<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<p>Great, glad to hear it is working for you.</p>
<p>-Justin<br>
</p>
<br>
<div class="moz-cite-prefix">On 07/11/2016 01:46 PM, Tomas Simecek
wrote:<br>
</div>
<blockquote
cite="mid:CAHnWimLAPWRoGh8oVnVHznbyXs=qv-bzBwoEq0Lv+WYrdCyEWQ@mail.gmail.com"
type="cite">
<div dir="ltr">
<div>
<div>
<div>
<div>
<div>
<div>OK,<br>
</div>
thanks Justin, problem solved :-)<br>
</div>
I have re-checked the HBAC rule you mentioned and I
noticed I can add "sudo" to services. <br>
</div>
When I added, it suddenly works. I'm idiot.<br>
</div>
I thought that's why we have sudo rules in IPA.<br>
<br>
</div>
Thank you big time!<br>
<br>
</div>
Tomas<br>
</div>
<div class="gmail_extra"><br>
<div class="gmail_quote">2016-07-11 16:44 GMT+02:00 Justin
Stephenson <span dir="ltr"><<a moz-do-not-send="true"
href="mailto:jstephen@redhat.com" target="_blank">jstephen@redhat.com</a>></span>:<br>
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000">
<p>Hello,</p>
<p>From the logs below, it appears the failure occurs when
a HBAC evaluation is done. Can you double-check the HBAC
rule 'Unixari na test servery' ? Also, you can run the
below command for testing the expected HBAC rules are
allowing/denying access<br>
</p>
<p> # ipa hbactest --user '<a moz-do-not-send="true"
href="mailto:simecek.tomas@sd-stc.cz" target="_blank">simecek.tomas@sd-stc.cz</a>'
--host 'hostname' --service=sudo</p>
<p>----------------------------------------------------<br>
</p>
<blockquote>
<p><i>(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[hbac_attrs_to_rule] (0x1000): Processing rule
[Unixari na test servery]</i><i><br>
</i><i>(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[hbac_user_attrs_to_rule] (0x1000): Processing users
for rule [Unixari na test servery]</i><i><br>
</i><i>(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sysdb_search_users] (0x2000): Search users with
filter:
(&(objectclass=user)(originalDN=cn=grpunixadmins,cn=groups,cn=accounts,dc=linuxdomain,dc=cz))</i><i><br>
</i><i>(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sysdb_search_users] (0x2000): No such entry</i><i><br>
</i><i>(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sysdb_search_groups] (0x2000): Search groups with
filter:
(&(objectclass=group)(originalDN=cn=grpunixadmins,cn=groups,cn=accounts,dc=linuxdomain,dc=cz))</i><i><br>
</i><i>(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[hbac_user_attrs_to_rule] (0x2000): Added POSIX
group [grpunixadmins] to rule [Unixari na test
servery]</i><i><br>
</i><i>(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[hbac_service_attrs_to_rule] (0x1000): Processing
PAM services for rule [Unixari na test servery]</i><i><br>
</i><i>(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[hbac_service_attrs_to_rule] (0x2000): Added service
[login] to rule [Unixari na test servery]</i><i><br>
</i><i>(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[hbac_service_attrs_to_rule] (0x2000): Added service
[sshd] to rule [Unixari na test servery]</i><i><br>
</i><i>(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[hbac_thost_attrs_to_rule] (0x1000): Processing
target hosts for rule [Unixari na test servery]</i><i><br>
</i><i>(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[hbac_host_attrs_to_rule] (0x2000): Added host [<a
moz-do-not-send="true"
href="http://spcss-2t-www.linuxdomain.cz"
target="_blank">spcss-2t-www.linuxdomain.cz</a>]
to rule [Unixari na test servery]</i><i><br>
</i><i>(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[hbac_host_attrs_to_rule] (0x1000):
[fqdn=<a moz-do-not-send="true"
href="http://zp-cml-test.linuxdomain.cz"
target="_blank">zp-cml-test.linuxdomain.cz</a>,cn=computers,cn=accounts,dc=linuxdomain,dc=cz]
does not map to either a host or hostgroup. Skipping</i><i><br>
</i><i>(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[hbac_shost_attrs_to_rule] (0x0400): Processing
source hosts for rule [Unixari na test servery]</i><i><br>
</i><i>(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[hbac_shost_attrs_to_rule] (0x2000): Source hosts
disabled, setting ALL</i><i><br>
</i><i>(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[hbac_eval_user_element] (0x1000): [7] groups for [<a
moz-do-not-send="true"
href="mailto:simecek.tomas@sd-stc.cz"
target="_blank"><a class="moz-txt-link-abbreviated" href="mailto:simecek.tomas@sd-stc.cz">simecek.tomas@sd-stc.cz</a></a>]</i><i><br>
</i><i>(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[hbac_eval_user_element] (0x2000): Skipping
non-group memberOf
[CN=UnixAdmins,CN=Users,DC=sd-stc,DC=cz]</i><i><br>
</i><i>(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[hbac_eval_user_element] (0x2000): Skipping
non-group memberOf
[CN=administrator_Storage_DG,CN=Users,DC=sd-stc,DC=cz]</i><i><br>
</i><i>(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[hbac_eval_user_element] (0x2000): Skipping
non-group memberOf
[CN=mfcr_MFG,CN=Users,DC=sd-stc,DC=cz]</i><i><br>
</i><i>(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[hbac_eval_user_element] (0x2000): Skipping
non-group memberOf
[CN=ProvozSluzeb_DG,CN=Users,DC=sd-stc,DC=cz]</i><i><br>
</i><i>(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[hbac_eval_user_element] (0x2000): Skipping
non-group memberOf
[CN=central_DG,CN=Users,DC=sd-stc,DC=cz]</i><i><br>
</i><i>(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[hbac_eval_user_element] (0x2000): Skipping
non-group memberOf
[CN=bdcdocswriters,CN=Users,DC=sd-stc,DC=cz]</i><i><br>
</i><i>(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[hbac_eval_user_element] (0x1000): Added group
[grpunixadmins] for user [<a moz-do-not-send="true"
href="mailto:simecek.tomas@sd-stc.cz"
target="_blank">simecek.tomas@sd-stc.cz</a>]</i><i><br>
</i><i>(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[ipa_hbac_evaluate_rules] (0x0080): Access denied by
HBAC rules</i><i><br>
</i><i>(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[be_pam_handler_callback] (0x0100): Backend
returned: (0, 6, <NULL>) [Success (Permission
denied)]</i><i><br>
</i><i>(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[be_pam_handler_callback] (0x0100): Sending result
[6][<a moz-do-not-send="true"
href="http://sd-stc.cz" target="_blank">sd-stc.cz</a>]</i><i><br>
</i><i>(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[be_pam_handler_callback] (0x0100): Sent result [6][<a
moz-do-not-send="true" href="http://sd-stc.cz"
target="_blank">sd-stc.cz</a>]</i><br>
</p>
</blockquote>
<p><br>
</p>
<p>Kind regards,</p>
<p>Justin Stephenson<br>
</p>
<div>On 07/11/2016 03:04 AM, Tomas Simecek wrote:<br>
</div>
<blockquote type="cite">
<div dir="ltr">
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>Hi all,<br>
</div>
thanks and sorry for my late answer
again. I am new to mailing lists and I
assumed noone is respnding when mails
are not coming. <br>
</div>
I did not know I have to check on the
website.<br>
<br>
</div>
I have enabled sssd_sudo log and here are
outputs from sssd_sudo.log and
sssd_linuxdomain.cz.log when trying sudo
again:<br>
sssd_sudo.log:<br>
(Mon Jul 11 08:55:14 2016) [sssd[sudo]]
[accept_fd_handler] (0x0400): Client
connected!<br>
(Mon Jul 11 08:55:14 2016) [sssd[sudo]]
[sss_cmd_get_version] (0x0200): Received
client version [1].<br>
(Mon Jul 11 08:55:14 2016) [sssd[sudo]]
[sss_cmd_get_version] (0x0200): Offered
version [1].<br>
(Mon Jul 11 08:55:14 2016) [sssd[sudo]]
[sudosrv_cmd] (0x2000): Using protocol
version [1]<br>
(Mon Jul 11 08:55:14 2016) [sssd[sudo]]
[sss_parse_name_for_domains] (0x0200): name
'<a moz-do-not-send="true"
href="mailto:simecek.tomas@sd-stc.cz"
target="_blank">simecek.tomas@sd-stc.cz</a>'
matched expression for domain '<a
moz-do-not-send="true"
href="http://sd-stc.cz" target="_blank">sd-stc.cz</a>',
user is simecek.tomas<br>
(Mon Jul 11 08:55:14 2016) [sssd[sudo]]
[sss_parse_name_for_domains] (0x0200): name
'<a moz-do-not-send="true"
href="mailto:simecek.tomas@sd-stc.cz"
target="_blank">simecek.tomas@sd-stc.cz</a>'
matched expression for domain '<a
moz-do-not-send="true"
href="http://sd-stc.cz" target="_blank">sd-stc.cz</a>',
user is simecek.tomas<br>
(Mon Jul 11 08:55:14 2016) [sssd[sudo]]
[sudosrv_cmd_parse_query_done] (0x0200):
Requesting default options for
[simecek.tomas] from [<a
moz-do-not-send="true"
href="http://sd-stc.cz" target="_blank">sd-stc.cz</a>]<br>
(Mon Jul 11 08:55:14 2016) [sssd[sudo]]
[sss_ncache_check_str] (0x2000): Checking
negative cache for [NCE/USER/<a
moz-do-not-send="true"
href="http://sd-stc.cz/simecek.tomas"
target="_blank">sd-stc.cz/simecek.tomas</a>]<br>
(Mon Jul 11 08:55:14 2016) [sssd[sudo]]
[sudosrv_get_user] (0x0200): Requesting info
about [<a moz-do-not-send="true"
href="mailto:simecek.tomas@sd-stc.cz"
target="_blank">simecek.tomas@sd-stc.cz</a>]<br>
(Mon Jul 11 08:55:14 2016) [sssd[sudo]]
[sudosrv_get_user] (0x0400): Returning info
for user [<a moz-do-not-send="true"
href="mailto:simecek.tomas@sd-stc.cz"
target="_blank">simecek.tomas@sd-stc.cz</a>]<br>
(Mon Jul 11 08:55:14 2016) [sssd[sudo]]
[sudosrv_get_rules] (0x0400): Retrieving
default options for [<a
moz-do-not-send="true"
href="mailto:simecek.tomas@sd-stc.cz"
target="_blank"><a class="moz-txt-link-abbreviated" href="mailto:simecek.tomas@sd-stc.cz">simecek.tomas@sd-stc.cz</a></a>]
from [<a moz-do-not-send="true"
href="http://sd-stc.cz" target="_blank">sd-stc.cz</a>]<br>
(Mon Jul 11 08:55:14 2016) [sssd[sudo]]
[sysdb_search_group_by_gid] (0x0400): No
such entry<br>
(Mon Jul 11 08:55:14 2016) [sssd[sudo]]
[sudosrv_get_sudorules_query_cache]
(0x0200): Searching sysdb with
[(&(objectClass=sudoRule)(|(sudoUser=ALL)(name=defaults)(sudoUser=<a
moz-do-not-send="true"
href="mailto:simecek.tomas@sd-stc.cz"
target="_blank"><a class="moz-txt-link-abbreviated" href="mailto:simecek.tomas@sd-stc.cz">simecek.tomas@sd-stc.cz</a></a>)(sudoUser=#988604700)(sudoUser=%domain\<a
moz-do-not-send="true"
href="mailto:20users@sd-stc.cz"
target="_blank"><a class="moz-txt-link-abbreviated" href="mailto:20users@sd-stc.cz">20users@sd-stc.cz</a></a>)(sudoUser=%<a
moz-do-not-send="true"
href="mailto:unixadmins@sd-stc.cz"
target="_blank"><a class="moz-txt-link-abbreviated" href="mailto:unixadmins@sd-stc.cz">unixadmins@sd-stc.cz</a></a>)(sudoUser=%grpunixadmins)(sudoUser=%<a
moz-do-not-send="true"
href="mailto:mfcr_mfg@sd-stc.cz"
target="_blank"><a class="moz-txt-link-abbreviated" href="mailto:mfcr_mfg@sd-stc.cz">mfcr_mfg@sd-stc.cz</a></a>)(sudoUser=%<a
moz-do-not-send="true"
href="mailto:account@sd-stc.cz"
target="_blank"><a class="moz-txt-link-abbreviated" href="mailto:account@sd-stc.cz">account@sd-stc.cz</a></a>)(sudoUser=+*))(&(dataExpireTimestamp<=1468220114)))]<br>
(Mon Jul 11 08:55:14 2016) [sssd[sudo]]
[sudosrv_get_rules] (0x2000): About to get
sudo rules from cache<br>
(Mon Jul 11 08:55:14 2016) [sssd[sudo]]
[sudosrv_get_sudorules_query_cache]
(0x0200): Searching sysdb with
[(&(objectClass=sudoRule)(|(name=defaults)))]<br>
(Mon Jul 11 08:55:14 2016) [sssd[sudo]]
[sudosrv_get_sudorules_from_cache] (0x0400):
Returning 0 rules for [<default
options>@<a moz-do-not-send="true"
href="http://sd-stc.cz" target="_blank">sd-stc.cz</a>]<br>
(Mon Jul 11 08:55:14 2016) [sssd[sudo]]
[sudosrv_cmd] (0x2000): Using protocol
version [1]<br>
(Mon Jul 11 08:55:14 2016) [sssd[sudo]]
[sss_parse_name_for_domains] (0x0200): name
'<a moz-do-not-send="true"
href="mailto:simecek.tomas@sd-stc.cz"
target="_blank">simecek.tomas@sd-stc.cz</a>'
matched expression for domain '<a
moz-do-not-send="true"
href="http://sd-stc.cz" target="_blank">sd-stc.cz</a>',
user is simecek.tomas<br>
(Mon Jul 11 08:55:14 2016) [sssd[sudo]]
[sss_parse_name_for_domains] (0x0200): name
'<a moz-do-not-send="true"
href="mailto:simecek.tomas@sd-stc.cz"
target="_blank">simecek.tomas@sd-stc.cz</a>'
matched expression for domain '<a
moz-do-not-send="true"
href="http://sd-stc.cz" target="_blank">sd-stc.cz</a>',
user is simecek.tomas<br>
(Mon Jul 11 08:55:14 2016) [sssd[sudo]]
[sudosrv_cmd_parse_query_done] (0x0200):
Requesting rules for [simecek.tomas] from [<a
moz-do-not-send="true"
href="http://sd-stc.cz" target="_blank">sd-stc.cz</a>]<br>
(Mon Jul 11 08:55:14 2016) [sssd[sudo]]
[sss_ncache_check_str] (0x2000): Checking
negative cache for [NCE/USER/<a
moz-do-not-send="true"
href="http://sd-stc.cz/simecek.tomas"
target="_blank">sd-stc.cz/simecek.tomas</a>]<br>
(Mon Jul 11 08:55:14 2016) [sssd[sudo]]
[sudosrv_get_user] (0x0200): Requesting info
about [<a moz-do-not-send="true"
href="mailto:simecek.tomas@sd-stc.cz"
target="_blank">simecek.tomas@sd-stc.cz</a>]<br>
(Mon Jul 11 08:55:14 2016) [sssd[sudo]]
[sudosrv_get_user] (0x0400): Returning info
for user [<a moz-do-not-send="true"
href="mailto:simecek.tomas@sd-stc.cz"
target="_blank">simecek.tomas@sd-stc.cz</a>]<br>
(Mon Jul 11 08:55:14 2016) [sssd[sudo]]
[sudosrv_get_rules] (0x0400): Retrieving
rules for [<a moz-do-not-send="true"
href="mailto:simecek.tomas@sd-stc.cz"
target="_blank">simecek.tomas@sd-stc.cz</a>]
from [<a moz-do-not-send="true"
href="http://sd-stc.cz" target="_blank">sd-stc.cz</a>]<br>
(Mon Jul 11 08:55:14 2016) [sssd[sudo]]
[sysdb_search_group_by_gid] (0x0400): No
such entry<br>
(Mon Jul 11 08:55:14 2016) [sssd[sudo]]
[sudosrv_get_sudorules_query_cache]
(0x0200): Searching sysdb with
[(&(objectClass=sudoRule)(|(sudoUser=ALL)(name=defaults)(sudoUser=<a
moz-do-not-send="true"
href="mailto:simecek.tomas@sd-stc.cz"
target="_blank"><a class="moz-txt-link-abbreviated" href="mailto:simecek.tomas@sd-stc.cz">simecek.tomas@sd-stc.cz</a></a>)(sudoUser=#988604700)(sudoUser=%domain\<a
moz-do-not-send="true"
href="mailto:20users@sd-stc.cz"
target="_blank"><a class="moz-txt-link-abbreviated" href="mailto:20users@sd-stc.cz">20users@sd-stc.cz</a></a>)(sudoUser=%<a
moz-do-not-send="true"
href="mailto:unixadmins@sd-stc.cz"
target="_blank"><a class="moz-txt-link-abbreviated" href="mailto:unixadmins@sd-stc.cz">unixadmins@sd-stc.cz</a></a>)(sudoUser=%grpunixadmins)(sudoUser=%<a
moz-do-not-send="true"
href="mailto:mfcr_mfg@sd-stc.cz"
target="_blank"><a class="moz-txt-link-abbreviated" href="mailto:mfcr_mfg@sd-stc.cz">mfcr_mfg@sd-stc.cz</a></a>)(sudoUser=%<a
moz-do-not-send="true"
href="mailto:account@sd-stc.cz"
target="_blank"><a class="moz-txt-link-abbreviated" href="mailto:account@sd-stc.cz">account@sd-stc.cz</a></a>)(sudoUser=+*))(&(dataExpireTimestamp<=1468220114)))]<br>
(Mon Jul 11 08:55:14 2016) [sssd[sudo]]
[sudosrv_get_rules] (0x2000): About to get
sudo rules from cache<br>
(Mon Jul 11 08:55:14 2016) [sssd[sudo]]
[sysdb_search_group_by_gid] (0x0400): No
such entry<br>
(Mon Jul 11 08:55:14 2016) [sssd[sudo]]
[sudosrv_get_sudorules_query_cache]
(0x0200): Searching sysdb with
[(&(objectClass=sudoRule)(|(sudoUser=ALL)(sudoUser=<a
moz-do-not-send="true"
href="mailto:simecek.tomas@sd-stc.cz"
target="_blank"><a class="moz-txt-link-abbreviated" href="mailto:simecek.tomas@sd-stc.cz">simecek.tomas@sd-stc.cz</a></a>)(sudoUser=#988604700)(sudoUser=%domain\<a
moz-do-not-send="true"
href="mailto:20users@sd-stc.cz"
target="_blank"><a class="moz-txt-link-abbreviated" href="mailto:20users@sd-stc.cz">20users@sd-stc.cz</a></a>)(sudoUser=%<a
moz-do-not-send="true"
href="mailto:unixadmins@sd-stc.cz"
target="_blank"><a class="moz-txt-link-abbreviated" href="mailto:unixadmins@sd-stc.cz">unixadmins@sd-stc.cz</a></a>)(sudoUser=%grpunixadmins)(sudoUser=%<a
moz-do-not-send="true"
href="mailto:mfcr_mfg@sd-stc.cz"
target="_blank"><a class="moz-txt-link-abbreviated" href="mailto:mfcr_mfg@sd-stc.cz">mfcr_mfg@sd-stc.cz</a></a>)(sudoUser=%<a
moz-do-not-send="true"
href="mailto:account@sd-stc.cz"
target="_blank"><a class="moz-txt-link-abbreviated" href="mailto:account@sd-stc.cz">account@sd-stc.cz</a></a>)(sudoUser=+*)))]<br>
(Mon Jul 11 08:55:14 2016) [sssd[sudo]]
[sort_sudo_rules] (0x0400): Sorting rules
with higher-wins logic<br>
(Mon Jul 11 08:55:14 2016) [sssd[sudo]]
[sudosrv_get_sudorules_from_cache] (0x0400):
Returning 1 rules for [<a
moz-do-not-send="true"
href="mailto:simecek.tomas@sd-stc.cz"
target="_blank"><a class="moz-txt-link-abbreviated" href="mailto:simecek.tomas@sd-stc.cz">simecek.tomas@sd-stc.cz</a></a>]<br>
(Mon Jul 11 08:55:21 2016) [sssd[sudo]]
[sbus_message_handler] (0x2000): Received
SBUS method
org.freedesktop.sssd.service.ping on path
/org/freedesktop/sssd/service<br>
(Mon Jul 11 08:55:21 2016) [sssd[sudo]]
[sbus_get_sender_id_send] (0x2000): Not a
sysbus message, quit<br>
<br>
</div>
Looking at it with my untrained eye gives no
clue what could be wrong.<br>
<br>
</div>
Here is sssd_linuxdomain.cz.log from the same
moment:<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sbus_message_handler] (0x2000): Received SBUS
method
org.freedesktop.sssd.dataprovider.getAccountInfo
on path /org/freedesktop/sssd/dataprovider<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sbus_get_sender_id_send] (0x2000): Not a sysbus
message, quit<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[be_get_account_info] (0x0200): Got request for
[0x1002][1][name=grpunixadmins]<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[be_req_set_domain] (0x0400): Changing request
domain from [<a moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]
to [<a moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_groups_next_base] (0x0400): Searching
for groups with base
[cn=accounts,dc=linuxdomain,dc=cz]<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_print_server] (0x2000): Searching
10.1.123.103<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x0400): calling
ldap_search_ext with
[(&(cn=grpunixadmins)(|(objectClass=ipaUserGroup)(objectClass=posixGroup))(cn=*)(&(gidNumber=*)(!(gidNumber=0))))][cn=accounts,dc=linuxdomain,dc=cz].<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x1000): Requesting
attrs: [objectClass]<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x1000): Requesting
attrs: [posixGroup]<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x1000): Requesting
attrs: [cn]<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x1000): Requesting
attrs: [userPassword]<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x1000): Requesting
attrs: [gidNumber]<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x1000): Requesting
attrs: [member]<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x1000): Requesting
attrs: [ipaUniqueID]<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x1000): Requesting
attrs: [ipaNTSecurityIdentifier]<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x1000): Requesting
attrs: [modifyTimestamp]<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x1000): Requesting
attrs: [entryUSN]<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x2000):
ldap_search_ext called, msgid = 32<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_op_add] (0x2000): New operation 32 timeout
6<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_process_result] (0x2000): Trace:
sh[0x7f8415400af0], connected[1],
ops[0x7f84153cc180], ldap[0x7f8415405dc0]<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_entry] (0x1000): OriginalDN:
[cn=grpunixadmins,cn=groups,cn=accounts,dc=linuxdomain,dc=cz].<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [objectClass]<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [cn]<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [gidNumber]<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [member]<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [ipaUniqueID]<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [ipaNTSecurityIdentifier]<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [modifyTimestamp]<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [entryUSN]<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_process_result] (0x2000): Trace:
sh[0x7f8415400af0], connected[1],
ops[0x7f84153cc180], ldap[0x7f8415405dc0]<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_op_finished] (0x0400): Search
result: Success(0), no errmsg set<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_op_destructor] (0x2000): Operation 32
finished<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_groups_process] (0x0400): Search for
groups, returned 1 results.<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_has_deref_support] (0x0400): The server
supports deref method OpenLDAP<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_nested_group_process_send] (0x2000): About
to process group
[cn=grpunixadmins,cn=groups,cn=accounts,dc=linuxdomain,dc=cz]<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sysdb_search_users] (0x2000): Search users with
filter:
(&(objectclass=user)(originalDN=cn=ad_admins_external,cn=groups,cn=accounts,dc=linuxdomain,dc=cz))<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sysdb_search_users] (0x2000): No such entry<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sysdb_search_groups] (0x2000): Search groups
with filter:
(&(objectclass=group)(originalDN=cn=ad_admins_external,cn=groups,cn=accounts,dc=linuxdomain,dc=cz))<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_nested_group_process_send] (0x2000):
Looking up 1/1 members of group
[cn=grpunixadmins,cn=groups,cn=accounts,dc=linuxdomain,dc=cz]<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_nested_group_process_send] (0x2000):
Members of group
[cn=grpunixadmins,cn=groups,cn=accounts,dc=linuxdomain,dc=cz]
will be processed individually<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_print_server] (0x2000): Searching
10.1.123.103<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x0400): calling
ldap_search_ext with
[(&(|(objectClass=ipaUserGroup)(objectClass=posixGroup))(cn=*))][cn=ad_admins_external,cn=groups,cn=accounts,dc=linuxdomain,dc=cz].<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x1000): Requesting
attrs: [objectClass]<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x1000): Requesting
attrs: [posixGroup]<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x1000): Requesting
attrs: [cn]<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x1000): Requesting
attrs: [userPassword]<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x1000): Requesting
attrs: [gidNumber]<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x1000): Requesting
attrs: [member]<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x1000): Requesting
attrs: [ipaUniqueID]<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x1000): Requesting
attrs: [ipaNTSecurityIdentifier]<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x1000): Requesting
attrs: [modifyTimestamp]<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x1000): Requesting
attrs: [entryUSN]<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x2000):
ldap_search_ext called, msgid = 33<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_op_add] (0x2000): New operation 33 timeout
6<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_process_result] (0x2000): Trace:
sh[0x7f8415400af0], connected[1],
ops[0x7f8415450e50], ldap[0x7f8415405dc0]<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_process_result] (0x2000): Trace:
ldap_result found nothing!<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_process_result] (0x2000): Trace:
sh[0x7f8415400af0], connected[1],
ops[0x7f8415450e50], ldap[0x7f8415405dc0]<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_entry] (0x1000): OriginalDN:
[cn=ad_admins_external,cn=groups,cn=accounts,dc=linuxdomain,dc=cz].<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [objectClass]<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [cn]<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [ipaUniqueID]<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [modifyTimestamp]<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [entryUSN]<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_process_result] (0x2000): Trace:
sh[0x7f8415400af0], connected[1],
ops[0x7f8415450e50], ldap[0x7f8415405dc0]<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_op_finished] (0x0400): Search
result: Success(0), no errmsg set<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_op_destructor] (0x2000): Operation 33
finished<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_nested_group_hash_group] (0x2000): Marking
group as non-posix and setting GID=0!<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_nested_group_process_send] (0x2000): About
to process group
[cn=ad_admins_external,cn=groups,cn=accounts,dc=linuxdomain,dc=cz]<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_nested_group_recv] (0x0400): 0 users found
in the hash table<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_nested_group_recv] (0x0400): 2 groups
found in the hash table<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_primary_name] (0x0400): Processing
object grpunixadmins<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_save_group] (0x0400): Processing group
grpunixadmins<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_save_group] (0x2000): This is a posix
group<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_attrs_add_ldap_attr] (0x2000): Adding
original DN
[cn=grpunixadmins,cn=groups,cn=accounts,dc=linuxdomain,dc=cz]
to attributes of [grpunixadmins].<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_attrs_add_ldap_attr] (0x2000): Adding
original mod-Timestamp [20160629090835Z] to
attributes of [grpunixadmins].<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_process_ghost_members] (0x0400): The group
has 1 members<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_process_ghost_members] (0x0400): Group has
1 members<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_save_group] (0x0400): Storing info for
group grpunixadmins<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_attrs_get_sid_str] (0x1000): No
[objectSIDString] attribute. [0][Success]<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_primary_name] (0x0400): Processing
object ad_admins_external<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_save_group] (0x0400): Processing group
ad_admins_external<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_save_group] (0x2000): This is not a posix
group<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_attrs_add_ldap_attr] (0x2000): Adding
original DN
[cn=ad_admins_external,cn=groups,cn=accounts,dc=linuxdomain,dc=cz]
to attributes of [ad_admins_external].<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_attrs_add_ldap_attr] (0x2000): Adding
original mod-Timestamp [20160629090835Z] to
attributes of [ad_admins_external].<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_process_ghost_members] (0x0400): The group
has 0 members<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_process_ghost_members] (0x0400): Group has
0 members<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_save_group] (0x0400): Storing info for
group ad_admins_external<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_primary_name] (0x0400): Processing
object grpunixadmins<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_save_grpmem] (0x0400): Processing group
grpunixadmins<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_save_grpmem] (0x0400): Adding member users
to group [grpunixadmins]<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_fill_memberships] (0x1000): member #0
(cn=ad_admins_external,cn=groups,cn=accounts,dc=linuxdomain,dc=cz):
[name=ad_admins_external,cn=groups,cn=<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>,cn=sysdb]<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_primary_name] (0x0400): Processing
object ad_admins_external<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_save_grpmem] (0x0400): Processing group
ad_admins_external<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_save_grpmem] (0x0400): Failed to get group
sid<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_save_grpmem] (0x0400): No members for
group [ad_admins_external]<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_nested_done] (0x2000): No external
members, done(Mon Jul 11 08:55:14 2016)
[sssd[be[<a moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_print_server] (0x2000): Searching
10.1.123.103<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x0400): calling
ldap_search_ext with
[(&(objectClass=ipaOverrideAnchor)(ipaAnchorUUID=:IPA:linuxdomain.cz:1f46c9d8-3c33-11e6-9653-005056961bfa))][cn=Default
Trust
View,cn=views,cn=accounts,dc=linuxdomain,dc=cz].<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x2000):
ldap_search_ext called, msgid = 34<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_op_add] (0x2000): New operation 34 timeout
60<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_process_result] (0x2000): Trace:
sh[0x7f8415400af0], connected[1],
ops[0x7f841543e380], ldap[0x7f8415405dc0]<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_process_result] (0x2000): Trace:
ldap_result found nothing!<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_process_result] (0x2000): Trace:
sh[0x7f8415400af0], connected[1],
ops[0x7f841543e380], ldap[0x7f8415405dc0]<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_op_finished] (0x0400): Search
result: Success(0), no errmsg set<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_op_destructor] (0x2000): Operation 34
finished<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[acctinfo_callback] (0x0100): Request processed.
Returned 0,0,Success (Success)<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_process_result] (0x2000): Trace:
sh[0x7f8415400af0], connected[1], ops[(nil)],
ldap[0x7f8415405dc0]<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_process_result] (0x2000): Trace:
ldap_result found nothing!<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sbus_message_handler] (0x2000): Received SBUS
method
org.freedesktop.sssd.dataprovider.getAccountInfo
on path /org/freedesktop/sssd/dataprovider<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sbus_get_sender_id_send] (0x2000): Not a sysbus
message, quit<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[be_get_account_info] (0x0200): Got request for
[0x3][1][name=simecek.tomas]<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[be_req_set_domain] (0x0400): Changing request
domain from [<a moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]
to [<a moz-do-not-send="true"
href="http://sd-stc.cz" target="_blank">sd-stc.cz</a>]<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_print_server] (0x2000): Searching
10.1.123.103<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x0400): calling
ldap_search_ext with
[(&(objectClass=ipaUserOverride)(uid=simecek.tomas))][cn=Default
Trust
View,cn=views,cn=accounts,dc=linuxdomain,dc=cz].<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x2000):
ldap_search_ext called, msgid = 35<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_op_add] (0x2000): New operation 35 timeout
60<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_process_result] (0x2000): Trace:
sh[0x7f8415400af0], connected[1],
ops[0x7f84153cece0], ldap[0x7f8415405dc0]<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_op_finished] (0x0400): Search
result: Success(0), no errmsg set<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_op_destructor] (0x2000): Operation 35
finished<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[ipa_s2n_exop_send] (0x0400): Executing extended
operation<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[ipa_s2n_exop_send] (0x2000):
ldap_extended_operation sent, msgid = 36<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_op_add] (0x2000): New operation 36 timeout
6<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_process_result] (0x2000): Trace:
sh[0x7f8415400af0], connected[1],
ops[0x7f841540fe90], ldap[0x7f8415405dc0]<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_process_result] (0x2000): Trace:
ldap_result found nothing!<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_process_result] (0x2000): Trace:
sh[0x7f8415400af0], connected[1],
ops[0x7f841540fe90], ldap[0x7f8415405dc0]<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[ipa_s2n_exop_done] (0x0400):
ldap_extended_operation result: Success(0),
(null).<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_op_destructor] (0x2000): Operation 36
finished<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sysdb_search_by_name] (0x0400): No such entry<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[ipa_s2n_exop_send] (0x0400): Executing extended
operation<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[ipa_s2n_exop_send] (0x2000):
ldap_extended_operation sent, msgid = 37<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_op_add] (0x2000): New operation 37 timeout
6<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_process_result] (0x2000): Trace:
sh[0x7f8415400af0], connected[1],
ops[0x7f84154511d0], ldap[0x7f8415405dc0]<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_process_result] (0x2000): Trace:
ldap_result found nothing!<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_process_result] (0x2000): Trace:
sh[0x7f8415400af0], connected[1],
ops[0x7f84154511d0], ldap[0x7f8415405dc0]<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[ipa_s2n_exop_done] (0x0400):
ldap_extended_operation result: Success(0),
(null).<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_op_destructor] (0x2000): Operation 37
finished<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[ipa_s2n_save_objects] (0x2000): Updating
memberships for <a moz-do-not-send="true"
href="mailto:simecek.tomas@sd-stc.cz"
target="_blank">simecek.tomas@sd-stc.cz</a><br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sysdb_mod_group_member] (0x0080): ldb_modify
failed: [No such object](32)[ldb_wait: No such
object (32)]<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sysdb_mod_group_member] (0x0400): Error: 2 (No
such file or directory)<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sysdb_update_members_ex] (0x0020): Could not
add member [<a moz-do-not-send="true"
href="mailto:simecek.tomas@sd-stc.cz"
target="_blank">simecek.tomas@sd-stc.cz</a>]
to group [name=<a moz-do-not-send="true"
href="mailto:simecek.tomas@sd-stc.cz"
target="_blank">simecek.tomas@sd-stc.cz</a>,cn=groups,cn=<a
moz-do-not-send="true" href="http://sd-stc.cz"
target="_blank">sd-stc.cz</a>,cn=sysdb].
Skipping.<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[ipa_s2n_save_objects] (0x2000): Updating
memberships for <a moz-do-not-send="true"
href="mailto:simecek.tomas@sd-stc.cz"
target="_blank">simecek.tomas@sd-stc.cz</a><br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sysdb_mod_group_member] (0x0080): ldb_modify
failed: [No such object](32)[ldb_wait: No such
object (32)]<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sysdb_mod_group_member] (0x0400): Error: 2 (No
such file or directory)<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sysdb_update_members_ex] (0x0020): Could not
add member [<a moz-do-not-send="true"
href="mailto:simecek.tomas@sd-stc.cz"
target="_blank">simecek.tomas@sd-stc.cz</a>]
to group [name=<a moz-do-not-send="true"
href="mailto:simecek.tomas@sd-stc.cz"
target="_blank">simecek.tomas@sd-stc.cz</a>,cn=groups,cn=<a
moz-do-not-send="true" href="http://sd-stc.cz"
target="_blank">sd-stc.cz</a>,cn=sysdb].
Skipping.<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[acctinfo_callback] (0x0100): Request processed.
Returned 0,0,Success (Success)<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_process_result] (0x2000): Trace:
sh[0x7f8415400af0], connected[1], ops[(nil)],
ldap[0x7f8415405dc0]<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_process_result] (0x2000): Trace:
ldap_result found nothing!<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sbus_message_handler] (0x2000): Received SBUS
method
org.freedesktop.sssd.dataprovider.pamHandler on
path /org/freedesktop/sssd/dataprovider<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sbus_get_sender_id_send] (0x2000): Not a sysbus
message, quit<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[be_req_set_domain] (0x0400): Changing request
domain from [<a moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]
to [<a moz-do-not-send="true"
href="http://sd-stc.cz" target="_blank">sd-stc.cz</a>]<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[be_pam_handler] (0x0100): Got request with the
following data<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[pam_print_data] (0x0100): command:
SSS_PAM_PREAUTH<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[pam_print_data] (0x0100): domain: <a
moz-do-not-send="true" href="http://sd-stc.cz"
target="_blank">sd-stc.cz</a><br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[pam_print_data] (0x0100): user: <a
moz-do-not-send="true"
href="mailto:simecek.tomas@sd-stc.cz"
target="_blank"><a class="moz-txt-link-abbreviated" href="mailto:simecek.tomas@sd-stc.cz">simecek.tomas@sd-stc.cz</a></a><br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[pam_print_data] (0x0100): service: sudo<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[pam_print_data] (0x0100): tty: /dev/pts/0<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[pam_print_data] (0x0100): ruser: <a
moz-do-not-send="true"
href="mailto:simecek.tomas@sd-stc.cz"
target="_blank"><a class="moz-txt-link-abbreviated" href="mailto:simecek.tomas@sd-stc.cz">simecek.tomas@sd-stc.cz</a></a><br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[pam_print_data] (0x0100): rhost: <br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[pam_print_data] (0x0100): authtok type: 0<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[pam_print_data] (0x0100): newauthtok type: 0<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[pam_print_data] (0x0100): priv: 0<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[pam_print_data] (0x0100): cli_pid: 30819<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[pam_print_data] (0x0100): logon name: not set<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[krb5_auth_queue_send] (0x1000): Wait queue of
user [<a moz-do-not-send="true"
href="mailto:simecek.tomas@sd-stc.cz"
target="_blank">simecek.tomas@sd-stc.cz</a>]
is empty, running request [0x7f8415414ac0]
immediately.<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[fo_resolve_service_send] (0x0100): Trying to
resolve service 'IPA'<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[get_server_status] (0x1000): Status of server '<a
moz-do-not-send="true"
href="http://svlxxipap.linuxdomain.cz"
target="_blank">svlxxipap.linuxdomain.cz</a>'
is 'working'<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[get_port_status] (0x1000): Port status of port
0 for server '<a moz-do-not-send="true"
href="http://svlxxipap.linuxdomain.cz"
target="_blank">svlxxipap.linuxdomain.cz</a>'
is 'working'<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[fo_resolve_service_activate_timeout] (0x2000):
Resolve timeout set to 6 seconds<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[get_server_status] (0x1000): Status of server '<a
moz-do-not-send="true"
href="http://svlxxipap.linuxdomain.cz"
target="_blank">svlxxipap.linuxdomain.cz</a>'
is 'working'<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[be_resolve_server_process] (0x1000): Saving the
first resolved server<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[be_resolve_server_process] (0x0200): Found
address for server <a moz-do-not-send="true"
href="http://svlxxipap.linuxdomain.cz"
target="_blank">svlxxipap.linuxdomain.cz</a>:
[10.1.123.103] TTL 1028<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[ipa_resolve_callback] (0x0400): Constructed uri
'<a moz-do-not-send="true">ldap://</a><a
moz-do-not-send="true"
href="http://svlxxipap.linuxdomain.cz"
target="_blank">svlxxipap.linuxdomain.cz</a>'<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sss_krb5_realm_has_proxy] (0x0040):
profile_get_values failed.<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[child_handler_setup] (0x2000): Setting up
signal handler up for pid [30820]<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[child_handler_setup] (0x2000): Signal handler
set up for pid [30820]<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[write_pipe_handler] (0x0400): All data has been
sent!<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[read_pipe_handler] (0x0400): EOF received,
client finished<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[fo_set_port_status] (0x0100): Marking port 0 of
server '<a moz-do-not-send="true"
href="http://svlxxipap.linuxdomain.cz"
target="_blank">svlxxipap.linuxdomain.cz</a>'
as 'working'<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[set_server_common_status] (0x0100): Marking
server '<a moz-do-not-send="true"
href="http://svlxxipap.linuxdomain.cz"
target="_blank">svlxxipap.linuxdomain.cz</a>'
as 'working'<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[fo_set_port_status] (0x0400): Marking port 0 of
duplicate server '<a moz-do-not-send="true"
href="http://svlxxipap.linuxdomain.cz"
target="_blank">svlxxipap.linuxdomain.cz</a>'
as 'working'<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[krb5_auth_store_creds] (0x0010): unsupported
PAM command [249].<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[krb5_auth_store_creds] (0x0010): password not
available, offline auth may not work.<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[check_wait_queue] (0x1000): Wait queue for user
[<a moz-do-not-send="true"
href="mailto:simecek.tomas@sd-stc.cz"
target="_blank">simecek.tomas@sd-stc.cz</a>]
is empty.<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[krb5_auth_queue_done] (0x1000): krb5_auth_queue
request [0x7f8415414ac0] done.<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[be_pam_handler_callback] (0x0100): Backend
returned: (0, 0, <NULL>) [Success
(Success)]<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[be_pam_handler_callback] (0x0100): Sending
result [0][<a moz-do-not-send="true"
href="http://sd-stc.cz" target="_blank">sd-stc.cz</a>]<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[be_pam_handler_callback] (0x0100): Sent result
[0][<a moz-do-not-send="true"
href="http://sd-stc.cz" target="_blank">sd-stc.cz</a>]<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[child_sig_handler] (0x1000): Waiting for child
[30820].<br>
(Mon Jul 11 08:55:14 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[child_sig_handler] (0x0100): child [30820]
finished successfully.<br>
(Mon Jul 11 08:55:18 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sbus_message_handler] (0x2000): Received SBUS
method
org.freedesktop.sssd.dataprovider.pamHandler on
path /org/freedesktop/sssd/dataprovider<br>
(Mon Jul 11 08:55:18 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sbus_get_sender_id_send] (0x2000): Not a sysbus
message, quit<br>
(Mon Jul 11 08:55:18 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[be_req_set_domain] (0x0400): Changing request
domain from [<a moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]
to [<a moz-do-not-send="true"
href="http://sd-stc.cz" target="_blank">sd-stc.cz</a>]<br>
(Mon Jul 11 08:55:18 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[be_pam_handler] (0x0100): Got request with the
following data<br>
(Mon Jul 11 08:55:18 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[pam_print_data] (0x0100): command:
PAM_AUTHENTICATE<br>
(Mon Jul 11 08:55:18 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[pam_print_data] (0x0100): domain: <a
moz-do-not-send="true" href="http://sd-stc.cz"
target="_blank">sd-stc.cz</a><br>
(Mon Jul 11 08:55:18 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[pam_print_data] (0x0100): user: <a
moz-do-not-send="true"
href="mailto:simecek.tomas@sd-stc.cz"
target="_blank"><a class="moz-txt-link-abbreviated" href="mailto:simecek.tomas@sd-stc.cz">simecek.tomas@sd-stc.cz</a></a><br>
(Mon Jul 11 08:55:18 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[pam_print_data] (0x0100): service: sudo<br>
(Mon Jul 11 08:55:18 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[pam_print_data] (0x0100): tty: /dev/pts/0<br>
(Mon Jul 11 08:55:18 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[pam_print_data] (0x0100): ruser: <a
moz-do-not-send="true"
href="mailto:simecek.tomas@sd-stc.cz"
target="_blank"><a class="moz-txt-link-abbreviated" href="mailto:simecek.tomas@sd-stc.cz">simecek.tomas@sd-stc.cz</a></a><br>
(Mon Jul 11 08:55:18 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[pam_print_data] (0x0100): rhost: <br>
(Mon Jul 11 08:55:18 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[pam_print_data] (0x0100): authtok type: 1<br>
(Mon Jul 11 08:55:18 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[pam_print_data] (0x0100): newauthtok type: 0<br>
(Mon Jul 11 08:55:18 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[pam_print_data] (0x0100): priv: 0<br>
(Mon Jul 11 08:55:18 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[pam_print_data] (0x0100): cli_pid: 30819<br>
(Mon Jul 11 08:55:18 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[pam_print_data] (0x0100): logon name: not set<br>
(Mon Jul 11 08:55:18 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[krb5_auth_queue_send] (0x1000): Wait queue of
user [<a moz-do-not-send="true"
href="mailto:simecek.tomas@sd-stc.cz"
target="_blank">simecek.tomas@sd-stc.cz</a>]
is empty, running request [0x7f841541e810]
immediately.<br>
(Mon Jul 11 08:55:18 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[fo_resolve_service_send] (0x0100): Trying to
resolve service 'IPA'<br>
(Mon Jul 11 08:55:18 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[get_server_status] (0x1000): Status of server '<a
moz-do-not-send="true"
href="http://svlxxipap.linuxdomain.cz"
target="_blank">svlxxipap.linuxdomain.cz</a>'
is 'working'<br>
(Mon Jul 11 08:55:18 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[get_port_status] (0x1000): Port status of port
0 for server '<a moz-do-not-send="true"
href="http://svlxxipap.linuxdomain.cz"
target="_blank">svlxxipap.linuxdomain.cz</a>'
is 'working'<br>
(Mon Jul 11 08:55:18 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[fo_resolve_service_activate_timeout] (0x2000):
Resolve timeout set to 6 seconds<br>
(Mon Jul 11 08:55:18 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[get_server_status] (0x1000): Status of server '<a
moz-do-not-send="true"
href="http://svlxxipap.linuxdomain.cz"
target="_blank">svlxxipap.linuxdomain.cz</a>'
is 'working'<br>
(Mon Jul 11 08:55:18 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[be_resolve_server_process] (0x1000): Saving the
first resolved server<br>
(Mon Jul 11 08:55:18 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[be_resolve_server_process] (0x0200): Found
address for server <a moz-do-not-send="true"
href="http://svlxxipap.linuxdomain.cz"
target="_blank">svlxxipap.linuxdomain.cz</a>:
[10.1.123.103] TTL 1028<br>
(Mon Jul 11 08:55:18 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[ipa_resolve_callback] (0x0400): Constructed uri
'<a moz-do-not-send="true">ldap://</a><a
moz-do-not-send="true"
href="http://svlxxipap.linuxdomain.cz"
target="_blank">svlxxipap.linuxdomain.cz</a>'<br>
(Mon Jul 11 08:55:18 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sss_krb5_realm_has_proxy] (0x0040):
profile_get_values failed.<br>
(Mon Jul 11 08:55:18 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[child_handler_setup] (0x2000): Setting up
signal handler up for pid [30821]<br>
(Mon Jul 11 08:55:18 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[child_handler_setup] (0x2000): Signal handler
set up for pid [30821]<br>
(Mon Jul 11 08:55:18 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[write_pipe_handler] (0x0400): All data has been
sent!<br>
(Mon Jul 11 08:55:18 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sbus_message_handler] (0x2000): Received SBUS
method
org.freedesktop.sssd.dataprovider.getDomains on
path /org/freedesktop/sssd/dataprovider<br>
(Mon Jul 11 08:55:18 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sbus_get_sender_id_send] (0x2000): Not a sysbus
message, quit<br>
(Mon Jul 11 08:55:18 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[be_get_subdomains] (0x0400): Got get subdomains
[SD-STC]<br>
(Mon Jul 11 08:55:18 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_print_server] (0x2000): Searching
10.1.123.103<br>
(Mon Jul 11 08:55:18 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x0400): calling
ldap_search_ext with
[objectclass=ipaIDRange][cn=ranges,cn=etc,dc=linuxdomain,dc=cz].<br>
(Mon Jul 11 08:55:18 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x1000): Requesting
attrs: [objectClass]<br>
(Mon Jul 11 08:55:18 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x1000): Requesting
attrs: [cn]<br>
(Mon Jul 11 08:55:18 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x1000): Requesting
attrs: [ipaBaseID]<br>
(Mon Jul 11 08:55:18 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x1000): Requesting
attrs: [ipaBaseRID]<br>
(Mon Jul 11 08:55:18 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x1000): Requesting
attrs: [ipaSecondaryBaseRID]<br>
(Mon Jul 11 08:55:18 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x1000): Requesting
attrs: [ipaIDRangeSize]<br>
(Mon Jul 11 08:55:18 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x1000): Requesting
attrs: [ipaNTTrustedDomainSID]<br>
(Mon Jul 11 08:55:18 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x1000): Requesting
attrs: [ipaRangeType]<br>
(Mon Jul 11 08:55:18 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x2000):
ldap_search_ext called, msgid = 38<br>
(Mon Jul 11 08:55:18 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_op_add] (0x2000): New operation 38 timeout
6<br>
(Mon Jul 11 08:55:18 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_process_result] (0x2000): Trace:
sh[0x7f8415400af0], connected[1],
ops[0x7f841542c770], ldap[0x7f8415405dc0]<br>
(Mon Jul 11 08:55:18 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_entry] (0x1000): OriginalDN:
[cn=LINUXDOMAIN.CZ_id_range,cn=ranges,cn=etc,dc=linuxdomain,dc=cz].<br>
(Mon Jul 11 08:55:18 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [objectClass]<br>
(Mon Jul 11 08:55:18 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [cn]<br>
(Mon Jul 11 08:55:18 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [ipaBaseID]<br>
(Mon Jul 11 08:55:18 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [ipaBaseRID]<br>
(Mon Jul 11 08:55:18 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [ipaSecondaryBaseRID]<br>
(Mon Jul 11 08:55:18 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [ipaIDRangeSize]<br>
(Mon Jul 11 08:55:18 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [ipaRangeType]<br>
(Mon Jul 11 08:55:18 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_process_result] (0x2000): Trace:
sh[0x7f8415400af0], connected[1],
ops[0x7f841542c770], ldap[0x7f8415405dc0]<br>
(Mon Jul 11 08:55:18 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_entry] (0x1000): OriginalDN:
[cn=SD-STC.CZ_id_range,cn=ranges,cn=etc,dc=linuxdomain,dc=cz].<br>
(Mon Jul 11 08:55:18 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [objectClass]<br>
(Mon Jul 11 08:55:18 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [cn]<br>
(Mon Jul 11 08:55:18 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [ipaBaseID]<br>
(Mon Jul 11 08:55:18 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [ipaBaseRID]<br>
(Mon Jul 11 08:55:18 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [ipaIDRangeSize]<br>
(Mon Jul 11 08:55:18 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [ipaNTTrustedDomainSID]<br>
(Mon Jul 11 08:55:18 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [ipaRangeType]<br>
(Mon Jul 11 08:55:18 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_process_result] (0x2000): Trace:
sh[0x7f8415400af0], connected[1],
ops[0x7f841542c770], ldap[0x7f8415405dc0]<br>
(Mon Jul 11 08:55:18 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_op_finished] (0x0400): Search
result: Success(0), no errmsg set<br>
(Mon Jul 11 08:55:18 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_op_destructor] (0x2000): Operation 38
finished<br>
(Mon Jul 11 08:55:18 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_print_server] (0x2000): Searching
10.1.123.103<br>
(Mon Jul 11 08:55:18 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x0400): calling
ldap_search_ext with
[objectclass=ipaNTTrustedDomain][cn=trusts,dc=linuxdomain,dc=cz].<br>
(Mon Jul 11 08:55:18 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x1000): Requesting
attrs: [cn]<br>
(Mon Jul 11 08:55:18 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x1000): Requesting
attrs: [ipaNTFlatName]<br>
(Mon Jul 11 08:55:18 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x1000): Requesting
attrs: [ipaNTTrustedDomainSID]<br>
(Mon Jul 11 08:55:18 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x1000): Requesting
attrs: [ipaNTTrustDirection]<br>
(Mon Jul 11 08:55:18 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x2000):
ldap_search_ext called, msgid = 39<br>
(Mon Jul 11 08:55:18 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_op_add] (0x2000): New operation 39 timeout
6<br>
(Mon Jul 11 08:55:18 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_process_result] (0x2000): Trace:
sh[0x7f8415400af0], connected[1],
ops[0x7f84153cc180], ldap[0x7f8415405dc0]<br>
(Mon Jul 11 08:55:18 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_process_result] (0x2000): Trace:
ldap_result found nothing!<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_process_result] (0x2000): Trace:
sh[0x7f8415400af0], connected[1],
ops[0x7f84153cc180], ldap[0x7f8415405dc0]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_entry] (0x1000): OriginalDN: [cn=<a
moz-do-not-send="true" href="http://sd-stc.cz"
target="_blank">sd-stc.cz</a>,cn=ad,cn=trusts,dc=linuxdomain,dc=cz].<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [cn]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [ipaNTFlatName]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [ipaNTTrustedDomainSID]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [ipaNTTrustDirection]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_process_result] (0x2000): Trace:
sh[0x7f8415400af0], connected[1],
ops[0x7f84153cc180], ldap[0x7f8415405dc0]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_op_finished] (0x0400): Search
result: Success(0), no errmsg set<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_op_destructor] (0x2000): Operation 39
finished<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[ipa_subdom_is_member_dom] (0x0400): 4th
component is not 'trust', not a member domain<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[ipa_subdom_get_forest] (0x2000): The forest
name is <a moz-do-not-send="true"
href="http://sd-stc.cz" target="_blank">sd-stc.cz</a><br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[ipa_subdom_store] (0x0200): Trust direction of
<a moz-do-not-send="true"
href="http://sd-stc.cz" target="_blank">sd-stc.cz</a>
is trust direction not set<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_deref_search_with_filter_send] (0x2000):
Server supports OpenLDAP deref<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_x_deref_search_send] (0x0400):
Dereferencing entry
[cn=accounts,dc=linuxdomain,dc=cz] using
OpenLDAP deref<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_print_server] (0x2000): Searching
10.1.123.103<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x0400): calling
ldap_search_ext with
[(&(objectClass=ipaHost)(fqdn=<a
moz-do-not-send="true"
href="http://spcss-2t-www.linuxdomain.cz"
target="_blank">spcss-2t-www.linuxdomain.cz</a>))][cn=accounts,dc=linuxdomain,dc=cz].<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x1000): Requesting
attrs: [cn]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x1000): Requesting
attrs: [objectClass]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x2000):
ldap_search_ext called, msgid = 40<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_op_add] (0x2000): New operation 40 timeout
6<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_process_result] (0x2000): Trace:
sh[0x7f8415400af0], connected[1],
ops[0x7f84153cc180], ldap[0x7f8415405dc0]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_process_result] (0x2000): Trace:
ldap_result found nothing!<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_process_result] (0x2000): Trace:
sh[0x7f8415400af0], connected[1],
ops[0x7f84153cc180], ldap[0x7f8415405dc0]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_x_deref_parse_entry] (0x0400): Got deref
control<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_x_deref_parse_entry] (0x0400): All deref
results from a single control parsed<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_process_result] (0x2000): Trace:
sh[0x7f8415400af0], connected[1],
ops[0x7f84153cc180], ldap[0x7f8415405dc0]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_op_finished] (0x0400): Search
result: Success(0), no errmsg set<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_op_finished] (0x2000): Total
count [0]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_op_destructor] (0x2000): Operation 40
finished<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[ipa_get_view_name_done] (0x0400): No view
found, using default.<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[ipa_get_view_name_done] (0x0400): Found view
name [default].<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[get_subdomains_callback] (0x0400): Backend
returned: (0, 0, <NULL>) [Success
(Success)]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_process_result] (0x2000): Trace:
sh[0x7f8415400af0], connected[1], ops[(nil)],
ldap[0x7f8415405dc0]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_process_result] (0x2000): Trace:
ldap_result found nothing!<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[read_pipe_handler] (0x0400): EOF received,
client finished<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[parse_krb5_child_response] (0x1000): child
response [0][3][40].<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[parse_krb5_child_response] (0x1000): child
response [0][-1073741822][24].<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[parse_krb5_child_response] (0x1000): child
response [0][-1073741823][32].<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[parse_krb5_child_response] (0x1000): TGT times
are
[1468220118][1468220118][1468256118][1468306518].<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[parse_krb5_child_response] (0x1000): child
response [0][6][8].<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[fo_set_port_status] (0x0100): Marking port 0 of
server '<a moz-do-not-send="true"
href="http://svlxxipap.linuxdomain.cz"
target="_blank">svlxxipap.linuxdomain.cz</a>'
as 'working'<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[set_server_common_status] (0x0100): Marking
server '<a moz-do-not-send="true"
href="http://svlxxipap.linuxdomain.cz"
target="_blank">svlxxipap.linuxdomain.cz</a>'
as 'working'<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[fo_set_port_status] (0x0400): Marking port 0 of
duplicate server '<a moz-do-not-send="true"
href="http://svlxxipap.linuxdomain.cz"
target="_blank">svlxxipap.linuxdomain.cz</a>'
as 'working'<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[check_wait_queue] (0x1000): Wait queue for user
[<a moz-do-not-send="true"
href="mailto:simecek.tomas@sd-stc.cz"
target="_blank">simecek.tomas@sd-stc.cz</a>]
is empty.<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[krb5_auth_queue_done] (0x1000): krb5_auth_queue
request [0x7f841541e810] done.<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[be_pam_handler_callback] (0x0100): Backend
returned: (0, 0, <NULL>) [Success
(Success)]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[be_pam_handler_callback] (0x0100): Sending
result [0][<a moz-do-not-send="true"
href="http://sd-stc.cz" target="_blank">sd-stc.cz</a>]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[be_pam_handler_callback] (0x0100): Sent result
[0][<a moz-do-not-send="true"
href="http://sd-stc.cz" target="_blank">sd-stc.cz</a>]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[child_sig_handler] (0x1000): Waiting for child
[30821].<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[child_sig_handler] (0x0100): child [30821]
finished successfully.<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sbus_message_handler] (0x2000): Received SBUS
method
org.freedesktop.sssd.dataprovider.getAccountInfo
on path /org/freedesktop/sssd/dataprovider<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sbus_get_sender_id_send] (0x2000): Not a sysbus
message, quit<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[be_get_account_info] (0x0200): Got request for
[0x3][1][name=simecek.tomas]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[be_req_set_domain] (0x0400): Changing request
domain from [<a moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]
to [<a moz-do-not-send="true"
href="http://sd-stc.cz" target="_blank">sd-stc.cz</a>]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_print_server] (0x2000): Searching
10.1.123.103<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x0400): calling
ldap_search_ext with
[(&(objectClass=ipaUserOverride)(uid=simecek.tomas))][cn=Default
Trust
View,cn=views,cn=accounts,dc=linuxdomain,dc=cz].<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x2000):
ldap_search_ext called, msgid = 41<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_op_add] (0x2000): New operation 41 timeout
60<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_process_result] (0x2000): Trace:
sh[0x7f8415400af0], connected[1],
ops[0x7f841542ea90], ldap[0x7f8415405dc0]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_op_finished] (0x0400): Search
result: Success(0), no errmsg set<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_op_destructor] (0x2000): Operation 41
finished<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[ipa_s2n_exop_send] (0x0400): Executing extended
operation<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[ipa_s2n_exop_send] (0x2000):
ldap_extended_operation sent, msgid = 42<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_op_add] (0x2000): New operation 42 timeout
6<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_process_result] (0x2000): Trace:
sh[0x7f8415400af0], connected[1],
ops[0x7f8415458f80], ldap[0x7f8415405dc0]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_process_result] (0x2000): Trace:
ldap_result found nothing!<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_process_result] (0x2000): Trace:
sh[0x7f8415400af0], connected[1],
ops[0x7f8415458f80], ldap[0x7f8415405dc0]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[ipa_s2n_exop_done] (0x0400):
ldap_extended_operation result: Success(0),
(null).<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_op_destructor] (0x2000): Operation 42
finished<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sysdb_search_by_name] (0x0400): No such entry<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[ipa_s2n_exop_send] (0x0400): Executing extended
operation<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[ipa_s2n_exop_send] (0x2000):
ldap_extended_operation sent, msgid = 43<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_op_add] (0x2000): New operation 43 timeout
6<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_process_result] (0x2000): Trace:
sh[0x7f8415400af0], connected[1],
ops[0x7f841544d770], ldap[0x7f8415405dc0]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_process_result] (0x2000): Trace:
ldap_result found nothing!<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_process_result] (0x2000): Trace:
sh[0x7f8415400af0], connected[1],
ops[0x7f841544d770], ldap[0x7f8415405dc0]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[ipa_s2n_exop_done] (0x0400):
ldap_extended_operation result: Success(0),
(null).<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_op_destructor] (0x2000): Operation 43
finished<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[ipa_s2n_save_objects] (0x2000): Updating
memberships for <a moz-do-not-send="true"
href="mailto:simecek.tomas@sd-stc.cz"
target="_blank">simecek.tomas@sd-stc.cz</a><br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sysdb_mod_group_member] (0x0080): ldb_modify
failed: [No such object](32)[ldb_wait: No such
object (32)]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sysdb_mod_group_member] (0x0400): Error: 2 (No
such file or directory)<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sysdb_update_members_ex] (0x0020): Could not
add member [<a moz-do-not-send="true"
href="mailto:simecek.tomas@sd-stc.cz"
target="_blank">simecek.tomas@sd-stc.cz</a>]
to group [name=<a moz-do-not-send="true"
href="mailto:simecek.tomas@sd-stc.cz"
target="_blank">simecek.tomas@sd-stc.cz</a>,cn=groups,cn=<a
moz-do-not-send="true" href="http://sd-stc.cz"
target="_blank">sd-stc.cz</a>,cn=sysdb].
Skipping.<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[ipa_s2n_save_objects] (0x2000): Updating
memberships for <a moz-do-not-send="true"
href="mailto:simecek.tomas@sd-stc.cz"
target="_blank">simecek.tomas@sd-stc.cz</a><br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sysdb_mod_group_member] (0x0080): ldb_modify
failed: [No such object](32)[ldb_wait: No such
object (32)]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sysdb_mod_group_member] (0x0400): Error: 2 (No
such file or directory)<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sysdb_update_members_ex] (0x0020): Could not
add member [<a moz-do-not-send="true"
href="mailto:simecek.tomas@sd-stc.cz"
target="_blank">simecek.tomas@sd-stc.cz</a>]
to group [name=<a moz-do-not-send="true"
href="mailto:simecek.tomas@sd-stc.cz"
target="_blank">simecek.tomas@sd-stc.cz</a>,cn=groups,cn=<a
moz-do-not-send="true" href="http://sd-stc.cz"
target="_blank">sd-stc.cz</a>,cn=sysdb].
Skipping.<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[acctinfo_callback] (0x0100): Request processed.
Returned 0,0,Success (Success)<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_process_result] (0x2000): Trace:
sh[0x7f8415400af0], connected[1], ops[(nil)],
ldap[0x7f8415405dc0]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_process_result] (0x2000): Trace:
ldap_result found nothing!<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sbus_message_handler] (0x2000): Received SBUS
method
org.freedesktop.sssd.dataprovider.pamHandler on
path /org/freedesktop/sssd/dataprovider<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sbus_get_sender_id_send] (0x2000): Not a sysbus
message, quit<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[be_req_set_domain] (0x0400): Changing request
domain from [<a moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]
to [<a moz-do-not-send="true"
href="http://sd-stc.cz" target="_blank">sd-stc.cz</a>]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[be_pam_handler] (0x0100): Got request with the
following data<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[pam_print_data] (0x0100): command:
PAM_ACCT_MGMT<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[pam_print_data] (0x0100): domain: <a
moz-do-not-send="true" href="http://sd-stc.cz"
target="_blank">sd-stc.cz</a><br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[pam_print_data] (0x0100): user: <a
moz-do-not-send="true"
href="mailto:simecek.tomas@sd-stc.cz"
target="_blank"><a class="moz-txt-link-abbreviated" href="mailto:simecek.tomas@sd-stc.cz">simecek.tomas@sd-stc.cz</a></a><br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[pam_print_data] (0x0100): service: sudo<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[pam_print_data] (0x0100): tty: /dev/pts/0<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[pam_print_data] (0x0100): ruser: <a
moz-do-not-send="true"
href="mailto:simecek.tomas@sd-stc.cz"
target="_blank"><a class="moz-txt-link-abbreviated" href="mailto:simecek.tomas@sd-stc.cz">simecek.tomas@sd-stc.cz</a></a><br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[pam_print_data] (0x0100): rhost: <br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[pam_print_data] (0x0100): authtok type: 0<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[pam_print_data] (0x0100): newauthtok type: 0<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[pam_print_data] (0x0100): priv: 0<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[pam_print_data] (0x0100): cli_pid: 30819<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[pam_print_data] (0x0100): logon name: not set<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_access_send] (0x0400): Performing access
check for user [<a moz-do-not-send="true"
href="mailto:simecek.tomas@sd-stc.cz"
target="_blank">simecek.tomas@sd-stc.cz</a>]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_account_expired_rhds] (0x0400): Performing
RHDS access check for user [<a
moz-do-not-send="true"
href="mailto:simecek.tomas@sd-stc.cz"
target="_blank"><a class="moz-txt-link-abbreviated" href="mailto:simecek.tomas@sd-stc.cz">simecek.tomas@sd-stc.cz</a></a>]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_account_expired] (0x0400): IPA access
control succeeded, checking AD access control<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_account_expired_ad] (0x0400): Performing
AD access check for user [<a
moz-do-not-send="true"
href="mailto:simecek.tomas@sd-stc.cz"
target="_blank"><a class="moz-txt-link-abbreviated" href="mailto:simecek.tomas@sd-stc.cz">simecek.tomas@sd-stc.cz</a></a>]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_print_server] (0x2000): Searching
10.1.123.103<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x0400): calling
ldap_search_ext with
[(&(objectClass=ipaHost)(fqdn=<a
moz-do-not-send="true"
href="http://spcss-2t-www.linuxdomain.cz"
target="_blank">spcss-2t-www.linuxdomain.cz</a>))][cn=accounts,dc=linuxdomain,dc=cz].<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x1000): Requesting
attrs: [objectClass]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x1000): Requesting
attrs: [cn]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x1000): Requesting
attrs: [fqdn]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x1000): Requesting
attrs: [serverHostname]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x1000): Requesting
attrs: [memberOf]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x1000): Requesting
attrs: [ipaSshPubKey]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x1000): Requesting
attrs: [ipaUniqueID]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x2000):
ldap_search_ext called, msgid = 44<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_op_add] (0x2000): New operation 44 timeout
60<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_process_result] (0x2000): Trace:
sh[0x7f8415400af0], connected[1],
ops[0x7f841543ecb0], ldap[0x7f8415405dc0]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_entry] (0x1000): OriginalDN: [fqdn=<a
moz-do-not-send="true"
href="http://spcss-2t-www.linuxdomain.cz"
target="_blank">spcss-2t-www.linuxdomain.cz</a>,cn=computers,cn=accounts,dc=linuxdomain,dc=cz].<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [objectClass]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [cn]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [fqdn]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [serverHostname]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [memberOf]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [ipaSshPubKey]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [ipaUniqueID]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_process_result] (0x2000): Trace:
sh[0x7f8415400af0], connected[1],
ops[0x7f841543ecb0], ldap[0x7f8415405dc0]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_op_finished] (0x0400): Search
result: Success(0), no errmsg set<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_op_finished] (0x2000): Total
count [0]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_op_destructor] (0x2000): Operation 44
finished<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_has_deref_support] (0x0400): The server
supports deref method OpenLDAP<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_deref_search_send] (0x2000): Server
supports OpenLDAP deref<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_x_deref_search_send] (0x0400):
Dereferencing entry [fqdn=<a
moz-do-not-send="true"
href="http://spcss-2t-www.linuxdomain.cz"
target="_blank">spcss-2t-www.linuxdomain.cz</a>,cn=computers,cn=accounts,dc=linuxdomain,dc=cz]
using OpenLDAP deref<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_print_server] (0x2000): Searching
10.1.123.103<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x0400): calling
ldap_search_ext with [no filter][fqdn=<a
moz-do-not-send="true"
href="http://spcss-2t-www.linuxdomain.cz"
target="_blank">spcss-2t-www.linuxdomain.cz</a>,cn=computers,cn=accounts,dc=linuxdomain,dc=cz].<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x1000): Requesting
attrs: [objectClass]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x1000): Requesting
attrs: [cn]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x1000): Requesting
attrs: [memberOf]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x1000): Requesting
attrs: [ipaUniqueID]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x2000):
ldap_search_ext called, msgid = 45<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_op_add] (0x2000): New operation 45 timeout
60<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_process_result] (0x2000): Trace:
sh[0x7f8415400af0], connected[1],
ops[0x7f841543f610], ldap[0x7f8415405dc0]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_process_result] (0x2000): Trace:
ldap_result found nothing!<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_process_result] (0x2000): Trace:
sh[0x7f8415400af0], connected[1],
ops[0x7f841543f610], ldap[0x7f8415405dc0]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_x_deref_parse_entry] (0x0400): Got deref
control<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_deref] (0x1000): Dereferenced DN:
ipaUniqueID=9496e5d6-3cf8-11e6-abf9-005056961bfa,cn=hbac,dc=linuxdomain,dc=cz<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_deref] (0x1000): Dereferenced DN:
ipaUniqueID=51215b28-3dd0-11e6-b387-005056961bfa,cn=ng,cn=alt,dc=linuxdomain,dc=cz<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_deref] (0x1000): Dereferenced DN:
ipaUniqueID=07eac210-3dd9-11e6-abdf-005056961bfa,cn=sudorules,cn=sudo,dc=linuxdomain,dc=cz<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_x_deref_parse_entry] (0x0400): All deref
results from a single control parsed<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_process_result] (0x2000): Trace:
sh[0x7f8415400af0], connected[1],
ops[0x7f841543f610], ldap[0x7f8415405dc0]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_op_finished] (0x0400): Search
result: Success(0), no errmsg set<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_op_finished] (0x2000): Total
count [0]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_op_destructor] (0x2000): Operation 45
finished<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[ipa_hostgroup_info_done] (0x0200): No host
groups were dereferenced<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[ipa_hbac_service_info_next] (0x0400): Sending
request for next search base:
[cn=hbac,dc=linuxdomain,dc=cz][2][(objectClass=ipaHBACService)]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_print_server] (0x2000): Searching
10.1.123.103<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x0400): calling
ldap_search_ext with
[(objectClass=ipaHBACService)][cn=hbac,dc=linuxdomain,dc=cz].<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x1000): Requesting
attrs: [objectclass]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x1000): Requesting
attrs: [cn]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x1000): Requesting
attrs: [ipauniqueid]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x1000): Requesting
attrs: [member]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x1000): Requesting
attrs: [memberOf]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x2000):
ldap_search_ext called, msgid = 46<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_op_add] (0x2000): New operation 46 timeout
60<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_process_result] (0x2000): Trace:
sh[0x7f8415400af0], connected[1],
ops[0x7f841543f610], ldap[0x7f8415405dc0]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_process_result] (0x2000): Trace:
ldap_result found nothing!<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_process_result] (0x2000): Trace:
sh[0x7f8415400af0], connected[1],
ops[0x7f841543f610], ldap[0x7f8415405dc0]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_entry] (0x1000): OriginalDN:
[cn=sshd,cn=hbacservices,cn=hbac,dc=linuxdomain,dc=cz].<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [objectclass]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [cn]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [ipauniqueid]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_process_result] (0x2000): Trace:
sh[0x7f8415400af0], connected[1],
ops[0x7f841543f610], ldap[0x7f8415405dc0]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_entry] (0x1000): OriginalDN:
[cn=ftp,cn=hbacservices,cn=hbac,dc=linuxdomain,dc=cz].<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [objectclass]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [cn]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [ipauniqueid]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [memberOf]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_process_result] (0x2000): Trace:
sh[0x7f8415400af0], connected[1],
ops[0x7f841543f610], ldap[0x7f8415405dc0]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_entry] (0x1000): OriginalDN:
[cn=su,cn=hbacservices,cn=hbac,dc=linuxdomain,dc=cz].<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [objectclass]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [cn]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [ipauniqueid]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_process_result] (0x2000): Trace:
sh[0x7f8415400af0], connected[1],
ops[0x7f841543f610], ldap[0x7f8415405dc0]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_entry] (0x1000): OriginalDN:
[cn=login,cn=hbacservices,cn=hbac,dc=linuxdomain,dc=cz].<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [objectclass]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [cn]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [ipauniqueid]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_process_result] (0x2000): Trace:
sh[0x7f8415400af0], connected[1],
ops[0x7f841543f610], ldap[0x7f8415405dc0]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_entry] (0x1000): OriginalDN:
[cn=su-l,cn=hbacservices,cn=hbac,dc=linuxdomain,dc=cz].<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [objectclass]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [cn]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [ipauniqueid]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_process_result] (0x2000): Trace:
sh[0x7f8415400af0], connected[1],
ops[0x7f841543f610], ldap[0x7f8415405dc0]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_entry] (0x1000): OriginalDN:
[cn=sudo,cn=hbacservices,cn=hbac,dc=linuxdomain,dc=cz].<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [objectclass]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [cn]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [ipauniqueid]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [memberOf]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_process_result] (0x2000): Trace:
sh[0x7f8415400af0], connected[1],
ops[0x7f841543f610], ldap[0x7f8415405dc0]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_entry] (0x1000): OriginalDN:
[cn=sudo-i,cn=hbacservices,cn=hbac,dc=linuxdomain,dc=cz].<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [objectclass]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [cn]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [ipauniqueid]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [memberOf]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_process_result] (0x2000): Trace:
sh[0x7f8415400af0], connected[1],
ops[0x7f841543f610], ldap[0x7f8415405dc0]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_entry] (0x1000): OriginalDN:
[cn=gdm,cn=hbacservices,cn=hbac,dc=linuxdomain,dc=cz].<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [objectclass]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [cn]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [ipauniqueid]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_process_result] (0x2000): Trace:
sh[0x7f8415400af0], connected[1],
ops[0x7f841543f610], ldap[0x7f8415405dc0]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_entry] (0x1000): OriginalDN:
[cn=gdm-password,cn=hbacservices,cn=hbac,dc=linuxdomain,dc=cz].<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [objectclass]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [cn]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [ipauniqueid]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_process_result] (0x2000): Trace:
sh[0x7f8415400af0], connected[1],
ops[0x7f841543f610], ldap[0x7f8415405dc0]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_entry] (0x1000): OriginalDN:
[cn=kdm,cn=hbacservices,cn=hbac,dc=linuxdomain,dc=cz].<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [objectclass]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [cn]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [ipauniqueid]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_process_result] (0x2000): Trace:
sh[0x7f8415400af0], connected[1],
ops[0x7f841543f610], ldap[0x7f8415405dc0]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_entry] (0x1000): OriginalDN:
[cn=crond,cn=hbacservices,cn=hbac,dc=linuxdomain,dc=cz].<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [objectclass]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [cn]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [ipauniqueid]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_process_result] (0x2000): Trace:
sh[0x7f8415400af0], connected[1],
ops[0x7f841543f610], ldap[0x7f8415405dc0]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_entry] (0x1000): OriginalDN:
[cn=vsftpd,cn=hbacservices,cn=hbac,dc=linuxdomain,dc=cz].<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [objectclass]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [cn]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [ipauniqueid]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [memberOf]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_process_result] (0x2000): Trace:
sh[0x7f8415400af0], connected[1],
ops[0x7f841543f610], ldap[0x7f8415405dc0]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_entry] (0x1000): OriginalDN:
[cn=proftpd,cn=hbacservices,cn=hbac,dc=linuxdomain,dc=cz].<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [objectclass]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [cn]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [ipauniqueid]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [memberOf]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_process_result] (0x2000): Trace:
sh[0x7f8415400af0], connected[1],
ops[0x7f841543f610], ldap[0x7f8415405dc0]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_entry] (0x1000): OriginalDN:
[cn=pure-ftpd,cn=hbacservices,cn=hbac,dc=linuxdomain,dc=cz].<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [objectclass]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [cn]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [ipauniqueid]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [memberOf]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_process_result] (0x2000): Trace:
sh[0x7f8415400af0], connected[1],
ops[0x7f841543f610], ldap[0x7f8415405dc0]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_entry] (0x1000): OriginalDN:
[cn=gssftp,cn=hbacservices,cn=hbac,dc=linuxdomain,dc=cz].<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [objectclass]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [cn]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [ipauniqueid]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [memberOf]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_process_result] (0x2000): Trace:
sh[0x7f8415400af0], connected[1],
ops[0x7f841543f610], ldap[0x7f8415405dc0]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_op_finished] (0x0400): Search
result: Success(0), no errmsg set<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_op_finished] (0x2000): Total
count [0]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_op_destructor] (0x2000): Operation 46
finished<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[ipa_hbac_servicegroup_info_next] (0x0400):
Sending request for next search base:
[cn=hbac,dc=linuxdomain,dc=cz][2][(objectClass=ipaHBACServiceGroup)]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_print_server] (0x2000): Searching
10.1.123.103<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x0400): calling
ldap_search_ext with
[(objectClass=ipaHBACServiceGroup)][cn=hbac,dc=linuxdomain,dc=cz].<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x1000): Requesting
attrs: [objectclass]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x1000): Requesting
attrs: [cn]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x1000): Requesting
attrs: [ipauniqueid]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x1000): Requesting
attrs: [member]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x1000): Requesting
attrs: [memberOf]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x2000):
ldap_search_ext called, msgid = 47<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_op_add] (0x2000): New operation 47 timeout
60<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_process_result] (0x2000): Trace:
sh[0x7f8415400af0], connected[1],
ops[0x7f841543f610], ldap[0x7f8415405dc0]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_process_result] (0x2000): Trace:
ldap_result found nothing!<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_process_result] (0x2000): Trace:
sh[0x7f8415400af0], connected[1],
ops[0x7f841543f610], ldap[0x7f8415405dc0]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_entry] (0x1000): OriginalDN:
[cn=Sudo,cn=hbacservicegroups,cn=hbac,dc=linuxdomain,dc=cz].<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [objectclass]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [cn]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [ipauniqueid]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [member]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_process_result] (0x2000): Trace:
sh[0x7f8415400af0], connected[1],
ops[0x7f841543f610], ldap[0x7f8415405dc0]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_entry] (0x1000): OriginalDN:
[cn=ftp,cn=hbacservicegroups,cn=hbac,dc=linuxdomain,dc=cz].<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [objectclass]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [cn]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [ipauniqueid]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [member]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_process_result] (0x2000): Trace:
sh[0x7f8415400af0], connected[1],
ops[0x7f841543f610], ldap[0x7f8415405dc0]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_op_finished] (0x0400): Search
result: Success(0), no errmsg set<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_op_finished] (0x2000): Total
count [0]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_op_destructor] (0x2000): Operation 47
finished<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[ipa_hbac_rule_info_next] (0x0400): Sending
request for next search base:
[cn=hbac,dc=linuxdomain,dc=cz][2][(&(objectclass=ipaHBACRule)(ipaenabledflag=TRUE)(accessRuleType=allow)(|(hostCategory=all)(memberHost=fqdn=<a
moz-do-not-send="true"
href="http://spcss-2t-www.linuxdomain.cz"
target="_blank">spcss-2t-www.linuxdomain.cz</a>,cn=computers,cn=accounts,dc=linuxdomain,dc=cz)(memberHost=ipaUniqueID=9496e5d6-3cf8-11e6-abf9-005056961bfa,cn=hbac,dc=linuxdomain,dc=cz)(memberHost=ipaUniqueID=51215b28-3dd0-11e6-b387-005056961bfa,cn=ng,cn=alt,dc=linuxdomain,dc=cz)(memberHost=ipaUniqueID=07eac210-3dd9-11e6-abdf-005056961bfa,cn=sudorules,cn=sudo,dc=linuxdomain,dc=cz)))]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_print_server] (0x2000): Searching
10.1.123.103<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x0400): calling
ldap_search_ext with
[(&(objectclass=ipaHBACRule)(ipaenabledflag=TRUE)(accessRuleType=allow)(|(hostCategory=all)(memberHost=fqdn=<a
moz-do-not-send="true"
href="http://spcss-2t-www.linuxdomain.cz"
target="_blank">spcss-2t-www.linuxdomain.cz</a>,cn=computers,cn=accounts,dc=linuxdomain,dc=cz)(memberHost=ipaUniqueID=9496e5d6-3cf8-11e6-abf9-005056961bfa,cn=hbac,dc=linuxdomain,dc=cz)(memberHost=ipaUniqueID=51215b28-3dd0-11e6-b387-005056961bfa,cn=ng,cn=alt,dc=linuxdomain,dc=cz)(memberHost=ipaUniqueID=07eac210-3dd9-11e6-abdf-005056961bfa,cn=sudorules,cn=sudo,dc=linuxdomain,dc=cz)))][cn=hbac,dc=linuxdomain,dc=cz].<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x1000): Requesting
attrs: [objectclass]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x1000): Requesting
attrs: [cn]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x1000): Requesting
attrs: [ipauniqueid]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x1000): Requesting
attrs: [ipaenabledflag]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x1000): Requesting
attrs: [accessRuleType]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x1000): Requesting
attrs: [memberUser]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x1000): Requesting
attrs: [userCategory]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x1000): Requesting
attrs: [memberService]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x1000): Requesting
attrs: [serviceCategory]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x1000): Requesting
attrs: [sourceHost]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x1000): Requesting
attrs: [sourceHostCategory]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x1000): Requesting
attrs: [externalHost]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x1000): Requesting
attrs: [memberHost]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x1000): Requesting
attrs: [hostCategory]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_ext_step] (0x2000):
ldap_search_ext called, msgid = 48<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_op_add] (0x2000): New operation 48 timeout
60<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_process_result] (0x2000): Trace:
sh[0x7f8415400af0], connected[1],
ops[0x7f841545aab0], ldap[0x7f8415405dc0]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_process_result] (0x2000): Trace:
ldap_result found nothing!<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_process_result] (0x2000): Trace:
sh[0x7f8415400af0], connected[1],
ops[0x7f841545aab0], ldap[0x7f8415405dc0]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_entry] (0x1000): OriginalDN:
[ipaUniqueID=9496e5d6-3cf8-11e6-abf9-005056961bfa,cn=hbac,dc=linuxdomain,dc=cz].<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [objectclass]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [cn]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [ipauniqueid]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [ipaenabledflag]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [accessRuleType]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [memberUser]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [memberService]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_parse_range] (0x2000): No sub-attributes
for [memberHost]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_process_result] (0x2000): Trace:
sh[0x7f8415400af0], connected[1],
ops[0x7f841545aab0], ldap[0x7f8415405dc0]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_op_finished] (0x0400): Search
result: Success(0), no errmsg set<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_get_generic_op_finished] (0x2000): Total
count [0]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_op_destructor] (0x2000): Operation 48
finished<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[hbac_attrs_to_rule] (0x1000): Processing rule
[Unixari na test servery]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[hbac_user_attrs_to_rule] (0x1000): Processing
users for rule [Unixari na test servery]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sysdb_search_users] (0x2000): Search users with
filter:
(&(objectclass=user)(originalDN=cn=grpunixadmins,cn=groups,cn=accounts,dc=linuxdomain,dc=cz))<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sysdb_search_users] (0x2000): No such entry<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sysdb_search_groups] (0x2000): Search groups
with filter:
(&(objectclass=group)(originalDN=cn=grpunixadmins,cn=groups,cn=accounts,dc=linuxdomain,dc=cz))<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[hbac_user_attrs_to_rule] (0x2000): Added POSIX
group [grpunixadmins] to rule [Unixari na test
servery]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[hbac_service_attrs_to_rule] (0x1000):
Processing PAM services for rule [Unixari na
test servery]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[hbac_service_attrs_to_rule] (0x2000): Added
service [login] to rule [Unixari na test
servery]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[hbac_service_attrs_to_rule] (0x2000): Added
service [sshd] to rule [Unixari na test servery]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[hbac_thost_attrs_to_rule] (0x1000): Processing
target hosts for rule [Unixari na test servery]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[hbac_host_attrs_to_rule] (0x2000): Added host [<a
moz-do-not-send="true"
href="http://spcss-2t-www.linuxdomain.cz"
target="_blank">spcss-2t-www.linuxdomain.cz</a>]
to rule [Unixari na test servery]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[hbac_host_attrs_to_rule] (0x1000): [fqdn=<a
moz-do-not-send="true"
href="http://zp-cml-test.linuxdomain.cz"
target="_blank">zp-cml-test.linuxdomain.cz</a>,cn=computers,cn=accounts,dc=linuxdomain,dc=cz]
does not map to either a host or hostgroup.
Skipping<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[hbac_shost_attrs_to_rule] (0x0400): Processing
source hosts for rule [Unixari na test servery]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[hbac_shost_attrs_to_rule] (0x2000): Source
hosts disabled, setting ALL<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[hbac_eval_user_element] (0x1000): [7] groups
for [<a moz-do-not-send="true"
href="mailto:simecek.tomas@sd-stc.cz"
target="_blank">simecek.tomas@sd-stc.cz</a>]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[hbac_eval_user_element] (0x2000): Skipping
non-group memberOf
[CN=UnixAdmins,CN=Users,DC=sd-stc,DC=cz]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[hbac_eval_user_element] (0x2000): Skipping
non-group memberOf
[CN=administrator_Storage_DG,CN=Users,DC=sd-stc,DC=cz]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[hbac_eval_user_element] (0x2000): Skipping
non-group memberOf
[CN=mfcr_MFG,CN=Users,DC=sd-stc,DC=cz]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[hbac_eval_user_element] (0x2000): Skipping
non-group memberOf
[CN=ProvozSluzeb_DG,CN=Users,DC=sd-stc,DC=cz]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[hbac_eval_user_element] (0x2000): Skipping
non-group memberOf
[CN=central_DG,CN=Users,DC=sd-stc,DC=cz]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[hbac_eval_user_element] (0x2000): Skipping
non-group memberOf
[CN=bdcdocswriters,CN=Users,DC=sd-stc,DC=cz]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[hbac_eval_user_element] (0x1000): Added group
[grpunixadmins] for user [<a
moz-do-not-send="true"
href="mailto:simecek.tomas@sd-stc.cz"
target="_blank"><a class="moz-txt-link-abbreviated" href="mailto:simecek.tomas@sd-stc.cz">simecek.tomas@sd-stc.cz</a></a>]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[ipa_hbac_evaluate_rules] (0x0080): Access
denied by HBAC rules<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[be_pam_handler_callback] (0x0100): Backend
returned: (0, 6, <NULL>) [Success
(Permission denied)]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[be_pam_handler_callback] (0x0100): Sending
result [6][<a moz-do-not-send="true"
href="http://sd-stc.cz" target="_blank">sd-stc.cz</a>]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[be_pam_handler_callback] (0x0100): Sent result
[6][<a moz-do-not-send="true"
href="http://sd-stc.cz" target="_blank">sd-stc.cz</a>]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_process_result] (0x2000): Trace:
sh[0x7f8415400af0], connected[1], ops[(nil)],
ldap[0x7f8415405dc0]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sdap_process_result] (0x2000): Trace:
ldap_result found nothing!<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sbus_message_handler] (0x2000): Received SBUS
method
org.freedesktop.sssd.dataprovider.pamHandler on
path /org/freedesktop/sssd/dataprovider<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sbus_get_sender_id_send] (0x2000): Not a sysbus
message, quit<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[be_req_set_domain] (0x0400): Changing request
domain from [<a moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]
to [<a moz-do-not-send="true"
href="http://sd-stc.cz" target="_blank">sd-stc.cz</a>]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[be_pam_handler] (0x0100): Got request with the
following data<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[pam_print_data] (0x0100): command:
SSS_PAM_PREAUTH<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[pam_print_data] (0x0100): domain: <a
moz-do-not-send="true" href="http://sd-stc.cz"
target="_blank">sd-stc.cz</a><br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[pam_print_data] (0x0100): user: <a
moz-do-not-send="true"
href="mailto:simecek.tomas@sd-stc.cz"
target="_blank"><a class="moz-txt-link-abbreviated" href="mailto:simecek.tomas@sd-stc.cz">simecek.tomas@sd-stc.cz</a></a><br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[pam_print_data] (0x0100): service: sudo<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[pam_print_data] (0x0100): tty: /dev/pts/0<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[pam_print_data] (0x0100): ruser: <a
moz-do-not-send="true"
href="mailto:simecek.tomas@sd-stc.cz"
target="_blank"><a class="moz-txt-link-abbreviated" href="mailto:simecek.tomas@sd-stc.cz">simecek.tomas@sd-stc.cz</a></a><br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[pam_print_data] (0x0100): rhost: <br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[pam_print_data] (0x0100): authtok type: 0<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[pam_print_data] (0x0100): newauthtok type: 0<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[pam_print_data] (0x0100): priv: 0<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[pam_print_data] (0x0100): cli_pid: 30819<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[pam_print_data] (0x0100): logon name: not set<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[krb5_auth_queue_send] (0x1000): Wait queue of
user [<a moz-do-not-send="true"
href="mailto:simecek.tomas@sd-stc.cz"
target="_blank">simecek.tomas@sd-stc.cz</a>]
is empty, running request [0x7f8415414ac0]
immediately.<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[fo_resolve_service_send] (0x0100): Trying to
resolve service 'IPA'<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[get_server_status] (0x1000): Status of server '<a
moz-do-not-send="true"
href="http://svlxxipap.linuxdomain.cz"
target="_blank">svlxxipap.linuxdomain.cz</a>'
is 'working'<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[get_port_status] (0x1000): Port status of port
0 for server '<a moz-do-not-send="true"
href="http://svlxxipap.linuxdomain.cz"
target="_blank">svlxxipap.linuxdomain.cz</a>'
is 'working'<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[fo_resolve_service_activate_timeout] (0x2000):
Resolve timeout set to 6 seconds<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[get_server_status] (0x1000): Status of server '<a
moz-do-not-send="true"
href="http://svlxxipap.linuxdomain.cz"
target="_blank">svlxxipap.linuxdomain.cz</a>'
is 'working'<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[be_resolve_server_process] (0x1000): Saving the
first resolved server<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[be_resolve_server_process] (0x0200): Found
address for server <a moz-do-not-send="true"
href="http://svlxxipap.linuxdomain.cz"
target="_blank">svlxxipap.linuxdomain.cz</a>:
[10.1.123.103] TTL 1028<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[ipa_resolve_callback] (0x0400): Constructed uri
'<a moz-do-not-send="true">ldap://</a><a
moz-do-not-send="true"
href="http://svlxxipap.linuxdomain.cz"
target="_blank">svlxxipap.linuxdomain.cz</a>'<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[sss_krb5_realm_has_proxy] (0x0040):
profile_get_values failed.<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[child_handler_setup] (0x2000): Setting up
signal handler up for pid [30822]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[child_handler_setup] (0x2000): Signal handler
set up for pid [30822]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[write_pipe_handler] (0x0400): All data has been
sent!<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[child_sig_handler] (0x1000): Waiting for child
[30822].<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[child_sig_handler] (0x0100): child [30822]
finished successfully.<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[read_pipe_handler] (0x0400): EOF received,
client finished<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[fo_set_port_status] (0x0100): Marking port 0 of
server '<a moz-do-not-send="true"
href="http://svlxxipap.linuxdomain.cz"
target="_blank">svlxxipap.linuxdomain.cz</a>'
as 'working'<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[set_server_common_status] (0x0100): Marking
server '<a moz-do-not-send="true"
href="http://svlxxipap.linuxdomain.cz"
target="_blank">svlxxipap.linuxdomain.cz</a>'
as 'working'<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[fo_set_port_status] (0x0400): Marking port 0 of
duplicate server '<a moz-do-not-send="true"
href="http://svlxxipap.linuxdomain.cz"
target="_blank">svlxxipap.linuxdomain.cz</a>'
as 'working'<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[krb5_auth_store_creds] (0x0010): unsupported
PAM command [249].<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[krb5_auth_store_creds] (0x0010): password not
available, offline auth may not work.<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[check_wait_queue] (0x1000): Wait queue for user
[<a moz-do-not-send="true"
href="mailto:simecek.tomas@sd-stc.cz"
target="_blank">simecek.tomas@sd-stc.cz</a>]
is empty.<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[krb5_auth_queue_done] (0x1000): krb5_auth_queue
request [0x7f8415414ac0] done.<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[be_pam_handler_callback] (0x0100): Backend
returned: (0, 0, <NULL>) [Success
(Success)]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[be_pam_handler_callback] (0x0100): Sending
result [0][<a moz-do-not-send="true"
href="http://sd-stc.cz" target="_blank">sd-stc.cz</a>]<br>
(Mon Jul 11 08:55:19 2016) [sssd[be[<a
moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]]]
[be_pam_handler_callback] (0x0100): Sent result
[0][<a moz-do-not-send="true"
href="http://sd-stc.cz" target="_blank">sd-stc.cz</a>]<br>
<br>
</div>
Any idea what to check next?<br>
<br>
</div>
Thanks a lot.<br>
<br>
</div>
Tomas<br>
<div>
<div>
<div>
<div>
<div>
<div><br>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<div class="gmail_extra"><br>
<div class="gmail_quote">2016-07-04 9:50 GMT+02:00
Tomas Simecek <span dir="ltr"><<a
moz-do-not-send="true"
href="mailto:simecek.tomas@gmail.com"
target="_blank"><a class="moz-txt-link-abbreviated" href="mailto:simecek.tomas@gmail.com">simecek.tomas@gmail.com</a></a>></span>:<br>
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="ltr">Dear freeipa users/admins,<br>
I'm trying to implement freeipa in our company,
so that our Unix admins can authenticate on
Linux servers using their Windows AD account.<br>
Following this guide <a moz-do-not-send="true"
href="https://www.freeipa.org/page/Active_Directory_trust_setup"
target="_blank">https://www.freeipa.org/page/Active_Directory_trust_setup</a>
it seems to work well, they can login without
problems. <br>
What I cannot make working is sudo from their AD
accounts on Linux.<br>
<br>
No matter what I try, it is still:<br>
<br>
sudo systemctl restart httpd<br>
[sudo] password for <a moz-do-not-send="true"
href="mailto:simecek.tomas@sd-stc.cz"
target="_blank">simecek.tomas@sd-stc.cz</a>:<br>
Sorry, try again.<br>
<br>
Here's our setup:<br>
Freeipa server: CentOS Linux release 7.2.1511
(Core),
ipa-server-4.2.0-15.0.1.el7.centos.6.1.x86_64<br>
Freeipa client: the same<br>
<br>
AD domain name: <a moz-do-not-send="true"
href="http://sd-stc.cz" target="_blank">sd-stc.cz</a><br>
IPA domain: <a moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a><br>
<br>
When digging in logs and googling, I realized
that the problem on client side could be:<br>
<br>
[root@spcss-2t-www ~]# kinit -k<br>
kinit: Cannot determine realm for host
(principal host/spcss-2t-www@)<br>
<br>
But this seems to work:<br>
[root@spcss-2t-www ~]# kinit <a
moz-do-not-send="true"
href="mailto:simecek.tomas@SD-STC.CZ"
target="_blank"><a class="moz-txt-link-abbreviated" href="mailto:simecek.tomas@SD-STC.CZ">simecek.tomas@SD-STC.CZ</a></a><br>
Password for <a moz-do-not-send="true"
href="mailto:simecek.tomas@SD-STC.CZ"
target="_blank">simecek.tomas@SD-STC.CZ</a>:<br>
[root@spcss-2t-www ~]# klist<br>
Default principal: <a moz-do-not-send="true"
href="mailto:simecek.tomas@SD-STC.CZ"
target="_blank">simecek.tomas@SD-STC.CZ</a><br>
<br>
Valid starting Expires
Service principal<br>
07/04/2016 09:36:26 07/04/2016 19:36:26
krbtgt/<a moz-do-not-send="true"
href="mailto:SD-STC.CZ@SD-STC.CZ"
target="_blank">SD-STC.CZ@SD-STC.CZ</a><br>
renew until 07/05/2016 09:36:23<br>
<br>
My /etc/sssd/sssd.conf:<br>
[domain/<a moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>]<br>
<br>
cache_credentials = True<br>
krb5_store_password_if_offline = True<br>
ipa_domain = <a moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a><br>
krb5_realm = <a moz-do-not-send="true"
href="http://LINUXDOMAIN.CZ" target="_blank">LINUXDOMAIN.CZ</a><br>
id_provider = ipa<br>
auth_provider = ipa<br>
access_provider = ipa<br>
ipa_hostname = <a moz-do-not-send="true"
href="http://spcss-2t-www.linuxdomain.cz"
target="_blank">spcss-2t-www.linuxdomain.cz</a><br>
chpass_provider = ipa<br>
ipa_server = <a moz-do-not-send="true"
href="http://svlxxipap.linuxdomain.cz"
target="_blank">svlxxipap.linuxdomain.cz</a><br>
ldap_tls_cacert = /etc/ipa/ca.crt<br>
override_shell = /bin/bash<br>
sudo_provider = ldap<br>
ldap_uri = <a moz-do-not-send="true">ldap://</a><a
moz-do-not-send="true"
href="http://svlxxipap.linuxdomain.cz"
target="_blank">svlxxipap.linuxdomain.cz</a><br>
ldap_sudo_search_base =
ou=sudoers,dc=linuxdomain,dc=cz<br>
ldap_sasl_mech = GSSAPI<br>
ldap_sasl_authid = host/<a
moz-do-not-send="true"
href="mailto:spcss-2t-www.linuxdomain.cz@LINUXDOMAIN.CZ"
target="_blank"><a class="moz-txt-link-abbreviated" href="mailto:spcss-2t-www.linuxdomain.cz@LINUXDOMAIN.CZ">spcss-2t-www.linuxdomain.cz@LINUXDOMAIN.CZ</a></a><br>
ldap_sasl_realm = <a moz-do-not-send="true"
href="http://LINUXDOMAIN.CZ" target="_blank">LINUXDOMAIN.CZ</a><br>
krb5_server = <a moz-do-not-send="true"
href="http://svlxxipap.linuxdomain.cz"
target="_blank">svlxxipap.linuxdomain.cz</a><br>
<br>
[sssd]<br>
services = nss, sudo, pam, ssh<br>
config_file_version = 2<br>
<br>
domains = <a moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a><br>
[nss]<br>
homedir_substring = /home<br>
....<br>
<br>
My /etc/krb5.conf:<br>
#File modified by ipa-client-install<br>
<br>
includedir /var/lib/sss/pubconf/krb5.include.d/<br>
<br>
[libdefaults]<br>
default_realm = <a moz-do-not-send="true"
href="http://LINUXDOMAIN.CZ" target="_blank">LINUXDOMAIN.CZ</a><br>
dns_lookup_realm = true<br>
dns_lookup_kdc = true<br>
rdns = false<br>
ticket_lifetime = 24h<br>
forwardable = yes<br>
udp_preference_limit = 0<br>
default_ccache_name =
KEYRING:persistent:%{uid}<br>
<br>
<br>
[realms]<br>
<a moz-do-not-send="true"
href="http://LINUXDOMAIN.CZ" target="_blank">LINUXDOMAIN.CZ</a>
= {<br>
pkinit_anchors = <a moz-do-not-send="true">FILE:/etc/ipa/ca.crt</a><br>
}<br>
<br>
<br>
[domain_realm]<br>
.<a moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>
= <a moz-do-not-send="true"
href="http://LINUXDOMAIN.CZ" target="_blank">LINUXDOMAIN.CZ</a><br>
<a moz-do-not-send="true"
href="http://linuxdomain.cz" target="_blank">linuxdomain.cz</a>
= <a moz-do-not-send="true"
href="http://LINUXDOMAIN.CZ" target="_blank">LINUXDOMAIN.CZ</a><br>
<br>
Would you please suggest which way to
investigate? <br>
<br>
Thanks<span><font color="#888888"><br>
<br>
Tomas Simecek<br>
</font></span></div>
</blockquote>
</div>
<br>
</div>
<br>
<fieldset></fieldset>
<br>
</blockquote>
<br>
</div>
</blockquote>
</div>
<br>
</div>
</blockquote>
<br>
</body>
</html>