[Freeipa-users] user AD not login but user freeipa can login

[Jakub Hrozek]

On Sat, Sep 05, 2015 at 11:52:10AM +0430, alireza baghery wrote:
> error in file /var/log/sssd/sssd_l.test.com
> +++++++
> 
>     [ipa_s2n_exop_done] (0x0040): ldap_extended_operation result:
> Operations error(1), Failed to handle the request.
>     [ipa_s2n_get_user_done] (0x0040): s2n exop request failed.
> 
> +++++++
> Also in Server IPA insert in file /etc/sssd/sssd.conf
> debug_level = 6
> and Error /var/log/sssd/sssd_l.test.com
> ++++++
> 
>     [ipa_s2n_exop_done] (0x0040): ldap_extended_operation result:
> Operations error(1), Failed to handle the request.
>     [ipa_s2n_get_user_done] (0x0040): s2n exop request failed.

Please read:
    https://fedorahosted.org/sssd/wiki/Troubleshooting
"Common IPA provider issues" and debug according to that guide. There is
also
https://jhrozek.wordpress.com/2015/08/19/performance-tuning-sssd-for-large-ipa-ad-trust-deployments/
that despite the title also describes the data flow.