[Freeipa-users] Authenticating with tree root trusted domain of root DC in which the ipa trust is configured with / logs

[Jakub Hrozek]

On Thu, Jul 28, 2016 at 05:57:37PM +0000, Kimery, Roger wrote:
> Here is requested sssd_nss.log
> 
> 
> (Thu Jul 28 17:37:08 2016) [sssd[nss]] [nss_cmd_getbynam] (0x0400): Running command [277] with input [t443167 at deluxetest1.com].
> (Thu Jul 28 17:37:08 2016) [sssd[nss]] [sss_parse_name_for_domains] (0x0200): name 't443167 at deluxetest1.com' matched expression for domain 'deluxetest1.com', user is t443167
> (Thu Jul 28 17:37:08 2016) [sssd[nss]] [nss_cmd_getbynam] (0x0100): Requesting info for [t443167] from [deluxetest1.com]
> (Thu Jul 28 17:37:08 2016) [sssd[nss]] [nss_cmd_getsidby_search] (0x0400): Requesting info for [t443167 at deluxetest1.com]
> (Thu Jul 28 17:37:08 2016) [sssd[nss]] [get_dp_name_and_id] (0x0400): Not a LOCAL view, continuing with provided values.
> (Thu Jul 28 17:37:08 2016) [sssd[nss]] [sss_dp_issue_request] (0x0400): Issuing request for [0x7fa8a106b0d0:1:t443167 at deluxetest1.com]
> (Thu Jul 28 17:37:08 2016) [sssd[nss]] [sss_dp_get_account_msg] (0x0400): Creating request for [deluxetest1.com][4097][1][name=t443167]
> (Thu Jul 28 17:37:08 2016) [sssd[nss]] [sss_dp_internal_get_send] (0x0400): Entering request [0x7fa8a106b0d0:1:t443167 at deluxetest1.com]
> (Thu Jul 28 17:37:09 2016) [sssd[nss]] [nss_cmd_getby_dp_callback] (0x0040): Unable to get information from Data Provider
> Error: 3, 0, Account info lookup failed
> Will try to return what we have in cache

You need to look into the domain log to see why the lookup failed.