Hi,
I'm looking at a logfile from one sssd installation and I'm wondering if
it's a GPO bug. The relevant part of the logs is:
[sssd[be[example.com]]] [sdap_parse_entry] (0x1000): OriginalDN:
[cn={BCB10A5A-630C-477E-8E2D-996F06E36DBD},cn=policies,cn=system,DC=example,DC=com].
[sssd[be[example.com]]] [sdap_parse_entry] (0x1000): Entry has no attributes
[0(Success)]!?
[sssd[be[example.com]]] [sdap_get_generic_op_finished] (0x0400): Search result:
Success(0), no errmsg set
[sssd[be[example.com]]] [ad_gpo_sd_process_attrs] (0x0040):
sysdb_attrs_get_string failed: [2](No such file or directory)
[sssd[be[example.com]]] [ad_gpo_process_gpo_done] (0x0040): Unable to get GPO
list: [2](No such file or directory)
[sssd[be[example.com]]] [ad_gpo_access_done] (0x0040): GPO-based access control
failed.
[sssd[be[example.com]]] [ad_gpo_access_done] (0x0040): Ignoring error: [2](No
such file or directory); GPO-based access control failed, but GPO is not in
enforcing mode.
[sssd[be[example.com]]] [be_pam_handler_callback] (0x0100): Backend returned:
(0, 0, <NULL>) [Success (Success)]
[sssd[be[example.com]]] [be_pam_handler_callback] (0x0400): SELinux provider
doesn't exist, not sending the request to it.
[sssd[be[example.com]]] [be_pam_handler_callback] (0x0100): Sending result
[0][example.com]
Did anyone see something like this before? Could it be some permissions issue?
I guess we should try searching the policy with ldapsearch, but I wanted
to check if anyone encountered this before..
_______________________________________________
sssd-devel mailing list
sssd-devel@lists.fedorahosted.org
https://lists.fedorahosted.org/admin/lists/sssd-devel@lists.fedorahosted.org
