[Freeipa-users] IPA+AD (transitive trust) - s2n exop request failed

[crony]

Probable yes.



2014-10-23 15:59 GMT+02:00 Sumit Bose <sbose at redhat.com>:

> On Thu, Oct 23, 2014 at 03:47:31PM +0200, crony wrote:
> > Hi All,
> > I've found another problem with my setup:
> >
> > What could be the reason of such errors on FreeIPA client side:
> >
> > /var/log/sssd/sssd_linux.acme.example.com.log:(Thu Oct 23 09:49:23 2014)
> > [sssd[be[linux.acme.example.com]]] [ipa_s2n_get_user_done] (0x0040): s2n
> > exop request failed.
> > /var/log/sssd/sssd_linux.acme.example.com.log:(Thu Oct 23 09:50:03 2014)
> > [sssd[be[linux.acme.example.com]]] [ipa_s2n_get_user_done] (0x0040): s2n
> > exop request failed.
> > /var/log/sssd/sssd_linux.acme.example.com.log:(Thu Oct 23 09:50:04 2014)
> > [sssd[be[linux.acme.example.com]]] [ipa_s2n_get_user_done] (0x0040): s2n
> > exop request failed.
> > /var/log/sssd/sssd_linux.acme.example.com.log:(Thu Oct 23 09:50:06 2014)
> > [sssd[be[linux.acme.example.com]]] [ipa_s2n_get_user_done] (0x0040): s2n
> > exop request failed.
> > /var/log/sssd/sssd_linux.acme.example.com.log:(Thu Oct 23 09:50:06 2014)
> > [sssd[be[linux.acme.example.com]]] [ipa_s2n_get_user_done] (0x0040): s2n
> > exop request failed.
> > /var/log/sssd/sssd_linux.acme.example.com.log:(Thu Oct 23 09:50:07 2014)
> > [sssd[be[linux.acme.example.com]]] [ipa_s2n_get_user_done] (0x0040): s2n
> > exop request failed.
> > /var/log/sssd/sssd_linux.acme.example.com.log:(Thu Oct 23 09:50:07 2014)
> > [sssd[be[linux.acme.example.com]]] [ipa_s2n_get_user_done] (0x0040): s2n
> > exop request failed.
> > /var/log/sssd/sssd_linux.acme.example.com.log:(Thu Oct 23 09:50:08 2014)
> > [sssd[be[linux.acme.example.com]]] [ipa_s2n_get_user_done] (0x0040): s2n
> > exop request failed.
> > /var/log/sssd/sssd_linux.acme.example.com.log:(Thu Oct 23 09:50:08 2014)
> > [sssd[be[linux.acme.example.com]]] [ipa_s2n_get_user_done] (0x0040): s2n
> > exop request failed.
> > /var/log/sssd/sssd_linux.acme.example.com.log:(Thu Oct 23 09:50:17 2014)
> > [sssd[be[linux.acme.example.com]]] [ipa_s2n_get_user_done] (0x0040): s2n
> > exop request failed.
> > /var/log/sssd/sssd_linux.acme.example.com.log:(Thu Oct 23 09:52:05 2014)
> > [sssd[be[linux.acme.example.com]]] [ipa_s2n_get_user_done] (0x0040): s2n
> > exop request failed.
> > /var/log/sssd/sssd_linux.acme.example.com.log:(Thu Oct 23 09:52:08 2014)
> > [sssd[be[linux.acme.example.com]]] [ipa_s2n_get_user_done] (0x0040): s2n
> > exop request failed.
> > /var/log/sssd/sssd_linux.acme.example.com.log:(Thu Oct 23 09:52:18 2014)
> > [sssd[be[linux.acme.example.com]]] [ipa_s2n_get_user_done] (0x0040): s2n
> > exop request failed.
> > /var/log/sssd/sssd_linux.acme.example.com.log:(Thu Oct 23 09:57:12 2014)
> > [sssd[be[linux.acme.example.com]]] [ipa_s2n_get_user_done] (0x0040): s2n
> > exop request failed.
> > /var/log/sssd/sssd_linux.acme.example.com.log:(Thu Oct 23 09:57:15 2014)
> > [sssd[be[linux.acme.example.com]]] [ipa_s2n_get_user_done] (0x0040): s2n
> > exop request failed.
> > /var/log/sssd/sssd_linux.acme.example.com.log:(Thu Oct 23 09:58:29 2014)
> > [sssd[be[linux.acme.example.com]]] [ipa_s2n_get_user_done] (0x0040): s2n
> > exop request failed.
> > /var/log/sssd/sssd_linux.acme.example.com.log:(Thu Oct 23 09:58:34 2014)
> > [sssd[be[linux.acme.example.com]]] [ipa_s2n_get_user_done] (0x0040): s2n
> > exop request failed.
> > /var/log/sssd/sssd_linux.acme.example.com.log:(Thu Oct 23 10:02:10 2014)
> > [sssd[be[linux.acme.example.com]]] [ipa_s2n_get_user_done] (0x0040): s2n
> > exop request failed.
> > /var/log/sssd/sssd_linux.acme.example.com.log:(Thu Oct 23 10:02:13 2014)
> > [sssd[be[linux.acme.example.com]]] [ipa_s2n_get_user_done] (0x0040): s2n
> > exop request failed.
>
> This typically indicates that the user or group lookup failed in the
> server side.  Maybe this is related to the segfaults you are seeing on
> the server side.
>
> bye,
> Sumit
>
> >
> > IPA 3.3.3 + RHEL7 and IPA clients: RHEL 6.4 and RHEL 6.6 -  the same
> > situation.
> >
> > /lm
>
> > --
> > Manage your subscription for the Freeipa-users mailing list:
> > https://www.redhat.com/mailman/listinfo/freeipa-users
> > Go To http://freeipa.org for more info on the project
>
>


-- 
Pozdrawiam Leszek Miś
www: http://cronylab.pl
www: http://emerge.pl
Nothing is secure, paranoia is your friend.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20141023/20e7df7d/attachment.htm>