Hi, I'm looking at a logfile from one sssd installation and I'm wondering if it's a GPO bug. The relevant part of the logs is:
[sssd[be[example.com]]] [sdap_parse_entry] (0x1000): OriginalDN: [cn={BCB10A5A-630C-477E-8E2D-996F06E36DBD},cn=policies,cn=system,DC=example,DC=com]. [sssd[be[example.com]]] [sdap_parse_entry] (0x1000): Entry has no attributes [0(Success)]!? [sssd[be[example.com]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set [sssd[be[example.com]]] [ad_gpo_sd_process_attrs] (0x0040): sysdb_attrs_get_string failed: [2](No such file or directory) [sssd[be[example.com]]] [ad_gpo_process_gpo_done] (0x0040): Unable to get GPO list: [2](No such file or directory) [sssd[be[example.com]]] [ad_gpo_access_done] (0x0040): GPO-based access control failed. [sssd[be[example.com]]] [ad_gpo_access_done] (0x0040): Ignoring error: [2](No such file or directory); GPO-based access control failed, but GPO is not in enforcing mode. [sssd[be[example.com]]] [be_pam_handler_callback] (0x0100): Backend returned: (0, 0, <NULL>) [Success (Success)] [sssd[be[example.com]]] [be_pam_handler_callback] (0x0400): SELinux provider doesn't exist, not sending the request to it. [sssd[be[example.com]]] [be_pam_handler_callback] (0x0100): Sending result [0][example.com] Did anyone see something like this before? Could it be some permissions issue? I guess we should try searching the policy with ldapsearch, but I wanted to check if anyone encountered this before.. _______________________________________________ sssd-devel mailing list sssd-devel@lists.fedorahosted.org https://lists.fedorahosted.org/admin/lists/sssd-devel@lists.fedorahosted.org