[Freeipa-users] UPN suffixes in AD trust

Mon Jun 29 08:04:04 UTC 2015

On 06/26/2015 08:06 PM, Sumit Bose wrote:
> On Fri, Jun 26, 2015 at 04:34:05PM +0200, Giorgio Biacchi wrote:
>>
>>
>> On 06/26/2015 02:38 PM, Sumit Bose wrote:
>>> On Thu, Jun 25, 2015 at 07:00:34PM +0200, Giorgio Biacchi wrote:
>>>> On 06/25/2015 05:44 PM, Sumit Bose wrote:
>>>>> On Thu, Jun 25, 2015 at 04:29:37PM +0200, Giorgio Biacchi wrote:
>>>>>> On 06/25/2015 02:10 PM, Sumit Bose wrote:
>>>>>>> On Thu, Jun 25, 2015 at 01:06:22PM +0200, Giorgio Biacchi wrote:
>>>>>>>> On 06/25/2015 12:56 PM, Sumit Bose wrote:
>>>>>>>>> On Thu, Jun 25, 2015 at 12:22:16PM +0200, Giorgio Biacchi wrote:
>>>>>>>>>> On 06/24/2015 06:45 PM, Sumit Bose wrote:
>>>>>>>>>>> On Wed, Jun 24, 2015 at 05:11:07PM +0200, Giorgio Biacchi wrote:
>>>>>>>>>>>> Hi everybody,
>>>>>>>>>>>> I established a bidirectional trust between an IPA server (version 4.1.0 on
>>>>>>>>>>>> CentOS 7.1), ipa.mydomain.local and an AD (Windows 2012 r2), mydomain.local.
>>>>>>>>>>>> Everything is working fine, and I'm able to authenticate and logon on a linux
>>>>>>>>>>>> host joined to IPA server using AD credentials (username at mydomain.local).
>>>>>>>>>>>> But active directory is configured with two more UPN suffixes (otherdomain.com
>>>>>>>>>>>> and sub.otherdomain.com), and I cannot logon with credentials using alternative
>>>>>>>>>>>> UPN (example: john.doe at otherdomain.com).
>>>>>>>>>>>>
>>>>>>>>>>>> How can I make this possible? Another trust (ipa trust-add) with the same AD?
>>>>>>>>>>>> Manual configuration of krb5 and/or sssd?
>>>>>>>>>>>
>>>>>>>>>>> Have you tried to login to an IPA client or the server? Please try with
>>>>>>>>>>> an IPA server first. If this does not work it would be nice if you can
>>>>>>>>>>> send the SSSD log files from the IPA server which are generated during
>>>>>>>>>>> the logon attempt. Please call 'sss_cache -E' before to invalidate all
>>>>>>>>>>> cached entries so that the logs will contain all needed calls to AD.
>>>>>>>>>>>
>>>>>>>>>>> Using UPN suffixes were added to the AD provider some time ago and the
>>>>>>>>>>> code is available in the IPA provider as well, but I guess no one has
>>>>>>>>>>> actually tried this before.
>>>>>>>>>>>
>>>>>>>>>>> bye,
>>>>>>>>>>> Sumit
>>>>>>>>>>
>>>>>>>>>> First of all let me say that i feel like I'm missing some config somewhere..
>>>>>>>>>> Changes tried in krb5.conf to support UPN suffixes didn't helped.
>>>>>>>>>> I can only access the server vi ssh so I've attached the logs for a successful
>>>>>>>>>> login for account1 at mydomain.local and an unsuccessful login for
>>>>>>>>>> account2 at otherdomain.com done via ssh.
>>>>>>>>>>
>>>>>>>>>> Bye and thanks for your help
>>>>>>>>>>
>>>>>>>>>
>>>>>>>>> It looks like the request is not properly propagated to sub-domains (the
>>>>>>>>> trusted AD domain) but only send to the IPA domain.
>>>>>>>>>
>>>>>>>>> Would it be possible for you to run a test build of SSSD which might fix
>>>>>>>>> this? If yes, which version of SSSD are you currently using? Then I can
>>>>>>>>> prepare a test build with the patch on top of this version.
>>>>>>>>>
>>>>>>>>> bye,
>>>>>>>>> Sumit
>>>>>>>>>
>>>>>>>>
>>>>>>>> Hi,
>>>>>>>> I'm using sssd 1.12.2 (sssd --version) on CentOS 7.1.1503 and I'm available for
>>>>>>>> any test.
>>>>>>>>
>>>>>>>> Here's the packages version for sssd:
>>>>>>>>
>>>>>>>> sssd-common-1.12.2-58.el7_1.6.x86_64
>>>>>>>> sssd-krb5-1.12.2-58.el7_1.6.x86_64
>>>>>>>> python-sssdconfig-1.12.2-58.el7_1.6.noarch
>>>>>>>> sssd-krb5-common-1.12.2-58.el7_1.6.x86_64
>>>>>>>> sssd-ipa-1.12.2-58.el7_1.6.x86_64
>>>>>>>> sssd-1.12.2-58.el7_1.6.x86_64
>>>>>>>> sssd-libwbclient-1.12.2-58.el7_1.6.x86_64
>>>>>>>> sssd-ad-1.12.2-58.el7_1.6.x86_64
>>>>>>>> sssd-ldap-1.12.2-58.el7_1.6.x86_64
>>>>>>>> sssd-common-pac-1.12.2-58.el7_1.6.x86_64
>>>>>>>> sssd-proxy-1.12.2-58.el7_1.6.x86_64
>>>>>>>> sssd-client-1.12.2-58.el7_1.6.x86_64
>>>>>>>
>>>>>>> Please try the packages at
>>>>>>> http://koji.fedoraproject.org/koji/taskinfo?taskID=10210844 .
>>>>>>>
>>>>>>> bye,
>>>>>>> Sumit
>>>>>>
>>>>>> Hi,
>>>>>> I've installed the new RPMs, now if I run on the server:
>>>>>>
>>>>>> id account1 at mydomain.local
>>>>>> id account2 at otherdomain.com
>>>>>> id account2 at sub.otherdomain.com
>>>>>>
>>>>>> all the users are found but I'm still unable to log in via ssh with the accounts
>>>>>> @otherdomain.com and @sub.otherdomain.com.
>>>>>>
>>>>>> In attachment the logs for unsuccessful login for user account2 at otherdomain.com.
>>>>>
>>>>> Bother, I forgot to add the fix to the pam responder as well, please try
>>>>> new packages from
>>>>> http://koji.fedoraproject.org/koji/taskinfo?taskID=10212212 .
>>>>>
>>>>> bye,
>>>>> Sumit
>>>>>
>>>>
>>>> Hi,
>>>> I've updated all the packages but still no login.
>>>>
>>>> Logs follows.
>>>
>>> I found another issue in the logs which should be fixed by the build
>>> from http://koji.fedoraproject.org/koji/taskinfo?taskID=10217756 .
>>>
>>> Please send the sssd_pam log file as well it might contain more details
>>> about what goes wrong during authentication.
>>>
>>> bye,
>>> Sumit
>>>
>>
>> Hi,
>> packages update, sssd and kerberos services restarted, cache flushed but still
>> no login on the IPA server.
>>
>> As before, logs attached. I've also included the logs generated by the restart
>> of sssd service because there were no logs in sssd_pam.log when trying to
>> authenticate.
>>
>> Debug level is set to 6 in the sections:
>>
>> [domain/ipa.mydomain.local]
>> [sssd]
>> [nss]
>> [pam]
>>
>> of /etc/sssd/sssd.conf, please tell me if this is enough or if I have to
>> increase it.
>>
> 
> so far it is sufficient. I have another build for you to try at
> http://koji.fedoraproject.org/koji/taskinfo?taskID=10219343
> 
> Thank you for your patience.

Thanks for your help!!

Still no successful login.. Logs attached

Bye
-- 
gb

PGP Key: http://pgp.mit.edu/
Primary key fingerprint: C510 0765 943E EBED A4F2 69D3 16CC DC90 B9CB 0F34
-------------- next part --------------
(Mon Jun 29 09:59:24 2015) [sssd[pam]] [sss_parse_name_for_domains] (0x0200): name 'root' matched without domain, user is root
(Mon Jun 29 09:59:24 2015) [sssd[pam]] [sss_ncache_set_str] (0x0400): Adding [NCE/GROUP/ipa.mydomain.local/root] to negative cache permanently
(Mon Jun 29 09:59:24 2015) [sssd[pam]] [responder_set_fd_limit] (0x0100): Maximum file descriptors set to [8192]
(Mon Jun 29 09:59:24 2015) [sssd[pam]] [sss_dp_issue_request] (0x0400): Issuing request for [0x7f774af44760:domains at ipa.mydomain.local]
(Mon Jun 29 09:59:24 2015) [sssd[pam]] [sss_dp_get_domains_msg] (0x0400): Sending get domains request for [ipa.mydomain.local][]
(Mon Jun 29 09:59:24 2015) [sssd[pam]] [sss_dp_internal_get_send] (0x0400): Entering request [0x7f774af44760:domains at ipa.mydomain.local]
(Mon Jun 29 09:59:24 2015) [sssd[pam]] [id_callback] (0x0100): Got id ack and version (1) from Monitor
(Mon Jun 29 09:59:24 2015) [sssd[pam]] [dp_id_callback] (0x0100): Got id ack and version (1) from DP
(Mon Jun 29 09:59:24 2015) [sssd[pam]] [new_subdomain] (0x0400): Creating [mydomain.local] as subdomain of [ipa.mydomain.local]!
(Mon Jun 29 09:59:24 2015) [sssd[pam]] [sss_dp_req_destructor] (0x0400): Deleting request: [0x7f774af44760:domains at ipa.mydomain.local]
(Mon Jun 29 09:59:47 2015) [sssd[pam]] [sss_responder_ctx_destructor] (0x0400): Responder is being shut down
(Mon Jun 29 09:59:48 2015) [sssd[pam]] [server_setup] (0x0400): CONFDB: /var/lib/sss/db/config.ldb
(Mon Jun 29 09:59:48 2015) [sssd[pam]] [confdb_get_domain_internal] (0x0400): No enumeration for [ipa.mydomain.local]!
(Mon Jun 29 09:59:48 2015) [sssd[pam]] [sbus_init_connection] (0x0400): Adding connection 0x7f5f935c1c50
(Mon Jun 29 09:59:48 2015) [sssd[pam]] [monitor_common_send_id] (0x0100): Sending ID: (pam,1)
(Mon Jun 29 09:59:48 2015) [sssd[pam]] [sss_names_init_from_args] (0x0100): Using re [(((?P<domain>[^\\]+)\\(?P<name>.+$))|((?P<name>[^@]+)@(?P<domain>.+$))|(^(?P<name>[^@\\]+)$))].
(Mon Jun 29 09:59:48 2015) [sssd[pam]] [sss_fqnames_init] (0x0100): Using fq format [%1$s@%2$s].
(Mon Jun 29 09:59:48 2015) [sssd[pam]] [sbus_init_connection] (0x0400): Adding connection 0x7f5f935bf040
(Mon Jun 29 09:59:48 2015) [sssd[pam]] [dp_common_send_id] (0x0100): Sending ID to DP: (1,PAM)
(Mon Jun 29 09:59:48 2015) [sssd[pam]] [sysdb_domain_init_internal] (0x0200): DB File for ipa.mydomain.local: /var/lib/sss/db/cache_ipa.mydomain.local.ldb
(Mon Jun 29 09:59:48 2015) [sssd[pam]] [ldb] (0x0400): asq: Unable to register control with rootdse!
(Mon Jun 29 09:59:48 2015) [sssd[pam]] [sss_process_init] (0x0400): Responder Initialization complete
(Mon Jun 29 09:59:48 2015) [sssd[pam]] [get_trusted_uids] (0x0400): All UIDs are allowed.
(Mon Jun 29 09:59:48 2015) [sssd[pam]] [sss_parse_name_for_domains] (0x0200): name 'root' matched without domain, user is root
(Mon Jun 29 09:59:48 2015) [sssd[pam]] [sss_ncache_set_str] (0x0400): Adding [NCE/USER/ipa.mydomain.local/root] to negative cache permanently
(Mon Jun 29 09:59:48 2015) [sssd[pam]] [sss_parse_name_for_domains] (0x0200): name 'root' matched without domain, user is root
(Mon Jun 29 09:59:48 2015) [sssd[pam]] [sss_ncache_set_str] (0x0400): Adding [NCE/GROUP/ipa.mydomain.local/root] to negative cache permanently
(Mon Jun 29 09:59:48 2015) [sssd[pam]] [responder_set_fd_limit] (0x0100): Maximum file descriptors set to [8192]
(Mon Jun 29 09:59:48 2015) [sssd[pam]] [sss_dp_issue_request] (0x0400): Issuing request for [0x7f5f9266a760:domains at ipa.mydomain.local]
(Mon Jun 29 09:59:48 2015) [sssd[pam]] [sss_dp_get_domains_msg] (0x0400): Sending get domains request for [ipa.mydomain.local][]
(Mon Jun 29 09:59:48 2015) [sssd[pam]] [sss_dp_internal_get_send] (0x0400): Entering request [0x7f5f9266a760:domains at ipa.mydomain.local]
(Mon Jun 29 09:59:48 2015) [sssd[pam]] [id_callback] (0x0100): Got id ack and version (1) from Monitor
(Mon Jun 29 09:59:48 2015) [sssd[pam]] [dp_id_callback] (0x0100): Got id ack and version (1) from DP
(Mon Jun 29 09:59:48 2015) [sssd[pam]] [new_subdomain] (0x0400): Creating [mydomain.local] as subdomain of [ipa.mydomain.local]!
(Mon Jun 29 09:59:48 2015) [sssd[pam]] [sss_dp_req_destructor] (0x0400): Deleting request: [0x7f5f9266a760:domains at ipa.mydomain.local]
(Mon Jun 29 09:59:56 2015) [sssd[pam]] [accept_fd_handler] (0x0400): Client connected to privileged pipe!
(Mon Jun 29 09:59:56 2015) [sssd[pam]] [sss_cmd_get_version] (0x0200): Received client version [3].
(Mon Jun 29 09:59:56 2015) [sssd[pam]] [sss_cmd_get_version] (0x0200): Offered version [3].
(Mon Jun 29 09:59:56 2015) [sssd[pam]] [pam_cmd_authenticate] (0x0100): entering pam_cmd_authenticate
(Mon Jun 29 09:59:56 2015) [sssd[pam]] [pam_print_data] (0x0100): command: PAM_AUTHENTICATE
(Mon Jun 29 09:59:56 2015) [sssd[pam]] [pam_print_data] (0x0100): domain: otherdomain.com
(Mon Jun 29 09:59:56 2015) [sssd[pam]] [pam_print_data] (0x0100): user: not set
(Mon Jun 29 09:59:56 2015) [sssd[pam]] [pam_print_data] (0x0100): service: sshd
(Mon Jun 29 09:59:56 2015) [sssd[pam]] [pam_print_data] (0x0100): tty: ssh
(Mon Jun 29 09:59:56 2015) [sssd[pam]] [pam_print_data] (0x0100): ruser: not set
(Mon Jun 29 09:59:56 2015) [sssd[pam]] [pam_print_data] (0x0100): rhost: fido.sm.di.otherdomain.com
(Mon Jun 29 09:59:56 2015) [sssd[pam]] [pam_print_data] (0x0100): authtok type: 1
(Mon Jun 29 09:59:56 2015) [sssd[pam]] [pam_print_data] (0x0100): newauthtok type: 0
(Mon Jun 29 09:59:56 2015) [sssd[pam]] [pam_print_data] (0x0100): priv: 1
(Mon Jun 29 09:59:56 2015) [sssd[pam]] [pam_print_data] (0x0100): cli_pid: 14169
(Mon Jun 29 09:59:56 2015) [sssd[pam]] [pam_print_data] (0x0100): logon name: account2 at otherdomain.com
(Mon Jun 29 09:59:56 2015) [sssd[pam]] [sss_dp_issue_request] (0x0400): Issuing request for [0x7f5f9266a760:domains at ipa.mydomain.local]
(Mon Jun 29 09:59:56 2015) [sssd[pam]] [sss_dp_get_domains_msg] (0x0400): Sending get domains request for [ipa.mydomain.local][otherdomain.com]
(Mon Jun 29 09:59:56 2015) [sssd[pam]] [sss_dp_internal_get_send] (0x0400): Entering request [0x7f5f9266a760:domains at ipa.mydomain.local]
(Mon Jun 29 09:59:56 2015) [sssd[pam]] [pam_print_data] (0x0100): command: PAM_AUTHENTICATE
(Mon Jun 29 09:59:56 2015) [sssd[pam]] [pam_print_data] (0x0100): domain: otherdomain.com
(Mon Jun 29 09:59:56 2015) [sssd[pam]] [pam_print_data] (0x0100): user: not set
(Mon Jun 29 09:59:56 2015) [sssd[pam]] [pam_print_data] (0x0100): service: sshd
(Mon Jun 29 09:59:56 2015) [sssd[pam]] [pam_print_data] (0x0100): tty: ssh
(Mon Jun 29 09:59:56 2015) [sssd[pam]] [pam_print_data] (0x0100): ruser: not set
(Mon Jun 29 09:59:56 2015) [sssd[pam]] [pam_print_data] (0x0100): rhost: fido.sm.di.otherdomain.com
(Mon Jun 29 09:59:56 2015) [sssd[pam]] [pam_print_data] (0x0100): authtok type: 1
(Mon Jun 29 09:59:56 2015) [sssd[pam]] [pam_print_data] (0x0100): newauthtok type: 0
(Mon Jun 29 09:59:56 2015) [sssd[pam]] [pam_print_data] (0x0100): priv: 1
(Mon Jun 29 09:59:56 2015) [sssd[pam]] [pam_print_data] (0x0100): cli_pid: 14169
(Mon Jun 29 09:59:56 2015) [sssd[pam]] [pam_print_data] (0x0100): logon name: account2 at otherdomain.com
(Mon Jun 29 09:59:56 2015) [sssd[pam]] [sss_dp_issue_request] (0x0400): Issuing request for [0x7f5f92668ef0:3:account2 at otherdomain.com:U at ipa.mydomain.local]
(Mon Jun 29 09:59:56 2015) [sssd[pam]] [sss_dp_get_account_msg] (0x0400): Creating request for [ipa.mydomain.local][3][1][name=account2 at otherdomain.com:U]
(Mon Jun 29 09:59:56 2015) [sssd[pam]] [sss_dp_internal_get_send] (0x0400): Entering request [0x7f5f92668ef0:3:account2 at otherdomain.com:U at ipa.mydomain.local]
(Mon Jun 29 09:59:56 2015) [sssd[pam]] [sss_dp_req_destructor] (0x0400): Deleting request: [0x7f5f9266a760:domains at ipa.mydomain.local]
(Mon Jun 29 09:59:56 2015) [sssd[pam]] [pam_check_user_dp_callback] (0x0040): Unable to get information from Data Provider
Error: 3, 0, Account info lookup failed
(Mon Jun 29 09:59:56 2015) [sssd[pam]] [pam_check_user_search] (0x0100): Requesting info for [account2 at otherdomain.com@ipa.mydomain.local]
(Mon Jun 29 09:59:56 2015) [sssd[pam]] [sysdb_search_user_by_upn] (0x0400): No entry with upn [account2 at otherdomain.com] found.
(Mon Jun 29 09:59:56 2015) [sssd[pam]] [sss_ncache_set_str] (0x0400): Adding [NCE/USER/ipa.mydomain.local/account2 at otherdomain.com] to negative cache
(Mon Jun 29 09:59:56 2015) [sssd[pam]] [sss_dp_issue_request] (0x0400): Issuing request for [0x7f5f92668ef0:3:account2 at otherdomain.com:U at mydomain.local]
(Mon Jun 29 09:59:56 2015) [sssd[pam]] [sss_dp_get_account_msg] (0x0400): Creating request for [mydomain.local][3][1][name=account2 at otherdomain.com:U]
(Mon Jun 29 09:59:56 2015) [sssd[pam]] [sss_dp_internal_get_send] (0x0400): Entering request [0x7f5f92668ef0:3:account2 at otherdomain.com:U at mydomain.local]
(Mon Jun 29 09:59:56 2015) [sssd[pam]] [sss_dp_req_destructor] (0x0400): Deleting request: [0x7f5f92668ef0:3:account2 at otherdomain.com:U at ipa.mydomain.local]
(Mon Jun 29 09:59:57 2015) [sssd[pam]] [pam_check_user_search] (0x0100): Requesting info for [account2 at otherdomain.com@mydomain.local]
(Mon Jun 29 09:59:57 2015) [sssd[pam]] [pam_check_user_search] (0x0400): Returning info for user [account2 at otherdomain.com@mydomain.local]
(Mon Jun 29 09:59:57 2015) [sssd[pam]] [pd_set_primary_name] (0x0400): User's primary name is account2 at mydomain.local
(Mon Jun 29 09:59:57 2015) [sssd[pam]] [pam_dp_send_req] (0x0100): Sending request with the following data:
(Mon Jun 29 09:59:57 2015) [sssd[pam]] [pam_print_data] (0x0100): command: PAM_AUTHENTICATE
(Mon Jun 29 09:59:57 2015) [sssd[pam]] [pam_print_data] (0x0100): domain: mydomain.local
(Mon Jun 29 09:59:57 2015) [sssd[pam]] [pam_print_data] (0x0100): user: account2 at mydomain.local
(Mon Jun 29 09:59:57 2015) [sssd[pam]] [pam_print_data] (0x0100): service: sshd
(Mon Jun 29 09:59:57 2015) [sssd[pam]] [pam_print_data] (0x0100): tty: ssh
(Mon Jun 29 09:59:57 2015) [sssd[pam]] [pam_print_data] (0x0100): ruser: not set
(Mon Jun 29 09:59:57 2015) [sssd[pam]] [pam_print_data] (0x0100): rhost: fido.sm.di.otherdomain.com
(Mon Jun 29 09:59:57 2015) [sssd[pam]] [pam_print_data] (0x0100): authtok type: 1
(Mon Jun 29 09:59:57 2015) [sssd[pam]] [pam_print_data] (0x0100): newauthtok type: 0
(Mon Jun 29 09:59:57 2015) [sssd[pam]] [pam_print_data] (0x0100): priv: 1
(Mon Jun 29 09:59:57 2015) [sssd[pam]] [pam_print_data] (0x0100): cli_pid: 14169
(Mon Jun 29 09:59:57 2015) [sssd[pam]] [pam_print_data] (0x0100): logon name: account2 at otherdomain.com
(Mon Jun 29 09:59:57 2015) [sssd[pam]] [pam_dom_forwarder] (0x0100): pam_dp_send_req returned 0
(Mon Jun 29 09:59:57 2015) [sssd[pam]] [sss_dp_req_destructor] (0x0400): Deleting request: [0x7f5f92668ef0:3:account2 at otherdomain.com:U at mydomain.local]
(Mon Jun 29 09:59:57 2015) [sssd[pam]] [pam_dp_process_reply] (0x0100): received: [4][mydomain.local]
(Mon Jun 29 09:59:57 2015) [sssd[pam]] [pam_reply] (0x0200): pam_reply called with result [4].
(Mon Jun 29 09:59:57 2015) [sssd[pam]] [pam_reply] (0x0200): blen: 39
(Mon Jun 29 10:00:00 2015) [sssd[pam]] [client_recv] (0x0200): Client disconnected!
-------------- next part --------------
(Mon Jun 29 09:59:24 2015) [sssd[nss]] [nss_process_init] (0x0400): NSS Initialization complete
(Mon Jun 29 09:59:24 2015) [sssd[nss]] [sss_dp_issue_request] (0x0400): Issuing request for [0x7f0dd57c06f0:domains at ipa.mydomain.local]
(Mon Jun 29 09:59:24 2015) [sssd[nss]] [sss_dp_get_domains_msg] (0x0400): Sending get domains request for [ipa.mydomain.local][]
(Mon Jun 29 09:59:24 2015) [sssd[nss]] [sss_dp_internal_get_send] (0x0400): Entering request [0x7f0dd57c06f0:domains at ipa.mydomain.local]
(Mon Jun 29 09:59:24 2015) [sssd[nss]] [dp_id_callback] (0x0100): Got id ack and version (1) from DP
(Mon Jun 29 09:59:24 2015) [sssd[nss]] [id_callback] (0x0100): Got id ack and version (1) from Monitor
(Mon Jun 29 09:59:24 2015) [sssd[nss]] [new_subdomain] (0x0400): Creating [mydomain.local] as subdomain of [ipa.mydomain.local]!
(Mon Jun 29 09:59:24 2015) [sssd[nss]] [sss_dp_req_destructor] (0x0400): Deleting request: [0x7f0dd57c06f0:domains at ipa.mydomain.local]
(Mon Jun 29 09:59:24 2015) [sssd[nss]] [nss_clear_memcache] (0x0400): Clearing memory caches.
(Mon Jun 29 09:59:24 2015) [sssd[nss]] [nss_orphan_netgroups] (0x0400): Removing netgroups from memory cache.
(Mon Jun 29 09:59:47 2015) [sssd[nss]] [sss_responder_ctx_destructor] (0x0400): Responder is being shut down
(Mon Jun 29 09:59:48 2015) [sssd[nss]] [server_setup] (0x0400): CONFDB: /var/lib/sss/db/config.ldb
(Mon Jun 29 09:59:48 2015) [sssd[nss]] [confdb_get_domain_internal] (0x0400): No enumeration for [ipa.mydomain.local]!
(Mon Jun 29 09:59:48 2015) [sssd[nss]] [sbus_init_connection] (0x0400): Adding connection 0x7f61846b7160
(Mon Jun 29 09:59:48 2015) [sssd[nss]] [monitor_common_send_id] (0x0100): Sending ID: (nss,1)
(Mon Jun 29 09:59:48 2015) [sssd[nss]] [sss_names_init_from_args] (0x0100): Using re [(((?P<domain>[^\\]+)\\(?P<name>.+$))|((?P<name>[^@]+)@(?P<domain>.+$))|(^(?P<name>[^@\\]+)$))].
(Mon Jun 29 09:59:48 2015) [sssd[nss]] [sss_fqnames_init] (0x0100): Using fq format [%1$s@%2$s].
(Mon Jun 29 09:59:48 2015) [sssd[nss]] [sbus_init_connection] (0x0400): Adding connection 0x7f61846b72f0
(Mon Jun 29 09:59:48 2015) [sssd[nss]] [dp_common_send_id] (0x0100): Sending ID to DP: (1,NSS)
(Mon Jun 29 09:59:48 2015) [sssd[nss]] [sysdb_domain_init_internal] (0x0200): DB File for ipa.mydomain.local: /var/lib/sss/db/cache_ipa.mydomain.local.ldb
(Mon Jun 29 09:59:48 2015) [sssd[nss]] [ldb] (0x0400): asq: Unable to register control with rootdse!
(Mon Jun 29 09:59:48 2015) [sssd[nss]] [sss_process_init] (0x0400): Responder Initialization complete
(Mon Jun 29 09:59:48 2015) [sssd[nss]] [sss_parse_name_for_domains] (0x0200): name 'root' matched without domain, user is root
(Mon Jun 29 09:59:48 2015) [sssd[nss]] [sss_ncache_set_str] (0x0400): Adding [NCE/USER/ipa.mydomain.local/root] to negative cache permanently
(Mon Jun 29 09:59:48 2015) [sssd[nss]] [sss_parse_name_for_domains] (0x0200): name 'root' matched without domain, user is root
(Mon Jun 29 09:59:48 2015) [sssd[nss]] [sss_ncache_set_str] (0x0400): Adding [NCE/GROUP/ipa.mydomain.local/root] to negative cache permanently
(Mon Jun 29 09:59:48 2015) [sssd[nss]] [nss_get_etc_shells] (0x0400): Found shell /bin/sh in /etc/shells
(Mon Jun 29 09:59:48 2015) [sssd[nss]] [nss_get_etc_shells] (0x0400): Found shell /bin/bash in /etc/shells
(Mon Jun 29 09:59:48 2015) [sssd[nss]] [nss_get_etc_shells] (0x0400): Found shell /sbin/nologin in /etc/shells
(Mon Jun 29 09:59:48 2015) [sssd[nss]] [nss_get_etc_shells] (0x0400): Found shell /usr/bin/sh in /etc/shells
(Mon Jun 29 09:59:48 2015) [sssd[nss]] [nss_get_etc_shells] (0x0400): Found shell /usr/bin/bash in /etc/shells
(Mon Jun 29 09:59:48 2015) [sssd[nss]] [nss_get_etc_shells] (0x0400): Found shell /usr/sbin/nologin in /etc/shells
(Mon Jun 29 09:59:48 2015) [sssd[nss]] [responder_set_fd_limit] (0x0100): Maximum file descriptors set to [8192]
(Mon Jun 29 09:59:48 2015) [sssd[nss]] [sss_names_init_from_args] (0x0100): Using re [(?P<name>[^@]+)@?(?P<domain>[^@]*$)].
(Mon Jun 29 09:59:48 2015) [sssd[nss]] [sss_fqnames_init] (0x0100): Using fq format [%1$s@%2$s].
(Mon Jun 29 09:59:48 2015) [sssd[nss]] [nss_process_init] (0x0400): NSS Initialization complete
(Mon Jun 29 09:59:48 2015) [sssd[nss]] [sss_dp_issue_request] (0x0400): Issuing request for [0x7f61838216f0:domains at ipa.mydomain.local]
(Mon Jun 29 09:59:48 2015) [sssd[nss]] [sss_dp_get_domains_msg] (0x0400): Sending get domains request for [ipa.mydomain.local][]
(Mon Jun 29 09:59:48 2015) [sssd[nss]] [sss_dp_internal_get_send] (0x0400): Entering request [0x7f61838216f0:domains at ipa.mydomain.local]
(Mon Jun 29 09:59:48 2015) [sssd[nss]] [dp_id_callback] (0x0100): Got id ack and version (1) from DP
(Mon Jun 29 09:59:48 2015) [sssd[nss]] [id_callback] (0x0100): Got id ack and version (1) from Monitor
(Mon Jun 29 09:59:48 2015) [sssd[nss]] [new_subdomain] (0x0400): Creating [mydomain.local] as subdomain of [ipa.mydomain.local]!
(Mon Jun 29 09:59:48 2015) [sssd[nss]] [sss_dp_req_destructor] (0x0400): Deleting request: [0x7f61838216f0:domains at ipa.mydomain.local]
(Mon Jun 29 09:59:48 2015) [sssd[nss]] [nss_clear_memcache] (0x0400): Clearing memory caches.
(Mon Jun 29 09:59:48 2015) [sssd[nss]] [nss_orphan_netgroups] (0x0400): Removing netgroups from memory cache.
(Mon Jun 29 09:59:52 2015) [sssd[nss]] [accept_fd_handler] (0x0400): Client connected!
(Mon Jun 29 09:59:52 2015) [sssd[nss]] [sss_cmd_get_version] (0x0200): Received client version [1].
(Mon Jun 29 09:59:52 2015) [sssd[nss]] [sss_cmd_get_version] (0x0200): Offered version [1].
(Mon Jun 29 09:59:52 2015) [sssd[nss]] [nss_cmd_getbynam] (0x0400): Running command [17] with input [account2 at otherdomain.com].
(Mon Jun 29 09:59:52 2015) [sssd[nss]] [sss_dp_issue_request] (0x0400): Issuing request for [0x7f61838216f0:domains at ipa.mydomain.local]
(Mon Jun 29 09:59:52 2015) [sssd[nss]] [sss_dp_get_domains_msg] (0x0400): Sending get domains request for [ipa.mydomain.local][otherdomain.com]
(Mon Jun 29 09:59:52 2015) [sssd[nss]] [sss_dp_internal_get_send] (0x0400): Entering request [0x7f61838216f0:domains at ipa.mydomain.local]
(Mon Jun 29 09:59:52 2015) [sssd[nss]] [nss_cmd_getpwnam_search] (0x0100): Requesting info for [account2 at otherdomain.com@ipa.mydomain.local]
(Mon Jun 29 09:59:52 2015) [sssd[nss]] [sysdb_search_user_by_upn] (0x0400): No entry with upn [account2 at otherdomain.com] found.
(Mon Jun 29 09:59:52 2015) [sssd[nss]] [sss_dp_issue_request] (0x0400): Issuing request for [0x7f618381fe80:1:account2 at otherdomain.com:U at ipa.mydomain.local]
(Mon Jun 29 09:59:52 2015) [sssd[nss]] [sss_dp_get_account_msg] (0x0400): Creating request for [ipa.mydomain.local][4097][1][name=account2 at otherdomain.com:U]
(Mon Jun 29 09:59:52 2015) [sssd[nss]] [sss_dp_internal_get_send] (0x0400): Entering request [0x7f618381fe80:1:account2 at otherdomain.com:U at ipa.mydomain.local]
(Mon Jun 29 09:59:52 2015) [sssd[nss]] [sss_dp_req_destructor] (0x0400): Deleting request: [0x7f61838216f0:domains at ipa.mydomain.local]
(Mon Jun 29 09:59:52 2015) [sssd[nss]] [nss_cmd_getby_dp_callback] (0x0040): Unable to get information from Data Provider
Error: 3, 0, Account info lookup failed
Will try to return what we have in cache
(Mon Jun 29 09:59:52 2015) [sssd[nss]] [nss_cmd_getpwnam_search] (0x0100): Requesting info for [account2 at otherdomain.com@ipa.mydomain.local]
(Mon Jun 29 09:59:52 2015) [sssd[nss]] [sysdb_search_user_by_upn] (0x0400): No entry with upn [account2 at otherdomain.com] found.
(Mon Jun 29 09:59:52 2015) [sssd[nss]] [sss_ncache_set_str] (0x0400): Adding [NCE/USER/ipa.mydomain.local/account2 at otherdomain.com] to negative cache
(Mon Jun 29 09:59:52 2015) [sssd[nss]] [nss_cmd_getpwnam_search] (0x0100): Requesting info for [account2 at otherdomain.com@mydomain.local]
(Mon Jun 29 09:59:52 2015) [sssd[nss]] [sysdb_search_user_by_upn] (0x0400): No entry with upn [account2 at otherdomain.com] found.
(Mon Jun 29 09:59:52 2015) [sssd[nss]] [sss_dp_issue_request] (0x0400): Issuing request for [0x7f618381fe80:1:account2 at otherdomain.com:U at mydomain.local]
(Mon Jun 29 09:59:52 2015) [sssd[nss]] [sss_dp_get_account_msg] (0x0400): Creating request for [mydomain.local][4097][1][name=account2 at otherdomain.com:U]
(Mon Jun 29 09:59:52 2015) [sssd[nss]] [sss_dp_internal_get_send] (0x0400): Entering request [0x7f618381fe80:1:account2 at otherdomain.com:U at mydomain.local]
(Mon Jun 29 09:59:52 2015) [sssd[nss]] [sss_dp_req_destructor] (0x0400): Deleting request: [0x7f618381fe80:1:account2 at otherdomain.com:U at ipa.mydomain.local]
(Mon Jun 29 09:59:52 2015) [sssd[nss]] [nss_cmd_getpwnam_search] (0x0100): Requesting info for [account2 at otherdomain.com@mydomain.local]
(Mon Jun 29 09:59:52 2015) [sssd[nss]] [nss_cmd_getpwnam_search] (0x0400): Returning info for user [account2 at otherdomain.com@mydomain.local]
(Mon Jun 29 09:59:52 2015) [sssd[nss]] [sss_dp_req_destructor] (0x0400): Deleting request: [0x7f618381fe80:1:account2 at otherdomain.com:U at mydomain.local]
(Mon Jun 29 09:59:52 2015) [sssd[nss]] [nss_cmd_getbynam] (0x0400): Running command [38] with input [nobody].
(Mon Jun 29 09:59:52 2015) [sssd[nss]] [sss_parse_name_for_domains] (0x0200): name 'nobody' matched without domain, user is nobody
(Mon Jun 29 09:59:52 2015) [sssd[nss]] [nss_cmd_getbynam] (0x0100): Requesting info for [nobody] from [<ALL>]
(Mon Jun 29 09:59:52 2015) [sssd[nss]] [nss_cmd_initgroups_search] (0x0100): Requesting info for [nobody at ipa.mydomain.local]
(Mon Jun 29 09:59:52 2015) [sssd[nss]] [sss_dp_issue_request] (0x0400): Issuing request for [0x7f618381fe80:3:nobody at ipa.mydomain.local]
(Mon Jun 29 09:59:52 2015) [sssd[nss]] [sss_dp_get_account_msg] (0x0400): Creating request for [ipa.mydomain.local][4099][1][name=nobody]
(Mon Jun 29 09:59:52 2015) [sssd[nss]] [sss_dp_internal_get_send] (0x0400): Entering request [0x7f618381fe80:3:nobody at ipa.mydomain.local]
(Mon Jun 29 09:59:52 2015) [sssd[nss]] [nss_cmd_getby_dp_callback] (0x0040): Unable to get information from Data Provider
Error: 3, 0, Account info lookup failed
Will try to return what we have in cache
(Mon Jun 29 09:59:52 2015) [sssd[nss]] [sss_dp_req_destructor] (0x0400): Deleting request: [0x7f618381fe80:3:nobody at ipa.mydomain.local]
(Mon Jun 29 09:59:56 2015) [sssd[nss]] [nss_cmd_getbynam] (0x0400): Running command [17] with input [account2 at otherdomain.com].
(Mon Jun 29 09:59:56 2015) [sssd[nss]] [sss_dp_issue_request] (0x0400): Issuing request for [0x7f61838216f0:domains at ipa.mydomain.local]
(Mon Jun 29 09:59:56 2015) [sssd[nss]] [sss_dp_get_domains_msg] (0x0400): Sending get domains request for [ipa.mydomain.local][otherdomain.com]
(Mon Jun 29 09:59:56 2015) [sssd[nss]] [sss_dp_internal_get_send] (0x0400): Entering request [0x7f61838216f0:domains at ipa.mydomain.local]
(Mon Jun 29 09:59:56 2015) [sssd[nss]] [nss_cmd_getpwnam_search] (0x0400): User [account2 at otherdomain.com] does not exist in [ipa.mydomain.local]! (negative cache)
(Mon Jun 29 09:59:56 2015) [sssd[nss]] [nss_cmd_getpwnam_search] (0x0100): Requesting info for [account2 at otherdomain.com@mydomain.local]
(Mon Jun 29 09:59:56 2015) [sssd[nss]] [check_cache] (0x0400): Cached entry is valid, returning..
(Mon Jun 29 09:59:56 2015) [sssd[nss]] [nss_cmd_getpwnam_search] (0x0400): Returning info for user [account2 at otherdomain.com@mydomain.local]
(Mon Jun 29 09:59:56 2015) [sssd[nss]] [sss_dp_req_destructor] (0x0400): Deleting request: [0x7f61838216f0:domains at ipa.mydomain.local]
(Mon Jun 29 09:59:56 2015) [sssd[nss]] [nss_cmd_getbynam] (0x0400): Running command [17] with input [account2 at otherdomain.com].
(Mon Jun 29 09:59:56 2015) [sssd[nss]] [sss_dp_issue_request] (0x0400): Issuing request for [0x7f61838216f0:domains at ipa.mydomain.local]
(Mon Jun 29 09:59:56 2015) [sssd[nss]] [sss_dp_get_domains_msg] (0x0400): Sending get domains request for [ipa.mydomain.local][otherdomain.com]
(Mon Jun 29 09:59:56 2015) [sssd[nss]] [sss_dp_internal_get_send] (0x0400): Entering request [0x7f61838216f0:domains at ipa.mydomain.local]
(Mon Jun 29 09:59:56 2015) [sssd[nss]] [nss_cmd_getpwnam_search] (0x0400): User [account2 at otherdomain.com] does not exist in [ipa.mydomain.local]! (negative cache)
(Mon Jun 29 09:59:56 2015) [sssd[nss]] [nss_cmd_getpwnam_search] (0x0100): Requesting info for [account2 at otherdomain.com@mydomain.local]
(Mon Jun 29 09:59:56 2015) [sssd[nss]] [check_cache] (0x0400): Cached entry is valid, returning..
(Mon Jun 29 09:59:56 2015) [sssd[nss]] [nss_cmd_getpwnam_search] (0x0400): Returning info for user [account2 at otherdomain.com@mydomain.local]
(Mon Jun 29 09:59:56 2015) [sssd[nss]] [sss_dp_req_destructor] (0x0400): Deleting request: [0x7f61838216f0:domains at ipa.mydomain.local]
(Mon Jun 29 09:59:56 2015) [sssd[nss]] [nss_cmd_getbynam] (0x0400): Running command [17] with input [account2 at otherdomain.com].
(Mon Jun 29 09:59:56 2015) [sssd[nss]] [sss_dp_issue_request] (0x0400): Issuing request for [0x7f61838216f0:domains at ipa.mydomain.local]
(Mon Jun 29 09:59:56 2015) [sssd[nss]] [sss_dp_get_domains_msg] (0x0400): Sending get domains request for [ipa.mydomain.local][otherdomain.com]
(Mon Jun 29 09:59:56 2015) [sssd[nss]] [sss_dp_internal_get_send] (0x0400): Entering request [0x7f61838216f0:domains at ipa.mydomain.local]
(Mon Jun 29 09:59:56 2015) [sssd[nss]] [nss_cmd_getpwnam_search] (0x0400): User [account2 at otherdomain.com] does not exist in [ipa.mydomain.local]! (negative cache)
(Mon Jun 29 09:59:56 2015) [sssd[nss]] [nss_cmd_getpwnam_search] (0x0100): Requesting info for [account2 at otherdomain.com@mydomain.local]
(Mon Jun 29 09:59:56 2015) [sssd[nss]] [check_cache] (0x0400): Cached entry is valid, returning..
(Mon Jun 29 09:59:56 2015) [sssd[nss]] [nss_cmd_getpwnam_search] (0x0400): Returning info for user [account2 at otherdomain.com@mydomain.local]
(Mon Jun 29 09:59:56 2015) [sssd[nss]] [sss_dp_req_destructor] (0x0400): Deleting request: [0x7f61838216f0:domains at ipa.mydomain.local]
(Mon Jun 29 10:00:00 2015) [sssd[nss]] [client_recv] (0x0200): Client disconnected!
-------------- next part --------------
(Mon Jun 29 09:59:33 2015) [sssd[be[ipa.mydomain.local]]] [sdap_sudo_load_sudoers_next_base] (0x0400): Searching for sudo rules with base [ou=SUDOers,dc=ipa,dc=mydomain,dc=local]
(Mon Jun 29 09:59:33 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(&(objectClass=sudoRole)(|(!(sudoHost=*))(sudoHost=ALL)(sudoHost=idc01.ipa.mydomain.local)(sudoHost=idc01)(sudoHost=172.21.251.9)(sudoHost=172.21.251.0/24)(sudoHost=+*)(|(sudoHost=*\\*)(sudoHost=*?*)(sudoHost=*\2A*)(sudoHost=*[*]*))))][ou=SUDOers,dc=ipa,dc=mydomain,dc=local].
(Mon Jun 29 09:59:33 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set
(Mon Jun 29 09:59:33 2015) [sssd[be[ipa.mydomain.local]]] [sdap_sudo_load_sudoers_process] (0x0400): Receiving sudo rules with base [ou=SUDOers,dc=ipa,dc=mydomain,dc=local]
(Mon Jun 29 09:59:33 2015) [sssd[be[ipa.mydomain.local]]] [sdap_sudo_refresh_load_done] (0x0400): Received 0 rules
(Mon Jun 29 09:59:33 2015) [sssd[be[ipa.mydomain.local]]] [sysdb_sudo_purge_byfilter] (0x0400): No rules matched
(Mon Jun 29 09:59:33 2015) [sssd[be[ipa.mydomain.local]]] [sdap_sudo_refresh_load_done] (0x0400): Sudoers is successfuly stored in cache
(Mon Jun 29 09:59:33 2015) [sssd[be[ipa.mydomain.local]]] [sdap_sudo_full_refresh_done] (0x0400): Successful full refresh of sudo rules
(Mon Jun 29 09:59:33 2015) [sssd[be[ipa.mydomain.local]]] [sdap_sudo_schedule_refresh] (0x0400): Full refresh scheduled at: 1435586373
(Mon Jun 29 09:59:33 2015) [sssd[be[ipa.mydomain.local]]] [sdap_sudo_schedule_refresh] (0x0400): Smart refresh scheduled at: 1435565673
(Mon Jun 29 09:59:47 2015) [sssd[be[ipa.mydomain.local]]] [remove_krb5_info_files] (0x0200): Could not remove [/var/lib/sss/pubconf/kpasswdinfo.IPA.MYDOMAIN.LOCAL], [2][No such file or directory]
(Mon Jun 29 09:59:47 2015) [sssd[be[ipa.mydomain.local]]] [be_ptask_destructor] (0x0400): Terminating periodic task [Cleanup of ipa.mydomain.local]
(Mon Jun 29 09:59:47 2015) [sssd[be[ipa.mydomain.local]]] [be_ptask_destructor] (0x0400): Terminating periodic task [Cleanup of mydomain.local]
(Mon Jun 29 09:59:47 2015) [sssd[be[ipa.mydomain.local]]] [be_client_destructor] (0x0400): Removed NSS client
(Mon Jun 29 09:59:47 2015) [sssd[be[ipa.mydomain.local]]] [be_client_destructor] (0x0400): Removed PAC client
(Mon Jun 29 09:59:47 2015) [sssd[be[ipa.mydomain.local]]] [be_client_destructor] (0x0400): Removed PAM client
(Mon Jun 29 09:59:47 2015) [sssd[be[ipa.mydomain.local]]] [be_client_destructor] (0x0400): Removed SUDO client
(Mon Jun 29 09:59:47 2015) [sssd[be[ipa.mydomain.local]]] [be_client_destructor] (0x0400): Removed autofs client
(Mon Jun 29 09:59:47 2015) [sssd[be[ipa.mydomain.local]]] [be_client_destructor] (0x0400): Removed SSH client
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [server_setup] (0x0400): CONFDB: /var/lib/sss/db/config.ldb
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option lookup_family_order has value ipv4_first
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option dns_resolver_timeout has value 6
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option dns_resolver_op_timeout has value 6
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option dns_discovery_domain has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [be_res_get_opts] (0x0100): Lookup order: ipv4_first
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [recreate_ares_channel] (0x0100): Initializing new c-ares channel
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [fo_context_init] (0x0400): Created new fail over context, retry timeout is 30
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [confdb_get_domain_internal] (0x0400): No enumeration for [ipa.mydomain.local]!
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sysdb_domain_init_internal] (0x0200): DB File for ipa.mydomain.local: /var/lib/sss/db/cache_ipa.mydomain.local.ldb
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [ldb] (0x0400): asq: Unable to register control with rootdse!
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sbus_init_connection] (0x0400): Adding connection 0x7f1c069359c0
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [monitor_common_send_id] (0x0100): Sending ID: (%BE_ipa.mydomain.local,1)
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sss_names_init_from_args] (0x0100): Using re [(((?P<domain>[^\\]+)\\(?P<name>.+$))|((?P<name>[^@]+)@(?P<domain>.+$))|(^(?P<name>[^@\\]+)$))].
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sss_fqnames_init] (0x0100): Using fq format [%1$s@%2$s].
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sbus_new_server] (0x0400): D-BUS Server listening on unix:path=/var/lib/sss/pipes/private/sbus-dp_ipa.mydomain.local.14159,guid=d72187e35191da3835348efb5590faf4
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ipa_domain has value ipa.mydomain.local
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ipa_server has value idc01.ipa.mydomain.local
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ipa_backup_server has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ipa_hostname has value idc01.ipa.mydomain.local
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ipa_hbac_search_base has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ipa_host_search_base has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ipa_selinux_search_base has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ipa_subdomains_search_base has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ipa_master_domain_search_base has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option krb5_realm has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ipa_hbac_refresh has value 5
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ipa_selinux_refresh has value 5
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ipa_hbac_treat_deny_as has value DENY_ALL
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ipa_hbac_support_srchost is FALSE
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ipa_automount_location has value default
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ipa_ranges_search_base has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ipa_enable_dns_sites is FALSE
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ipa_server_mode is TRUE
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ipa_views_search_base has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option krb5_confd_path has value /var/lib/sss/pubconf/krb5.include.d
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [fo_new_service] (0x0400): Creating new service 'IPA'
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [fo_add_server_to_list] (0x0400): Inserted primary server 'idc01.ipa.mydomain.local:0' to service 'IPA'
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [_ipa_servers_init] (0x0400): Added Server idc01.ipa.mydomain.local
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_uri has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_backup_uri has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_search_base has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_default_bind_dn has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_default_authtok_type has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_default_authtok has no binary value.
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_search_timeout has value 6
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_network_timeout has value 6
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_opt_timeout has value 6
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_tls_reqcert has value hard
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_user_search_base has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_user_search_scope has value sub
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_user_search_filter has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_user_extra_attrs has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_group_search_base has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_group_search_scope has value sub
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_group_search_filter has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_service_search_base has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_sudo_search_base has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_sudo_full_refresh_interval has value 21600
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_sudo_smart_refresh_interval has value 900
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_sudo_use_host_filter is TRUE
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_sudo_hostnames has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_sudo_ip has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_sudo_include_netgroups is TRUE
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_sudo_include_regexp is TRUE
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_autofs_search_base has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_autofs_map_master_name has value auto.master
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_schema has value ipa_v1
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_offline_timeout has value 60
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_force_upper_case_realm is TRUE
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_enumeration_refresh_timeout has value 300
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_purge_cache_timeout has value 3600
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_tls_cacert has value /etc/ipa/ca.crt
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_tls_cacertdir has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_tls_cert has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_tls_key has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_tls_cipher_suite has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_id_use_start_tls is FALSE
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_id_mapping is FALSE
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_sasl_mech has value GSSAPI
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_sasl_authid has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_sasl_realm has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_sasl_minssf has value 56
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_krb5_keytab has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_krb5_init_creds is TRUE
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option krb5_server has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option krb5_backup_server has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option krb5_realm has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option krb5_canonicalize is TRUE
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option krb5_use_kdcinfo is TRUE
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_pwd_policy has value none
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_referrals is TRUE
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option account_cache_expiration has value 0
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_dns_service_name has value ldap
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_krb5_ticket_lifetime has value 86400
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_access_filter has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_netgroup_search_base has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_group_nesting_level has value 2
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_deref has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_account_expire_policy has value ipa
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_access_order has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_chpass_uri has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_chpass_backup_uri has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_chpass_dns_service_name has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_chpass_update_last_change is FALSE
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_enumeration_search_timeout has value 60
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_auth_disable_tls_never_use_in_production is FALSE
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_page_size has value 1000
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_deref_threshold has value 10
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_sasl_canonicalize is FALSE
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_connection_expire_timeout has value 900
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_disable_paging is FALSE
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_idmap_range_min has value 200000
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_idmap_range_max has value 2000200000
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_idmap_range_size has value 200000
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_idmap_autorid_compat is FALSE
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_idmap_default_domain has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_idmap_default_domain_sid has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_groups_use_matching_rule_in_chain is FALSE
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_initgroups_use_matching_rule_in_chain is FALSE
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_use_tokengroups is TRUE
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_rfc2307_fallback_to_local_users is FALSE
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_disable_range_retrieval is FALSE
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_min_id has value 0
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_max_id has value 0
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option ldap_pwdlockout_dn has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [ipa_get_id_options] (0x0400): Option ldap_search_base set to cn=accounts,dc=ipa,dc=mydomain,dc=local
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [common_parse_search_base] (0x0100): Search base added: [DEFAULT][cn=accounts,dc=ipa,dc=mydomain,dc=local][SUBTREE][]
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [ipa_get_id_options] (0x0400): Option krb5_realm set to IPA.MYDOMAIN.LOCAL
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_set_sasl_options] (0x0100): Will look for idc01.ipa.mydomain.local at IPA.MYDOMAIN.LOCAL in default keytab
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [select_principal_from_keytab] (0x0200): trying to select the most appropriate principal from keytab
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [find_principal_in_keytab] (0x0400): No principal matching idc01.ipa.mydomain.local at IPA.MYDOMAIN.LOCAL found in keytab.
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [find_principal_in_keytab] (0x0400): No principal matching IDC01$@IPA.MYDOMAIN.LOCAL found in keytab.
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [select_principal_from_keytab] (0x0200): Selected primary: host/idc01.ipa.mydomain.local
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [select_principal_from_keytab] (0x0200): Selected realm: IPA.MYDOMAIN.LOCAL
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_set_sasl_options] (0x0100): Option ldap_sasl_authid set to host/idc01.ipa.mydomain.local
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_set_sasl_options] (0x0100): Option ldap_sasl_realm set to IPA.MYDOMAIN.LOCAL
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [ipa_get_id_options] (0x0400): Option ldap_user_search_base set to cn=accounts,dc=ipa,dc=mydomain,dc=local
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [common_parse_search_base] (0x0100): Search base added: [USER][cn=accounts,dc=ipa,dc=mydomain,dc=local][SUBTREE][]
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [ipa_get_id_options] (0x0400): Option ldap_group_search_base set to cn=accounts,dc=ipa,dc=mydomain,dc=local
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [common_parse_search_base] (0x0100): Search base added: [GROUP][cn=accounts,dc=ipa,dc=mydomain,dc=local][SUBTREE][]
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [ipa_get_id_options] (0x0400): Option ldap_sudo_search_base set to ou=SUDOers,dc=ipa,dc=mydomain,dc=local
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [common_parse_search_base] (0x0100): Search base added: [SUDO][ou=SUDOers,dc=ipa,dc=mydomain,dc=local][SUBTREE][]
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [ipa_get_id_options] (0x0400): Option ldap_netgroup_search_base set to cn=ng,cn=alt,dc=ipa,dc=mydomain,dc=local
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [common_parse_search_base] (0x0100): Search base added: [NETGROUP][cn=ng,cn=alt,dc=ipa,dc=mydomain,dc=local][SUBTREE][]
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [ipa_get_id_options] (0x0100): Option ipa_host_search_base set to cn=accounts,dc=ipa,dc=mydomain,dc=local
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [common_parse_search_base] (0x0100): Search base added: [IPA_HOST][cn=accounts,dc=ipa,dc=mydomain,dc=local][SUBTREE][]
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [ipa_get_id_options] (0x0400): Option ipa_hbac_search_base set to cn=hbac,dc=ipa,dc=mydomain,dc=local
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [common_parse_search_base] (0x0100): Search base added: [IPA_HBAC][cn=hbac,dc=ipa,dc=mydomain,dc=local][SUBTREE][]
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [ipa_get_id_options] (0x0100): Option ipa_selinux_search_base set to cn=selinux,dc=ipa,dc=mydomain,dc=local
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [common_parse_search_base] (0x0100): Search base added: [IPA_SELINUX][cn=selinux,dc=ipa,dc=mydomain,dc=local][SUBTREE][]
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [ipa_get_id_options] (0x0400): Option ldap_group_search_base set to cn=accounts,dc=ipa,dc=mydomain,dc=local
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [common_parse_search_base] (0x0100): Search base added: [SERVICE][cn=accounts,dc=ipa,dc=mydomain,dc=local][SUBTREE][]
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [ipa_get_id_options] (0x0100): Option ipa_subdomains_search_base set to cn=trusts,dc=ipa,dc=mydomain,dc=local
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [common_parse_search_base] (0x0100): Search base added: [IPA_SUBDOMAINS][cn=trusts,dc=ipa,dc=mydomain,dc=local][SUBTREE][]
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [ipa_get_id_options] (0x0100): Option ipa_master_domain_search_base set to cn=ad,cn=etc,dc=ipa,dc=mydomain,dc=local
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [common_parse_search_base] (0x0100): Search base added: [IPA_MASTER_DOMAIN][cn=ad,cn=etc,dc=ipa,dc=mydomain,dc=local][SUBTREE][]
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [ipa_get_id_options] (0x0100): Option ipa_ranges_search_base set to cn=ranges,cn=etc,dc=ipa,dc=mydomain,dc=local
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [common_parse_search_base] (0x0100): Search base added: [IPA_RANGES][cn=ranges,cn=etc,dc=ipa,dc=mydomain,dc=local][SUBTREE][]
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [ipa_get_id_options] (0x0100): Option ipa_views_search_base set to cn=views,cn=accounts,dc=ipa,dc=mydomain,dc=local
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [common_parse_search_base] (0x0100): Search base added: [IPA_VIEWS][cn=views,cn=accounts,dc=ipa,dc=mydomain,dc=local][SUBTREE][]
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_entry_usn has value entryUSN
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_rootdse_last_usn has value lastUSN
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_user_object_class has value posixAccount
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_user_name has value uid
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_user_pwd has value userPassword
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_user_uid_number has value uidNumber
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_user_gid_number has value gidNumber
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_user_gecos has value gecos
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_user_home_directory has value homeDirectory
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_user_shell has value loginShell
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_user_principal has value krbPrincipalName
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_user_fullname has value cn
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_user_member_of has value memberOf
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_user_uuid has value ipaUniqueID
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_user_objectsid has value ipaNTSecurityIdentifier
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_user_primary_group has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_user_modify_timestamp has value modifyTimestamp
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_user_entry_usn has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_user_shadow_last_change has value shadowLastChange
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_user_shadow_min has value shadowMin
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_user_shadow_max has value shadowMax
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_user_shadow_warning has value shadowWarning
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_user_shadow_inactive has value shadowInactive
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_user_shadow_expire has value shadowExpire
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_user_shadow_flag has value shadowFlag
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_user_krb_last_pwd_change has value krbLastPwdChange
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_user_krb_password_expiration has value krbPasswordExpiration
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_pwd_attribute has value pwdAttribute
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_user_authorized_service has value authorizedService
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_user_ad_account_expires has value accountExpires
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_user_ad_user_account_control has value userAccountControl
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_ns_account_lock has value nsAccountLock
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_user_authorized_host has value host
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_user_nds_login_disabled has value loginDisabled
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_user_nds_login_expiration_time has value loginExpirationTime
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_user_nds_login_allowed_time_map has value loginAllowedTimeMap
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_user_ssh_public_key has value ipaSshPubKey
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_user_auth_type has value ipaUserAuthType
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_group_object_class has value ipaUserGroup
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_group_object_class_alt has value posixGroup
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_group_name has value cn
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_group_pwd has value userPassword
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_group_gid_number has value gidNumber
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_group_member has value member
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_group_uuid has value ipaUniqueID
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_group_objectsid has value ipaNTSecurityIdentifier
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_group_modify_timestamp has value modifyTimestamp
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_group_entry_usn has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_group_type has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ipa_netgroup_object_class has value ipaNisNetgroup
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ipa_netgroup_name has value cn
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ipa_netgroup_member has value member
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ipa_netgroup_member_of has value memberOf
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ipa_netgroup_member_user has value memberUser
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ipa_netgroup_member_host has value memberHost
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ipa_netgroup_member_ext_host has value externalHost
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ipa_netgroup_domain has value nisDomainName
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ipa_netgroup_uuid has value ipaUniqueID
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ipa_host_object_class has value ipaHost
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ipa_host_name has value cn
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ipa_host_fqdn has value fqdn
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ipa_host_serverhostname has value serverHostname
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ipa_host_member_of has value memberOf
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ipa_host_ssh_public_key has value ipaSshPubKey
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ipa_host_uuid has value ipaUniqueID
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ipa_hostgroup_objectclass has value ipaHostgroup
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ipa_hostgroup_name has value cn
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ipa_hostgroup_memberof has value memberOf
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ipa_hostgroup_uuid has value ipaUniqueID
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_service_object_class has value ipService
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_service_name has value cn
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_service_port has value ipServicePort
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_service_proto has value ipServiceProtocol
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_service_entry_usn has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ipa_selinux_usermap_object_class has value ipaselinuxusermap
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ipa_selinux_usermap_name has value cn
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ipa_selinux_usermap_member_user has value memberUser
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ipa_selinux_usermap_member_host has value memberHost
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ipa_selinux_usermap_see_also has value seeAlso
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ipa_selinux_usermap_selinux_user has value ipaSELinuxUser
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ipa_selinux_usermap_enabled has value ipaEnabledFlag
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ipa_selinux_usermap_user_category has value userCategory
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ipa_selinux_usermap_host_category has value hostCategory
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ipa_selinux_usermap_uuid has value ipaUniqueID
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ipa_view_class has value nsContainer
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ipa_view_name has value cn
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ipa_overide_object_class has value ipaOverrideAnchor
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ipa_anchor_uuid has value ipaAnchorUUID
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ipa_user_override_object_class has value ipaUserOverride
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ipa_group_override_object_class has value ipaGroupOverride
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_user_name has value uid
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_user_uid_number has value uidNumber
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_user_gid_number has value gidNumber
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_user_gecos has value gecos
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_user_home_directory has value homeDirectory
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_user_shell has value loginShell
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_group_name has value cn
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_group_gid_number has value gidNumber
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_user_ssh_public_key has value ipaSshPubKey
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option dyndns_update is FALSE
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option dyndns_refresh_interval has value 0
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option dyndns_iface has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option dyndns_ttl has value 1200
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option dyndns_update_ptr is FALSE
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option dyndns_force_tcp is FALSE
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option dyndns_auth has value gss-tsig
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_id_setup_tasks] (0x0400): Setting up cleanup task for ipa.mydomain.local
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [be_ptask_create] (0x0400): Periodic task [Cleanup of ipa.mydomain.local] was created
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [be_ptask_schedule] (0x0400): Task [Cleanup of ipa.mydomain.local]: scheduling task 10 seconds from now [1435564798]
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sssm_ipa_id_init] (0x0100): The value of dns_discovery_domain will be ignored in ipa_server_mode
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ipa_domain has value ipa.mydomain.local
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ipa_server has value idc01.ipa.mydomain.local
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ipa_backup_server has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ipa_hostname has value idc01.ipa.mydomain.local
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ipa_hbac_search_base has value cn=hbac,dc=ipa,dc=mydomain,dc=local
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ipa_host_search_base has value cn=accounts,dc=ipa,dc=mydomain,dc=local
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ipa_selinux_search_base has value cn=selinux,dc=ipa,dc=mydomain,dc=local
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ipa_subdomains_search_base has value cn=trusts,dc=ipa,dc=mydomain,dc=local
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ipa_master_domain_search_base has value cn=ad,cn=etc,dc=ipa,dc=mydomain,dc=local
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option krb5_realm has value IPA.MYDOMAIN.LOCAL
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ipa_hbac_refresh has value 5
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ipa_selinux_refresh has value 5
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ipa_hbac_treat_deny_as has value DENY_ALL
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ipa_hbac_support_srchost is FALSE
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ipa_automount_location has value default
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ipa_ranges_search_base has value cn=ranges,cn=etc,dc=ipa,dc=mydomain,dc=local
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ipa_enable_dns_sites is FALSE
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ipa_server_mode is TRUE
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ipa_views_search_base has value cn=views,cn=accounts,dc=ipa,dc=mydomain,dc=local
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option krb5_confd_path has value /var/lib/sss/pubconf/krb5.include.d
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option krb5_server has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option krb5_backup_server has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option krb5_realm has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option krb5_ccachedir has value /tmp
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option krb5_ccname_template has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option krb5_auth_timeout has value 6
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option krb5_keytab has value /etc/krb5.keytab
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option krb5_validate is TRUE
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option krb5_kpasswd has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option krb5_backup_kpasswd has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option krb5_store_password_if_offline is TRUE
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option krb5_renewable_lifetime has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option krb5_lifetime has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option krb5_renew_interval has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option krb5_use_fast has value try
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option krb5_fast_principal has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option krb5_canonicalize is TRUE
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option krb5_use_enterprise_principal is FALSE
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_get_options] (0x0400): Option krb5_use_kdcinfo is TRUE
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [krb5_try_kdcip] (0x0100): No KDC found in configuration, trying legacy option
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [ipa_get_auth_options] (0x0400): Option krb5_realm set to IPA.MYDOMAIN.LOCAL
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [ipa_get_auth_options] (0x0100): Option krb5_fast_principal set to host/idc01.ipa.mydomain.local at IPA.MYDOMAIN.LOCAL
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [ipa_get_auth_options] (0x0100): Option krb5_use_kdcinfo set to true
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [check_and_export_lifetime] (0x0200): No lifetime configured.
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [check_and_export_lifetime] (0x0200): No lifetime configured.
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [check_and_export_options] (0x0100): No KDC explicitly configured, using defaults.
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [check_and_export_options] (0x0100): No kpasswd server explicitly configured, using the KDC or defaults.
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ipa_domain has value ipa.mydomain.local
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ipa_server has value idc01.ipa.mydomain.local
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ipa_backup_server has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ipa_hostname has value idc01.ipa.mydomain.local
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ipa_hbac_search_base has value cn=hbac,dc=ipa,dc=mydomain,dc=local
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ipa_host_search_base has value cn=accounts,dc=ipa,dc=mydomain,dc=local
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ipa_selinux_search_base has value cn=selinux,dc=ipa,dc=mydomain,dc=local
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ipa_subdomains_search_base has value cn=trusts,dc=ipa,dc=mydomain,dc=local
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ipa_master_domain_search_base has value cn=ad,cn=etc,dc=ipa,dc=mydomain,dc=local
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option krb5_realm has value IPA.MYDOMAIN.LOCAL
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ipa_hbac_refresh has value 5
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ipa_selinux_refresh has value 5
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ipa_hbac_treat_deny_as has value DENY_ALL
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ipa_hbac_support_srchost is FALSE
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ipa_automount_location has value default
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ipa_ranges_search_base has value cn=ranges,cn=etc,dc=ipa,dc=mydomain,dc=local
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ipa_enable_dns_sites is FALSE
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ipa_server_mode is TRUE
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ipa_views_search_base has value cn=views,cn=accounts,dc=ipa,dc=mydomain,dc=local
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option krb5_confd_path has value /var/lib/sss/pubconf/krb5.include.d
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [load_backend_module] (0x0200): no module name found in confdb, using [ipa].
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [common_parse_search_base] (0x0100): Search base added: [SUDO][ou=SUDOers,dc=ipa,dc=mydomain,dc=local][SUBTREE][]
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_sudorule_object_class has value sudoRole
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_sudorule_name has value cn
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_sudorule_command has value sudoCommand
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_sudorule_host has value sudoHost
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_sudorule_user has value sudoUser
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_sudorule_option has value sudoOption
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_sudorule_runas has value sudoRunAs
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_sudorule_runasuser has value sudoRunAsUser
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_sudorule_runasgroup has value sudoRunAsGroup
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_sudorule_notbefore has value sudoNotBefore
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_sudorule_notafter has value sudoNotAfter
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_sudorule_order has value sudoOrder
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_sudorule_entry_usn has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [check_ipv4_addr] (0x0200): Loopback IPv4 address 127.0.0.1
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [common_parse_search_base] (0x0100): Search base added: [AUTOFS][cn=default,cn=automount,dc=ipa,dc=mydomain,dc=local][SUBTREE][]
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_autofs_map_object_class has value automountMap
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_autofs_map_name has value automountMapName
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_autofs_entry_object_class has value automount
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_autofs_entry_key has value automountKey
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_map] (0x0400): Option ldap_autofs_entry_value has value automountInformation
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [load_backend_module] (0x0200): no module name found in confdb, using [ipa].
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [load_backend_module] (0x0200): no module name found in confdb, using [ipa].
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [load_backend_module] (0x0200): no module name found in confdb, using [ipa].
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sss_write_krb5_localauth_snippet] (0x0200): File for localauth plugin configuration is [/var/lib/sss/pubconf/krb5.include.d/localauth_plugin]
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [new_subdomain] (0x0400): Creating [mydomain.local] as subdomain of [ipa.mydomain.local]!
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sss_write_domain_mappings] (0x0200): Mapping file for domain [ipa.mydomain.local] is [/var/lib/sss/pubconf/krb5.include.d/domain_realm_ipa.mydomain.local]
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ad_domain has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ad_server has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ad_backup_server has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ad_hostname has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option krb5_keytab has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option krb5_realm has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ad_enable_dns_sites is TRUE
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ad_access_filter has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ad_enable_gc is TRUE
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ad_gpo_access_control has value permissive
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ad_gpo_cache_timeout has value 5
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ad_gpo_map_interactive has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ad_gpo_map_remote_interactive has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ad_gpo_map_network has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ad_gpo_map_batch has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ad_gpo_map_service has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ad_gpo_map_permit has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ad_gpo_map_deny has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ad_gpo_default_right has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option krb5_confd_path has value /var/lib/sss/pubconf/krb5.include.d
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_uri has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_backup_uri has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_search_base has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_default_bind_dn has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_default_authtok_type has value password
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_default_authtok has no binary value.
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_search_timeout has value 6
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_network_timeout has value 6
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_opt_timeout has value 6
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_tls_reqcert has value hard
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_user_search_base has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_user_search_scope has value sub
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_user_search_filter has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_user_extra_attrs has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_group_search_base has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_group_search_scope has value sub
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_group_search_filter has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_service_search_base has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_sudo_search_base has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_sudo_full_refresh_interval has value 21600
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_sudo_smart_refresh_interval has value 900
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_sudo_use_host_filter is TRUE
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_sudo_hostnames has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_sudo_ip has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_sudo_include_netgroups is TRUE
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_sudo_include_regexp is TRUE
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_autofs_search_base has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_autofs_map_master_name has value auto.master
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_schema has value ad
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_offline_timeout has value 60
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_force_upper_case_realm is TRUE
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_enumeration_refresh_timeout has value 300
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_purge_cache_timeout has value 10800
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_tls_cacert has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_tls_cacertdir has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_tls_cert has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_tls_key has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_tls_cipher_suite has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_id_use_start_tls is FALSE
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_id_mapping is TRUE
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_sasl_mech has value gssapi
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_sasl_authid has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_sasl_realm has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_sasl_minssf has value -1
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_krb5_keytab has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_krb5_init_creds is TRUE
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option krb5_server has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option krb5_backup_server has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option krb5_realm has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option krb5_canonicalize is FALSE
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option krb5_use_kdcinfo is TRUE
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_pwd_policy has value none
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_referrals is FALSE
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option account_cache_expiration has value 0
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_dns_service_name has value ldap
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_krb5_ticket_lifetime has value 86400
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_access_filter has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_netgroup_search_base has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_group_nesting_level has value 2
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_deref has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_account_expire_policy has value ad
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_access_order has value filter
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_chpass_uri has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_chpass_backup_uri has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_chpass_dns_service_name has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_chpass_update_last_change is FALSE
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_enumeration_search_timeout has value 60
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_auth_disable_tls_never_use_in_production is FALSE
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_page_size has value 1000
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_deref_threshold has value 10
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_sasl_canonicalize is FALSE
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_connection_expire_timeout has value 900
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_disable_paging is FALSE
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_idmap_range_min has value 200000
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_idmap_range_max has value 2000200000
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_idmap_range_size has value 200000
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_idmap_autorid_compat is FALSE
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_idmap_default_domain has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_idmap_default_domain_sid has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_groups_use_matching_rule_in_chain is FALSE
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_initgroups_use_matching_rule_in_chain is FALSE
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_use_tokengroups is TRUE
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_rfc2307_fallback_to_local_users is FALSE
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_disable_range_retrieval is FALSE
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_min_id has value 0
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_max_id has value 0
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [dp_copy_options_ex] (0x0400): Option ldap_pwdlockout_dn has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_entry_usn has value uSNChanged
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_rootdse_last_usn has value highestCommittedUSN
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_user_object_class has value user
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_user_name has value sAMAccountName
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_user_pwd has value unixUserPassword
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_user_uid_number has value uidNumber
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_user_gid_number has value gidNumber
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_user_gecos has value gecos
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_user_home_directory has value unixHomeDirectory
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_user_shell has value loginShell
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_user_principal has value userPrincipalName
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_user_fullname has value name
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_user_member_of has value memberOf
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_user_uuid has value objectGUID
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_user_objectsid has value objectSID
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_user_primary_group has value primaryGroupID
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_user_modify_timestamp has value whenChanged
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_user_entry_usn has value uSNChanged
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_user_shadow_last_change has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_user_shadow_min has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_user_shadow_max has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_user_shadow_warning has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_user_shadow_inactive has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_user_shadow_expire has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_user_shadow_flag has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_user_krb_last_pwd_change has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_user_krb_password_expiration has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_pwd_attribute has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_user_authorized_service has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_user_ad_account_expires has value accountExpires
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_user_ad_user_account_control has value userAccountControl
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_ns_account_lock has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_user_authorized_host has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_user_nds_login_disabled has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_user_nds_login_expiration_time has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_user_nds_login_allowed_time_map has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_user_ssh_public_key has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_user_auth_type has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_group_object_class has value group
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_group_object_class_alt has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_group_name has value name
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_group_pwd has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_group_gid_number has value gidNumber
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_group_member has value member
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_group_uuid has value objectGUID
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_group_objectsid has value objectSID
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_group_modify_timestamp has value whenChanged
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_group_entry_usn has value uSNChanged
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_group_type has value groupType
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_netgroup_object_class has value nisNetgroup
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_netgroup_name has value cn
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_netgroup_member has value memberNisNetgroup
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_netgroup_triple has value nisNetgroupTriple
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_netgroup_modify_timestamp has value modifyTimestamp
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_service_object_class has value ipService
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_service_name has value cn
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_service_port has value ipServicePort
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_service_proto has value ipServiceProtocol
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_copy_map] (0x0400): Option ldap_service_entry_usn has no value 
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [ad_set_ad_id_options] (0x0100): Option krb5_realm set to IPA.MYDOMAIN.LOCAL
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_set_sasl_options] (0x0100): Will look for idc01.ipa.mydomain.local at IPA.MYDOMAIN.LOCAL in default keytab
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [select_principal_from_keytab] (0x0200): trying to select the most appropriate principal from keytab
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [find_principal_in_keytab] (0x0400): No principal matching idc01.ipa.mydomain.local at IPA.MYDOMAIN.LOCAL found in keytab.
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [find_principal_in_keytab] (0x0400): No principal matching IDC01$@IPA.MYDOMAIN.LOCAL found in keytab.
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [select_principal_from_keytab] (0x0200): Selected primary: host/idc01.ipa.mydomain.local
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [select_principal_from_keytab] (0x0200): Selected realm: IPA.MYDOMAIN.LOCAL
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_set_sasl_options] (0x0100): Option ldap_sasl_authid set to host/idc01.ipa.mydomain.local
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_set_sasl_options] (0x0100): Option ldap_sasl_realm set to IPA.MYDOMAIN.LOCAL
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [fo_new_service] (0x0400): Creating new service 'mydomain.local'
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [fo_new_service] (0x0400): Creating new service 'gc_mydomain.local'
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [ad_failover_init] (0x0100): No primary servers defined, using service discovery
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [fo_add_srv_server] (0x0400): Adding new SRV server to service 'gc_mydomain.local' using 'tcp'.
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [fo_add_srv_server] (0x0400): Adding new SRV server to service 'mydomain.local' using 'tcp'.
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [_ad_servers_init] (0x0100): Added service discovery for AD
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [be_fo_set_srv_lookup_plugin] (0x0400): Trying to set SRV lookup plugin to AD
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [be_fo_set_srv_lookup_plugin] (0x0400): SRV lookup plugin is now AD
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_domain_subdom_add] (0x0400): subdomain mydomain.local is a new one, will create a new sdap domain object
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_id_setup_tasks] (0x0400): Setting up cleanup task for mydomain.local
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [be_ptask_create] (0x0400): Periodic task [Cleanup of mydomain.local] was created
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [be_ptask_schedule] (0x0400): Task [Cleanup of mydomain.local]: scheduling task 10 seconds from now [1435564798]
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [become_user] (0x0200): Trying to become user [0][0].
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [become_user] (0x0200): Already user [0].
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [main] (0x0400): Backend provider (ipa.mydomain.local) started!
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_sudo_schedule_refresh] (0x0400): Full refresh scheduled at: 1435564798
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [id_callback] (0x0100): Got id ack and version (1) from Monitor
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sbus_server_init_new_connection] (0x0200): Entering.
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sbus_server_init_new_connection] (0x0200): Adding connection 0x7f1c069609b0.
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sbus_init_connection] (0x0400): Adding connection 0x7f1c069609b0
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sbus_server_init_new_connection] (0x0200): Got a connection
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [be_client_init] (0x0100): Set-up Backend ID timeout [0x7f1c06960e40]
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sbus_server_init_new_connection] (0x0200): Entering.
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sbus_server_init_new_connection] (0x0200): Adding connection 0x7f1c06962d00.
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sbus_init_connection] (0x0400): Adding connection 0x7f1c06962d00
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sbus_server_init_new_connection] (0x0200): Got a connection
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [be_client_init] (0x0100): Set-up Backend ID timeout [0x7f1c06963560]
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sbus_server_init_new_connection] (0x0200): Entering.
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sbus_server_init_new_connection] (0x0200): Adding connection 0x7f1c06964800.
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sbus_init_connection] (0x0400): Adding connection 0x7f1c06964800
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sbus_server_init_new_connection] (0x0200): Got a connection
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [be_client_init] (0x0100): Set-up Backend ID timeout [0x7f1c06965230]
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sbus_server_init_new_connection] (0x0200): Entering.
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sbus_server_init_new_connection] (0x0200): Adding connection 0x7f1c069664a0.
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sbus_init_connection] (0x0400): Adding connection 0x7f1c069664a0
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sbus_server_init_new_connection] (0x0200): Got a connection
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [be_client_init] (0x0100): Set-up Backend ID timeout [0x7f1c06966ed0]
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sbus_server_init_new_connection] (0x0200): Entering.
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sbus_server_init_new_connection] (0x0200): Adding connection 0x7f1c06968140.
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sbus_init_connection] (0x0400): Adding connection 0x7f1c06968140
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sbus_server_init_new_connection] (0x0200): Got a connection
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [be_client_init] (0x0100): Set-up Backend ID timeout [0x7f1c06969190]
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [client_registration] (0x0100): Cancel DP ID timeout [0x7f1c06965230]
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [client_registration] (0x0100): Added Frontend client [SUDO]
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [be_get_subdomains] (0x0400): Got get subdomains []
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [fo_resolve_service_send] (0x0100): Trying to resolve service 'IPA'
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [resolv_gethostbyname_files_send] (0x0100): Trying to resolve A record of 'idc01.ipa.mydomain.local' in files
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [set_server_common_status] (0x0100): Marking server 'idc01.ipa.mydomain.local' as 'resolving name'
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [set_server_common_status] (0x0100): Marking server 'idc01.ipa.mydomain.local' as 'name resolved'
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [be_resolve_server_process] (0x0200): Found address for server idc01.ipa.mydomain.local: [172.21.251.9] TTL 7200
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [ipa_resolve_callback] (0x0400): Constructed uri 'ldap://idc01.ipa.mydomain.local'
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sss_ldap_init_send] (0x0400): Setting 6 seconds timeout for connecting
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(objectclass=*)][].
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_kinit_send] (0x0400): Attempting kinit (default, host/idc01.ipa.mydomain.local, IPA.MYDOMAIN.LOCAL, 86400)
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [fo_resolve_service_send] (0x0100): Trying to resolve service 'IPA'
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [be_resolve_server_process] (0x0200): Found address for server idc01.ipa.mydomain.local: [172.21.251.9] TTL 7200
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [create_tgt_req_send_buffer] (0x0400): buffer size: 87
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [set_tgt_child_timeout] (0x0400): Setting 6 seconds timeout for tgt child
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [write_pipe_handler] (0x0400): All data has been sent!
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [client_registration] (0x0100): Cancel DP ID timeout [0x7f1c06960e40]
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [client_registration] (0x0100): Added Frontend client [SSH]
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [be_get_subdomains] (0x0400): Got get subdomains []
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [client_registration] (0x0100): Cancel DP ID timeout [0x7f1c06969190]
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [client_registration] (0x0100): Added Frontend client [autofs]
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [be_get_subdomains] (0x0400): Got get subdomains []
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [client_registration] (0x0100): Cancel DP ID timeout [0x7f1c06966ed0]
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [client_registration] (0x0100): Added Frontend client [PAM]
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [be_get_subdomains] (0x0400): Got get subdomains []
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sbus_server_init_new_connection] (0x0200): Entering.
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sbus_server_init_new_connection] (0x0200): Adding connection 0x7f1c06984eb0.
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sbus_init_connection] (0x0400): Adding connection 0x7f1c06984eb0
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sbus_server_init_new_connection] (0x0200): Got a connection
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [be_client_init] (0x0100): Set-up Backend ID timeout [0x7f1c06985670]
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [client_registration] (0x0100): Cancel DP ID timeout [0x7f1c06985670]
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [client_registration] (0x0100): Added Frontend client [PAC]
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [be_get_subdomains] (0x0400): Got get subdomains []
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [client_registration] (0x0100): Cancel DP ID timeout [0x7f1c06963560]
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [client_registration] (0x0100): Added Frontend client [NSS]
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [be_get_subdomains] (0x0400): Got get subdomains []
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [child_sig_handler] (0x0100): child [14167] finished successfully.
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [read_pipe_handler] (0x0400): EOF received, client finished
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_tgt_recv] (0x0400): Child responded: 0 [FILE:/var/lib/sss/db/ccache_IPA.MYDOMAIN.LOCAL], expired on [1435651188]
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_cli_auth_step] (0x0100): expire timeout is 900
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sasl_bind_send] (0x0100): Executing sasl bind mech: GSSAPI, user: host/idc01.ipa.mydomain.local
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [fo_set_port_status] (0x0100): Marking port 0 of server 'idc01.ipa.mydomain.local' as 'working'
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [set_server_common_status] (0x0100): Marking server 'idc01.ipa.mydomain.local' as 'working'
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [fo_set_port_status] (0x0400): Marking port 0 of duplicate server 'idc01.ipa.mydomain.local' as 'working'
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [objectclass=ipaIDRange][cn=ranges,cn=etc,dc=ipa,dc=mydomain,dc=local].
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [be_run_unconditional_online_cb] (0x0400): Running unconditional online callbacks.
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [be_run_online_cb] (0x0080): Going online. Running callbacks.
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [objectclass=ipaNTTrustedDomain][cn=trusts,dc=ipa,dc=mydomain,dc=local].
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [ipa_subdom_get_forest] (0x0400): 4th component is not 'trust', nothing to do.
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [objectclass=ipaNTDomainAttrs][cn=ad,cn=etc,dc=ipa,dc=mydomain,dc=local].
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [get_subdomains_callback] (0x0400): Backend returned: (0, 0, <NULL>) [Success]
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [get_subdomains_callback] (0x0400): Backend returned: (0, 0, <NULL>) [Success]
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [get_subdomains_callback] (0x0400): Backend returned: (0, 0, <NULL>) [Success]
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [get_subdomains_callback] (0x0400): Backend returned: (0, 0, <NULL>) [Success]
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [get_subdomains_callback] (0x0400): Backend returned: (0, 0, <NULL>) [Success]
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [get_subdomains_callback] (0x0400): Backend returned: (0, 0, <NULL>) [Success]
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [ad_online_cb] (0x0400): The AD provider is online
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [objectclass=ipaIDRange][cn=ranges,cn=etc,dc=ipa,dc=mydomain,dc=local].
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [objectclass=ipaNTTrustedDomain][cn=trusts,dc=ipa,dc=mydomain,dc=local].
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [ipa_subdom_get_forest] (0x0400): 4th component is not 'trust', nothing to do.
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [objectclass=ipaNTDomainAttrs][cn=ad,cn=etc,dc=ipa,dc=mydomain,dc=local].
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set
(Mon Jun 29 09:59:48 2015) [sssd[be[ipa.mydomain.local]]] [delayed_online_authentication_callback] (0x0200): Backend is online, starting delayed online authentication.
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [be_run_unconditional_online_cb] (0x0400): Running unconditional online callbacks.
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [be_get_subdomains] (0x0400): Got get subdomains [otherdomain.com]
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [objectclass=ipaIDRange][cn=ranges,cn=etc,dc=ipa,dc=mydomain,dc=local].
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [objectclass=ipaNTTrustedDomain][cn=trusts,dc=ipa,dc=mydomain,dc=local].
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [ipa_subdom_get_forest] (0x0400): 4th component is not 'trust', nothing to do.
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [objectclass=ipaNTDomainAttrs][cn=ad,cn=etc,dc=ipa,dc=mydomain,dc=local].
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [get_subdomains_callback] (0x0400): Backend returned: (0, 0, <NULL>) [Success]
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [be_get_account_info] (0x0200): Got request for [0x1001][1][name=account2 at otherdomain.com:U]
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [be_req_set_domain] (0x0400): Changing request domain from [ipa.mydomain.local] to [ipa.mydomain.local]
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [sdap_search_user_next_base] (0x0400): Searching for users with base [cn=accounts,dc=ipa,dc=mydomain,dc=local]
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(&(krbPrincipalName=account2 at otherdomain.com)(objectclass=posixAccount)(uid=*)(&(uidNumber=*)(!(uidNumber=0))))][cn=accounts,dc=ipa,dc=mydomain,dc=local].
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [sdap_search_user_process] (0x0400): Search for users, returned 0 results.
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_users_done] (0x0040): Failed to retrieve users
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [sysdb_search_by_name] (0x0400): No such entry
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [sysdb_delete_user] (0x0400): Error: 2 (No such file or directory)
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [sysdb_search_user_by_upn] (0x0400): No entry with upn [account2 at otherdomain.com] found.
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [ipa_id_get_account_info_orig_done] (0x0080): Object not found, ending request
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [acctinfo_callback] (0x0100): Request processed. Returned 3,0,Account info lookup failed
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [be_get_account_info] (0x0200): Got request for [0x1001][1][name=account2 at otherdomain.com:U]
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [be_req_set_domain] (0x0400): Changing request domain from [ipa.mydomain.local] to [mydomain.local]
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(&(objectClass=ipaUserOverride)(uid=account2 at otherdomain.com))][cn=Default Trust View,cn=views,cn=accounts,dc=ipa,dc=mydomain,dc=local].
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [fo_resolve_service_send] (0x0100): Trying to resolve service 'mydomain.local'
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [resolve_srv_send] (0x0200): The status of SRV lookup is neutral
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [ad_srv_plugin_send] (0x0400): About to find domain controllers
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [ad_get_dc_servers_send] (0x0400): Looking up domain controllers in domain mydomain.local
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [resolv_discover_srv_next_domain] (0x0400): SRV resolution of service 'ldap'. Will use DNS discovery domain 'mydomain.local'
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [resolv_getsrv_send] (0x0100): Trying to resolve SRV record of '_ldap._tcp.mydomain.local'
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [request_watch_destructor] (0x0400): Deleting request watch
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [fo_discover_srv_done] (0x0400): Got answer. Processing...
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [fo_discover_srv_done] (0x0400): Got 3 servers
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [ad_get_dc_servers_done] (0x0400): Found 3 domain controllers in domain mydomain.local
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [ad_srv_plugin_dcs_done] (0x0400): About to locate suitable site
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [sdap_connect_host_send] (0x0400): Resolving host dc02.mydomain.local
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [resolv_gethostbyname_files_send] (0x0100): Trying to resolve A record of 'dc02.mydomain.local' in files
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [resolv_gethostbyname_files_send] (0x0100): Trying to resolve AAAA record of 'dc02.mydomain.local' in files
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [resolv_gethostbyname_next] (0x0200): No more address families to retry
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [resolv_gethostbyname_dns_query] (0x0100): Trying to resolve A record of 'dc02.mydomain.local' in DNS
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [request_watch_destructor] (0x0400): Deleting request watch
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [sdap_connect_host_resolv_done] (0x0400): Connecting to ldap://dc02.mydomain.local:389
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [sss_ldap_init_send] (0x0400): Setting 6 seconds timeout for connecting
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [sdap_connect_host_done] (0x0400): Successful connection to ldap://dc02.mydomain.local:389
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(&(DnsDomain=mydomain.local)(NtVer=\14\00\00\00))][].
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [ad_get_client_site_done] (0x0400): Found site: Default-First-Site-Name
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [ad_srv_plugin_site_done] (0x0400): About to discover primary and backup servers
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [fo_discover_servers_send] (0x0400): Looking up primary servers
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [resolv_discover_srv_next_domain] (0x0400): SRV resolution of service 'ldap'. Will use DNS discovery domain 'Default-First-Site-Name._sites.mydomain.local'
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [resolv_getsrv_send] (0x0100): Trying to resolve SRV record of '_ldap._tcp.Default-First-Site-Name._sites.mydomain.local'
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [request_watch_destructor] (0x0400): Deleting request watch
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [fo_discover_srv_done] (0x0400): Got answer. Processing...
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [fo_discover_srv_done] (0x0400): Got 3 servers
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [fo_discover_servers_primary_done] (0x0400): Looking up backup servers
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [resolv_discover_srv_next_domain] (0x0400): SRV resolution of service 'ldap'. Will use DNS discovery domain 'mydomain.local'
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [resolv_getsrv_send] (0x0100): Trying to resolve SRV record of '_ldap._tcp.mydomain.local'
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [request_watch_destructor] (0x0400): Deleting request watch
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [fo_discover_srv_done] (0x0400): Got answer. Processing...
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [fo_discover_srv_done] (0x0400): Got 3 servers
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [ad_srv_plugin_servers_done] (0x0400): Got 3 primary and 3 backup servers
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [fo_add_server_to_list] (0x0400): Inserted primary server 'dc02.mydomain.local:389' to service 'mydomain.local'
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [fo_add_server_to_list] (0x0400): Inserted primary server 'dc01.mydomain.local:389' to service 'mydomain.local'
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [fo_add_server_to_list] (0x0400): Inserted primary server 'dc03.mydomain.local:389' to service 'mydomain.local'
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [fo_add_server_to_list] (0x0400): Server 'dc03.mydomain.local:389' for service 'mydomain.local' is already present
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [fo_add_server_to_list] (0x0400): Server 'dc01.mydomain.local:389' for service 'mydomain.local' is already present
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [fo_add_server_to_list] (0x0400): Server 'dc02.mydomain.local:389' for service 'mydomain.local' is already present
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [set_srv_data_status] (0x0100): Marking SRV lookup of service 'mydomain.local' as 'resolved'
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [resolv_gethostbyname_files_send] (0x0100): Trying to resolve A record of 'dc02.mydomain.local' in files
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [set_server_common_status] (0x0100): Marking server 'dc02.mydomain.local' as 'resolving name'
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [resolv_gethostbyname_files_send] (0x0100): Trying to resolve AAAA record of 'dc02.mydomain.local' in files
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [resolv_gethostbyname_next] (0x0200): No more address families to retry
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [resolv_gethostbyname_dns_query] (0x0100): Trying to resolve A record of 'dc02.mydomain.local' in DNS
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [request_watch_destructor] (0x0400): Deleting request watch
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [set_server_common_status] (0x0100): Marking server 'dc02.mydomain.local' as 'name resolved'
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [be_resolve_server_process] (0x0200): Found address for server dc02.mydomain.local: [172.21.251.12] TTL 3600
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [ad_resolve_callback] (0x0100): Constructed uri 'ldap://dc02.mydomain.local'
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [ad_resolve_callback] (0x0100): Constructed GC uri 'ldap://dc02.mydomain.local'
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [sss_ldap_init_send] (0x0400): Setting 6 seconds timeout for connecting
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(objectclass=*)][].
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_server_opts_from_rootdse] (0x0100): Setting AD compatibility level to [6]
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [sdap_kinit_send] (0x0400): Attempting kinit (default, host/idc01.ipa.mydomain.local, IPA.MYDOMAIN.LOCAL, 86400)
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [fo_resolve_service_send] (0x0100): Trying to resolve service 'mydomain.local'
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [resolve_srv_send] (0x0200): The status of SRV lookup is resolved
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [be_resolve_server_process] (0x0200): Found address for server dc02.mydomain.local: [172.21.251.12] TTL 3600
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [create_tgt_req_send_buffer] (0x0400): buffer size: 87
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [set_tgt_child_timeout] (0x0400): Setting 6 seconds timeout for tgt child
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [write_pipe_handler] (0x0400): All data has been sent!
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [child_sig_handler] (0x0100): child [14171] finished successfully.
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [read_pipe_handler] (0x0400): EOF received, client finished
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_tgt_recv] (0x0400): Child responded: 0 [FILE:/var/lib/sss/db/ccache_IPA.MYDOMAIN.LOCAL], expired on [1435651192]
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [sdap_cli_auth_step] (0x0100): expire timeout is 900
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [sasl_bind_send] (0x0100): Executing sasl bind mech: gssapi, user: host/idc01.ipa.mydomain.local
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [fo_set_port_status] (0x0100): Marking port 389 of server 'dc02.mydomain.local' as 'working'
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [set_server_common_status] (0x0100): Marking server 'dc02.mydomain.local' as 'working'
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [fo_set_port_status] (0x0400): Marking port 389 of duplicate server 'dc02.mydomain.local' as 'working'
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [sdap_search_user_next_base] (0x0400): Searching for users with base [dc=mydomain,dc=local]
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(&(userPrincipalName=account2 at otherdomain.com)(objectclass=user)(sAMAccountName=*)(objectSID=*))][dc=mydomain,dc=local].
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [be_run_unconditional_online_cb] (0x0400): Running unconditional online callbacks.
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [sdap_search_user_process] (0x0400): Search for users, returned 1 results.
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [sdap_save_user] (0x0400): Save user
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_primary_name] (0x0400): Processing object account2 at mydomain.local
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [sdap_save_user] (0x0400): Processing user account2 at mydomain.local
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [sdap_save_user] (0x0400): Original memberOf is not available for [account2 at mydomain.local].
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [sdap_save_user] (0x0400): Adding user principal [account2 at OTHERDOMAIN.COM] to attributes of [account2 at mydomain.local].
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [sdap_save_user] (0x0400): Storing info for user account2 at mydomain.local
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [sysdb_search_by_name] (0x0400): No such entry
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [sysdb_search_by_name] (0x0400): No such entry
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [sysdb_search_user_by_uid] (0x0400): No such entry
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(&(objectClass=ipaOverrideAnchor)(ipaAnchorUUID=:SID:S-1-5-21-1710311407-3537505305-1030735119-11202))][cn=Default Trust View,cn=views,cn=accounts,dc=ipa,dc=mydomain,dc=local].
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [objectClass=ipaexternalgroup][dc=ipa,dc=mydomain,dc=local].
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [ipa_get_ext_groups_done] (0x0400): [0] external groups found.
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [find_ipa_ext_memberships] (0x0080): User [account2 at otherdomain.com] not found in cache.
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [acctinfo_callback] (0x0100): Request processed. Returned 0,0,Success
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [be_get_account_info] (0x0200): Got request for [0x1003][1][name=nobody]
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [be_req_set_domain] (0x0400): Changing request domain from [ipa.mydomain.local] to [ipa.mydomain.local]
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_initgr_next_base] (0x0400): Searching for users with base [cn=accounts,dc=ipa,dc=mydomain,dc=local]
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(&(uid=nobody)(objectclass=posixAccount)(&(uidNumber=*)(!(uidNumber=0))))][cn=accounts,dc=ipa,dc=mydomain,dc=local].
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [sysdb_search_by_name] (0x0400): No such entry
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [sysdb_delete_user] (0x0400): Error: 2 (No such file or directory)
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [sysdb_search_by_name] (0x0400): No such entry
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [ipa_id_get_account_info_orig_done] (0x0080): Object not found, ending request
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [acctinfo_callback] (0x0100): Request processed. Returned 3,0,Account info lookup failed
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [be_get_account_info] (0x0200): Got request for [0x1][1][name=account2]
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [be_req_set_domain] (0x0400): Changing request domain from [ipa.mydomain.local] to [mydomain.local]
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(&(objectClass=ipaUserOverride)(uid=account2))][cn=Default Trust View,cn=views,cn=accounts,dc=ipa,dc=mydomain,dc=local].
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [sdap_search_user_next_base] (0x0400): Searching for users with base [dc=mydomain,dc=local]
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(&(sAMAccountName=account2)(objectclass=user)(sAMAccountName=*)(objectSID=*))][dc=mydomain,dc=local].
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [sdap_search_user_process] (0x0400): Search for users, returned 1 results.
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [sdap_save_user] (0x0400): Save user
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_primary_name] (0x0400): Processing object account2 at mydomain.local
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [sdap_save_user] (0x0400): Processing user account2 at mydomain.local
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [sdap_save_user] (0x0400): Original memberOf is not available for [account2 at mydomain.local].
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [sdap_save_user] (0x0400): Adding user principal [account2 at OTHERDOMAIN.COM] to attributes of [account2 at mydomain.local].
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [sdap_save_user] (0x0400): Storing info for user account2 at mydomain.local
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(&(objectClass=ipaOverrideAnchor)(ipaAnchorUUID=:SID:S-1-5-21-1710311407-3537505305-1030735119-11202))][cn=Default Trust View,cn=views,cn=accounts,dc=ipa,dc=mydomain,dc=local].
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [ipa_get_ad_memberships_send] (0x0400): External group information still valid.
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [find_ipa_ext_memberships] (0x0400): No external groupmemberships found.
(Mon Jun 29 09:59:52 2015) [sssd[be[ipa.mydomain.local]]] [acctinfo_callback] (0x0100): Request processed. Returned 0,0,Success
(Mon Jun 29 09:59:56 2015) [sssd[be[ipa.mydomain.local]]] [be_get_subdomains] (0x0400): Got get subdomains [otherdomain.com]
(Mon Jun 29 09:59:56 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [objectclass=ipaIDRange][cn=ranges,cn=etc,dc=ipa,dc=mydomain,dc=local].
(Mon Jun 29 09:59:56 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set
(Mon Jun 29 09:59:56 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [objectclass=ipaNTTrustedDomain][cn=trusts,dc=ipa,dc=mydomain,dc=local].
(Mon Jun 29 09:59:56 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set
(Mon Jun 29 09:59:56 2015) [sssd[be[ipa.mydomain.local]]] [ipa_subdom_get_forest] (0x0400): 4th component is not 'trust', nothing to do.
(Mon Jun 29 09:59:56 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [objectclass=ipaNTDomainAttrs][cn=ad,cn=etc,dc=ipa,dc=mydomain,dc=local].
(Mon Jun 29 09:59:56 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set
(Mon Jun 29 09:59:56 2015) [sssd[be[ipa.mydomain.local]]] [get_subdomains_callback] (0x0400): Backend returned: (0, 0, <NULL>) [Success]
(Mon Jun 29 09:59:56 2015) [sssd[be[ipa.mydomain.local]]] [be_get_subdomains] (0x0400): Got get subdomains [otherdomain.com]
(Mon Jun 29 09:59:56 2015) [sssd[be[ipa.mydomain.local]]] [get_subdomains_callback] (0x0400): Backend returned: (0, 0, <NULL>) [Success]
(Mon Jun 29 09:59:56 2015) [sssd[be[ipa.mydomain.local]]] [be_get_subdomains] (0x0400): Got get subdomains [otherdomain.com]
(Mon Jun 29 09:59:56 2015) [sssd[be[ipa.mydomain.local]]] [get_subdomains_callback] (0x0400): Backend returned: (0, 0, <NULL>) [Success]
(Mon Jun 29 09:59:56 2015) [sssd[be[ipa.mydomain.local]]] [be_get_subdomains] (0x0400): Got get subdomains [otherdomain.com]
(Mon Jun 29 09:59:56 2015) [sssd[be[ipa.mydomain.local]]] [get_subdomains_callback] (0x0400): Backend returned: (0, 0, <NULL>) [Success]
(Mon Jun 29 09:59:56 2015) [sssd[be[ipa.mydomain.local]]] [be_get_account_info] (0x0200): Got request for [0x3][1][name=account2 at otherdomain.com:U]
(Mon Jun 29 09:59:56 2015) [sssd[be[ipa.mydomain.local]]] [be_req_set_domain] (0x0400): Changing request domain from [ipa.mydomain.local] to [ipa.mydomain.local]
(Mon Jun 29 09:59:56 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_initgr_next_base] (0x0400): Searching for users with base [cn=accounts,dc=ipa,dc=mydomain,dc=local]
(Mon Jun 29 09:59:56 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(&(krbPrincipalName=account2 at otherdomain.com)(objectclass=posixAccount)(&(uidNumber=*)(!(uidNumber=0))))][cn=accounts,dc=ipa,dc=mydomain,dc=local].
(Mon Jun 29 09:59:56 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set
(Mon Jun 29 09:59:56 2015) [sssd[be[ipa.mydomain.local]]] [sysdb_search_by_name] (0x0400): No such entry
(Mon Jun 29 09:59:56 2015) [sssd[be[ipa.mydomain.local]]] [sysdb_delete_user] (0x0400): Error: 2 (No such file or directory)
(Mon Jun 29 09:59:56 2015) [sssd[be[ipa.mydomain.local]]] [sysdb_search_user_by_upn] (0x0400): No entry with upn [account2 at otherdomain.com] found.
(Mon Jun 29 09:59:56 2015) [sssd[be[ipa.mydomain.local]]] [ipa_id_get_account_info_orig_done] (0x0080): Object not found, ending request
(Mon Jun 29 09:59:56 2015) [sssd[be[ipa.mydomain.local]]] [acctinfo_callback] (0x0100): Request processed. Returned 3,0,Account info lookup failed
(Mon Jun 29 09:59:56 2015) [sssd[be[ipa.mydomain.local]]] [be_get_account_info] (0x0200): Got request for [0x3][1][name=account2 at otherdomain.com:U]
(Mon Jun 29 09:59:56 2015) [sssd[be[ipa.mydomain.local]]] [be_req_set_domain] (0x0400): Changing request domain from [ipa.mydomain.local] to [mydomain.local]
(Mon Jun 29 09:59:56 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(&(objectClass=ipaUserOverride)(uid=account2 at otherdomain.com))][cn=Default Trust View,cn=views,cn=accounts,dc=ipa,dc=mydomain,dc=local].
(Mon Jun 29 09:59:56 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set
(Mon Jun 29 09:59:56 2015) [sssd[be[ipa.mydomain.local]]] [fo_resolve_service_send] (0x0100): Trying to resolve service 'gc_mydomain.local'
(Mon Jun 29 09:59:56 2015) [sssd[be[ipa.mydomain.local]]] [resolve_srv_send] (0x0200): The status of SRV lookup is neutral
(Mon Jun 29 09:59:56 2015) [sssd[be[ipa.mydomain.local]]] [ad_srv_plugin_send] (0x0400): About to find domain controllers
(Mon Jun 29 09:59:56 2015) [sssd[be[ipa.mydomain.local]]] [ad_get_dc_servers_send] (0x0400): Looking up domain controllers in domain mydomain.local
(Mon Jun 29 09:59:56 2015) [sssd[be[ipa.mydomain.local]]] [resolv_discover_srv_next_domain] (0x0400): SRV resolution of service 'ldap'. Will use DNS discovery domain 'mydomain.local'
(Mon Jun 29 09:59:56 2015) [sssd[be[ipa.mydomain.local]]] [resolv_getsrv_send] (0x0100): Trying to resolve SRV record of '_ldap._tcp.mydomain.local'
(Mon Jun 29 09:59:56 2015) [sssd[be[ipa.mydomain.local]]] [request_watch_destructor] (0x0400): Deleting request watch
(Mon Jun 29 09:59:56 2015) [sssd[be[ipa.mydomain.local]]] [fo_discover_srv_done] (0x0400): Got answer. Processing...
(Mon Jun 29 09:59:56 2015) [sssd[be[ipa.mydomain.local]]] [fo_discover_srv_done] (0x0400): Got 3 servers
(Mon Jun 29 09:59:56 2015) [sssd[be[ipa.mydomain.local]]] [ad_get_dc_servers_done] (0x0400): Found 3 domain controllers in domain mydomain.local
(Mon Jun 29 09:59:56 2015) [sssd[be[ipa.mydomain.local]]] [ad_srv_plugin_dcs_done] (0x0400): About to locate suitable site
(Mon Jun 29 09:59:56 2015) [sssd[be[ipa.mydomain.local]]] [sdap_connect_host_send] (0x0400): Resolving host dc02.mydomain.local
(Mon Jun 29 09:59:56 2015) [sssd[be[ipa.mydomain.local]]] [resolv_gethostbyname_files_send] (0x0100): Trying to resolve A record of 'dc02.mydomain.local' in files
(Mon Jun 29 09:59:56 2015) [sssd[be[ipa.mydomain.local]]] [resolv_gethostbyname_files_send] (0x0100): Trying to resolve AAAA record of 'dc02.mydomain.local' in files
(Mon Jun 29 09:59:56 2015) [sssd[be[ipa.mydomain.local]]] [resolv_gethostbyname_next] (0x0200): No more address families to retry
(Mon Jun 29 09:59:56 2015) [sssd[be[ipa.mydomain.local]]] [resolv_gethostbyname_dns_query] (0x0100): Trying to resolve A record of 'dc02.mydomain.local' in DNS
(Mon Jun 29 09:59:56 2015) [sssd[be[ipa.mydomain.local]]] [request_watch_destructor] (0x0400): Deleting request watch
(Mon Jun 29 09:59:56 2015) [sssd[be[ipa.mydomain.local]]] [sdap_connect_host_resolv_done] (0x0400): Connecting to ldap://dc02.mydomain.local:389
(Mon Jun 29 09:59:56 2015) [sssd[be[ipa.mydomain.local]]] [sss_ldap_init_send] (0x0400): Setting 6 seconds timeout for connecting
(Mon Jun 29 09:59:56 2015) [sssd[be[ipa.mydomain.local]]] [sdap_connect_host_done] (0x0400): Successful connection to ldap://dc02.mydomain.local:389
(Mon Jun 29 09:59:56 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(&(DnsDomain=mydomain.local)(NtVer=\14\00\00\00))][].
(Mon Jun 29 09:59:56 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set
(Mon Jun 29 09:59:56 2015) [sssd[be[ipa.mydomain.local]]] [ad_get_client_site_done] (0x0400): Found site: Default-First-Site-Name
(Mon Jun 29 09:59:56 2015) [sssd[be[ipa.mydomain.local]]] [ad_srv_plugin_site_done] (0x0400): About to discover primary and backup servers
(Mon Jun 29 09:59:56 2015) [sssd[be[ipa.mydomain.local]]] [fo_discover_servers_send] (0x0400): Looking up primary servers
(Mon Jun 29 09:59:56 2015) [sssd[be[ipa.mydomain.local]]] [resolv_discover_srv_next_domain] (0x0400): SRV resolution of service 'gc'. Will use DNS discovery domain 'Default-First-Site-Name._sites.mydomain.local'
(Mon Jun 29 09:59:56 2015) [sssd[be[ipa.mydomain.local]]] [resolv_getsrv_send] (0x0100): Trying to resolve SRV record of '_gc._tcp.Default-First-Site-Name._sites.mydomain.local'
(Mon Jun 29 09:59:56 2015) [sssd[be[ipa.mydomain.local]]] [request_watch_destructor] (0x0400): Deleting request watch
(Mon Jun 29 09:59:56 2015) [sssd[be[ipa.mydomain.local]]] [fo_discover_srv_done] (0x0400): Got answer. Processing...
(Mon Jun 29 09:59:56 2015) [sssd[be[ipa.mydomain.local]]] [fo_discover_srv_done] (0x0400): Got 3 servers
(Mon Jun 29 09:59:56 2015) [sssd[be[ipa.mydomain.local]]] [fo_discover_servers_primary_done] (0x0400): Looking up backup servers
(Mon Jun 29 09:59:56 2015) [sssd[be[ipa.mydomain.local]]] [resolv_discover_srv_next_domain] (0x0400): SRV resolution of service 'gc'. Will use DNS discovery domain 'mydomain.local'
(Mon Jun 29 09:59:56 2015) [sssd[be[ipa.mydomain.local]]] [resolv_getsrv_send] (0x0100): Trying to resolve SRV record of '_gc._tcp.mydomain.local'
(Mon Jun 29 09:59:56 2015) [sssd[be[ipa.mydomain.local]]] [request_watch_destructor] (0x0400): Deleting request watch
(Mon Jun 29 09:59:56 2015) [sssd[be[ipa.mydomain.local]]] [fo_discover_srv_done] (0x0400): Got answer. Processing...
(Mon Jun 29 09:59:56 2015) [sssd[be[ipa.mydomain.local]]] [fo_discover_srv_done] (0x0400): Got 3 servers
(Mon Jun 29 09:59:56 2015) [sssd[be[ipa.mydomain.local]]] [ad_srv_plugin_servers_done] (0x0400): Got 3 primary and 3 backup servers
(Mon Jun 29 09:59:56 2015) [sssd[be[ipa.mydomain.local]]] [fo_add_server_to_list] (0x0400): Inserted primary server 'dc02.mydomain.local:3268' to service 'gc_mydomain.local'
(Mon Jun 29 09:59:56 2015) [sssd[be[ipa.mydomain.local]]] [fo_add_server_to_list] (0x0400): Inserted primary server 'dc03.mydomain.local:3268' to service 'gc_mydomain.local'
(Mon Jun 29 09:59:56 2015) [sssd[be[ipa.mydomain.local]]] [fo_add_server_to_list] (0x0400): Inserted primary server 'dc01.mydomain.local:3268' to service 'gc_mydomain.local'
(Mon Jun 29 09:59:56 2015) [sssd[be[ipa.mydomain.local]]] [fo_add_server_to_list] (0x0400): Server 'dc01.mydomain.local:3268' for service 'gc_mydomain.local' is already present
(Mon Jun 29 09:59:56 2015) [sssd[be[ipa.mydomain.local]]] [fo_add_server_to_list] (0x0400): Server 'dc03.mydomain.local:3268' for service 'gc_mydomain.local' is already present
(Mon Jun 29 09:59:56 2015) [sssd[be[ipa.mydomain.local]]] [fo_add_server_to_list] (0x0400): Server 'dc02.mydomain.local:3268' for service 'gc_mydomain.local' is already present
(Mon Jun 29 09:59:56 2015) [sssd[be[ipa.mydomain.local]]] [set_srv_data_status] (0x0100): Marking SRV lookup of service 'gc_mydomain.local' as 'resolved'
(Mon Jun 29 09:59:56 2015) [sssd[be[ipa.mydomain.local]]] [be_resolve_server_process] (0x0200): Found address for server dc02.mydomain.local: [172.21.251.12] TTL 3600
(Mon Jun 29 09:59:56 2015) [sssd[be[ipa.mydomain.local]]] [ad_resolve_callback] (0x0100): Constructed uri 'ldap://dc02.mydomain.local'
(Mon Jun 29 09:59:56 2015) [sssd[be[ipa.mydomain.local]]] [ad_resolve_callback] (0x0100): Constructed GC uri 'ldap://dc02.mydomain.local:3268'
(Mon Jun 29 09:59:56 2015) [sssd[be[ipa.mydomain.local]]] [sss_ldap_init_send] (0x0400): Setting 6 seconds timeout for connecting
(Mon Jun 29 09:59:56 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(objectclass=*)][].
(Mon Jun 29 09:59:56 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set
(Mon Jun 29 09:59:56 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_server_opts_from_rootdse] (0x0100): Setting AD compatibility level to [6]
(Mon Jun 29 09:59:56 2015) [sssd[be[ipa.mydomain.local]]] [sdap_kinit_send] (0x0400): Attempting kinit (default, host/idc01.ipa.mydomain.local, IPA.MYDOMAIN.LOCAL, 86400)
(Mon Jun 29 09:59:56 2015) [sssd[be[ipa.mydomain.local]]] [fo_resolve_service_send] (0x0100): Trying to resolve service 'mydomain.local'
(Mon Jun 29 09:59:56 2015) [sssd[be[ipa.mydomain.local]]] [resolve_srv_send] (0x0200): The status of SRV lookup is resolved
(Mon Jun 29 09:59:56 2015) [sssd[be[ipa.mydomain.local]]] [be_resolve_server_process] (0x0200): Found address for server dc02.mydomain.local: [172.21.251.12] TTL 3600
(Mon Jun 29 09:59:56 2015) [sssd[be[ipa.mydomain.local]]] [create_tgt_req_send_buffer] (0x0400): buffer size: 87
(Mon Jun 29 09:59:56 2015) [sssd[be[ipa.mydomain.local]]] [set_tgt_child_timeout] (0x0400): Setting 6 seconds timeout for tgt child
(Mon Jun 29 09:59:56 2015) [sssd[be[ipa.mydomain.local]]] [write_pipe_handler] (0x0400): All data has been sent!
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [child_sig_handler] (0x0100): child [14173] finished successfully.
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [read_pipe_handler] (0x0400): EOF received, client finished
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_tgt_recv] (0x0400): Child responded: 0 [FILE:/var/lib/sss/db/ccache_IPA.MYDOMAIN.LOCAL], expired on [1435651197]
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_cli_auth_step] (0x0100): expire timeout is 900
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sasl_bind_send] (0x0100): Executing sasl bind mech: gssapi, user: host/idc01.ipa.mydomain.local
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [fo_set_port_status] (0x0100): Marking port 3268 of server 'dc02.mydomain.local' as 'working'
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [set_server_common_status] (0x0100): Marking server 'dc02.mydomain.local' as 'working'
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [fo_set_port_status] (0x0400): Marking port 3268 of duplicate server 'dc02.mydomain.local' as 'working'
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_initgr_next_base] (0x0400): Searching for users with base [dc=mydomain,dc=local]
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(&(userPrincipalName=account2 at otherdomain.com)(objectclass=user)(objectSID=*))][dc=mydomain,dc=local].
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [be_run_unconditional_online_cb] (0x0400): Running unconditional online callbacks.
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_save_user] (0x0400): Save user
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_primary_name] (0x0400): Processing object account2 at mydomain.local
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_save_user] (0x0400): Processing user account2 at mydomain.local
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_save_user] (0x0400): Original memberOf is not available for [account2 at mydomain.local].
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_save_user] (0x0400): Adding user principal [account2 at OTHERDOMAIN.COM] to attributes of [account2 at mydomain.local].
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_save_user] (0x0400): Storing info for user account2 at mydomain.local
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [no filter][CN=account2 at otherdomain.com,OU=Personale,OU=Utenti Mydomain,DC=mydomain,DC=local].
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_ad_tokengroups_get_posix_members] (0x0080): Domain not found for SID S-1-5-32-545
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sysdb_search_entry_by_sid_str] (0x0400): No such entry
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_ad_tokengroups_get_posix_members] (0x0400): Missing SID S-1-5-21-1710311407-3537505305-1030735119-1107 will be downloaded
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sysdb_search_entry_by_sid_str] (0x0400): No such entry
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_ad_tokengroups_get_posix_members] (0x0400): Missing SID S-1-5-21-1710311407-3537505305-1030735119-1608 will be downloaded
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sysdb_search_entry_by_sid_str] (0x0400): No such entry
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_ad_tokengroups_get_posix_members] (0x0400): Missing SID S-1-5-21-1710311407-3537505305-1030735119-513 will be downloaded
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_groups_next_base] (0x0400): Searching for groups with base [dc=mydomain,dc=local]
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(&(objectSID=S-1-5-21-1710311407-3537505305-1030735119-1107)(objectClass=group)(name=*))][dc=mydomain,dc=local].
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_groups_process] (0x0400): Search for groups, returned 1 results.
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_has_deref_support] (0x0400): The server supports deref method ASQ
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_nested_group_hash_group] (0x0400): Filtering AD group.
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(objectclass=user)][CN=Domain Users,CN=Users,DC=mydomain,DC=local].
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(&(objectClass=group)(name=*))][CN=Domain Users,CN=Users,DC=mydomain,DC=local].
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(objectclass=user)][CN=Test Palo Alto,OU=Test,OU=Utenti Mydomain,DC=mydomain,DC=local].
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(objectclass=user)][CN=test4,OU=Test,OU=Utenti Mydomain,DC=mydomain,DC=local].
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(objectclass=user)][CN=test3,OU=Test,OU=Utenti Mydomain,DC=mydomain,DC=local].
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(objectclass=user)][CN=test2,OU=Test,OU=Utenti Mydomain,DC=mydomain,DC=local].
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(objectclass=user)][CN=test,OU=Test,OU=Utenti Mydomain,DC=mydomain,DC=local].
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_nested_group_recv] (0x0400): 5 users found in the hash table
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_nested_group_recv] (0x0400): 2 groups found in the hash table
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_primary_name] (0x0400): Processing object test2 at mydomain.local
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_primary_name] (0x0400): Processing object test4 at mydomain.local
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_primary_name] (0x0400): Processing object test at mydomain.local
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_primary_name] (0x0400): Processing object test_pa at mydomain.local
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_primary_name] (0x0400): Processing object test3 at mydomain.local
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_primary_name] (0x0400): Processing object Domain Users at mydomain.local
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_save_group] (0x0400): Processing group Domain Users at mydomain.local
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_process_ghost_members] (0x0400): The group has 5 members
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_process_ghost_members] (0x0400): Group has 5 members
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_process_ghost_members] (0x0400): Adding ghost member for group [test_pa at mydomain.local]
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_process_ghost_members] (0x0400): Adding ghost member for group [test4 at mydomain.local]
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_process_ghost_members] (0x0400): Adding ghost member for group [test3 at mydomain.local]
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_process_ghost_members] (0x0400): Adding ghost member for group [test2 at mydomain.local]
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_process_ghost_members] (0x0400): Adding ghost member for group [test at mydomain.local]
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_save_group] (0x0400): Storing info for group Domain Users at mydomain.local
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sysdb_search_by_name] (0x0400): No such entry
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sysdb_search_by_name] (0x0400): No such entry
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sysdb_search_group_by_gid] (0x0400): No such entry
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_primary_name] (0x0400): Processing object SophosUser at mydomain.local
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_save_group] (0x0400): Processing group SophosUser at mydomain.local
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_save_group] (0x0400): Filtering AD group [SophosUser at mydomain.local].
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_process_ghost_members] (0x0400): The group has 1 members
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_process_ghost_members] (0x0400): Group has 1 members
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_save_group] (0x0400): Storing info for group SophosUser at mydomain.local
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sysdb_search_by_name] (0x0400): No such entry
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sysdb_search_by_name] (0x0400): No such entry
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sysdb_set_entry_attr] (0x0080): ldb_modify failed: [Attribute or value exists]
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sysdb_set_entry_attr] (0x0040): Error: 17 (File exists)
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sysdb_add_group] (0x0400): Error: 17 (File exists)
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sysdb_store_group] (0x0080): A group with the same GID [0] was removed from the cache
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sysdb_search_by_name] (0x0400): No such entry
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sysdb_set_entry_attr] (0x0080): ldb_modify failed: [Attribute or value exists]
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sysdb_set_entry_attr] (0x0040): Error: 17 (File exists)
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sysdb_add_group] (0x0400): Error: 17 (File exists)
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sysdb_store_group] (0x0080): sysdb_add_group failed (while renaming group) for: SophosUser at mydomain.local [0].
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sysdb_store_group] (0x0400): Error: 17 (File exists)
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_store_group_with_gid] (0x0040): Could not store group SophosUser at mydomain.local
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_save_group] (0x0080): Could not store group with GID: [File exists]
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_save_group] (0x0080): Failed to save group [SophosUser at mydomain.local]: [File exists]
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_save_groups] (0x0040): Failed to store group 1. Ignoring.
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_primary_name] (0x0400): Processing object Domain Users at mydomain.local
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_save_grpmem] (0x0400): Processing group Domain Users at mydomain.local
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_save_grpmem] (0x0400): Adding member users to group [Domain Users at mydomain.local]
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_groups_next_base] (0x0400): Searching for groups with base [dc=mydomain,dc=local]
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(&(objectSID=S-1-5-21-1710311407-3537505305-1030735119-1608)(objectClass=group)(name=*))][dc=mydomain,dc=local].
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_groups_process] (0x0400): Search for groups, returned 1 results.
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_has_deref_support] (0x0400): The server supports deref method ASQ
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_nested_group_hash_group] (0x0400): Filtering AD group.
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_nested_group_recv] (0x0400): 0 users found in the hash table
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_nested_group_recv] (0x0400): 1 groups found in the hash table
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_primary_name] (0x0400): Processing object SophosUserTmpRn
CNF:10eb1e79-892c-43ab-9735-0bf3cc30f264 at mydomain.local
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_save_group] (0x0400): Processing group SophosUserTmpRn
CNF:10eb1e79-892c-43ab-9735-0bf3cc30f264 at mydomain.local
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_save_group] (0x0400): Filtering AD group [SophosUserTmpRn
CNF:10eb1e79-892c-43ab-9735-0bf3cc30f264 at mydomain.local].
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_process_ghost_members] (0x0400): The group has 1 members
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_process_ghost_members] (0x0400): Group has 1 members
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_save_group] (0x0400): Storing info for group SophosUserTmpRn
CNF:10eb1e79-892c-43ab-9735-0bf3cc30f264 at mydomain.local
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sysdb_search_by_name] (0x0400): No such entry
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sysdb_search_by_name] (0x0400): No such entry
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sysdb_set_entry_attr] (0x0080): ldb_modify failed: [Attribute or value exists]
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sysdb_set_entry_attr] (0x0040): Error: 17 (File exists)
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sysdb_add_group] (0x0400): Error: 17 (File exists)
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sysdb_store_group] (0x0080): A group with the same GID [0] was removed from the cache
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sysdb_search_by_name] (0x0400): No such entry
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sysdb_set_entry_attr] (0x0080): ldb_modify failed: [Attribute or value exists]
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sysdb_set_entry_attr] (0x0040): Error: 17 (File exists)
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sysdb_add_group] (0x0400): Error: 17 (File exists)
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sysdb_store_group] (0x0080): sysdb_add_group failed (while renaming group) for: SophosUserTmpRn
CNF:10eb1e79-892c-43ab-9735-0bf3cc30f264 at mydomain.local [0].
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sysdb_store_group] (0x0400): Error: 17 (File exists)
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_store_group_with_gid] (0x0040): Could not store group SophosUserTmpRn
CNF:10eb1e79-892c-43ab-9735-0bf3cc30f264 at mydomain.local
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_save_group] (0x0080): Could not store group with GID: [File exists]
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_save_group] (0x0080): Failed to save group [SophosUserTmpRn
CNF:10eb1e79-892c-43ab-9735-0bf3cc30f264 at mydomain.local]: [File exists]
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_save_groups] (0x0040): Failed to store group 0. Ignoring.
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_groups_next_base] (0x0400): Searching for groups with base [dc=mydomain,dc=local]
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(&(objectSID=S-1-5-21-1710311407-3537505305-1030735119-513)(objectClass=group)(name=*))][dc=mydomain,dc=local].
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_groups_process] (0x0400): Search for groups, returned 1 results.
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_has_deref_support] (0x0400): The server supports deref method ASQ
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(objectclass=user)][CN=Test Palo Alto,OU=Test,OU=Utenti Mydomain,DC=mydomain,DC=local].
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(objectclass=user)][CN=test4,OU=Test,OU=Utenti Mydomain,DC=mydomain,DC=local].
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(objectclass=user)][CN=test3,OU=Test,OU=Utenti Mydomain,DC=mydomain,DC=local].
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(objectclass=user)][CN=test2,OU=Test,OU=Utenti Mydomain,DC=mydomain,DC=local].
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(objectclass=user)][CN=test,OU=Test,OU=Utenti Mydomain,DC=mydomain,DC=local].
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_nested_group_recv] (0x0400): 5 users found in the hash table
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_nested_group_recv] (0x0400): 1 groups found in the hash table
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_primary_name] (0x0400): Processing object test2 at mydomain.local
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_primary_name] (0x0400): Processing object test4 at mydomain.local
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_primary_name] (0x0400): Processing object test at mydomain.local
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_primary_name] (0x0400): Processing object test_pa at mydomain.local
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_primary_name] (0x0400): Processing object test3 at mydomain.local
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_primary_name] (0x0400): Processing object Domain Users at mydomain.local
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_save_group] (0x0400): Processing group Domain Users at mydomain.local
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_process_ghost_members] (0x0400): The group has 5 members
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_process_ghost_members] (0x0400): Group has 5 members
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_process_ghost_members] (0x0400): Adding ghost member for group [test_pa at mydomain.local]
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_process_ghost_members] (0x0400): Adding ghost member for group [test4 at mydomain.local]
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_process_ghost_members] (0x0400): Adding ghost member for group [test3 at mydomain.local]
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_process_ghost_members] (0x0400): Adding ghost member for group [test2 at mydomain.local]
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_process_ghost_members] (0x0400): Adding ghost member for group [test at mydomain.local]
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_save_group] (0x0400): Storing info for group Domain Users at mydomain.local
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_primary_name] (0x0400): Processing object Domain Users at mydomain.local
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_save_grpmem] (0x0400): Processing group Domain Users at mydomain.local
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_save_grpmem] (0x0400): Adding member users to group [Domain Users at mydomain.local]
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sysdb_search_entry_by_sid_str] (0x0400): No such entry
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sysdb_search_entry_by_sid_str] (0x0400): No such entry
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_groups_next_base] (0x0400): Searching for groups with base [dc=mydomain,dc=local]
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(&(objectSID=S-1-5-21-1710311407-3537505305-1030735119-513)(objectClass=group)(name=*))][dc=mydomain,dc=local].
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_groups_process] (0x0400): Search for groups, returned 1 results.
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_has_deref_support] (0x0400): The server supports deref method ASQ
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(objectclass=user)][CN=Test Palo Alto,OU=Test,OU=Utenti Mydomain,DC=mydomain,DC=local].
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(objectclass=user)][CN=test4,OU=Test,OU=Utenti Mydomain,DC=mydomain,DC=local].
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(objectclass=user)][CN=test3,OU=Test,OU=Utenti Mydomain,DC=mydomain,DC=local].
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(objectclass=user)][CN=test2,OU=Test,OU=Utenti Mydomain,DC=mydomain,DC=local].
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(objectclass=user)][CN=test,OU=Test,OU=Utenti Mydomain,DC=mydomain,DC=local].
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_nested_group_recv] (0x0400): 5 users found in the hash table
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_nested_group_recv] (0x0400): 1 groups found in the hash table
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_primary_name] (0x0400): Processing object test2 at mydomain.local
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_primary_name] (0x0400): Processing object test4 at mydomain.local
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_primary_name] (0x0400): Processing object test at mydomain.local
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_primary_name] (0x0400): Processing object test_pa at mydomain.local
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_primary_name] (0x0400): Processing object test3 at mydomain.local
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_primary_name] (0x0400): Processing object Domain Users at mydomain.local
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_save_group] (0x0400): Processing group Domain Users at mydomain.local
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_process_ghost_members] (0x0400): The group has 5 members
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_process_ghost_members] (0x0400): Group has 5 members
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_process_ghost_members] (0x0400): Adding ghost member for group [test_pa at mydomain.local]
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_process_ghost_members] (0x0400): Adding ghost member for group [test4 at mydomain.local]
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_process_ghost_members] (0x0400): Adding ghost member for group [test3 at mydomain.local]
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_process_ghost_members] (0x0400): Adding ghost member for group [test2 at mydomain.local]
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_process_ghost_members] (0x0400): Adding ghost member for group [test at mydomain.local]
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_save_group] (0x0400): Storing info for group Domain Users at mydomain.local
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_primary_name] (0x0400): Processing object Domain Users at mydomain.local
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_save_grpmem] (0x0400): Processing group Domain Users at mydomain.local
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_save_grpmem] (0x0400): Adding member users to group [Domain Users at mydomain.local]
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(&(objectClass=ipaOverrideAnchor)(ipaAnchorUUID=:SID:S-1-5-21-1710311407-3537505305-1030735119-11202))][cn=Default Trust View,cn=views,cn=accounts,dc=ipa,dc=mydomain,dc=local].
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [ipa_get_ad_memberships_send] (0x0400): External group information still valid.
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [find_ipa_ext_memberships] (0x0080): User [account2 at otherdomain.com] not found in cache.
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [acctinfo_callback] (0x0100): Request processed. Returned 0,0,Success
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [be_req_set_domain] (0x0400): Changing request domain from [ipa.mydomain.local] to [mydomain.local]
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [be_pam_handler] (0x0100): Got request with the following data
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [pam_print_data] (0x0100): command: PAM_AUTHENTICATE
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [pam_print_data] (0x0100): domain: mydomain.local
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [pam_print_data] (0x0100): user: account2 at mydomain.local
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [pam_print_data] (0x0100): service: sshd
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [pam_print_data] (0x0100): tty: ssh
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [pam_print_data] (0x0100): ruser: 
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [pam_print_data] (0x0100): rhost: fido.sm.di.otherdomain.com
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [pam_print_data] (0x0100): authtok type: 1
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [pam_print_data] (0x0100): newauthtok type: 0
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [pam_print_data] (0x0100): priv: 1
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [pam_print_data] (0x0100): cli_pid: 14169
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [pam_print_data] (0x0100): logon name: not set
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [fo_resolve_service_send] (0x0100): Trying to resolve service 'IPA'
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [be_resolve_server_process] (0x0200): Found address for server idc01.ipa.mydomain.local: [172.21.251.9] TTL 7200
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [write_pipe_handler] (0x0400): All data has been sent!
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [child_sig_handler] (0x0100): child [14174] finished successfully.
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [read_pipe_handler] (0x0400): EOF received, client finished
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [be_pam_handler_callback] (0x0100): Backend returned: (0, 4, <NULL>) [Success]
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [be_pam_handler_callback] (0x0100): Sending result [4][mydomain.local]
(Mon Jun 29 09:59:57 2015) [sssd[be[ipa.mydomain.local]]] [be_pam_handler_callback] (0x0100): Sent result [4][mydomain.local]
(Mon Jun 29 09:59:58 2015) [sssd[be[ipa.mydomain.local]]] [be_ptask_execute] (0x0400): Task [Cleanup of ipa.mydomain.local]: executing task, timeout 3600 seconds
(Mon Jun 29 09:59:58 2015) [sssd[be[ipa.mydomain.local]]] [be_ptask_done] (0x0400): Task [Cleanup of ipa.mydomain.local]: finished successfully
(Mon Jun 29 09:59:58 2015) [sssd[be[ipa.mydomain.local]]] [be_ptask_schedule] (0x0400): Task [Cleanup of ipa.mydomain.local]: scheduling task 3600 seconds from last execution time [1435568398]
(Mon Jun 29 09:59:58 2015) [sssd[be[ipa.mydomain.local]]] [be_ptask_execute] (0x0400): Task [Cleanup of mydomain.local]: executing task, timeout 10800 seconds
(Mon Jun 29 09:59:58 2015) [sssd[be[ipa.mydomain.local]]] [cleanup_groups] (0x0200): Found 2 expired group entries!
(Mon Jun 29 09:59:58 2015) [sssd[be[ipa.mydomain.local]]] [be_ptask_done] (0x0400): Task [Cleanup of mydomain.local]: finished successfully
(Mon Jun 29 09:59:58 2015) [sssd[be[ipa.mydomain.local]]] [be_ptask_schedule] (0x0400): Task [Cleanup of mydomain.local]: scheduling task 10800 seconds from last execution time [1435575598]
(Mon Jun 29 09:59:58 2015) [sssd[be[ipa.mydomain.local]]] [sdap_sudo_full_refresh_send] (0x0400): Issuing a full refresh of sudo rules
(Mon Jun 29 09:59:58 2015) [sssd[be[ipa.mydomain.local]]] [sdap_sudo_refresh_connect_done] (0x0400): SUDO LDAP connection successful
(Mon Jun 29 09:59:58 2015) [sssd[be[ipa.mydomain.local]]] [sdap_sudo_load_sudoers_next_base] (0x0400): Searching for sudo rules with base [ou=SUDOers,dc=ipa,dc=mydomain,dc=local]
(Mon Jun 29 09:59:58 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(&(objectClass=sudoRole)(|(!(sudoHost=*))(sudoHost=ALL)(sudoHost=idc01.ipa.mydomain.local)(sudoHost=idc01)(sudoHost=172.21.251.9)(sudoHost=172.21.251.0/24)(sudoHost=+*)(|(sudoHost=*\\*)(sudoHost=*?*)(sudoHost=*\2A*)(sudoHost=*[*]*))))][ou=SUDOers,dc=ipa,dc=mydomain,dc=local].
(Mon Jun 29 09:59:58 2015) [sssd[be[ipa.mydomain.local]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set
(Mon Jun 29 09:59:58 2015) [sssd[be[ipa.mydomain.local]]] [sdap_sudo_load_sudoers_process] (0x0400): Receiving sudo rules with base [ou=SUDOers,dc=ipa,dc=mydomain,dc=local]
(Mon Jun 29 09:59:58 2015) [sssd[be[ipa.mydomain.local]]] [sdap_sudo_refresh_load_done] (0x0400): Received 0 rules
(Mon Jun 29 09:59:58 2015) [sssd[be[ipa.mydomain.local]]] [sysdb_sudo_purge_byfilter] (0x0400): No rules matched
(Mon Jun 29 09:59:58 2015) [sssd[be[ipa.mydomain.local]]] [sdap_sudo_refresh_load_done] (0x0400): Sudoers is successfuly stored in cache
(Mon Jun 29 09:59:58 2015) [sssd[be[ipa.mydomain.local]]] [sdap_sudo_full_refresh_done] (0x0400): Successful full refresh of sudo rules
(Mon Jun 29 09:59:58 2015) [sssd[be[ipa.mydomain.local]]] [sdap_sudo_schedule_refresh] (0x0400): Full refresh scheduled at: 1435586398
(Mon Jun 29 09:59:58 2015) [sssd[be[ipa.mydomain.local]]] [sdap_sudo_schedule_refresh] (0x0400): Smart refresh scheduled at: 1435565698