[Freeipa-users] UPN suffixes in AD trust

Fri Jun 26 14:34:05 UTC 2015

On 06/26/2015 02:38 PM, Sumit Bose wrote:
> On Thu, Jun 25, 2015 at 07:00:34PM +0200, Giorgio Biacchi wrote:
>> On 06/25/2015 05:44 PM, Sumit Bose wrote:
>>> On Thu, Jun 25, 2015 at 04:29:37PM +0200, Giorgio Biacchi wrote:
>>>> On 06/25/2015 02:10 PM, Sumit Bose wrote:
>>>>> On Thu, Jun 25, 2015 at 01:06:22PM +0200, Giorgio Biacchi wrote:
>>>>>> On 06/25/2015 12:56 PM, Sumit Bose wrote:
>>>>>>> On Thu, Jun 25, 2015 at 12:22:16PM +0200, Giorgio Biacchi wrote:
>>>>>>>> On 06/24/2015 06:45 PM, Sumit Bose wrote:
>>>>>>>>> On Wed, Jun 24, 2015 at 05:11:07PM +0200, Giorgio Biacchi wrote:
>>>>>>>>>> Hi everybody,
>>>>>>>>>> I established a bidirectional trust between an IPA server (version 4.1.0 on
>>>>>>>>>> CentOS 7.1), ipa.mydomain.local and an AD (Windows 2012 r2), mydomain.local.
>>>>>>>>>> Everything is working fine, and I'm able to authenticate and logon on a linux
>>>>>>>>>> host joined to IPA server using AD credentials (username at mydomain.local).
>>>>>>>>>> But active directory is configured with two more UPN suffixes (otherdomain.com
>>>>>>>>>> and sub.otherdomain.com), and I cannot logon with credentials using alternative
>>>>>>>>>> UPN (example: john.doe at otherdomain.com).
>>>>>>>>>>
>>>>>>>>>> How can I make this possible? Another trust (ipa trust-add) with the same AD?
>>>>>>>>>> Manual configuration of krb5 and/or sssd?
>>>>>>>>>
>>>>>>>>> Have you tried to login to an IPA client or the server? Please try with
>>>>>>>>> an IPA server first. If this does not work it would be nice if you can
>>>>>>>>> send the SSSD log files from the IPA server which are generated during
>>>>>>>>> the logon attempt. Please call 'sss_cache -E' before to invalidate all
>>>>>>>>> cached entries so that the logs will contain all needed calls to AD.
>>>>>>>>>
>>>>>>>>> Using UPN suffixes were added to the AD provider some time ago and the
>>>>>>>>> code is available in the IPA provider as well, but I guess no one has
>>>>>>>>> actually tried this before.
>>>>>>>>>
>>>>>>>>> bye,
>>>>>>>>> Sumit
>>>>>>>>
>>>>>>>> First of all let me say that i feel like I'm missing some config somewhere..
>>>>>>>> Changes tried in krb5.conf to support UPN suffixes didn't helped.
>>>>>>>> I can only access the server vi ssh so I've attached the logs for a successful
>>>>>>>> login for account1 at mydomain.local and an unsuccessful login for
>>>>>>>> account2 at otherdomain.com done via ssh.
>>>>>>>>
>>>>>>>> Bye and thanks for your help
>>>>>>>>
>>>>>>>
>>>>>>> It looks like the request is not properly propagated to sub-domains (the
>>>>>>> trusted AD domain) but only send to the IPA domain.
>>>>>>>
>>>>>>> Would it be possible for you to run a test build of SSSD which might fix
>>>>>>> this? If yes, which version of SSSD are you currently using? Then I can
>>>>>>> prepare a test build with the patch on top of this version.
>>>>>>>
>>>>>>> bye,
>>>>>>> Sumit
>>>>>>>
>>>>>>
>>>>>> Hi,
>>>>>> I'm using sssd 1.12.2 (sssd --version) on CentOS 7.1.1503 and I'm available for
>>>>>> any test.
>>>>>>
>>>>>> Here's the packages version for sssd:
>>>>>>
>>>>>> sssd-common-1.12.2-58.el7_1.6.x86_64
>>>>>> sssd-krb5-1.12.2-58.el7_1.6.x86_64
>>>>>> python-sssdconfig-1.12.2-58.el7_1.6.noarch
>>>>>> sssd-krb5-common-1.12.2-58.el7_1.6.x86_64
>>>>>> sssd-ipa-1.12.2-58.el7_1.6.x86_64
>>>>>> sssd-1.12.2-58.el7_1.6.x86_64
>>>>>> sssd-libwbclient-1.12.2-58.el7_1.6.x86_64
>>>>>> sssd-ad-1.12.2-58.el7_1.6.x86_64
>>>>>> sssd-ldap-1.12.2-58.el7_1.6.x86_64
>>>>>> sssd-common-pac-1.12.2-58.el7_1.6.x86_64
>>>>>> sssd-proxy-1.12.2-58.el7_1.6.x86_64
>>>>>> sssd-client-1.12.2-58.el7_1.6.x86_64
>>>>>
>>>>> Please try the packages at
>>>>> http://koji.fedoraproject.org/koji/taskinfo?taskID=10210844 .
>>>>>
>>>>> bye,
>>>>> Sumit
>>>>
>>>> Hi,
>>>> I've installed the new RPMs, now if I run on the server:
>>>>
>>>> id account1 at mydomain.local
>>>> id account2 at otherdomain.com
>>>> id account2 at sub.otherdomain.com
>>>>
>>>> all the users are found but I'm still unable to log in via ssh with the accounts
>>>> @otherdomain.com and @sub.otherdomain.com.
>>>>
>>>> In attachment the logs for unsuccessful login for user account2 at otherdomain.com.
>>>
>>> Bother, I forgot to add the fix to the pam responder as well, please try
>>> new packages from
>>> http://koji.fedoraproject.org/koji/taskinfo?taskID=10212212 .
>>>
>>> bye,
>>> Sumit
>>>
>>
>> Hi,
>> I've updated all the packages but still no login.
>>
>> Logs follows.
> 
> I found another issue in the logs which should be fixed by the build
> from http://koji.fedoraproject.org/koji/taskinfo?taskID=10217756 .
> 
> Please send the sssd_pam log file as well it might contain more details
> about what goes wrong during authentication.
> 
> bye,
> Sumit
> 

Hi,
packages update, sssd and kerberos services restarted, cache flushed but still
no login on the IPA server.

As before, logs attached. I've also included the logs generated by the restart
of sssd service because there were no logs in sssd_pam.log when trying to
authenticate.

Debug level is set to 6 in the sections:

[domain/ipa.mydomain.local]
[sssd]
[nss]
[pam]

of /etc/sssd/sssd.conf, please tell me if this is enough or if I have to
increase it.

Thanks
-- 
gb

PGP Key: http://pgp.mit.edu/
Primary key fingerprint: C510 0765 943E EBED A4F2 69D3 16CC DC90 B9CB 0F34
-------------- next part --------------
(Fri Jun 26 16:22:30 2015) [sssd[pam]] [sss_parse_name_for_domains] (0x0200): name 'root' matched without domain, user is root
(Fri Jun 26 16:22:30 2015) [sssd[pam]] [sss_ncache_set_str] (0x0400): Adding [NCE/GROUP/ipa.mydomain.local/root] to negative cache permanently
(Fri Jun 26 16:22:30 2015) [sssd[pam]] [responder_set_fd_limit] (0x0100): Maximum file descriptors set to [8192]
(Fri Jun 26 16:22:30 2015) [sssd[pam]] [sss_dp_issue_request] (0x0400): Issuing request for [0x7fc4f7633760:domains at ipa.mydomain.local]
(Fri Jun 26 16:22:30 2015) [sssd[pam]] [sss_dp_get_domains_msg] (0x0400): Sending get domains request for [ipa.mydomain.local][]
(Fri Jun 26 16:22:30 2015) [sssd[pam]] [sss_dp_internal_get_send] (0x0400): Entering request [0x7fc4f7633760:domains at ipa.mydomain.local]
(Fri Jun 26 16:22:30 2015) [sssd[pam]] [id_callback] (0x0100): Got id ack and version (1) from Monitor
(Fri Jun 26 16:22:30 2015) [sssd[pam]] [dp_id_callback] (0x0100): Got id ack and version (1) from DP
(Fri Jun 26 16:22:30 2015) [sssd[pam]] [new_subdomain] (0x0400): Creating [mydomain.local] as subdomain of [ipa.mydomain.local]!
(Fri Jun 26 16:22:30 2015) [sssd[pam]] [sss_dp_req_destructor] (0x0400): Deleting request: [0x7fc4f7633760:domains at ipa.mydomain.local]
(Fri Jun 26 16:23:55 2015) [sssd[pam]] [sss_responder_ctx_destructor] (0x0400): Responder is being shut down
(Fri Jun 26 16:23:55 2015) [sssd[pam]] [server_setup] (0x0400): CONFDB: /var/lib/sss/db/config.ldb
(Fri Jun 26 16:23:55 2015) [sssd[pam]] [confdb_get_domain_internal] (0x0400): No enumeration for [ipa.mydomain.local]!
(Fri Jun 26 16:23:55 2015) [sssd[pam]] [sbus_init_connection] (0x0400): Adding connection 0x7f91d9153c50
(Fri Jun 26 16:23:55 2015) [sssd[pam]] [monitor_common_send_id] (0x0100): Sending ID: (pam,1)
(Fri Jun 26 16:23:55 2015) [sssd[pam]] [sss_names_init_from_args] (0x0100): Using re [(((?P<domain>[^\\]+)\\(?P<name>.+$))|((?P<name>[^@]+)@(?P<domain>.+$))|(^(?P<name>[^@\\]+)$))].
(Fri Jun 26 16:23:55 2015) [sssd[pam]] [sss_fqnames_init] (0x0100): Using fq format [%1$s@%2$s].
(Fri Jun 26 16:23:55 2015) [sssd[pam]] [sbus_init_connection] (0x0400): Adding connection 0x7f91d9151040
(Fri Jun 26 16:23:55 2015) [sssd[pam]] [dp_common_send_id] (0x0100): Sending ID to DP: (1,PAM)
(Fri Jun 26 16:23:55 2015) [sssd[pam]] [sysdb_domain_init_internal] (0x0200): DB File for ipa.mydomain.local: /var/lib/sss/db/cache_ipa.mydomain.local.ldb
(Fri Jun 26 16:23:55 2015) [sssd[pam]] [ldb] (0x0400): asq: Unable to register control with rootdse!
(Fri Jun 26 16:23:55 2015) [sssd[pam]] [sss_process_init] (0x0400): Responder Initialization complete
(Fri Jun 26 16:23:55 2015) [sssd[pam]] [get_trusted_uids] (0x0400): All UIDs are allowed.
(Fri Jun 26 16:23:55 2015) [sssd[pam]] [sss_parse_name_for_domains] (0x0200): name 'root' matched without domain, user is root
(Fri Jun 26 16:23:55 2015) [sssd[pam]] [sss_ncache_set_str] (0x0400): Adding [NCE/USER/ipa.mydomain.local/root] to negative cache permanently
(Fri Jun 26 16:23:55 2015) [sssd[pam]] [sss_parse_name_for_domains] (0x0200): name 'root' matched without domain, user is root
(Fri Jun 26 16:23:55 2015) [sssd[pam]] [sss_ncache_set_str] (0x0400): Adding [NCE/GROUP/ipa.mydomain.local/root] to negative cache permanently
(Fri Jun 26 16:23:55 2015) [sssd[pam]] [responder_set_fd_limit] (0x0100): Maximum file descriptors set to [8192]
(Fri Jun 26 16:23:55 2015) [sssd[pam]] [sss_dp_issue_request] (0x0400): Issuing request for [0x7f91d752e760:domains at ipa.mydomain.local]
(Fri Jun 26 16:23:55 2015) [sssd[pam]] [sss_dp_get_domains_msg] (0x0400): Sending get domains request for [ipa.mydomain.local][]
(Fri Jun 26 16:23:55 2015) [sssd[pam]] [sss_dp_internal_get_send] (0x0400): Entering request [0x7f91d752e760:domains at ipa.mydomain.local]
(Fri Jun 26 16:23:55 2015) [sssd[pam]] [id_callback] (0x0100): Got id ack and version (1) from Monitor
(Fri Jun 26 16:23:55 2015) [sssd[pam]] [dp_id_callback] (0x0100): Got id ack and version (1) from DP
(Fri Jun 26 16:23:55 2015) [sssd[pam]] [new_subdomain] (0x0400): Creating [mydomain.local] as subdomain of [ipa.mydomain.local]!
(Fri Jun 26 16:23:55 2015) [sssd[pam]] [sss_dp_req_destructor] (0x0400): Deleting request: [0x7f91d752e760:domains at ipa.mydomain.local]
-------------- next part --------------
(Fri Jun 26 16:22:50 2015) [sssd[nss]] [nss_cmd_getpwnam_search] (0x0080): No matching domain found for [account2 at otherdomain.com], fail!
(Fri Jun 26 16:22:50 2015) [sssd[nss]] [sss_dp_req_destructor] (0x0400): Deleting request: [0x7fc4104ee6b0:domains at ipa.mydomain.local]
(Fri Jun 26 16:22:50 2015) [sssd[nss]] [nss_cmd_getbynam] (0x0400): Running command [17] with input [account2 at otherdomain.com].
(Fri Jun 26 16:22:50 2015) [sssd[nss]] [sss_dp_issue_request] (0x0400): Issuing request for [0x7fc4104ee6b0:domains at ipa.mydomain.local]
(Fri Jun 26 16:22:50 2015) [sssd[nss]] [sss_dp_get_domains_msg] (0x0400): Sending get domains request for [ipa.mydomain.local][otherdomain.com]
(Fri Jun 26 16:22:50 2015) [sssd[nss]] [sss_dp_internal_get_send] (0x0400): Entering request [0x7fc4104ee6b0:domains at ipa.mydomain.local]
(Fri Jun 26 16:22:50 2015) [sssd[nss]] [nss_cmd_getpwnam_search] (0x0400): User [account2 at otherdomain.com] does not exist in [ipa.mydomain.local]! (negative cache)
(Fri Jun 26 16:22:50 2015) [sssd[nss]] [nss_cmd_getpwnam_search] (0x0080): No matching domain found for [account2 at otherdomain.com], fail!
(Fri Jun 26 16:22:50 2015) [sssd[nss]] [sss_dp_req_destructor] (0x0400): Deleting request: [0x7fc4104ee6b0:domains at ipa.mydomain.local]
(Fri Jun 26 16:23:36 2015) [sssd[nss]] [client_recv] (0x0200): Client disconnected!
(Fri Jun 26 16:23:55 2015) [sssd[nss]] [sss_responder_ctx_destructor] (0x0400): Responder is being shut down
(Fri Jun 26 16:23:55 2015) [sssd[nss]] [server_setup] (0x0400): CONFDB: /var/lib/sss/db/config.ldb
(Fri Jun 26 16:23:55 2015) [sssd[nss]] [confdb_get_domain_internal] (0x0400): No enumeration for [ipa.mydomain.local]!
(Fri Jun 26 16:23:55 2015) [sssd[nss]] [sbus_init_connection] (0x0400): Adding connection 0x7fe6daaea160
(Fri Jun 26 16:23:55 2015) [sssd[nss]] [monitor_common_send_id] (0x0100): Sending ID: (nss,1)
(Fri Jun 26 16:23:55 2015) [sssd[nss]] [sss_names_init_from_args] (0x0100): Using re [(((?P<domain>[^\\]+)\\(?P<name>.+$))|((?P<name>[^@]+)@(?P<domain>.+$))|(^(?P<name>[^@\\]+)$))].
(Fri Jun 26 16:23:55 2015) [sssd[nss]] [sss_fqnames_init] (0x0100): Using fq format [%1$s@%2$s].
(Fri Jun 26 16:23:55 2015) [sssd[nss]] [sbus_init_connection] (0x0400): Adding connection 0x7fe6daaea2f0
(Fri Jun 26 16:23:55 2015) [sssd[nss]] [dp_common_send_id] (0x0100): Sending ID to DP: (1,NSS)
(Fri Jun 26 16:23:55 2015) [sssd[nss]] [sysdb_domain_init_internal] (0x0200): DB File for ipa.mydomain.local: /var/lib/sss/db/cache_ipa.mydomain.local.ldb
(Fri Jun 26 16:23:55 2015) [sssd[nss]] [ldb] (0x0400): asq: Unable to register control with rootdse!
(Fri Jun 26 16:23:55 2015) [sssd[nss]] [sss_process_init] (0x0400): Responder Initialization complete
(Fri Jun 26 16:23:55 2015) [sssd[nss]] [sss_parse_name_for_domains] (0x0200): name 'root' matched without domain, user is root
(Fri Jun 26 16:23:55 2015) [sssd[nss]] [sss_ncache_set_str] (0x0400): Adding [NCE/USER/ipa.mydomain.local/root] to negative cache permanently
(Fri Jun 26 16:23:55 2015) [sssd[nss]] [sss_parse_name_for_domains] (0x0200): name 'root' matched without domain, user is root
(Fri Jun 26 16:23:55 2015) [sssd[nss]] [sss_ncache_set_str] (0x0400): Adding [NCE/GROUP/ipa.mydomain.local/root] to negative cache permanently
(Fri Jun 26 16:23:55 2015) [sssd[nss]] [nss_get_etc_shells] (0x0400): Found shell /bin/sh in /etc/shells
(Fri Jun 26 16:23:55 2015) [sssd[nss]] [nss_get_etc_shells] (0x0400): Found shell /bin/bash in /etc/shells
(Fri Jun 26 16:23:55 2015) [sssd[nss]] [nss_get_etc_shells] (0x0400): Found shell /sbin/nologin in /etc/shells
(Fri Jun 26 16:23:55 2015) [sssd[nss]] [nss_get_etc_shells] (0x0400): Found shell /usr/bin/sh in /etc/shells
(Fri Jun 26 16:23:55 2015) [sssd[nss]] [nss_get_etc_shells] (0x0400): Found shell /usr/bin/bash in /etc/shells
(Fri Jun 26 16:23:55 2015) [sssd[nss]] [nss_get_etc_shells] (0x0400): Found shell /usr/sbin/nologin in /etc/shells
(Fri Jun 26 16:23:55 2015) [sssd[nss]] [responder_set_fd_limit] (0x0100): Maximum file descriptors set to [8192]
(Fri Jun 26 16:23:55 2015) [sssd[nss]] [sss_names_init_from_args] (0x0100): Using re [(?P<name>[^@]+)@?(?P<domain>[^@]*$)].
(Fri Jun 26 16:23:55 2015) [sssd[nss]] [sss_fqnames_init] (0x0100): Using fq format [%1$s@%2$s].
(Fri Jun 26 16:23:55 2015) [sssd[nss]] [nss_process_init] (0x0400): NSS Initialization complete
(Fri Jun 26 16:23:55 2015) [sssd[nss]] [sss_dp_issue_request] (0x0400): Issuing request for [0x7fe6d92466b0:domains at ipa.mydomain.local]
(Fri Jun 26 16:23:55 2015) [sssd[nss]] [sss_dp_get_domains_msg] (0x0400): Sending get domains request for [ipa.mydomain.local][]
(Fri Jun 26 16:23:55 2015) [sssd[nss]] [sss_dp_internal_get_send] (0x0400): Entering request [0x7fe6d92466b0:domains at ipa.mydomain.local]
(Fri Jun 26 16:23:55 2015) [sssd[nss]] [dp_id_callback] (0x0100): Got id ack and version (1) from DP
(Fri Jun 26 16:23:55 2015) [sssd[nss]] [id_callback] (0x0100): Got id ack and version (1) from Monitor
(Fri Jun 26 16:23:55 2015) [sssd[nss]] [new_subdomain] (0x0400): Creating [mydomain.local] as subdomain of [ipa.mydomain.local]!
(Fri Jun 26 16:23:55 2015) [sssd[nss]] [sss_dp_req_destructor] (0x0400): Deleting request: [0x7fe6d92466b0:domains at ipa.mydomain.local]
(Fri Jun 26 16:23:55 2015) [sssd[nss]] [nss_clear_memcache] (0x0400): Clearing memory caches.
(Fri Jun 26 16:23:55 2015) [sssd[nss]] [nss_orphan_netgroups] (0x0400): Removing netgroups from memory cache.
(Fri Jun 26 16:23:58 2015) [sssd[nss]] [accept_fd_handler] (0x0400): Client connected!
(Fri Jun 26 16:23:58 2015) [sssd[nss]] [sss_cmd_get_version] (0x0200): Received client version [1].
(Fri Jun 26 16:23:58 2015) [sssd[nss]] [sss_cmd_get_version] (0x0200): Offered version [1].
(Fri Jun 26 16:23:58 2015) [sssd[nss]] [nss_cmd_getbynam] (0x0400): Running command [17] with input [account2 at otherdomain.com].
(Fri Jun 26 16:23:58 2015) [sssd[nss]] [sss_dp_issue_request] (0x0400): Issuing request for [0x7fe6d92466b0:domains at ipa.mydomain.local]
(Fri Jun 26 16:23:58 2015) [sssd[nss]] [sss_dp_get_domains_msg] (0x0400): Sending get domains request for [ipa.mydomain.local][otherdomain.com]
(Fri Jun 26 16:23:58 2015) [sssd[nss]] [sss_dp_internal_get_send] (0x0400): Entering request [0x7fe6d92466b0:domains at ipa.mydomain.local]
(Fri Jun 26 16:23:59 2015) [sssd[nss]] [nss_cmd_getpwnam_search] (0x0100): Requesting info for [account2 at otherdomain.com@ipa.mydomain.local]
(Fri Jun 26 16:23:59 2015) [sssd[nss]] [sysdb_search_user_by_upn] (0x0400): No entry with upn [account2 at otherdomain.com] found.
(Fri Jun 26 16:23:59 2015) [sssd[nss]] [sss_dp_issue_request] (0x0400): Issuing request for [0x7fe6d9244e40:1:account2 at otherdomain.com:U at ipa.mydomain.local]
(Fri Jun 26 16:23:59 2015) [sssd[nss]] [sss_dp_get_account_msg] (0x0400): Creating request for [ipa.mydomain.local][4097][1][name=account2 at otherdomain.com:U]
(Fri Jun 26 16:23:59 2015) [sssd[nss]] [sss_dp_internal_get_send] (0x0400): Entering request [0x7fe6d9244e40:1:account2 at otherdomain.com:U at ipa.mydomain.local]
(Fri Jun 26 16:23:59 2015) [sssd[nss]] [sss_dp_req_destructor] (0x0400): Deleting request: [0x7fe6d92466b0:domains at ipa.mydomain.local]
(Fri Jun 26 16:23:59 2015) [sssd[nss]] [nss_cmd_getby_dp_callback] (0x0040): Unable to get information from Data Provider
Error: 3, 0, Account info lookup failed
Will try to return what we have in cache
(Fri Jun 26 16:23:59 2015) [sssd[nss]] [nss_cmd_getpwnam_search] (0x0100): Requesting info for [account2 at otherdomain.com@ipa.mydomain.local]
(Fri Jun 26 16:23:59 2015) [sssd[nss]] [sysdb_search_user_by_upn] (0x0400): No entry with upn [account2 at otherdomain.com] found.
(Fri Jun 26 16:23:59 2015) [sssd[nss]] [sss_ncache_set_str] (0x0400): Adding [NCE/USER/ipa.mydomain.local/account2 at otherdomain.com] to negative cache
(Fri Jun 26 16:23:59 2015) [sssd[nss]] [nss_cmd_getpwnam_search] (0x0100): Requesting info for [account2 at otherdomain.com@mydomain.local]
(Fri Jun 26 16:23:59 2015) [sssd[nss]] [sss_dp_issue_request] (0x0400): Issuing request for [0x7fe6d9244e40:1:account2 at otherdomain.com:U at mydomain.local]
(Fri Jun 26 16:23:59 2015) [sssd[nss]] [sss_dp_get_account_msg] (0x0400): Creating request for [mydomain.local][4097][1][name=account2 at otherdomain.com:U]
(Fri Jun 26 16:23:59 2015) [sssd[nss]] [sss_dp_internal_get_send] (0x0400): Entering request [0x7fe6d9244e40:1:account2 at otherdomain.com:U at mydomain.local]
(Fri Jun 26 16:23:59 2015) [sssd[nss]] [sss_dp_req_destructor] (0x0400): Deleting request: [0x7fe6d9244e40:1:account2 at otherdomain.com:U at ipa.mydomain.local]
(Fri Jun 26 16:23:59 2015) [sssd[nss]] [nss_cmd_getpwnam_search] (0x0100): Requesting info for [account2 at otherdomain.com@mydomain.local]
(Fri Jun 26 16:23:59 2015) [sssd[nss]] [nss_cmd_getpwnam_search] (0x0400): Returning info for user [account2 at otherdomain.com@mydomain.local]
(Fri Jun 26 16:23:59 2015) [sssd[nss]] [sss_dp_req_destructor] (0x0400): Deleting request: [0x7fe6d9244e40:1:account2 at otherdomain.com:U at mydomain.local]
(Fri Jun 26 16:23:59 2015) [sssd[nss]] [nss_cmd_getbynam] (0x0400): Running command [38] with input [nobody].
(Fri Jun 26 16:23:59 2015) [sssd[nss]] [sss_parse_name_for_domains] (0x0200): name 'nobody' matched without domain, user is nobody
(Fri Jun 26 16:23:59 2015) [sssd[nss]] [nss_cmd_getbynam] (0x0100): Requesting info for [nobody] from [<ALL>]
(Fri Jun 26 16:23:59 2015) [sssd[nss]] [nss_cmd_initgroups_search] (0x0100): Requesting info for [nobody at ipa.mydomain.local]
(Fri Jun 26 16:23:59 2015) [sssd[nss]] [sss_dp_issue_request] (0x0400): Issuing request for [0x7fe6d9244e40:3:nobody at ipa.mydomain.local]
(Fri Jun 26 16:23:59 2015) [sssd[nss]] [sss_dp_get_account_msg] (0x0400): Creating request for [ipa.mydomain.local][4099][1][name=nobody]
(Fri Jun 26 16:23:59 2015) [sssd[nss]] [sss_dp_internal_get_send] (0x0400): Entering request [0x7fe6d9244e40:3:nobody at ipa.mydomain.local]
(Fri Jun 26 16:23:59 2015) [sssd[nss]] [nss_cmd_getby_dp_callback] (0x0040): Unable to get information from Data Provider
Error: 3, 0, Account info lookup failed
Will try to return what we have in cache
(Fri Jun 26 16:23:59 2015) [sssd[nss]] [sss_dp_req_destructor] (0x0400): Deleting request: [0x7fe6d9244e40:3:nobody at ipa.mydomain.local]
(Fri Jun 26 16:24:02 2015) [sssd[nss]] [nss_cmd_getbynam] (0x0400): Running command [17] with input [account2 at otherdomain.com].
(Fri Jun 26 16:24:02 2015) [sssd[nss]] [sss_dp_issue_request] (0x0400): Issuing request for [0x7fe6d92466b0:domains at ipa.mydomain.local]
(Fri Jun 26 16:24:02 2015) [sssd[nss]] [sss_dp_get_domains_msg] (0x0400): Sending get domains request for [ipa.mydomain.local][otherdomain.com]
(Fri Jun 26 16:24:02 2015) [sssd[nss]] [sss_dp_internal_get_send] (0x0400): Entering request [0x7fe6d92466b0:domains at ipa.mydomain.local]
(Fri Jun 26 16:24:02 2015) [sssd[nss]] [nss_cmd_getpwnam_search] (0x0400): User [account2 at otherdomain.com] does not exist in [ipa.mydomain.local]! (negative cache)
(Fri Jun 26 16:24:02 2015) [sssd[nss]] [nss_cmd_getpwnam_search] (0x0080): No matching domain found for [account2 at otherdomain.com], fail!
(Fri Jun 26 16:24:02 2015) [sssd[nss]] [sss_dp_req_destructor] (0x0400): Deleting request: [0x7fe6d92466b0:domains at ipa.mydomain.local]
(Fri Jun 26 16:24:02 2015) [sssd[nss]] [nss_cmd_getbynam] (0x0400): Running command [17] with input [account2 at otherdomain.com].
(Fri Jun 26 16:24:02 2015) [sssd[nss]] [sss_dp_issue_request] (0x0400): Issuing request for [0x7fe6d92466b0:domains at ipa.mydomain.local]
(Fri Jun 26 16:24:02 2015) [sssd[nss]] [sss_dp_get_domains_msg] (0x0400): Sending get domains request for [ipa.mydomain.local][otherdomain.com]
(Fri Jun 26 16:24:02 2015) [sssd[nss]] [sss_dp_internal_get_send] (0x0400): Entering request [0x7fe6d92466b0:domains at ipa.mydomain.local]
(Fri Jun 26 16:24:02 2015) [sssd[nss]] [nss_cmd_getpwnam_search] (0x0400): User [account2 at otherdomain.com] does not exist in [ipa.mydomain.local]! (negative cache)
(Fri Jun 26 16:24:02 2015) [sssd[nss]] [nss_cmd_getpwnam_search] (0x0080): No matching domain found for [account2 at otherdomain.com], fail!
(Fri Jun 26 16:24:02 2015) [sssd[nss]] [sss_dp_req_destructor] (0x0400): Deleting request: [0x7fe6d92466b0:domains at ipa.mydomain.local]
(Fri Jun 26 16:24:02 2015) [sssd[nss]] [nss_cmd_getbynam] (0x0400): Running command [17] with input [account2 at otherdomain.com].
(Fri Jun 26 16:24:02 2015) [sssd[nss]] [sss_dp_issue_request] (0x0400): Issuing request for [0x7fe6d92466b0:domains at ipa.mydomain.local]
(Fri Jun 26 16:24:02 2015) [sssd[nss]] [sss_dp_get_domains_msg] (0x0400): Sending get domains request for [ipa.mydomain.local][otherdomain.com]
(Fri Jun 26 16:24:02 2015) [sssd[nss]] [sss_dp_internal_get_send] (0x0400): Entering request [0x7fe6d92466b0:domains at ipa.mydomain.local]
(Fri Jun 26 16:24:02 2015) [sssd[nss]] [nss_cmd_getpwnam_search] (0x0400): User [account2 at otherdomain.com] does not exist in [ipa.mydomain.local]! (negative cache)
(Fri Jun 26 16:24:02 2015) [sssd[nss]] [nss_cmd_getpwnam_search] (0x0080): No matching domain found for [account2 at otherdomain.com], fail!
(Fri Jun 26 16:24:02 2015) [sssd[nss]] [sss_dp_req_destructor] (0x0400): Deleting request: [0x7fe6d92466b0:domains at ipa.mydomain.local]
(Fri Jun 26 16:24:06 2015) [sssd[nss]] [client_recv] (0x0200): Client disconnected!
-------------- next part --------------
(Fri Jun 26 16:22:50 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set
(Fri Jun 26 16:22:50 2015) [sssd[be[ipa.mydomain.local]]] [ipa_subdom_get_forest] (0x0400): 4th component is not 'trust', nothing to do.
(Fri Jun 26 16:22:50 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [objectclass=ipaNTDomainAttrs][cn=ad,cn=etc,dc=ipa,dc=mydomain,dc=local].
(Fri Jun 26 16:22:50 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set
(Fri Jun 26 16:22:50 2015) [sssd[be[ipa.mydomain.local]]] [get_subdomains_callback] (0x0400): Backend returned: (0, 0, <NULL>) [Success]
(Fri Jun 26 16:22:50 2015) [sssd[be[ipa.mydomain.local]]] [be_get_subdomains] (0x0400): Got get subdomains [otherdomain.com]
(Fri Jun 26 16:22:50 2015) [sssd[be[ipa.mydomain.local]]] [get_subdomains_callback] (0x0400): Backend returned: (0, 0, <NULL>) [Success]
(Fri Jun 26 16:22:50 2015) [sssd[be[ipa.mydomain.local]]] [be_get_subdomains] (0x0400): Got get subdomains [otherdomain.com]
(Fri Jun 26 16:22:50 2015) [sssd[be[ipa.mydomain.local]]] [get_subdomains_callback] (0x0400): Backend returned: (0, 0, <NULL>) [Success]
(Fri Jun 26 16:23:16 2015) [sssd[be[ipa.mydomain.local]]] [be_run_unconditional_online_cb] (0x0400): Running unconditional online callbacks.
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [remove_krb5_info_files] (0x0200): Could not remove [/var/lib/sss/pubconf/kpasswdinfo.IPA.MYDOMAIN.LOCAL], [2][No such file or directory]
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [be_ptask_destructor] (0x0400): Terminating periodic task [Cleanup of ipa.mydomain.local]
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [be_ptask_destructor] (0x0400): Terminating periodic task [Cleanup of mydomain.local]
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [be_client_destructor] (0x0400): Removed PAC client
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [be_client_destructor] (0x0400): Removed autofs client
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [be_client_destructor] (0x0400): Removed PAM client
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [be_client_destructor] (0x0400): Removed SUDO client
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [be_client_destructor] (0x0400): Removed NSS client
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [be_client_destructor] (0x0400): Removed SSH client
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [server_setup] (0x0400): CONFDB: /var/lib/sss/db/config.ldb
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option lookup_family_order has value ipv4_first
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option dns_resolver_timeout has value 6
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option dns_resolver_op_timeout has value 6
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option dns_discovery_domain has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [be_res_get_opts] (0x0100): Lookup order: ipv4_first
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [recreate_ares_channel] (0x0100): Initializing new c-ares channel
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [fo_context_init] (0x0400): Created new fail over context, retry timeout is 30
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [confdb_get_domain_internal] (0x0400): No enumeration for [ipa.mydomain.local]!
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sysdb_domain_init_internal] (0x0200): DB File for ipa.mydomain.local: /var/lib/sss/db/cache_ipa.mydomain.local.ldb
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [ldb] (0x0400): asq: Unable to register control with rootdse!
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sbus_init_connection] (0x0400): Adding connection 0x7fae43d769c0
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [monitor_common_send_id] (0x0100): Sending ID: (%BE_ipa.mydomain.local,1)
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sss_names_init_from_args] (0x0100): Using re [(((?P<domain>[^\\]+)\\(?P<name>.+$))|((?P<name>[^@]+)@(?P<domain>.+$))|(^(?P<name>[^@\\]+)$))].
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sss_fqnames_init] (0x0100): Using fq format [%1$s@%2$s].
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sbus_new_server] (0x0400): D-BUS Server listening on unix:path=/var/lib/sss/pipes/private/sbus-dp_ipa.mydomain.local.6439,guid=7c98a73ae1986e4cf9300f72558d607b
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ipa_domain has value ipa.mydomain.local
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ipa_server has value idc01.ipa.mydomain.local
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ipa_backup_server has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ipa_hostname has value idc01.ipa.mydomain.local
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ipa_hbac_search_base has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ipa_host_search_base has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ipa_selinux_search_base has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ipa_subdomains_search_base has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ipa_master_domain_search_base has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option krb5_realm has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ipa_hbac_refresh has value 5
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ipa_selinux_refresh has value 5
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ipa_hbac_treat_deny_as has value DENY_ALL
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ipa_hbac_support_srchost is FALSE
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ipa_automount_location has value default
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ipa_ranges_search_base has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ipa_enable_dns_sites is FALSE
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ipa_server_mode is TRUE
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ipa_views_search_base has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option krb5_confd_path has value /var/lib/sss/pubconf/krb5.include.d
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [fo_new_service] (0x0400): Creating new service 'IPA'
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [fo_add_server_to_list] (0x0400): Inserted primary server 'idc01.ipa.mydomain.local:0' to service 'IPA'
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [_ipa_servers_init] (0x0400): Added Server idc01.ipa.mydomain.local
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_uri has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_backup_uri has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_search_base has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_default_bind_dn has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_default_authtok_type has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_default_authtok has no binary value.
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_search_timeout has value 6
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_network_timeout has value 6
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_opt_timeout has value 6
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_tls_reqcert has value hard
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_user_search_base has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_user_search_scope has value sub
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_user_search_filter has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_user_extra_attrs has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_group_search_base has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_group_search_scope has value sub
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_group_search_filter has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_service_search_base has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_sudo_search_base has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_sudo_full_refresh_interval has value 21600
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_sudo_smart_refresh_interval has value 900
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_sudo_use_host_filter is TRUE
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_sudo_hostnames has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_sudo_ip has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_sudo_include_netgroups is TRUE
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_sudo_include_regexp is TRUE
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_autofs_search_base has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_autofs_map_master_name has value auto.master
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_schema has value ipa_v1
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_offline_timeout has value 60
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_force_upper_case_realm is TRUE
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_enumeration_refresh_timeout has value 300
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_purge_cache_timeout has value 3600
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_tls_cacert has value /etc/ipa/ca.crt
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_tls_cacertdir has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_tls_cert has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_tls_key has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_tls_cipher_suite has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_id_use_start_tls is FALSE
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_id_mapping is FALSE
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_sasl_mech has value GSSAPI
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_sasl_authid has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_sasl_realm has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_sasl_minssf has value 56
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_krb5_keytab has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_krb5_init_creds is TRUE
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option krb5_server has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option krb5_backup_server has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option krb5_realm has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option krb5_canonicalize is TRUE
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option krb5_use_kdcinfo is TRUE
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_pwd_policy has value none
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_referrals is TRUE
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option account_cache_expiration has value 0
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_dns_service_name has value ldap
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_krb5_ticket_lifetime has value 86400
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_access_filter has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_netgroup_search_base has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_group_nesting_level has value 2
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_deref has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_account_expire_policy has value ipa
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_access_order has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_chpass_uri has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_chpass_backup_uri has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_chpass_dns_service_name has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_chpass_update_last_change is FALSE
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_enumeration_search_timeout has value 60
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_auth_disable_tls_never_use_in_production is FALSE
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_page_size has value 1000
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_deref_threshold has value 10
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_sasl_canonicalize is FALSE
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_connection_expire_timeout has value 900
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_disable_paging is FALSE
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_idmap_range_min has value 200000
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_idmap_range_max has value 2000200000
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_idmap_range_size has value 200000
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_idmap_autorid_compat is FALSE
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_idmap_default_domain has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_idmap_default_domain_sid has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_groups_use_matching_rule_in_chain is FALSE
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_initgroups_use_matching_rule_in_chain is FALSE
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_use_tokengroups is TRUE
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_rfc2307_fallback_to_local_users is FALSE
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_disable_range_retrieval is FALSE
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_min_id has value 0
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_max_id has value 0
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_pwdlockout_dn has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [ipa_get_id_options] (0x0400): Option ldap_search_base set to cn=accounts,dc=ipa,dc=mydomain,dc=local
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [common_parse_search_base] (0x0100): Search base added: [DEFAULT][cn=accounts,dc=ipa,dc=mydomain,dc=local][SUBTREE][]
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [ipa_get_id_options] (0x0400): Option krb5_realm set to IPA.MYDOMAIN.LOCAL
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_set_sasl_options] (0x0100): Will look for idc01.ipa.mydomain.local at IPA.MYDOMAIN.LOCAL in default keytab
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [select_principal_from_keytab] (0x0200): trying to select the most appropriate principal from keytab
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [find_principal_in_keytab] (0x0400): No principal matching idc01.ipa.mydomain.local at IPA.MYDOMAIN.LOCAL found in keytab.
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [find_principal_in_keytab] (0x0400): No principal matching IDC01$@IPA.MYDOMAIN.LOCAL found in keytab.
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [select_principal_from_keytab] (0x0200): Selected primary: host/idc01.ipa.mydomain.local
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [select_principal_from_keytab] (0x0200): Selected realm: IPA.MYDOMAIN.LOCAL
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_set_sasl_options] (0x0100): Option ldap_sasl_authid set to host/idc01.ipa.mydomain.local
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_set_sasl_options] (0x0100): Option ldap_sasl_realm set to IPA.MYDOMAIN.LOCAL
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [ipa_get_id_options] (0x0400): Option ldap_user_search_base set to cn=accounts,dc=ipa,dc=mydomain,dc=local
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [common_parse_search_base] (0x0100): Search base added: [USER][cn=accounts,dc=ipa,dc=mydomain,dc=local][SUBTREE][]
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [ipa_get_id_options] (0x0400): Option ldap_group_search_base set to cn=accounts,dc=ipa,dc=mydomain,dc=local
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [common_parse_search_base] (0x0100): Search base added: [GROUP][cn=accounts,dc=ipa,dc=mydomain,dc=local][SUBTREE][]
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [ipa_get_id_options] (0x0400): Option ldap_sudo_search_base set to ou=SUDOers,dc=ipa,dc=mydomain,dc=local
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [common_parse_search_base] (0x0100): Search base added: [SUDO][ou=SUDOers,dc=ipa,dc=mydomain,dc=local][SUBTREE][]
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [ipa_get_id_options] (0x0400): Option ldap_netgroup_search_base set to cn=ng,cn=alt,dc=ipa,dc=mydomain,dc=local
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [common_parse_search_base] (0x0100): Search base added: [NETGROUP][cn=ng,cn=alt,dc=ipa,dc=mydomain,dc=local][SUBTREE][]
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [ipa_get_id_options] (0x0100): Option ipa_host_search_base set to cn=accounts,dc=ipa,dc=mydomain,dc=local
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [common_parse_search_base] (0x0100): Search base added: [IPA_HOST][cn=accounts,dc=ipa,dc=mydomain,dc=local][SUBTREE][]
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [ipa_get_id_options] (0x0400): Option ipa_hbac_search_base set to cn=hbac,dc=ipa,dc=mydomain,dc=local
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [common_parse_search_base] (0x0100): Search base added: [IPA_HBAC][cn=hbac,dc=ipa,dc=mydomain,dc=local][SUBTREE][]
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [ipa_get_id_options] (0x0100): Option ipa_selinux_search_base set to cn=selinux,dc=ipa,dc=mydomain,dc=local
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [common_parse_search_base] (0x0100): Search base added: [IPA_SELINUX][cn=selinux,dc=ipa,dc=mydomain,dc=local][SUBTREE][]
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [ipa_get_id_options] (0x0400): Option ldap_group_search_base set to cn=accounts,dc=ipa,dc=mydomain,dc=local
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [common_parse_search_base] (0x0100): Search base added: [SERVICE][cn=accounts,dc=ipa,dc=mydomain,dc=local][SUBTREE][]
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [ipa_get_id_options] (0x0100): Option ipa_subdomains_search_base set to cn=trusts,dc=ipa,dc=mydomain,dc=local
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [common_parse_search_base] (0x0100): Search base added: [IPA_SUBDOMAINS][cn=trusts,dc=ipa,dc=mydomain,dc=local][SUBTREE][]
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [ipa_get_id_options] (0x0100): Option ipa_master_domain_search_base set to cn=ad,cn=etc,dc=ipa,dc=mydomain,dc=local
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [common_parse_search_base] (0x0100): Search base added: [IPA_MASTER_DOMAIN][cn=ad,cn=etc,dc=ipa,dc=mydomain,dc=local][SUBTREE][]
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [ipa_get_id_options] (0x0100): Option ipa_ranges_search_base set to cn=ranges,cn=etc,dc=ipa,dc=mydomain,dc=local
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [common_parse_search_base] (0x0100): Search base added: [IPA_RANGES][cn=ranges,cn=etc,dc=ipa,dc=mydomain,dc=local][SUBTREE][]
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [ipa_get_id_options] (0x0100): Option ipa_views_search_base set to cn=views,cn=accounts,dc=ipa,dc=mydomain,dc=local
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [common_parse_search_base] (0x0100): Search base added: [IPA_VIEWS][cn=views,cn=accounts,dc=ipa,dc=mydomain,dc=local][SUBTREE][]
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_entry_usn has value entryUSN
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_rootdse_last_usn has value lastUSN
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_user_object_class has value posixAccount
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_user_name has value uid
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_user_pwd has value userPassword
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_user_uid_number has value uidNumber
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_user_gid_number has value gidNumber
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_user_gecos has value gecos
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_user_home_directory has value homeDirectory
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_user_shell has value loginShell
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_user_principal has value krbPrincipalName
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_user_fullname has value cn
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_user_member_of has value memberOf
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_user_uuid has value ipaUniqueID
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_user_objectsid has value ipaNTSecurityIdentifier
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_user_primary_group has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_user_modify_timestamp has value modifyTimestamp
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_user_entry_usn has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_user_shadow_last_change has value shadowLastChange
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_user_shadow_min has value shadowMin
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_user_shadow_max has value shadowMax
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_user_shadow_warning has value shadowWarning
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_user_shadow_inactive has value shadowInactive
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_user_shadow_expire has value shadowExpire
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_user_shadow_flag has value shadowFlag
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_user_krb_last_pwd_change has value krbLastPwdChange
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_user_krb_password_expiration has value krbPasswordExpiration
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_pwd_attribute has value pwdAttribute
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_user_authorized_service has value authorizedService
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_user_ad_account_expires has value accountExpires
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_user_ad_user_account_control has value userAccountControl
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_ns_account_lock has value nsAccountLock
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_user_authorized_host has value host
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_user_nds_login_disabled has value loginDisabled
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_user_nds_login_expiration_time has value loginExpirationTime
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_user_nds_login_allowed_time_map has value loginAllowedTimeMap
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_user_ssh_public_key has value ipaSshPubKey
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_user_auth_type has value ipaUserAuthType
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_group_object_class has value ipaUserGroup
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_group_object_class_alt has value posixGroup
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_group_name has value cn
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_group_pwd has value userPassword
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_group_gid_number has value gidNumber
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_group_member has value member
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_group_uuid has value ipaUniqueID
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_group_objectsid has value ipaNTSecurityIdentifier
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_group_modify_timestamp has value modifyTimestamp
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_group_entry_usn has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_group_type has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ipa_netgroup_object_class has value ipaNisNetgroup
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ipa_netgroup_name has value cn
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ipa_netgroup_member has value member
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ipa_netgroup_member_of has value memberOf
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ipa_netgroup_member_user has value memberUser
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ipa_netgroup_member_host has value memberHost
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ipa_netgroup_member_ext_host has value externalHost
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ipa_netgroup_domain has value nisDomainName
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ipa_netgroup_uuid has value ipaUniqueID
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ipa_host_object_class has value ipaHost
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ipa_host_name has value cn
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ipa_host_fqdn has value fqdn
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ipa_host_serverhostname has value serverHostname
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ipa_host_member_of has value memberOf
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ipa_host_ssh_public_key has value ipaSshPubKey
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ipa_host_uuid has value ipaUniqueID
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ipa_hostgroup_objectclass has value ipaHostgroup
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ipa_hostgroup_name has value cn
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ipa_hostgroup_memberof has value memberOf
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ipa_hostgroup_uuid has value ipaUniqueID
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_service_object_class has value ipService
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_service_name has value cn
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_service_port has value ipServicePort
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_service_proto has value ipServiceProtocol
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_service_entry_usn has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ipa_selinux_usermap_object_class has value ipaselinuxusermap
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ipa_selinux_usermap_name has value cn
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ipa_selinux_usermap_member_user has value memberUser
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ipa_selinux_usermap_member_host has value memberHost
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ipa_selinux_usermap_see_also has value seeAlso
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ipa_selinux_usermap_selinux_user has value ipaSELinuxUser
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ipa_selinux_usermap_enabled has value ipaEnabledFlag
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ipa_selinux_usermap_user_category has value userCategory
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ipa_selinux_usermap_host_category has value hostCategory
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ipa_selinux_usermap_uuid has value ipaUniqueID
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ipa_view_class has value nsContainer
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ipa_view_name has value cn
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ipa_overide_object_class has value ipaOverrideAnchor
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ipa_anchor_uuid has value ipaAnchorUUID
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ipa_user_override_object_class has value ipaUserOverride
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ipa_group_override_object_class has value ipaGroupOverride
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_user_name has value uid
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_user_uid_number has value uidNumber
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_user_gid_number has value gidNumber
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_user_gecos has value gecos
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_user_home_directory has value homeDirectory
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_user_shell has value loginShell
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_group_name has value cn
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_group_gid_number has value gidNumber
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_user_ssh_public_key has value ipaSshPubKey
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option dyndns_update is FALSE
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option dyndns_refresh_interval has value 0
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option dyndns_iface has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option dyndns_ttl has value 1200
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option dyndns_update_ptr is FALSE
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option dyndns_force_tcp is FALSE
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option dyndns_auth has value gss-tsig
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_id_setup_tasks] (0x0400): Setting up cleanup task for ipa.mydomain.local
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [be_ptask_create] (0x0400): Periodic task [Cleanup of ipa.mydomain.local] was created
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [be_ptask_schedule] (0x0400): Task [Cleanup of ipa.mydomain.local]: scheduling task 10 seconds from now [1435328645]
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sssm_ipa_id_init] (0x0100): The value of dns_discovery_domain will be ignored in ipa_server_mode
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ipa_domain has value ipa.mydomain.local
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ipa_server has value idc01.ipa.mydomain.local
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ipa_backup_server has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ipa_hostname has value idc01.ipa.mydomain.local
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ipa_hbac_search_base has value cn=hbac,dc=ipa,dc=mydomain,dc=local
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ipa_host_search_base has value cn=accounts,dc=ipa,dc=mydomain,dc=local
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ipa_selinux_search_base has value cn=selinux,dc=ipa,dc=mydomain,dc=local
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ipa_subdomains_search_base has value cn=trusts,dc=ipa,dc=mydomain,dc=local
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ipa_master_domain_search_base has value cn=ad,cn=etc,dc=ipa,dc=mydomain,dc=local
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option krb5_realm has value IPA.MYDOMAIN.LOCAL
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ipa_hbac_refresh has value 5
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ipa_selinux_refresh has value 5
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ipa_hbac_treat_deny_as has value DENY_ALL
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ipa_hbac_support_srchost is FALSE
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ipa_automount_location has value default
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ipa_ranges_search_base has value cn=ranges,cn=etc,dc=ipa,dc=mydomain,dc=local
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ipa_enable_dns_sites is FALSE
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ipa_server_mode is TRUE
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ipa_views_search_base has value cn=views,cn=accounts,dc=ipa,dc=mydomain,dc=local
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option krb5_confd_path has value /var/lib/sss/pubconf/krb5.include.d
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option krb5_server has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option krb5_backup_server has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option krb5_realm has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option krb5_ccachedir has value /tmp
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option krb5_ccname_template has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option krb5_auth_timeout has value 6
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option krb5_keytab has value /etc/krb5.keytab
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option krb5_validate is TRUE
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option krb5_kpasswd has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option krb5_backup_kpasswd has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option krb5_store_password_if_offline is TRUE
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option krb5_renewable_lifetime has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option krb5_lifetime has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option krb5_renew_interval has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option krb5_use_fast has value try
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option krb5_fast_principal has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option krb5_canonicalize is TRUE
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option krb5_use_enterprise_principal is FALSE
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option krb5_use_kdcinfo is TRUE
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [krb5_try_kdcip] (0x0100): No KDC found in configuration, trying legacy option
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [ipa_get_auth_options] (0x0400): Option krb5_realm set to IPA.MYDOMAIN.LOCAL
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [ipa_get_auth_options] (0x0100): Option krb5_fast_principal set to host/idc01.ipa.mydomain.local at IPA.MYDOMAIN.LOCAL
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [ipa_get_auth_options] (0x0100): Option krb5_use_kdcinfo set to true
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [check_and_export_lifetime] (0x0200): No lifetime configured.
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [check_and_export_lifetime] (0x0200): No lifetime configured.
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [check_and_export_options] (0x0100): No KDC explicitly configured, using defaults.
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [check_and_export_options] (0x0100): No kpasswd server explicitly configured, using the KDC or defaults.
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ipa_domain has value ipa.mydomain.local
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ipa_server has value idc01.ipa.mydomain.local
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ipa_backup_server has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ipa_hostname has value idc01.ipa.mydomain.local
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ipa_hbac_search_base has value cn=hbac,dc=ipa,dc=mydomain,dc=local
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ipa_host_search_base has value cn=accounts,dc=ipa,dc=mydomain,dc=local
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ipa_selinux_search_base has value cn=selinux,dc=ipa,dc=mydomain,dc=local
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ipa_subdomains_search_base has value cn=trusts,dc=ipa,dc=mydomain,dc=local
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ipa_master_domain_search_base has value cn=ad,cn=etc,dc=ipa,dc=mydomain,dc=local
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option krb5_realm has value IPA.MYDOMAIN.LOCAL
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ipa_hbac_refresh has value 5
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ipa_selinux_refresh has value 5
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ipa_hbac_treat_deny_as has value DENY_ALL
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ipa_hbac_support_srchost is FALSE
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ipa_automount_location has value default
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ipa_ranges_search_base has value cn=ranges,cn=etc,dc=ipa,dc=mydomain,dc=local
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ipa_enable_dns_sites is FALSE
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ipa_server_mode is TRUE
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ipa_views_search_base has value cn=views,cn=accounts,dc=ipa,dc=mydomain,dc=local
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option krb5_confd_path has value /var/lib/sss/pubconf/krb5.include.d
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [load_backend_module] (0x0200): no module name found in confdb, using [ipa].
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [common_parse_search_base] (0x0100): Search base added: [SUDO][ou=SUDOers,dc=ipa,dc=mydomain,dc=local][SUBTREE][]
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_sudorule_object_class has value sudoRole
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_sudorule_name has value cn
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_sudorule_command has value sudoCommand
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_sudorule_host has value sudoHost
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_sudorule_user has value sudoUser
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_sudorule_option has value sudoOption
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_sudorule_runas has value sudoRunAs
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_sudorule_runasuser has value sudoRunAsUser
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_sudorule_runasgroup has value sudoRunAsGroup
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_sudorule_notbefore has value sudoNotBefore
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_sudorule_notafter has value sudoNotAfter
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_sudorule_order has value sudoOrder
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_sudorule_entry_usn has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [check_ipv4_addr] (0x0200): Loopback IPv4 address 127.0.0.1
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [common_parse_search_base] (0x0100): Search base added: [AUTOFS][cn=default,cn=automount,dc=ipa,dc=mydomain,dc=local][SUBTREE][]
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_autofs_map_object_class has value automountMap
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_autofs_map_name has value automountMapName
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_autofs_entry_object_class has value automount
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_autofs_entry_key has value automountKey
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_autofs_entry_value has value automountInformation
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [load_backend_module] (0x0200): no module name found in confdb, using [ipa].
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [load_backend_module] (0x0200): no module name found in confdb, using [ipa].
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [load_backend_module] (0x0200): no module name found in confdb, using [ipa].
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sss_write_krb5_localauth_snippet] (0x0200): File for localauth plugin configuration is [/var/lib/sss/pubconf/krb5.include.d/localauth_plugin]
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [new_subdomain] (0x0400): Creating [mydomain.local] as subdomain of [ipa.mydomain.local]!
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sss_write_domain_mappings] (0x0200): Mapping file for domain [ipa.mydomain.local] is [/var/lib/sss/pubconf/krb5.include.d/domain_realm_ipa.mydomain.local]
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ad_domain has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ad_server has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ad_backup_server has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ad_hostname has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option krb5_keytab has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option krb5_realm has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ad_enable_dns_sites is TRUE
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ad_access_filter has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ad_enable_gc is TRUE
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ad_gpo_access_control has value permissive
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ad_gpo_cache_timeout has value 5
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ad_gpo_map_interactive has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ad_gpo_map_remote_interactive has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ad_gpo_map_network has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ad_gpo_map_batch has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ad_gpo_map_service has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ad_gpo_map_permit has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ad_gpo_map_deny has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ad_gpo_default_right has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option krb5_confd_path has value /var/lib/sss/pubconf/krb5.include.d
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_uri has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_backup_uri has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_search_base has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_default_bind_dn has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_default_authtok_type has value password
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_default_authtok has no binary value.
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_search_timeout has value 6
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_network_timeout has value 6
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_opt_timeout has value 6
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_tls_reqcert has value hard
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_user_search_base has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_user_search_scope has value sub
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_user_search_filter has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_user_extra_attrs has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_group_search_base has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_group_search_scope has value sub
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_group_search_filter has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_service_search_base has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_sudo_search_base has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_sudo_full_refresh_interval has value 21600
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_sudo_smart_refresh_interval has value 900
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_sudo_use_host_filter is TRUE
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_sudo_hostnames has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_sudo_ip has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_sudo_include_netgroups is TRUE
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_sudo_include_regexp is TRUE
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_autofs_search_base has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_autofs_map_master_name has value auto.master
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_schema has value ad
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_offline_timeout has value 60
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_force_upper_case_realm is TRUE
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_enumeration_refresh_timeout has value 300
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_purge_cache_timeout has value 10800
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_tls_cacert has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_tls_cacertdir has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_tls_cert has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_tls_key has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_tls_cipher_suite has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_id_use_start_tls is FALSE
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_id_mapping is TRUE
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_sasl_mech has value gssapi
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_sasl_authid has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_sasl_realm has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_sasl_minssf has value -1
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_krb5_keytab has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_krb5_init_creds is TRUE
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option krb5_server has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option krb5_backup_server has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option krb5_realm has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option krb5_canonicalize is FALSE
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option krb5_use_kdcinfo is TRUE
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_pwd_policy has value none
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_referrals is FALSE
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option account_cache_expiration has value 0
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_dns_service_name has value ldap
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_krb5_ticket_lifetime has value 86400
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_access_filter has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_netgroup_search_base has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_group_nesting_level has value 2
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_deref has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_account_expire_policy has value ad
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_access_order has value filter
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_chpass_uri has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_chpass_backup_uri has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_chpass_dns_service_name has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_chpass_update_last_change is FALSE
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_enumeration_search_timeout has value 60
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_auth_disable_tls_never_use_in_production is FALSE
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_page_size has value 1000
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_deref_threshold has value 10
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_sasl_canonicalize is FALSE
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_connection_expire_timeout has value 900
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_disable_paging is FALSE
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_idmap_range_min has value 200000
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_idmap_range_max has value 2000200000
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_idmap_range_size has value 200000
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_idmap_autorid_compat is FALSE
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_idmap_default_domain has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_idmap_default_domain_sid has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_groups_use_matching_rule_in_chain is FALSE
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_initgroups_use_matching_rule_in_chain is FALSE
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_use_tokengroups is TRUE
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_rfc2307_fallback_to_local_users is FALSE
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_disable_range_retrieval is FALSE
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_min_id has value 0
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_max_id has value 0
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_pwdlockout_dn has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_entry_usn has value uSNChanged
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_rootdse_last_usn has value highestCommittedUSN
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_user_object_class has value user
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_user_name has value sAMAccountName
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_user_pwd has value unixUserPassword
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_user_uid_number has value uidNumber
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_user_gid_number has value gidNumber
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_user_gecos has value gecos
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_user_home_directory has value unixHomeDirectory
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_user_shell has value loginShell
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_user_principal has value userPrincipalName
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_user_fullname has value name
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_user_member_of has value memberOf
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_user_uuid has value objectGUID
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_user_objectsid has value objectSID
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_user_primary_group has value primaryGroupID
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_user_modify_timestamp has value whenChanged
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_user_entry_usn has value uSNChanged
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_user_shadow_last_change has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_user_shadow_min has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_user_shadow_max has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_user_shadow_warning has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_user_shadow_inactive has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_user_shadow_expire has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_user_shadow_flag has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_user_krb_last_pwd_change has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_user_krb_password_expiration has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_pwd_attribute has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_user_authorized_service has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_user_ad_account_expires has value accountExpires
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_user_ad_user_account_control has value userAccountControl
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_ns_account_lock has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_user_authorized_host has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_user_nds_login_disabled has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_user_nds_login_expiration_time has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_user_nds_login_allowed_time_map has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_user_ssh_public_key has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_user_auth_type has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_group_object_class has value group
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_group_object_class_alt has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_group_name has value name
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_group_pwd has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_group_gid_number has value gidNumber
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_group_member has value member
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_group_uuid has value objectGUID
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_group_objectsid has value objectSID
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_group_modify_timestamp has value whenChanged
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_group_entry_usn has value uSNChanged
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_group_type has value groupType
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_netgroup_object_class has value nisNetgroup
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_netgroup_name has value cn
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_netgroup_member has value memberNisNetgroup
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_netgroup_triple has value nisNetgroupTriple
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_netgroup_modify_timestamp has value modifyTimestamp
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_service_object_class has value ipService
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_service_name has value cn
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_service_port has value ipServicePort
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_service_proto has value ipServiceProtocol
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_service_entry_usn has no value 
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [ad_set_ad_id_options] (0x0100): Option krb5_realm set to IPA.MYDOMAIN.LOCAL
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_set_sasl_options] (0x0100): Will look for idc01.ipa.mydomain.local at IPA.MYDOMAIN.LOCAL in default keytab
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [select_principal_from_keytab] (0x0200): trying to select the most appropriate principal from keytab
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [find_principal_in_keytab] (0x0400): No principal matching idc01.ipa.mydomain.local at IPA.MYDOMAIN.LOCAL found in keytab.
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [find_principal_in_keytab] (0x0400): No principal matching IDC01$@IPA.MYDOMAIN.LOCAL found in keytab.
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [select_principal_from_keytab] (0x0200): Selected primary: host/idc01.ipa.mydomain.local
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [select_principal_from_keytab] (0x0200): Selected realm: IPA.MYDOMAIN.LOCAL
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_set_sasl_options] (0x0100): Option ldap_sasl_authid set to host/idc01.ipa.mydomain.local
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_set_sasl_options] (0x0100): Option ldap_sasl_realm set to IPA.MYDOMAIN.LOCAL
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [fo_new_service] (0x0400): Creating new service 'mydomain.local'
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [fo_new_service] (0x0400): Creating new service 'gc_mydomain.local'
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [ad_failover_init] (0x0100): No primary servers defined, using service discovery
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [fo_add_srv_server] (0x0400): Adding new SRV server to service 'gc_mydomain.local' using 'tcp'.
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [fo_add_srv_server] (0x0400): Adding new SRV server to service 'mydomain.local' using 'tcp'.
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [_ad_servers_init] (0x0100): Added service discovery for AD
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [be_fo_set_srv_lookup_plugin] (0x0400): Trying to set SRV lookup plugin to AD
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [be_fo_set_srv_lookup_plugin] (0x0400): SRV lookup plugin is now AD
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_domain_subdom_add] (0x0400): subdomain mydomain.local is a new one, will create a new sdap domain object
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_id_setup_tasks] (0x0400): Setting up cleanup task for mydomain.local
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [be_ptask_create] (0x0400): Periodic task [Cleanup of mydomain.local] was created
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [be_ptask_schedule] (0x0400): Task [Cleanup of mydomain.local]: scheduling task 10 seconds from now [1435328645]
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [become_user] (0x0200): Trying to become user [0][0].
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [become_user] (0x0200): Already user [0].
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [main] (0x0400): Backend provider (ipa.mydomain.local) started!
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_sudo_schedule_refresh] (0x0400): Full refresh scheduled at: 1435328645
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [id_callback] (0x0100): Got id ack and version (1) from Monitor
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sbus_server_init_new_connection] (0x0200): Entering.
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sbus_server_init_new_connection] (0x0200): Adding connection 0x7fae43da19b0.
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sbus_init_connection] (0x0400): Adding connection 0x7fae43da19b0
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sbus_server_init_new_connection] (0x0200): Got a connection
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [be_client_init] (0x0100): Set-up Backend ID timeout [0x7fae43da1e40]
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sbus_server_init_new_connection] (0x0200): Entering.
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sbus_server_init_new_connection] (0x0200): Adding connection 0x7fae43da3d00.
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sbus_init_connection] (0x0400): Adding connection 0x7fae43da3d00
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sbus_server_init_new_connection] (0x0200): Got a connection
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [be_client_init] (0x0100): Set-up Backend ID timeout [0x7fae43da4560]
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sbus_server_init_new_connection] (0x0200): Entering.
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sbus_server_init_new_connection] (0x0200): Adding connection 0x7fae43da5800.
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sbus_init_connection] (0x0400): Adding connection 0x7fae43da5800
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sbus_server_init_new_connection] (0x0200): Got a connection
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [be_client_init] (0x0100): Set-up Backend ID timeout [0x7fae43da6230]
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sbus_server_init_new_connection] (0x0200): Entering.
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sbus_server_init_new_connection] (0x0200): Adding connection 0x7fae43da74a0.
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sbus_init_connection] (0x0400): Adding connection 0x7fae43da74a0
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sbus_server_init_new_connection] (0x0200): Got a connection
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [be_client_init] (0x0100): Set-up Backend ID timeout [0x7fae43da7ed0]
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sbus_server_init_new_connection] (0x0200): Entering.
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sbus_server_init_new_connection] (0x0200): Adding connection 0x7fae43da9140.
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sbus_init_connection] (0x0400): Adding connection 0x7fae43da9140
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sbus_server_init_new_connection] (0x0200): Got a connection
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [be_client_init] (0x0100): Set-up Backend ID timeout [0x7fae43daa190]
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sbus_server_init_new_connection] (0x0200): Entering.
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sbus_server_init_new_connection] (0x0200): Adding connection 0x7fae43dab400.
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sbus_init_connection] (0x0400): Adding connection 0x7fae43dab400
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sbus_server_init_new_connection] (0x0200): Got a connection
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [be_client_init] (0x0100): Set-up Backend ID timeout [0x7fae43dabe30]
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [client_registration] (0x0100): Cancel DP ID timeout [0x7fae43da4560]
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [client_registration] (0x0100): Added Frontend client [SSH]
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [be_get_subdomains] (0x0400): Got get subdomains []
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [fo_resolve_service_send] (0x0100): Trying to resolve service 'IPA'
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [resolv_gethostbyname_files_send] (0x0100): Trying to resolve A record of 'idc01.ipa.mydomain.local' in files
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [set_server_common_status] (0x0100): Marking server 'idc01.ipa.mydomain.local' as 'resolving name'
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [set_server_common_status] (0x0100): Marking server 'idc01.ipa.mydomain.local' as 'name resolved'
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [be_resolve_server_process] (0x0200): Found address for server idc01.ipa.mydomain.local: [172.21.251.9] TTL 7200
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [ipa_resolve_callback] (0x0400): Constructed uri 'ldap://idc01.ipa.mydomain.local'
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sss_ldap_init_send] (0x0400): Setting 6 seconds timeout for connecting
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(objectclass=*)][].
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_kinit_send] (0x0400): Attempting kinit (default, host/idc01.ipa.mydomain.local, IPA.MYDOMAIN.LOCAL, 86400)
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [fo_resolve_service_send] (0x0100): Trying to resolve service 'IPA'
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [be_resolve_server_process] (0x0200): Found address for server idc01.ipa.mydomain.local: [172.21.251.9] TTL 7200
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [create_tgt_req_send_buffer] (0x0400): buffer size: 87
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [set_tgt_child_timeout] (0x0400): Setting 6 seconds timeout for tgt child
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [write_pipe_handler] (0x0400): All data has been sent!
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [client_registration] (0x0100): Cancel DP ID timeout [0x7fae43da7ed0]
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [client_registration] (0x0100): Added Frontend client [SUDO]
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [be_get_subdomains] (0x0400): Got get subdomains []
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [client_registration] (0x0100): Cancel DP ID timeout [0x7fae43da1e40]
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [client_registration] (0x0100): Added Frontend client [autofs]
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [be_get_subdomains] (0x0400): Got get subdomains []
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [client_registration] (0x0100): Cancel DP ID timeout [0x7fae43dabe30]
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [client_registration] (0x0100): Added Frontend client [PAM]
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [be_get_subdomains] (0x0400): Got get subdomains []
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [client_registration] (0x0100): Cancel DP ID timeout [0x7fae43daa190]
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [client_registration] (0x0100): Added Frontend client [PAC]
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [be_get_subdomains] (0x0400): Got get subdomains []
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [client_registration] (0x0100): Cancel DP ID timeout [0x7fae43da6230]
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [client_registration] (0x0100): Added Frontend client [NSS]
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [be_get_subdomains] (0x0400): Got get subdomains []
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [child_sig_handler] (0x0100): child [6447] finished successfully.
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [read_pipe_handler] (0x0400): EOF received, client finished
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_tgt_recv] (0x0400): Child responded: 0 [FILE:/var/lib/sss/db/ccache_IPA.MYDOMAIN.LOCAL], expired on [1435415035]
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_cli_auth_step] (0x0100): expire timeout is 900
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sasl_bind_send] (0x0100): Executing sasl bind mech: GSSAPI, user: host/idc01.ipa.mydomain.local
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [fo_set_port_status] (0x0100): Marking port 0 of server 'idc01.ipa.mydomain.local' as 'working'
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [set_server_common_status] (0x0100): Marking server 'idc01.ipa.mydomain.local' as 'working'
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [fo_set_port_status] (0x0400): Marking port 0 of duplicate server 'idc01.ipa.mydomain.local' as 'working'
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [objectclass=ipaIDRange][cn=ranges,cn=etc,dc=ipa,dc=mydomain,dc=local].
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [be_run_unconditional_online_cb] (0x0400): Running unconditional online callbacks.
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [be_run_online_cb] (0x0080): Going online. Running callbacks.
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [objectclass=ipaNTTrustedDomain][cn=trusts,dc=ipa,dc=mydomain,dc=local].
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [ipa_subdom_get_forest] (0x0400): 4th component is not 'trust', nothing to do.
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [objectclass=ipaNTDomainAttrs][cn=ad,cn=etc,dc=ipa,dc=mydomain,dc=local].
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [get_subdomains_callback] (0x0400): Backend returned: (0, 0, <NULL>) [Success]
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [get_subdomains_callback] (0x0400): Backend returned: (0, 0, <NULL>) [Success]
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [get_subdomains_callback] (0x0400): Backend returned: (0, 0, <NULL>) [Success]
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [get_subdomains_callback] (0x0400): Backend returned: (0, 0, <NULL>) [Success]
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [get_subdomains_callback] (0x0400): Backend returned: (0, 0, <NULL>) [Success]
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [get_subdomains_callback] (0x0400): Backend returned: (0, 0, <NULL>) [Success]
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [ad_online_cb] (0x0400): The AD provider is online
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [objectclass=ipaIDRange][cn=ranges,cn=etc,dc=ipa,dc=mydomain,dc=local].
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [objectclass=ipaNTTrustedDomain][cn=trusts,dc=ipa,dc=mydomain,dc=local].
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [ipa_subdom_get_forest] (0x0400): 4th component is not 'trust', nothing to do.
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [objectclass=ipaNTDomainAttrs][cn=ad,cn=etc,dc=ipa,dc=mydomain,dc=local].
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set
(Fri Jun 26 16:23:55 2015) [sssd[be[ipa.mydomain.local]]] [delayed_online_authentication_callback] (0x0200): Backend is online, starting delayed online authentication.
(Fri Jun 26 16:23:58 2015) [sssd[be[ipa.mydomain.local]]] [be_run_unconditional_online_cb] (0x0400): Running unconditional online callbacks.
(Fri Jun 26 16:23:58 2015) [sssd[be[ipa.mydomain.local]]] [be_get_subdomains] (0x0400): Got get subdomains [otherdomain.com]
(Fri Jun 26 16:23:58 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [objectclass=ipaIDRange][cn=ranges,cn=etc,dc=ipa,dc=mydomain,dc=local].
(Fri Jun 26 16:23:58 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set
(Fri Jun 26 16:23:58 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [objectclass=ipaNTTrustedDomain][cn=trusts,dc=ipa,dc=mydomain,dc=local].
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [ipa_subdom_get_forest] (0x0400): 4th component is not 'trust', nothing to do.
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [objectclass=ipaNTDomainAttrs][cn=ad,cn=etc,dc=ipa,dc=mydomain,dc=local].
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [get_subdomains_callback] (0x0400): Backend returned: (0, 0, <NULL>) [Success]
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [be_get_account_info] (0x0200): Got request for [0x1001][1][name=account2 at otherdomain.com:U]
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [be_req_set_domain] (0x0400): Changing request domain from [ipa.mydomain.local] to [ipa.mydomain.local]
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [sdap_search_user_next_base] (0x0400): Searching for users with base [cn=accounts,dc=ipa,dc=mydomain,dc=local]
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(&(krbPrincipalName=account2 at otherdomain.com)(objectclass=posixAccount)(uid=*)(&(uidNumber=*)(!(uidNumber=0))))][cn=accounts,dc=ipa,dc=mydomain,dc=local].
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [sdap_search_user_process] (0x0400): Search for users, returned 0 results.
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_users_done] (0x0040): Failed to retrieve users
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [sysdb_search_by_name] (0x0400): No such entry
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [sysdb_delete_user] (0x0400): Error: 2 (No such file or directory)
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [sysdb_search_user_by_upn] (0x0400): No entry with upn [account2 at otherdomain.com] found.
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [ipa_id_get_account_info_orig_done] (0x0080): Object not found, ending request
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [acctinfo_callback] (0x0100): Request processed. Returned 3,0,Account info lookup failed
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [be_get_account_info] (0x0200): Got request for [0x1001][1][name=account2 at otherdomain.com:U]
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [be_req_set_domain] (0x0400): Changing request domain from [ipa.mydomain.local] to [mydomain.local]
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(&(objectClass=ipaUserOverride)(uid=account2 at otherdomain.com))][cn=Default Trust View,cn=views,cn=accounts,dc=ipa,dc=mydomain,dc=local].
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [fo_resolve_service_send] (0x0100): Trying to resolve service 'mydomain.local'
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [resolve_srv_send] (0x0200): The status of SRV lookup is neutral
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [ad_srv_plugin_send] (0x0400): About to find domain controllers
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [ad_get_dc_servers_send] (0x0400): Looking up domain controllers in domain mydomain.local
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [resolv_discover_srv_next_domain] (0x0400): SRV resolution of service 'ldap'. Will use DNS discovery domain 'mydomain.local'
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [resolv_getsrv_send] (0x0100): Trying to resolve SRV record of '_ldap._tcp.mydomain.local'
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [request_watch_destructor] (0x0400): Deleting request watch
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [fo_discover_srv_done] (0x0400): Got answer. Processing...
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [fo_discover_srv_done] (0x0400): Got 3 servers
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [ad_get_dc_servers_done] (0x0400): Found 3 domain controllers in domain mydomain.local
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [ad_srv_plugin_dcs_done] (0x0400): About to locate suitable site
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [sdap_connect_host_send] (0x0400): Resolving host dc03.mydomain.local
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [resolv_gethostbyname_files_send] (0x0100): Trying to resolve A record of 'dc03.mydomain.local' in files
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [resolv_gethostbyname_files_send] (0x0100): Trying to resolve AAAA record of 'dc03.mydomain.local' in files
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [resolv_gethostbyname_next] (0x0200): No more address families to retry
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [resolv_gethostbyname_dns_query] (0x0100): Trying to resolve A record of 'dc03.mydomain.local' in DNS
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [request_watch_destructor] (0x0400): Deleting request watch
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [sdap_connect_host_resolv_done] (0x0400): Connecting to ldap://dc03.mydomain.local:389
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [sss_ldap_init_send] (0x0400): Setting 6 seconds timeout for connecting
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [sdap_connect_host_done] (0x0400): Successful connection to ldap://dc03.mydomain.local:389
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(&(DnsDomain=mydomain.local)(NtVer=\14\00\00\00))][].
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [ad_get_client_site_done] (0x0400): Found site: Default-First-Site-Name
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [ad_srv_plugin_site_done] (0x0400): About to discover primary and backup servers
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [fo_discover_servers_send] (0x0400): Looking up primary servers
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [resolv_discover_srv_next_domain] (0x0400): SRV resolution of service 'ldap'. Will use DNS discovery domain 'Default-First-Site-Name._sites.mydomain.local'
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [resolv_getsrv_send] (0x0100): Trying to resolve SRV record of '_ldap._tcp.Default-First-Site-Name._sites.mydomain.local'
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [request_watch_destructor] (0x0400): Deleting request watch
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [fo_discover_srv_done] (0x0400): Got answer. Processing...
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [fo_discover_srv_done] (0x0400): Got 3 servers
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [fo_discover_servers_primary_done] (0x0400): Looking up backup servers
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [resolv_discover_srv_next_domain] (0x0400): SRV resolution of service 'ldap'. Will use DNS discovery domain 'mydomain.local'
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [resolv_getsrv_send] (0x0100): Trying to resolve SRV record of '_ldap._tcp.mydomain.local'
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [request_watch_destructor] (0x0400): Deleting request watch
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [fo_discover_srv_done] (0x0400): Got answer. Processing...
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [fo_discover_srv_done] (0x0400): Got 3 servers
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [ad_srv_plugin_servers_done] (0x0400): Got 3 primary and 3 backup servers
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [fo_add_server_to_list] (0x0400): Inserted primary server 'dc02.mydomain.local:389' to service 'mydomain.local'
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [fo_add_server_to_list] (0x0400): Inserted primary server 'dc03.mydomain.local:389' to service 'mydomain.local'
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [fo_add_server_to_list] (0x0400): Inserted primary server 'dc01.mydomain.local:389' to service 'mydomain.local'
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [fo_add_server_to_list] (0x0400): Server 'dc01.mydomain.local:389' for service 'mydomain.local' is already present
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [fo_add_server_to_list] (0x0400): Server 'dc02.mydomain.local:389' for service 'mydomain.local' is already present
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [fo_add_server_to_list] (0x0400): Server 'dc03.mydomain.local:389' for service 'mydomain.local' is already present
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [set_srv_data_status] (0x0100): Marking SRV lookup of service 'mydomain.local' as 'resolved'
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [resolv_gethostbyname_files_send] (0x0100): Trying to resolve A record of 'dc02.mydomain.local' in files
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [set_server_common_status] (0x0100): Marking server 'dc02.mydomain.local' as 'resolving name'
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [resolv_gethostbyname_files_send] (0x0100): Trying to resolve AAAA record of 'dc02.mydomain.local' in files
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [resolv_gethostbyname_next] (0x0200): No more address families to retry
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [resolv_gethostbyname_dns_query] (0x0100): Trying to resolve A record of 'dc02.mydomain.local' in DNS
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [request_watch_destructor] (0x0400): Deleting request watch
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [set_server_common_status] (0x0100): Marking server 'dc02.mydomain.local' as 'name resolved'
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [be_resolve_server_process] (0x0200): Found address for server dc02.mydomain.local: [172.21.251.12] TTL 3600
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [ad_resolve_callback] (0x0100): Constructed uri 'ldap://dc02.mydomain.local'
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [ad_resolve_callback] (0x0100): Constructed GC uri 'ldap://dc02.mydomain.local'
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [sss_ldap_init_send] (0x0400): Setting 6 seconds timeout for connecting
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(objectclass=*)][].
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_server_opts_from_rootdse] (0x0100): Setting AD compatibility level to [6]
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [sdap_kinit_send] (0x0400): Attempting kinit (default, host/idc01.ipa.mydomain.local, IPA.MYDOMAIN.LOCAL, 86400)
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [fo_resolve_service_send] (0x0100): Trying to resolve service 'mydomain.local'
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [resolve_srv_send] (0x0200): The status of SRV lookup is resolved
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [be_resolve_server_process] (0x0200): Found address for server dc02.mydomain.local: [172.21.251.12] TTL 3600
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [create_tgt_req_send_buffer] (0x0400): buffer size: 87
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [set_tgt_child_timeout] (0x0400): Setting 6 seconds timeout for tgt child
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [write_pipe_handler] (0x0400): All data has been sent!
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [child_sig_handler] (0x0100): child [6451] finished successfully.
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [read_pipe_handler] (0x0400): EOF received, client finished
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_tgt_recv] (0x0400): Child responded: 0 [FILE:/var/lib/sss/db/ccache_IPA.MYDOMAIN.LOCAL], expired on [1435415039]
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [sdap_cli_auth_step] (0x0100): expire timeout is 900
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [sasl_bind_send] (0x0100): Executing sasl bind mech: gssapi, user: host/idc01.ipa.mydomain.local
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [fo_set_port_status] (0x0100): Marking port 389 of server 'dc02.mydomain.local' as 'working'
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [set_server_common_status] (0x0100): Marking server 'dc02.mydomain.local' as 'working'
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [fo_set_port_status] (0x0400): Marking port 389 of duplicate server 'dc02.mydomain.local' as 'working'
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [sdap_search_user_next_base] (0x0400): Searching for users with base [dc=mydomain,dc=local]
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(&(userPrincipalName=account2 at otherdomain.com)(objectclass=user)(sAMAccountName=*)(objectSID=*))][dc=mydomain,dc=local].
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [be_run_unconditional_online_cb] (0x0400): Running unconditional online callbacks.
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [sdap_search_user_process] (0x0400): Search for users, returned 1 results.
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [sdap_save_user] (0x0400): Save user
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_primary_name] (0x0400): Processing object account2 at mydomain.local
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [sdap_save_user] (0x0400): Processing user account2 at mydomain.local
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [sdap_save_user] (0x0400): Original memberOf is not available for [account2 at mydomain.local].
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [sdap_save_user] (0x0400): Adding user principal [account2 at OTHERDOMAIN.COM] to attributes of [account2 at mydomain.local].
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [sdap_save_user] (0x0400): Storing info for user account2 at mydomain.local
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(&(objectClass=ipaOverrideAnchor)(ipaAnchorUUID=:SID:S-1-5-21-1710311407-3537505305-1030735119-11202))][cn=Default Trust View,cn=views,cn=accounts,dc=ipa,dc=mydomain,dc=local].
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [objectClass=ipaexternalgroup][dc=ipa,dc=mydomain,dc=local].
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [ipa_get_ext_groups_done] (0x0400): [0] external groups found.
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [find_ipa_ext_memberships] (0x0080): User [account2 at otherdomain.com] not found in cache.
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [acctinfo_callback] (0x0100): Request processed. Returned 0,0,Success
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [be_get_account_info] (0x0200): Got request for [0x1003][1][name=nobody]
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [be_req_set_domain] (0x0400): Changing request domain from [ipa.mydomain.local] to [ipa.mydomain.local]
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_initgr_next_base] (0x0400): Searching for users with base [cn=accounts,dc=ipa,dc=mydomain,dc=local]
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(&(uid=nobody)(objectclass=posixAccount)(&(uidNumber=*)(!(uidNumber=0))))][cn=accounts,dc=ipa,dc=mydomain,dc=local].
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [sysdb_search_by_name] (0x0400): No such entry
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [sysdb_delete_user] (0x0400): Error: 2 (No such file or directory)
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [sysdb_search_by_name] (0x0400): No such entry
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [ipa_id_get_account_info_orig_done] (0x0080): Object not found, ending request
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [acctinfo_callback] (0x0100): Request processed. Returned 3,0,Account info lookup failed
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [be_get_account_info] (0x0200): Got request for [0x1][1][name=account2]
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [be_req_set_domain] (0x0400): Changing request domain from [ipa.mydomain.local] to [mydomain.local]
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(&(objectClass=ipaUserOverride)(uid=account2))][cn=Default Trust View,cn=views,cn=accounts,dc=ipa,dc=mydomain,dc=local].
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [sdap_search_user_next_base] (0x0400): Searching for users with base [dc=mydomain,dc=local]
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(&(sAMAccountName=account2)(objectclass=user)(sAMAccountName=*)(objectSID=*))][dc=mydomain,dc=local].
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [sdap_search_user_process] (0x0400): Search for users, returned 1 results.
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [sdap_save_user] (0x0400): Save user
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_primary_name] (0x0400): Processing object account2 at mydomain.local
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [sdap_save_user] (0x0400): Processing user account2 at mydomain.local
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [sdap_save_user] (0x0400): Original memberOf is not available for [account2 at mydomain.local].
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [sdap_save_user] (0x0400): Adding user principal [account2 at OTHERDOMAIN.COM] to attributes of [account2 at mydomain.local].
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [sdap_save_user] (0x0400): Storing info for user account2 at mydomain.local
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(&(objectClass=ipaOverrideAnchor)(ipaAnchorUUID=:SID:S-1-5-21-1710311407-3537505305-1030735119-11202))][cn=Default Trust View,cn=views,cn=accounts,dc=ipa,dc=mydomain,dc=local].
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [ipa_get_ad_memberships_send] (0x0400): External group information still valid.
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [find_ipa_ext_memberships] (0x0400): No external groupmemberships found.
(Fri Jun 26 16:23:59 2015) [sssd[be[ipa.mydomain.local]]] [acctinfo_callback] (0x0100): Request processed. Returned 0,0,Success
(Fri Jun 26 16:24:02 2015) [sssd[be[ipa.mydomain.local]]] [be_get_subdomains] (0x0400): Got get subdomains [otherdomain.com]
(Fri Jun 26 16:24:02 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [objectclass=ipaIDRange][cn=ranges,cn=etc,dc=ipa,dc=mydomain,dc=local].
(Fri Jun 26 16:24:02 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set
(Fri Jun 26 16:24:02 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [objectclass=ipaNTTrustedDomain][cn=trusts,dc=ipa,dc=mydomain,dc=local].
(Fri Jun 26 16:24:02 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set
(Fri Jun 26 16:24:02 2015) [sssd[be[ipa.mydomain.local]]] [ipa_subdom_get_forest] (0x0400): 4th component is not 'trust', nothing to do.
(Fri Jun 26 16:24:02 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [objectclass=ipaNTDomainAttrs][cn=ad,cn=etc,dc=ipa,dc=mydomain,dc=local].
(Fri Jun 26 16:24:02 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set
(Fri Jun 26 16:24:02 2015) [sssd[be[ipa.mydomain.local]]] [get_subdomains_callback] (0x0400): Backend returned: (0, 0, <NULL>) [Success]
(Fri Jun 26 16:24:02 2015) [sssd[be[ipa.mydomain.local]]] [be_get_subdomains] (0x0400): Got get subdomains [otherdomain.com]
(Fri Jun 26 16:24:02 2015) [sssd[be[ipa.mydomain.local]]] [get_subdomains_callback] (0x0400): Backend returned: (0, 0, <NULL>) [Success]
(Fri Jun 26 16:24:02 2015) [sssd[be[ipa.mydomain.local]]] [be_get_subdomains] (0x0400): Got get subdomains [otherdomain.com]
(Fri Jun 26 16:24:02 2015) [sssd[be[ipa.mydomain.local]]] [get_subdomains_callback] (0x0400): Backend returned: (0, 0, <NULL>) [Success]
(Fri Jun 26 16:24:05 2015) [sssd[be[ipa.mydomain.local]]] [be_ptask_execute] (0x0400): Task [Cleanup of ipa.mydomain.local]: executing task, timeout 3600 seconds
(Fri Jun 26 16:24:05 2015) [sssd[be[ipa.mydomain.local]]] [be_ptask_done] (0x0400): Task [Cleanup of ipa.mydomain.local]: finished successfully
(Fri Jun 26 16:24:05 2015) [sssd[be[ipa.mydomain.local]]] [be_ptask_schedule] (0x0400): Task [Cleanup of ipa.mydomain.local]: scheduling task 3600 seconds from last execution time [1435332245]
(Fri Jun 26 16:24:05 2015) [sssd[be[ipa.mydomain.local]]] [be_ptask_execute] (0x0400): Task [Cleanup of mydomain.local]: executing task, timeout 10800 seconds
(Fri Jun 26 16:24:05 2015) [sssd[be[ipa.mydomain.local]]] [cleanup_groups] (0x0200): Found 2 expired group entries!
(Fri Jun 26 16:24:05 2015) [sssd[be[ipa.mydomain.local]]] [be_ptask_done] (0x0400): Task [Cleanup of mydomain.local]: finished successfully
(Fri Jun 26 16:24:05 2015) [sssd[be[ipa.mydomain.local]]] [be_ptask_schedule] (0x0400): Task [Cleanup of mydomain.local]: scheduling task 10800 seconds from last execution time [1435339445]
(Fri Jun 26 16:24:05 2015) [sssd[be[ipa.mydomain.local]]] [sdap_sudo_full_refresh_send] (0x0400): Issuing a full refresh of sudo rules
(Fri Jun 26 16:24:05 2015) [sssd[be[ipa.mydomain.local]]] [sdap_sudo_refresh_connect_done] (0x0400): SUDO LDAP connection successful
(Fri Jun 26 16:24:05 2015) [sssd[be[ipa.mydomain.local]]] [sdap_sudo_load_sudoers_next_base] (0x0400): Searching for sudo rules with base [ou=SUDOers,dc=ipa,dc=mydomain,dc=local]
(Fri Jun 26 16:24:05 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(&(objectClass=sudoRole)(|(!(sudoHost=*))(sudoHost=ALL)(sudoHost=idc01.ipa.mydomain.local)(sudoHost=idc01)(sudoHost=172.21.251.9)(sudoHost=172.21.251.0/24)(sudoHost=+*)(|(sudoHost=*\\*)(sudoHost=*?*)(sudoHost=*\2A*)(sudoHost=*[*]*))))][ou=SUDOers,dc=ipa,dc=mydomain,dc=local].
(Fri Jun 26 16:24:05 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set
(Fri Jun 26 16:24:05 2015) [sssd[be[ipa.mydomain.local]]] [sdap_sudo_load_sudoers_process] (0x0400): Receiving sudo rules with base [ou=SUDOers,dc=ipa,dc=mydomain,dc=local]
(Fri Jun 26 16:24:05 2015) [sssd[be[ipa.mydomain.local]]] [sdap_sudo_refresh_load_done] (0x0400): Received 0 rules
(Fri Jun 26 16:24:05 2015) [sssd[be[ipa.mydomain.local]]] [sysdb_sudo_purge_byfilter] (0x0400): No rules matched
(Fri Jun 26 16:24:05 2015) [sssd[be[ipa.mydomain.local]]] [sdap_sudo_refresh_load_done] (0x0400): Sudoers is successfuly stored in cache
(Fri Jun 26 16:24:05 2015) [sssd[be[ipa.mydomain.local]]] [sdap_sudo_full_refresh_done] (0x0400): Successful full refresh of sudo rules
(Fri Jun 26 16:24:05 2015) [sssd[be[ipa.mydomain.local]]] [sdap_sudo_schedule_refresh] (0x0400): Full refresh scheduled at: 1435350245
(Fri Jun 26 16:24:05 2015) [sssd[be[ipa.mydomain.local]]] [sdap_sudo_schedule_refresh] (0x0400): Smart refresh scheduled at: 1435329545