<div dir="ltr">I re-logged in this morning into the server and i see the following on the server<div style>Any thoughts?</div><div style><br></div><div style>Thx again.</div><div><br></div><div style>SERVER:</div><div><div> -sh-4.1$ id</div><div>uid=59401108(<a href="mailto:akhimji@corpnonprd.xxxx.com">akhimji@corpnonprd.xxxx.com</a>) gid=59401108(<a href="mailto:akhimji@corpnonprd.xxxx.com">akhimji@corpnonprd.xxxx.com</a>) groups=59401108(<a href="mailto:akhimji@corpnonprd.xxxx.com">akhimji@corpnonprd.xxxx.com</a>) context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023</div> <div><br></div></div><div style>CLIENT:</div><div style><div>-sh-4.1$ id<br></div><div>uid=59401108(<a href="mailto:akhimji@corpnonprd.xxxx.com">akhimji@corpnonprd.xxxx.com</a>) gid=59401108(<a href="mailto:akhimji@corpnonprd.xxxx.com">akhimji@corpnonprd.xxxx.com</a>) groups=59401108(<a href="mailto:akhimji@corpnonprd.xxxx.com">akhimji@corpnonprd.xxxx.com</a>),59400512(domain <a href="mailto:admins@corpnonprd.xxxx.com">admins@corpnonprd.xxxx.com</a>),59400513(domain <a href="mailto:users@corpnonprd.xxxx.com">users@corpnonprd.xxxx.com</a>),59401123(<a href="mailto:mirra-supapp-admin-corp-uat@corpnonprd.xxxx.com">mirra-supapp-admin-corp-uat@corpnonprd.xxxx.com</a>),162200012(mirra-supapp-admin-nix-cde) context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023</div> <div>-sh-4.1$</div><div><br></div><div style>CLIENT LOG:</div><div>(Tue Jun 4 09:35:51 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [ipa_s2n_get_user_done] (0x0040): s2n exop request failed.</div> <div>(Tue Jun 4 09:35:51 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [sdap_id_op_done] (0x0200): communication error on cached connection, moving to next server</div><div>(Tue Jun 4 09:35:51 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [acctinfo_callback] (0x0100): Request processed. Returned 3,110,User lookup failed</div> <div>(Tue Jun 4 09:36:17 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [be_get_account_info] (0x0100): Got request for [3][1][name=akhimji]</div><div>(Tue Jun 4 09:36:17 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [acctinfo_callback] (0x0100): Request processed. Returned 3,95,User lookup failed</div> <div>(Tue Jun 4 09:36:17 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [be_pam_handler] (0x0100): Got request with the following data</div><div>(Tue Jun 4 09:36:17 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [pam_print_data] (0x0100): command: PAM_AUTHENTICATE</div> <div>(Tue Jun 4 09:36:17 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [pam_print_data] (0x0100): domain: <a href="http://CorpNonPrd.xxxx.com">CorpNonPrd.xxxx.com</a></div><div>(Tue Jun 4 09:36:17 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [pam_print_data] (0x0100): user: <a href="mailto:akhimji@CorpNonPrd.xxxx.com">akhimji@CorpNonPrd.xxxx.com</a></div> <div>(Tue Jun 4 09:36:17 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [pam_print_data] (0x0100): service: sshd</div><div>(Tue Jun 4 09:36:17 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [pam_print_data] (0x0100): tty: ssh</div> <div>(Tue Jun 4 09:36:17 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [pam_print_data] (0x0100): ruser:</div><div>(Tue Jun 4 09:36:17 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [pam_print_data] (0x0100): rhost: 10.210.240.246</div> <div>(Tue Jun 4 09:36:17 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [pam_print_data] (0x0100): authtok type: 1</div><div>(Tue Jun 4 09:36:17 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [pam_print_data] (0x0100): authtok size: 11</div> <div>(Tue Jun 4 09:36:17 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [pam_print_data] (0x0100): newauthtok type: 0</div><div>(Tue Jun 4 09:36:17 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [pam_print_data] (0x0100): newauthtok size: 0</div> <div>(Tue Jun 4 09:36:17 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [pam_print_data] (0x0100): priv: 1</div><div>(Tue Jun 4 09:36:17 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [pam_print_data] (0x0100): cli_pid: 10644</div> <div>(Tue Jun 4 09:36:17 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [check_for_valid_tgt] (0x0020): krb5_cc_retrieve_cred failed.</div><div>(Tue Jun 4 09:36:17 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [fo_resolve_service_send] (0x0100): Trying to resolve service 'IPA'</div> <div>(Tue Jun 4 09:36:17 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [resolve_srv_send] (0x0200): The status of SRV lookup is resolved</div><div>(Tue Jun 4 09:36:17 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [be_resolve_server_process] (0x0200): Found address for server <a href="http://didmsvrua01.nix.corpnonprd.xxxx.com">didmsvrua01.nix.corpnonprd.xxxx.com</a>: [10.137.216.162] TTL 1200</div> <div>(Tue Jun 4 09:36:17 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [krb5_find_ccache_step] (0x0080): Saved ccache FILE:/tmp/krb5cc_59401108_opsH3I if of different type than ccache in configuration file, reusing the old ccache</div> <div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [fo_set_port_status] (0x0100): Marking port 389 of server '<a href="http://didmsvrua01.nix.corpnonprd.xxxx.com">didmsvrua01.nix.corpnonprd.xxxx.com</a>' as 'working'</div> <div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [set_server_common_status] (0x0100): Marking server '<a href="http://didmsvrua01.nix.corpnonprd.xxxx.com">didmsvrua01.nix.corpnonprd.xxxx.com</a>' as 'working'</div> <div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [be_pam_handler_callback] (0x0100): Backend returned: (0, 0, <NULL>) [Success]</div><div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [be_pam_handler_callback] (0x0100): Sending result [0][<a href="http://CorpNonPrd.xxxx.com">CorpNonPrd.xxxx.com</a>]</div> <div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [be_pam_handler_callback] (0x0100): Sent result [0][<a href="http://CorpNonPrd.xxxx.com">CorpNonPrd.xxxx.com</a>]</div> <div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [child_sig_handler] (0x0100): child [10648] finished successfully.</div><div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [be_get_account_info] (0x0100): Got request for [3][1][name=akhimji]</div> <div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [acctinfo_callback] (0x0100): <b>Request processed. Returned 3,95,User lookup failed</b></div><div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [be_pam_handler] (0x0100): Got request with the following data</div> <div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [pam_print_data] (0x0100): command: PAM_ACCT_MGMT</div><div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [pam_print_data] (0x0100): domain: <a href="http://CorpNonPrd.xxxx.com">CorpNonPrd.xxxx.com</a></div> <div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [pam_print_data] (0x0100): user: <a href="mailto:akhimji@CorpNonPrd.xxxx.com">akhimji@CorpNonPrd.xxxx.com</a></div> <div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [pam_print_data] (0x0100): service: sshd</div><div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [pam_print_data] (0x0100): tty: ssh</div> <div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [pam_print_data] (0x0100): ruser:</div><div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [pam_print_data] (0x0100): rhost: 10.210.240.246</div> <div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [pam_print_data] (0x0100): authtok type: 0</div><div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [pam_print_data] (0x0100): authtok size: 0</div> <div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [pam_print_data] (0x0100): newauthtok type: 0</div><div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [pam_print_data] (0x0100): newauthtok size: 0</div> <div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [pam_print_data] (0x0100): priv: 1</div><div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [pam_print_data] (0x0100): cli_pid: 10644</div> <div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [fo_resolve_service_send] (0x0100): Trying to resolve service 'IPA'</div><div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [resolve_srv_send] (0x0200): The status of SRV lookup is resolved</div> <div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [be_resolve_server_process] (0x0200): Found address for server <a href="http://didmsvrua01.nix.corpnonprd.xxxx.com">didmsvrua01.nix.corpnonprd.xxxx.com</a>: [10.137.216.162] TTL 1200</div> <div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [fo_resolve_service_send] (0x0100): Trying to resolve service 'IPA'</div><div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [resolve_srv_send] (0x0200): The status of SRV lookup is resolved</div> <div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [be_resolve_server_process] (0x0200): Found address for server <a href="http://didmsvrua01.nix.corpnonprd.xxxx.com">didmsvrua01.nix.corpnonprd.xxxx.com</a>: [10.137.216.162] TTL 1200</div> <div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [sdap_cli_auth_step] (0x0100): expire timeout is 900</div><div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [sasl_bind_send] (0x0100): Executing sasl bind mech: GSSAPI, user: host/<a href="http://rhidmclient.nix.corpnonprd.xxxx.com">rhidmclient.nix.corpnonprd.xxxx.com</a></div> <div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [child_sig_handler] (0x0100): child [10649] finished successfully.</div><div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [fo_set_port_status] (0x0100): Marking port 389 of server '<a href="http://didmsvrua01.nix.corpnonprd.xxxx.com">didmsvrua01.nix.corpnonprd.xxxx.com</a>' as 'working'</div> <div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [set_server_common_status] (0x0100): Marking server '<a href="http://didmsvrua01.nix.corpnonprd.xxxx.com">didmsvrua01.nix.corpnonprd.xxxx.com</a>' as 'working'</div> <div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [ipa_hostgroup_info_done] (0x0200): No host groups were dereferenced</div><div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [hbac_get_category] (0x0200): Category is set to 'all'.</div> <div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [hbac_get_category] (0x0200): Category is set to 'all'.</div><div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [hbac_get_category] (0x0200): Category is set to 'all'.</div> <div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [ipa_hbac_evaluate_rules] (0x0080): Access granted by HBAC rule [allow_all]</div><div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [be_pam_handler_callback] (0x0100): Backend returned: (0, 0, <NULL>) [Success]</div> <div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [sss_selinux_extract_user] (0x0040): sysdb_search_user_by_name failed.</div><div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [ipa_selinux_handler] (0x0040): Cannot create op context</div> <div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [be_pam_handler_callback] (0x0100): Backend returned: (3, 4, <NULL>) [Internal Error (System error)]</div> <div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [be_pam_handler_callback] (0x0100): Sending result [0][<a href="http://CorpNonPrd.xxxx.com">CorpNonPrd.xxxx.com</a>]</div> <div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [be_pam_handler_callback] (0x0100): Sent result [0][<a href="http://CorpNonPrd.xxxx.com">CorpNonPrd.xxxx.com</a>]</div> <div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [be_get_account_info] (0x0100): Got request for [4099][1][name=akhimji]</div><div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [acctinfo_callback] (0x0100): <b>Request processed. Returned 3,95,User lookup failed</b></div> <div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [be_get_account_info] (0x0100): Got request for [3][1][name=akhimji]</div><div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [acctinfo_callback] (0x0100): Request processed. Returned 3,95,User lookup failed</div> <div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [be_pam_handler] (0x0100): Got request with the following data</div><div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [pam_print_data] (0x0100): command: PAM_SETCRED</div> <div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [pam_print_data] (0x0100): domain: <a href="http://CorpNonPrd.xxxx.com">CorpNonPrd.xxxx.com</a></div><div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [pam_print_data] (0x0100): user: <a href="mailto:akhimji@CorpNonPrd.xxxx.com">akhimji@CorpNonPrd.xxxx.com</a></div> <div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [pam_print_data] (0x0100): service: sshd</div><div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [pam_print_data] (0x0100): tty: ssh</div> <div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [pam_print_data] (0x0100): ruser:</div><div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [pam_print_data] (0x0100): rhost: 10.210.240.246</div> <div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [pam_print_data] (0x0100): authtok type: 0</div><div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [pam_print_data] (0x0100): authtok size: 0</div> <div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [pam_print_data] (0x0100): newauthtok type: 0</div><div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [pam_print_data] (0x0100): newauthtok size: 0</div> <div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [pam_print_data] (0x0100): priv: 1</div><div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [pam_print_data] (0x0100): cli_pid: 10644</div> <div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [be_pam_handler] (0x0100): Sending result [0][<a href="http://CorpNonPrd.xxxx.com">CorpNonPrd.xxxx.com</a>]</div> <div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [be_get_account_info] (0x0100): Got request for [3][1][name=akhimji]</div><div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [acctinfo_callback] (0x0100): Request processed. Returned 3,95,User lookup failed</div> <div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [be_pam_handler] (0x0100): Got request with the following data</div><div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [pam_print_data] (0x0100): command: PAM_OPEN_SESSION</div> <div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [pam_print_data] (0x0100): domain: <a href="http://CorpNonPrd.xxxx.com">CorpNonPrd.xxxx.com</a></div><div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [pam_print_data] (0x0100): user: <a href="mailto:akhimji@CorpNonPrd.xxxx.com">akhimji@CorpNonPrd.xxxx.com</a></div> <div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [pam_print_data] (0x0100): service: sshd</div><div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [pam_print_data] (0x0100): tty: ssh</div> <div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [pam_print_data] (0x0100): ruser:</div><div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [pam_print_data] (0x0100): rhost: 10.210.240.246</div> <div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [pam_print_data] (0x0100): authtok type: 0</div><div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [pam_print_data] (0x0100): authtok size: 0</div> <div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [pam_print_data] (0x0100): newauthtok type: 0</div><div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [pam_print_data] (0x0100): newauthtok size: 0</div> <div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [pam_print_data] (0x0100): priv: 1</div><div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [pam_print_data] (0x0100): cli_pid: 10644</div> <div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [be_pam_handler] (0x0100): Sending result [0][<a href="http://CorpNonPrd.xxxx.com">CorpNonPrd.xxxx.com</a>]</div> <div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [be_get_account_info] (0x0100): Got request for [4099][1][name=akhimji]</div><div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [acctinfo_callback] (0x0100): Request processed. Returned 3,95,User lookup failed</div> <div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [be_get_account_info] (0x0100): Got request for [3][1][name=akhimji]</div><div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [acctinfo_callback] (0x0100): Request processed. Returned 3,95,User lookup failed</div> <div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [be_pam_handler] (0x0100): Got request with the following data</div><div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [pam_print_data] (0x0100): command: PAM_SETCRED</div> <div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [pam_print_data] (0x0100): domain: <a href="http://CorpNonPrd.xxxx.com">CorpNonPrd.xxxx.com</a></div><div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [pam_print_data] (0x0100): user: <a href="mailto:akhimji@CorpNonPrd.xxxx.com">akhimji@CorpNonPrd.xxxx.com</a></div> <div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [pam_print_data] (0x0100): service: sshd</div><div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [pam_print_data] (0x0100): tty: ssh</div> <div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [pam_print_data] (0x0100): ruser:</div><div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [pam_print_data] (0x0100): rhost: 10.210.240.246</div> <div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [pam_print_data] (0x0100): authtok type: 0</div><div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [pam_print_data] (0x0100): authtok size: 0</div> <div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [pam_print_data] (0x0100): newauthtok type: 0</div><div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [pam_print_data] (0x0100): newauthtok size: 0</div> <div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [pam_print_data] (0x0100): priv: 0</div><div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [pam_print_data] (0x0100): cli_pid: 10650</div> <div>(Tue Jun 4 09:36:18 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [be_pam_handler] (0x0100): Sending result [0][<a href="http://CorpNonPrd.xxxx.com">CorpNonPrd.xxxx.com</a>]</div> <div>(Tue Jun 4 09:36:23 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [be_get_account_info] (0x0100): Got request for [4098][1][idnumber=162200012]</div><div>(Tue Jun 4 09:36:23 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [sdap_nested_get_user_send] (0x0080):<b> Couldn't parse out user information based on DN (null), falling back to an LDAP lookup</b></div> <div>(Tue Jun 4 09:36:23 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [sdap_save_grpmem] (0x0040): F<b>ailed to save user mirra-supapp-admin-nix-cde</b></div><div>(Tue Jun 4 09:36:23 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [sdap_save_groups] (0x0040): <b>Failed to store group 0 members</b>.</div> <div>(Tue Jun 4 09:36:23 2013) [sssd[be[<a href="http://nix.corpnonprd.xxxx.com">nix.corpnonprd.xxxx.com</a>]]] [acctinfo_callback] (0x0100): Request processed. Returned 0,0,Success</div><div><br></div></div><div style>Aly</div> <div style><br></div><div><br></div><div><br></div><div><br></div></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Tue, Jun 4, 2013 at 3:56 AM, Sumit Bose <span dir="ltr"><<a href="mailto:sbose@redhat.com" target="_blank">sbose@redhat.com</a>></span> wrote:<br> <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="HOEnZb"><div class="h5">On Mon, Jun 03, 2013 at 09:22:21PM -0400, Aly Khimji wrote:<br> > Hey guys,<br> ><br> > Just wanted to say thank you for all your support with everything and<br> > answering all my questions.<br> ><br> > Just wanted to show you something, maybe you can shed some light..<br> > Below is my self running the ID command on 2 different nodes (1) the IDM<br> > server and the other the IDM client. I get two different results of my user<br> > ID, the client being correct and the server not having the correct groups<br> > displaying with the ID, and even having one that has been deleted.<br> ><br> > Is there someplace this information in cached? or I can set an invalidator<br> > so that the information is pulled down or is forced to expire quicker so<br> > its checked from AD?<br> ><br> > CLIENT:<br> > -sh-4.1$ hostname<br> > <a href="http://rhidmclient.nix.corpnonprd.xxxx.com" target="_blank">rhidmclient.nix.corpnonprd.xxxx.com</a><br> > -sh-4.1$ id<br> > uid=59401108(<a href="mailto:akhimji@corpnonprd.xxxx.com">akhimji@corpnonprd.xxxx.com</a>) gid=59401108(<br> > <a href="mailto:akhimji@corpnonprd.xxxx.com">akhimji@corpnonprd.xxxx.com</a>)<br> > groups=59401108(<a href="mailto:akhimji@corpnonprd.xxxx.com">akhimji@corpnonprd.xxxx.com</a>),59400512(domain<br> > <a href="mailto:admins@corpnonprd.xxxx.com">admins@corpnonprd.xxxx.com</a>),<br> > 59400513(domain <a href="mailto:users@corpnonprd.xxxx.com">users@corpnonprd.xxxx.com</a>),59401123(<br> > <a href="mailto:mirra-supapp-admin-corp-uat@corpnonprd.xxxx.com">mirra-supapp-admin-corp-uat@corpnonprd.xxxx.com</a>),<br> > 162200012(mirra-supapp-admin-nix-cde)<br> > context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023<br> ><br> ><br> > SERVER:<br> > <a href="http://didmsvrua01.nix.corpnonprd.xxxx.com" target="_blank">didmsvrua01.nix.corpnonprd.xxxx.com</a><br> > [root@didmsvrua01 ~]# id akhimji@corpnonprd<br> > uid=59401108(<a href="mailto:akhimji@corpnonprd.xxxx.com">akhimji@corpnonprd.xxxx.com</a>) gid=59401108(<br> > <a href="mailto:akhimji@corpnonprd.xxxx.com">akhimji@corpnonprd.xxxx.com</a>)<br> > groups=59401108(<a href="mailto:akhimji@corpnonprd.xxxx.com">akhimji@corpnonprd.xxxx.com</a>),59400513,59400513,59401113(<br> > <a href="mailto:seca@corpnonprd.xxxx.com">seca@corpnonprd.xxxx.com</a>)<br> ><br> > just a note this group [59401113(<a href="mailto:seca@corpnonprd.xxxx.com">seca@corpnonprd.xxxx.com</a>)] was deleted on<br> > AD, and correctly doesn't show up on the client, but remains in the server.<br> <br> </div></div>Group-memberships are cached for some time by SSSD so I would guess you<br> see cached data on the server. But during authentication the<br> group-memberships of a user are updated. Can you check if<br> <a href="mailto:seca@corpnonprd.xxxx.com">seca@corpnonprd.xxxx.com</a> does away if you log in with akhimji@corpnonprd<br> on the server?<br> <br> bye,<br> Sumit<br> <div class="im">><br> > Please let me know if you need more info (eg logs, etc..)<br> ><br> > Thx<br> ><br> > Aly<br> <br> </div>> _______________________________________________<br> > Freeipa-users mailing list<br> > <a href="mailto:Freeipa-users@redhat.com">Freeipa-users@redhat.com</a><br> > <a href="https://www.redhat.com/mailman/listinfo/freeipa-users" target="_blank">https://www.redhat.com/mailman/listinfo/freeipa-users</a><br> <br> _______________________________________________<br> Freeipa-users mailing list<br> <a href="mailto:Freeipa-users@redhat.com">Freeipa-users@redhat.com</a><br> <a href="https://www.redhat.com/mailman/listinfo/freeipa-users" target="_blank">https://www.redhat.com/mailman/listinfo/freeipa-users</a><br> </blockquote></div><br></div>