesting: 1)
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [ldb] (0x4000): commit ldb
transaction (nesting: 0)
(Fri Apr 14 13:44:17 2017) [sssd[be[WINNT]]] [sdap_id_op_destroy]
(0x4000): releasing operation connection
(Fri Apr 14 13:44:17 2017) [sssd[be[WINNT]]] [sdap_id_op_done]
(0x4000): releasing operation connection
(Fri Apr 14 13:44:17 2017) [sssd[be[WINNT]]] [acctinfo_callback]
(0x0100): Request processed. Returned 0,0,Success
(Fri Apr 14 13:44:17 2017) [sssd[be[WINNT]]] [sdap_process_result]
(0x2000): Trace: sh[0xb0a6e0], connected[1], ops[(nil)], ldap[0xb18320]
(Fri Apr 14 13:44:17 2017) [sssd[be[WINNT]]] [sdap_process_result]
(0x2000): Trace: ldap_result found nothing!
So is the part where it is looking for
(&(objectclass=user)(gidNumber=526800512)) an issue? Here is the whole
long in case these parts aren't relevant like I thought. I haven't done too
much of my own digging yet, but thought I'd post this to see if anybody can
see something obvious I'm missing.
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sbus_dispatch] (0x4000):
dbus conn: 0xaf6350
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sbus_dispatch] (0x4000):
Dispatching.
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sbus_message_handler]
(0x4000): Received SBUS method [getAccountInfo]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sbus_get_sender_id_send]
(0x2000): Not a sysbus message, quit
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]]
[sbus_handler_got_caller_id] (0x4000): Received SBUS method [getAccountInfo]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [be_get_account_info]
(0x0100): Got request for [4098][1][name=domain admins]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [be_req_set_domain]
(0x0400): Changing request domain from [WINNT] to [WINNT]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_id_op_connect_step]
(0x4000): beginning to connect
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [fo_resolve_service_send]
(0x0100): Trying to resolve service 'AD_GC'
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [get_port_status]
(0x1000): Port status of port 0 for server '(no name)' is 'neutral'
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]]
[fo_resolve_service_activate_timeout] (0x2000): Resolve timeout set to 6
seconds
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [resolve_srv_send]
(0x0200): The status of SRV lookup is neutral
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [ad_srv_plugin_send]
(0x0400): About to find domain controllers
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [ad_get_dc_servers_send]
(0x0400): Looking up domain controllers in domain winnt.harmonywave.com
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]]
[resolv_discover_srv_next_domain] (0x0400): SRV resolution of service
'ldap'. Will use DNS discovery domain 'winnt.harmonywave.com'
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [resolv_getsrv_send]
(0x0100): Trying to resolve SRV record of '_ldap._tcp.winnt.harmonywave.com'
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [schedule_request_timeout]
(0x2000): Scheduling a timeout of 6 seconds
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [schedule_timeout_watcher]
(0x2000): Scheduling DNS timeout watcher
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]]
[unschedule_timeout_watcher] (0x4000): Unscheduling DNS timeout watcher
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [request_watch_destructor]
(0x0400): Deleting request watch
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [fo_discover_srv_done]
(0x0400): Got answer. Processing...
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [fo_discover_srv_done]
(0x0400): Got 1 servers
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [ad_get_dc_servers_done]
(0x0400): Found 1 domain controllers in domain winnt.harmonywave.com
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [ad_srv_plugin_dcs_done]
(0x0400): About to locate suitable site
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_connect_host_send]
(0x0400): Resolving host firebat.winnt.harmonywave.com
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [resolv_is_address]
(0x4000): [firebat.winnt.harmonywave.com] does not look like an IP address
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]]
[resolv_gethostbyname_step] (0x2000): Querying files
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]]
[resolv_gethostbyname_files_send] (0x0100): Trying to resolve A record of '
firebat.winnt.harmonywave.com' in files
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]]
[resolv_gethostbyname_step] (0x2000): Querying files
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]]
[resolv_gethostbyname_files_send] (0x0100): Trying to resolve AAAA record
of 'firebat.winnt.harmonywave.com' in files
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]]
[resolv_gethostbyname_next] (0x0200): No more address families to retry
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]]
[resolv_gethostbyname_step] (0x2000): Querying DNS
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]]
[resolv_gethostbyname_dns_query] (0x0100): Trying to resolve A record of '
firebat.winnt.harmonywave.com' in DNS
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [schedule_request_timeout]
(0x2000): Scheduling a timeout of 6 seconds
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [schedule_timeout_watcher]
(0x2000): Scheduling DNS timeout watcher
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]]
[unschedule_timeout_watcher] (0x4000): Unscheduling DNS timeout watcher
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]]
[resolv_gethostbyname_dns_parse] (0x1000): Parsing an A reply
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [request_watch_destructor]
(0x0400): Deleting request watch
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]]
[sdap_connect_host_resolv_done] (0x0400): Connecting to ldap://
firebat.winnt.harmonywave.com:389
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sss_ldap_init_send]
(0x4000): Using file descriptor [24] for LDAP connection.
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sss_ldap_init_send]
(0x0400): Setting 6 seconds timeout for connecting
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]]
[sdap_ldap_connect_callback_add] (0x1000): New LDAP connection to [ldap://
firebat.winnt.harmonywave.com:389/??base] with fd [24].
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_connect_host_done]
(0x0400): Successful connection to ldap://firebat.winnt.harmonywave.com:389
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]]
[sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with
[(&(DnsDomain=winnt.harmonywave.com)(NtVer=\14\00\00\00))][].
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]]
[sdap_get_generic_ext_step] (0x1000): Requesting attrs: [netlogon]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]]
[sdap_get_generic_ext_step] (0x2000): ldap_search_ext called, msgid = 1
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_process_result]
(0x2000): Trace: sh[0xb1ec40], connected[1], ops[0xb18aa0], ldap[0xb19af0]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_process_message]
(0x4000): Message type: [LDAP_RES_SEARCH_ENTRY]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_parse_entry]
(0x4000): OriginalDN: [].
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_parse_range]
(0x2000): No sub-attributes for [netlogon]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_process_result]
(0x2000): Trace: sh[0xb1ec40], connected[1], ops[0xb18aa0], ldap[0xb19af0]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_process_message]
(0x4000): Message type: [LDAP_RES_SEARCH_RESULT]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]]
[sdap_get_generic_ext_done] (0x0400): Search result: Success(0), no errmsg
set
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_handle_release]
(0x2000): Trace: sh[0xb1ec40], connected[1], ops[(nil)], ldap[0xb19af0],
destructor_lock[0], release_memory[0]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]]
[remove_connection_callback] (0x4000): Successfully removed connection
callback.
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [ad_get_client_site_done]
(0x0400): Found site: Default-First-Site-Name
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [ad_srv_plugin_site_done]
(0x0400): About to discover primary and backup servers
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [fo_discover_servers_send]
(0x0400): Looking up primary servers
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]]
[resolv_discover_srv_next_domain] (0x0400): SRV resolution of service 'gc'.
Will use DNS discovery domain 'Default-First-Site-Name._
sites.winnt.harmonywave.com'
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [resolv_getsrv_send]
(0x0100): Trying to resolve SRV record of
'_gc._tcp.Default-First-Site-Name._sites.winnt.harmonywave.com'
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [schedule_request_timeout]
(0x2000): Scheduling a timeout of 6 seconds
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [schedule_timeout_watcher]
(0x2000): Scheduling DNS timeout watcher
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]]
[unschedule_timeout_watcher] (0x4000): Unscheduling DNS timeout watcher
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [request_watch_destructor]
(0x0400): Deleting request watch
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [fo_discover_srv_done]
(0x0400): Got answer. Processing...
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [fo_discover_srv_done]
(0x0400): Got 1 servers
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]]
[fo_discover_servers_primary_done] (0x0400): Looking up backup servers
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]]
[resolv_discover_srv_next_domain] (0x0400): SRV resolution of service 'gc'.
Will use DNS discovery domain 'winnt.harmonywave.com'
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [resolv_getsrv_send]
(0x0100): Trying to resolve SRV record of '_gc._tcp.winnt.harmonywave.com'
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [schedule_request_timeout]
(0x2000): Scheduling a timeout of 6 seconds
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [schedule_timeout_watcher]
(0x2000): Scheduling DNS timeout watcher
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]]
[unschedule_timeout_watcher] (0x4000): Unscheduling DNS timeout watcher
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [request_watch_destructor]
(0x0400): Deleting request watch
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [fo_discover_srv_done]
(0x0400): Got answer. Processing...
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [fo_discover_srv_done]
(0x0400): Got 1 servers
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]]
[ad_srv_plugin_servers_done] (0x0400): Got 1 primary and 1 backup servers
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [fo_add_server_to_list]
(0x0400): Inserted primary server 'firebat.winnt.harmonywave.com:3268' to
service 'AD_GC'
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [ad_user_data_cmp]
(0x1000): Comparing GC with GC
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [fo_add_server_to_list]
(0x0400): Server 'firebat.winnt.harmonywave.com:3268' for service 'AD_GC'
is already present
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [set_srv_data_status]
(0x0100): Marking SRV lookup of service 'AD_GC' as 'resolved'
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [get_server_status]
(0x1000): Status of server 'firebat.winnt.harmonywave.com' is 'working'
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]]
[be_resolve_server_process] (0x1000): Saving the first resolved server
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]]
[be_resolve_server_process] (0x0200): Found address for server
firebat.winnt.harmonywave.com: [10.1.31.100] TTL 635
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [ad_resolve_callback]
(0x0100): Constructed uri 'ldap://firebat.winnt.harmonywave.com'
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [ad_resolve_callback]
(0x0100): Constructed GC uri 'ldap://firebat.winnt.harmonywave.com:3268'
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sss_ldap_init_send]
(0x4000): Using file descriptor [24] for LDAP connection.
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sss_ldap_init_send]
(0x0400): Setting 6 seconds timeout for connecting
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]]
[sdap_ldap_connect_callback_add] (0x1000): New LDAP connection to [ldap://
firebat.winnt.harmonywave.com:3268/??base] with fd [24].
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_get_rootdse_send]
(0x4000): Getting rootdse
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]]
[sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with
[(objectclass=*)][].
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]]
[sdap_get_generic_ext_step] (0x1000): Requesting attrs: [*]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]]
[sdap_get_generic_ext_step] (0x1000): Requesting attrs: [altServer]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]]
[sdap_get_generic_ext_step] (0x1000): Requesting attrs: [namingContexts]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]]
[sdap_get_generic_ext_step] (0x1000): Requesting attrs: [supportedControl]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]]
[sdap_get_generic_ext_step] (0x1000): Requesting attrs: [supportedExtension]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]]
[sdap_get_generic_ext_step] (0x1000): Requesting attrs: [supportedFeatures]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]]
[sdap_get_generic_ext_step] (0x1000): Requesting attrs:
[supportedLDAPVersion]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]]
[sdap_get_generic_ext_step] (0x1000): Requesting attrs:
[supportedSASLMechanisms]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]]
[sdap_get_generic_ext_step] (0x1000): Requesting attrs:
[domainControllerFunctionality]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]]
[sdap_get_generic_ext_step] (0x1000): Requesting attrs:
[defaultNamingContext]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]]
[sdap_get_generic_ext_step] (0x1000): Requesting attrs: [lastUSN]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]]
[sdap_get_generic_ext_step] (0x1000): Requesting attrs:
[highestCommittedUSN]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]]
[sdap_get_generic_ext_step] (0x2000): ldap_search_ext called, msgid = 1
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_process_result]
(0x2000): Trace: sh[0xb0a6e0], connected[1], ops[0xb19d20], ldap[0xb18320]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_process_message]
(0x4000): Message type: [LDAP_RES_SEARCH_ENTRY]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_parse_entry]
(0x4000): OriginalDN: [].
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_parse_range]
(0x2000): No sub-attributes for [configurationNamingContext]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_parse_range]
(0x2000): No sub-attributes for [defaultNamingContext]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_parse_range]
(0x2000): No sub-attributes for [rootDomainNamingContext]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_parse_range]
(0x2000): No sub-attributes for [schemaNamingContext]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_parse_range]
(0x2000): No sub-attributes for [subschemaSubentry]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_parse_range]
(0x2000): No sub-attributes for [supportedCapabilities]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_parse_range]
(0x2000): No sub-attributes for [supportedLDAPVersion]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_parse_range]
(0x2000): No sub-attributes for [vendorName]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_parse_range]
(0x2000): No sub-attributes for [isSynchronized]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_parse_range]
(0x2000): No sub-attributes for [dsServiceName]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_parse_range]
(0x2000): No sub-attributes for [serverName]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_parse_range]
(0x2000): No sub-attributes for [dnsHostName]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_parse_range]
(0x2000): No sub-attributes for [ldapServiceName]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_parse_range]
(0x2000): No sub-attributes for [currentTime]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_parse_range]
(0x2000): No sub-attributes for [supportedControl]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_parse_range]
(0x2000): No sub-attributes for [namingContexts]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_parse_range]
(0x2000): No sub-attributes for [supportedSASLMechanisms]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_parse_range]
(0x2000): No sub-attributes for [highestCommittedUSN]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_parse_range]
(0x2000): No sub-attributes for [domainFunctionality]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_parse_range]
(0x2000): No sub-attributes for [forestFunctionality]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_parse_range]
(0x2000): No sub-attributes for [domainControllerFunctionality]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_parse_range]
(0x2000): No sub-attributes for [isGlobalCatalogReady]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_process_result]
(0x2000): Trace: sh[0xb0a6e0], connected[1], ops[0xb19d20], ldap[0xb18320]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_process_message]
(0x4000): Message type: [LDAP_RES_SEARCH_RESULT]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]]
[sdap_get_generic_ext_done] (0x0400): Search result: Success(0), no errmsg
set
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_get_rootdse_done]
(0x2000): Got rootdse
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_get_rootdse_done]
(0x2000): Skipping auto-detection of match rule
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]]
[sdap_get_server_opts_from_rootdse] (0x4000): USN value: 3805 (int: 3805)
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]]
[sdap_get_server_opts_from_rootdse] (0x0100): Setting AD compatibility
level to [4]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_kinit_send]
(0x0400): Attempting kinit (default, ULTRALISK$, WINNT.HARMONYWAVE.COM,
86400)
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_kinit_next_kdc]
(0x1000): Resolving next KDC for service AD
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [fo_resolve_service_send]
(0x0100): Trying to resolve service 'AD'
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [get_server_status]
(0x1000): Status of server 'firebat.winnt.harmonywave.com' is 'working'
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [get_port_status]
(0x1000): Port status of port 389 for server 'firebat.winnt.harmonywave.com'
is 'working'
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]]
[fo_resolve_service_activate_timeout] (0x2000): Resolve timeout set to 6
seconds
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [resolve_srv_send]
(0x0200): The status of SRV lookup is resolved
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [get_server_status]
(0x1000): Status of server 'firebat.winnt.harmonywave.com' is 'working'
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]]
[be_resolve_server_process] (0x1000): Saving the first resolved server
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]]
[be_resolve_server_process] (0x0200): Found address for server
firebat.winnt.harmonywave.com: [10.1.31.100] TTL 635
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_kinit_kdc_resolved]
(0x1000): KDC resolved, attempting to get TGT...
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]]
[create_tgt_req_send_buffer] (0x0400): buffer size: 47
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [child_handler_setup]
(0x2000): Setting up signal handler up for pid [30964]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [child_handler_setup]
(0x2000): Signal handler set up for pid [30964]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [set_tgt_child_timeout]
(0x0400): Setting 6 seconds timeout for tgt child
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_process_result]
(0x2000): Trace: sh[0xb0a6e0], connected[1], ops[(nil)], ldap[0xb18320]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_process_result]
(0x2000): Trace: ldap_result found nothing!
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [write_pipe_handler]
(0x0400): All data has been sent!
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [child_sig_handler]
(0x1000): Waiting for child [30964].
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [child_sig_handler]
(0x0100): child [30964] finished successfully.
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [read_pipe_handler]
(0x0400): EOF received, client finished
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_get_tgt_recv]
(0x0400): Child responded: 0 [FILE:/var/lib/sss/db/
ccache_WINNT.HARMONYWAVE.COM], expired on [1492235056]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_cli_auth_step]
(0x0100): expire timeout is 900
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_cli_auth_step]
(0x1000): the connection will expire at 1492199956
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sasl_bind_send] (0x0100):
Executing sasl bind mech: gssapi, user: ULTRALISK$
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [fo_set_port_status]
(0x0100): Marking port 3268 of server 'firebat.winnt.harmonywave.com' as
'working'
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [set_server_common_status]
(0x0100): Marking server 'firebat.winnt.harmonywave.com' as 'working'
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [ad_user_data_cmp]
(0x1000): Comparing GC with GC
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [fo_set_port_status]
(0x0400): Marking port 3268 of duplicate server '
firebat.winnt.harmonywave.com' as 'working'
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_id_op_connect_done]
(0x2000): Old USN: 3805, New USN: 3805
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_id_op_connect_done]
(0x4000): notify connected to op #1
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_id_op_connect_step]
(0x4000): reusing cached connection
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_id_op_connect_done]
(0x4000): caching successful connection after 1 notifies
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]]
[be_run_unconditional_online_cb] (0x4000): List of unconditional online
callbacks is empty, nothing to do.
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]]
[sdap_get_groups_next_base] (0x0400): Searching for groups with base
[DC=winnt,DC=harmonywave,DC=com]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]]
[sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with
[(&(name=domain\20admins)(objectClass=group)(name=*))][DC=winnt,DC=harmonywave,DC=com].
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]]
[sdap_get_generic_ext_step] (0x1000): Requesting attrs: [objectClass]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]]
[sdap_get_generic_ext_step] (0x1000): Requesting attrs: [name]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]]
[sdap_get_generic_ext_step] (0x1000): Requesting attrs: [gidNumber]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]]
[sdap_get_generic_ext_step] (0x1000): Requesting attrs: [member]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]]
[sdap_get_generic_ext_step] (0x1000): Requesting attrs: [objectSID]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]]
[sdap_get_generic_ext_step] (0x1000): Requesting attrs: [whenChanged]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]]
[sdap_get_generic_ext_step] (0x1000): Requesting attrs: [uSNChanged]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]]
[sdap_get_generic_ext_step] (0x1000): Requesting attrs: [groupType]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]]
[sdap_get_generic_ext_step] (0x2000): ldap_search_ext called, msgid = 11
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_process_result]
(0x2000): Trace: sh[0xb0a7b0], connected[1], ops[0xb1b350], ldap[0xb0c490]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_process_message]
(0x4000): Message type: [LDAP_RES_SEARCH_ENTRY]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_parse_entry]
(0x4000): OriginalDN: [CN=Domain
Admins,CN=Users,DC=winnt,DC=harmonywave,DC=com].
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_parse_range]
(0x2000): No sub-attributes for [objectClass]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_parse_range]
(0x2000): No sub-attributes for [member]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_parse_range]
(0x2000): No sub-attributes for [whenChanged]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_parse_range]
(0x2000): No sub-attributes for [uSNChanged]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_parse_range]
(0x2000): No sub-attributes for [name]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_parse_range]
(0x2000): No sub-attributes for [objectSid]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_parse_range]
(0x2000): No sub-attributes for [groupType]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_process_result]
(0x2000): Trace: sh[0xb0a7b0], connected[1], ops[0xb1b350], ldap[0xb0c490]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_process_message]
(0x4000): Message type: [LDAP_RES_SEARCH_REFERENCE]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_process_result]
(0x2000): Trace: sh[0xb0a7b0], connected[1], ops[0xb1b350], ldap[0xb0c490]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_process_message]
(0x4000): Message type: [LDAP_RES_SEARCH_REFERENCE]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_process_result]
(0x2000): Trace: sh[0xb0a7b0], connected[1], ops[0xb1b350], ldap[0xb0c490]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_process_message]
(0x4000): Message type: [LDAP_RES_SEARCH_REFERENCE]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_process_result]
(0x2000): Trace: sh[0xb0a7b0], connected[1], ops[0xb1b350], ldap[0xb0c490]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_process_message]
(0x4000): Message type: [LDAP_RES_SEARCH_RESULT]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]]
[sdap_get_generic_ext_done] (0x0400): Search result: Success(0), no errmsg
set
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_get_groups_process]
(0x0400): Search for groups, returned 1 results.
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_has_deref_support]
(0x0400): The server supports deref method ASQ
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]]
[sdap_nested_group_hash_group] (0x4000): AD group has type flags 0x80000002.
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]]
[sdap_nested_group_hash_group] (0x4000): The group's gid was missing
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]]
[sdap_nested_group_hash_group] (0x2000): Marking group as non-posix and
setting GID=0!
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]]
[sdap_nested_group_hash_entry] (0x4000): Inserting [CN=Domain
Admins,CN=Users,DC=winnt,DC=harmonywave,DC=com] into hash table [groups]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]]
[sdap_nested_group_process_send] (0x2000): About to process group
[CN=Domain Admins,CN=Users,DC=winnt,DC=harmonywave,DC=com]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sysdb_search_users]
(0x2000): Search users with filter:
(&(objectclass=user)(originalDN=CN=Administrator,CN=Users,DC=winnt,DC=harmonywave,DC=com))
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [ldb] (0x4000): Added
timed event "ltdb_callback": 0xb2c660
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [ldb] (0x4000): Added
timed event "ltdb_timeout": 0xb2c790
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [ldb] (0x4000): Running
timer event 0xb2c660 "ltdb_callback"
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [ldb] (0x4000): Destroying
timer event 0xb2c790 "ltdb_timeout"
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [ldb] (0x4000): Ending
timer event 0xb2c660 "ltdb_callback"
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sysdb_search_users]
(0x2000): No such entry
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sysdb_search_groups]
(0x2000): Search groups with filter:
(&(objectclass=group)(originalDN=CN=Administrator,CN=Users,DC=winnt,DC=harmonywave,DC=com))
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [ldb] (0x4000): Added
timed event "ltdb_callback": 0xb2b770
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [ldb] (0x4000): Added
timed event "ltdb_timeout": 0xb2b830
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [ldb] (0x4000): Running
timer event 0xb2b770 "ltdb_callback"
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [ldb] (0x4000): Destroying
timer event 0xb2b830 "ltdb_timeout"
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [ldb] (0x4000): Ending
timer event 0xb2b770 "ltdb_callback"
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sysdb_search_groups]
(0x2000): No such entry
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]]
[sdap_nested_group_split_members] (0x4000):
[CN=Administrator,CN=Users,DC=winnt,DC=harmonywave,DC=com] is unknown object
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]]
[sdap_nested_group_process_send] (0x2000): Looking up 1/1 members of group
[CN=Domain Admins,CN=Users,DC=winnt,DC=harmonywave,DC=com]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]]
[sdap_nested_group_process_send] (0x2000): Members of group [CN=Domain
Admins,CN=Users,DC=winnt,DC=harmonywave,DC=com] will be processed
individually
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]]
[sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with
[(objectclass=user)][CN=Administrator,CN=Users,DC=winnt,DC=harmonywave,DC=com].
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]]
[sdap_get_generic_ext_step] (0x1000): Requesting attrs: [objectClass]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]]
[sdap_get_generic_ext_step] (0x1000): Requesting attrs: [sAMAccountName]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]]
[sdap_get_generic_ext_step] (0x2000): ldap_search_ext called, msgid = 5
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_process_result]
(0x2000): Trace: sh[0xb0a7b0], connected[1], ops[(nil)], ldap[0xb0c490]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_process_result]
(0x2000): Trace: ldap_result found nothing!
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_process_result]
(0x2000): Trace: sh[0xb0a6e0], connected[1], ops[0xb1f150], ldap[0xb18320]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_process_message]
(0x4000): Message type: [LDAP_RES_SEARCH_ENTRY]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_parse_entry]
(0x4000): OriginalDN:
[CN=Administrator,CN=Users,DC=winnt,DC=harmonywave,DC=com].
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_parse_range]
(0x2000): No sub-attributes for [objectClass]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_parse_range]
(0x2000): No sub-attributes for [sAMAccountName]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_process_result]
(0x2000): Trace: sh[0xb0a6e0], connected[1], ops[0xb1f150], ldap[0xb18320]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_process_message]
(0x4000): Message type: [LDAP_RES_SEARCH_RESULT]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]]
[sdap_get_generic_ext_done] (0x0400): Search result: Success(0), no errmsg
set
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]]
[sdap_nested_group_hash_entry] (0x4000): Inserting
[CN=Administrator,CN=Users,DC=winnt,DC=harmonywave,DC=com] into hash table
[users]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_nested_group_recv]
(0x0400): 1 users found in the hash table
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_nested_group_recv]
(0x0400): 1 groups found in the hash table
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [ldb] (0x4000): start ldb
transaction (nesting: 0)
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [ldb] (0x4000): start ldb
transaction (nesting: 1)
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_get_primary_name]
(0x0400): Processing object Administrator
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sysdb_search_users]
(0x2000): Search users with filter:
(&(objectclass=user)(originalDN=CN=Administrator,CN=Users,DC=winnt,DC=harmonywave,DC=com))
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [ldb] (0x4000): Added
timed event "ltdb_callback": 0xb2c030
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [ldb] (0x4000): Added
timed event "ltdb_timeout": 0xb2c160
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [ldb] (0x4000): Running
timer event 0xb2c030 "ltdb_callback"
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [ldb] (0x4000): Destroying
timer event 0xb2c160 "ltdb_timeout"
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [ldb] (0x4000): Ending
timer event 0xb2c030 "ltdb_callback"
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sysdb_search_users]
(0x2000): No such entry
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [ldb] (0x4000): commit ldb
transaction (nesting: 1)
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [ldb] (0x4000): start ldb
transaction (nesting: 1)
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_get_primary_name]
(0x0400): Processing object Domain Admins
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_save_group]
(0x0400): Processing group Domain Admins
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_save_group]
(0x4000): AD group [Domain Admins] has type flags 0x80000002.
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_save_group]
(0x1000): Mapping group [Domain Admins] objectSID
[S-1-5-21-2962426039-599259981-477356674-512] to unix ID
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_attrs_add_ldap_attr]
(0x2000): Adding original DN [CN=Domain
Admins,CN=Users,DC=winnt,DC=harmonywave,DC=com] to attributes of [Domain
Admins].
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_attrs_add_ldap_attr]
(0x2000): Adding original mod-Timestamp [20170410191631.0Z] to attributes
of [Domain Admins].
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]]
[sdap_process_ghost_members] (0x0400): The group has 1 members
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]]
[sdap_process_ghost_members] (0x0400): Group has 1 members
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]]
[sdap_process_ghost_members] (0x0400): Adding ghost member for group
[Administrator]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_save_group]
(0x0400): Storing info for group Domain Admins
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [ldb] (0x4000): Added
timed event "ltdb_callback": 0xb0a320
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [ldb] (0x4000): Added
timed event "ltdb_timeout": 0xb39c00
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [ldb] (0x4000): Running
timer event 0xb0a320 "ltdb_callback"
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [ldb] (0x4000): Destroying
timer event 0xb39c00 "ltdb_timeout"
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [ldb] (0x4000): Ending
timer event 0xb0a320 "ltdb_callback"
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [ldb] (0x4000): start ldb
transaction (nesting: 2)
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [ldb] (0x4000): Added
timed event "ltdb_callback": 0xb3c810
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [ldb] (0x4000): Added
timed event "ltdb_timeout": 0xb3c8d0
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [ldb] (0x4000): Running
timer event 0xb3c810 "ltdb_callback"
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [ldb] (0x4000): Added
timed event "ltdb_callback": 0xb3cb10
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [ldb] (0x4000): Added
timed event "ltdb_timeout": 0xb3d2b0
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [ldb] (0x4000): Destroying
timer event 0xb3c8d0 "ltdb_timeout"
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [ldb] (0x4000): Ending
timer event 0xb3c810 "ltdb_callback"
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [ldb] (0x4000): Running
timer event 0xb3cb10 "ltdb_callback"
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [ldb] (0x4000): Destroying
timer event 0xb3d2b0 "ltdb_timeout"
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [ldb] (0x4000): Ending
timer event 0xb3cb10 "ltdb_callback"
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [ldb] (0x4000): commit ldb
transaction (nesting: 2)
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_save_groups]
(0x4000): Group 0 processed!
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_get_primary_name]
(0x0400): Processing object Domain Admins
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_save_grpmem]
(0x0400): Processing group Domain Admins
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sysdb_search_users]
(0x2000): Search users with filter:
(&(objectclass=user)(gidNumber=526800512))
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [ldb] (0x4000): Added
timed event "ltdb_callback": 0xb459c0
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [ldb] (0x4000): Added
timed event "ltdb_timeout": 0xb3cb10
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [ldb] (0x4000): Running
timer event 0xb459c0 "ltdb_callback"
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [ldb] (0x4000): Destroying
timer event 0xb3cb10 "ltdb_timeout"
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [ldb] (0x4000): Ending
timer event 0xb459c0 "ltdb_callback"
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sysdb_search_users]
(0x2000): No such entry
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_save_grpmem]
(0x0400): Adding member users to group [Domain Admins]
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [ldb] (0x4000): Added
timed event "ltdb_callback": 0xb39c00
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [ldb] (0x4000): Added
timed event "ltdb_timeout": 0xb3cb10
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [ldb] (0x4000): Running
timer event 0xb39c00 "ltdb_callback"
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [ldb] (0x4000): Destroying
timer event 0xb3cb10 "ltdb_timeout"
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [ldb] (0x4000): Ending
timer event 0xb39c00 "ltdb_callback"
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [ldb] (0x4000): start ldb
transaction (nesting: 2)
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [ldb] (0x4000): Added
timed event "ltdb_callback": 0xb3cb10
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [ldb] (0x4000): Added
timed event "ltdb_timeout": 0xb39c00
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [ldb] (0x4000): Running
timer event 0xb3cb10 "ltdb_callback"
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [ldb] (0x4000): Added
timed event "ltdb_callback": 0xb2ca70
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [ldb] (0x4000): Added
timed event "ltdb_timeout": 0xb3c7a0
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [ldb] (0x4000): Destroying
timer event 0xb39c00 "ltdb_timeout"
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [ldb] (0x4000): Ending
timer event 0xb3cb10 "ltdb_callback"
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [ldb] (0x4000): Running
timer event 0xb2ca70 "ltdb_callback"
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [ldb] (0x4000): Destroying
timer event 0xb3c7a0 "ltdb_timeout"
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [ldb] (0x4000): Ending
timer event 0xb2ca70 "ltdb_callback"
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [ldb] (0x4000): commit ldb
transaction (nesting: 2)
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [sdap_save_groups]
(0x4000): Group 0 members processed!
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [ldb] (0x4000): commit ldb
transaction (nesting: 1)
(Fri Apr 14 13:44:16 2017) [sssd[be[WINNT]]] [ldb] (0x4000): commit ldb
transaction (nesting: 0)
(Fri Apr 14 13:44:17 2017) [sssd[be[WINNT]]] [sdap_id_op_destroy]
(0x4000): releasing operation connection
(Fri Apr 14 13:44:17 2017) [sssd[be[WINNT]]] [sdap_id_op_done]
(0x4000): releasing operation connection
(Fri Apr 14 13:44:17 2017) [sssd[be[WINNT]]] [acctinfo_callback]
(0x0100): Request processed. Returned 0,0,Success
(Fri Apr 14 13:44:17 2017) [sssd[be[WINNT]]] [sdap_process_result]
(0x2000): Trace: sh[0xb0a6e0], connected[1], ops[(nil)], ldap[0xb18320]
(Fri Apr 14 13:44:17 2017) [sssd[be[WINNT]]] [sdap_process_result]
(0x2000): Trace: ldap_result found nothing!
Thanks,
Joshua Schaeffer
On Fri, Apr 14, 2017 at 1:38 PM, Joshua Schaeffer <jschaeffer0922(a)gmail.com>
wrote:
On Thu, Apr 13, 2017 at 1:56 AM, Jakub Hrozek
<jhrozek(a)redhat.com> wrote:
> You can try:
> truncate --size 0 /var/log/sssd/*
> sss_debuglevel 9
> sss_cache -E
> getent group $groupname
> sss_debuglevel 0
>
>
Thanks, I did not know about the sss_debuglevel command. I will give this
a try.
>
> It's already done, actually. The id_provider=ad defaults to
> altorithmically mapping UIDs and GIDs from Windows SIDs (see the section
> "ID MAPPING" in the sssd-ad manpage). So I think the only reason the
> group could have been marked as non-POSIX (and at that point, the group
> being non-POSIX is just internal SSSD lingo) could be the group type
> which would only be shown with a higher debug level I think.
Joshua Schaeffer
2568
days inactive
2571
days old
sssd-users@lists.fedorahosted.org
5 comments
2 participants
participants (2)
-
Jakub Hrozek -
Joshua Schaeffer