[Freeipa-users] ipa_get_*_acct request failed: [22]: Invalid argument on IPA client when looking up AD users

[Jakub Hrozek]

On Tue, Aug 09, 2016 at 03:29:37PM +0200, Troels Hansen wrote:
> ----- On Aug 9, 2016, at 3:16 PM, Jakub Hrozek jhrozek at redhat.com wrote:
> 
> >> 
> >> What does "Cannot handle password prompts" mean? the only thing I can find is
> >> some sssd krb5 commits looking to be related to password change?
> > 
> > I'm not sure this is related, can you paste more context?
> 
> 
> Actually, that was the full sssd krb5 log from a log in try with loglevel 5.
> Raised it to loglevel 6 and restarted and had the user try again, this time he could log in.
> 
> I'll leave it at loglevel 6 and see if it happens again.

I think seeing the full domain log might be helpful there as well.