Hello,
We've got a RHEL 6.9 system in testing for AD integration. We have to
use 6.x due to compatibility issues with software that will eventually
be deployed to the system so moving to RHEL 7.3 isn't an option.
Currently we're working on getting SSSD integrated with AD on this box.
So far everything except GPO restrictions are working. Users can login
via their AD credentials, their groups are enumerated, home directories
are made automatically, etc. The only piece left is GPO based access
restrictions. We'd really like to use AD GPOs to set who can and can't
login via SSH. To this end we've made a new OU for the Linux server,
placed it's AD object in the OU, and attached a GPO to the OU with a
test user account in the "Deny log on through Remote Desktop Services"
policy setting. So far this hasn't been working and the test account
can always login through SSH.
The SSSD system can see the GPOs attached to the OU all the way up to
the domain root, but does not think any of the GPOs apply to it. We've
got "ad_gpo_access_control = enforcing" set in sssd.conf but it doesn't
seem to be doing anything. According to the logs SSSD is parsing all
the GPO LDAP attributes then deciding none of the GPOs apply, without
parsing the GPO INI files themselves. I have confirmed manually that
the server's Kerberos credentials will return results via LDAP queries
and can mount the domain SYSVOL share as well as read the GPO files in
the share. So I'm not sure why SSSD won't apply the GPO settings. I've
attached a sanitized sssd.conf file and selected parts of the
sssd_ad.domain.com.log file to this post. Here's the relevant version
info:
RHEL 6.9 - Linux ad-lnx-test.ad.domain.com 2.6.32-696.1.1.el6.x86_64 #1
SMP Tue Mar 21 12:19:18 EDT 2017 x86_64 x86_64 x86_64 GNU/Linux
yum info sssd:
Name : sssd
Arch : x86_64
Version : 1.13.3
Release : 56.el6
Size : 34 k
Repo : installed
From repo : rhel-6-server-rpms
Any thoughts on why this isn't working are much appreciated.
--
-Donald
[sssd]
debug_level = 0xFFFF
config_file_version = 2
domains = ad.domain.com
services = nss, pam
[nss]
debug_level = 0xFFFF
fallback_homedir = /home/%d/%u
default_shell = /bin/bash
filter_users = root
filter_groups = root
[pam]
debug_level = 0xFFFF
[domain/ad.domain.com]
debug_level = 0xFFFF
id_provider = ad
access_provider = ad
auth_provider = ad
chpass_provider = ad
cache_credentials = true
krb5_realm = AD.DOMAIN.COM
#GPO access controls
ad_gpo_access_control = enforcing
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [load_backend_module] (0x1000): Loading backend [ad] with path [/usr/lib64/sssd/libsss_ad.so].
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ad_domain has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ad_enabled_domains has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ad_server has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ad_backup_server has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ad_hostname has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option krb5_keytab has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option krb5_realm has value ad.domain.com
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ad_enable_dns_sites is TRUE
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ad_access_filter has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ad_enable_gc is TRUE
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ad_gpo_access_control has value enforcing
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ad_gpo_cache_timeout has value 5
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ad_gpo_map_interactive has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ad_gpo_map_remote_interactive has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ad_gpo_map_network has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ad_gpo_map_batch has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ad_gpo_map_service has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ad_gpo_map_permit has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ad_gpo_map_deny has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ad_gpo_default_right has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ad_site has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option krb5_confd_path has value /var/lib/sss/pubconf/krb5.include.d
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ad_maximum_machine_account_password_age has value 30
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ad_machine_account_password_renewal_opts has value 86400:750
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [ad_get_common_options] (0x0100): No AD server set, will use service discovery!
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [ad_get_common_options] (0x0100): Setting ad_hostname to [ad-lnx-test.ad.domain.com].
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [ldb] (0x4000): start ldb transaction (nesting: 0)
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [ldb] (0x4000): commit ldb transaction (nesting: 0)
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [ad_get_common_options] (0x0100): Setting domain option case_sensitive to [false]
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [fo_new_service] (0x0400): Creating new service 'AD'
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [fo_new_service] (0x0400): Creating new service 'AD_GC'
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [ad_failover_init] (0x0100): No primary servers defined, using service discovery
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [fo_add_srv_server] (0x0400): Adding new SRV server to service 'AD_GC' using 'tcp'.
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [fo_add_srv_server] (0x0400): Adding new SRV server to service 'AD' using 'tcp'.
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [_ad_servers_init] (0x0100): Added service discovery for AD
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option dyndns_update is TRUE
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option dyndns_refresh_interval has value 86400
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option dyndns_iface has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option dyndns_ttl has value 3600
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option dyndns_update_ptr is TRUE
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option dyndns_force_tcp is FALSE
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option dyndns_auth has value gss-tsig
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option dyndns_server has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [ad_dyndns_init] (0x0100): Dynamic DNS updates are on. Checking for nsupdate..
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [be_nsupdate_timer_schedule] (0x0200): Scheduling timer in 86400 seconds
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ldap_uri has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ldap_backup_uri has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ldap_search_base has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ldap_default_bind_dn has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ldap_default_authtok_type has value password
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ldap_default_authtok has no binary value.
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ldap_search_timeout has value 6
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ldap_network_timeout has value 6
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ldap_opt_timeout has value 6
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ldap_tls_reqcert has value hard
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ldap_user_search_base has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ldap_user_search_scope has value sub
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ldap_user_search_filter has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ldap_user_extra_attrs has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ldap_group_search_base has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ldap_group_search_scope has value sub
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ldap_group_search_filter has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ldap_service_search_base has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ldap_sudo_search_base has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ldap_sudo_full_refresh_interval has value 21600
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ldap_sudo_smart_refresh_interval has value 900
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ldap_sudo_use_host_filter is TRUE
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ldap_sudo_hostnames has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ldap_sudo_ip has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ldap_sudo_include_netgroups is TRUE
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ldap_sudo_include_regexp is TRUE
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ldap_autofs_search_base has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ldap_autofs_map_master_name has value auto.master
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ldap_schema has value ad
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ldap_offline_timeout has value 60
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ldap_force_upper_case_realm is TRUE
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ldap_enumeration_refresh_timeout has value 300
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ldap_purge_cache_timeout has value 0
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ldap_tls_cacert has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ldap_tls_cacertdir has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ldap_tls_cert has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ldap_tls_key has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ldap_tls_cipher_suite has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ldap_id_use_start_tls is FALSE
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ldap_id_mapping is TRUE
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ldap_sasl_mech has value gssapi
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ldap_sasl_authid has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ldap_sasl_realm has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ldap_sasl_minssf has value -1
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ldap_krb5_keytab has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ldap_krb5_init_creds is TRUE
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option krb5_server has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option krb5_backup_server has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option krb5_realm has value ad.domain.com
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option krb5_canonicalize is FALSE
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option krb5_use_kdcinfo is TRUE
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ldap_pwd_policy has value none
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ldap_referrals is FALSE
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option account_cache_expiration has value 0
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ldap_dns_service_name has value ldap
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ldap_krb5_ticket_lifetime has value 86400
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ldap_access_filter has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ldap_netgroup_search_base has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ldap_group_nesting_level has value 2
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ldap_deref has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ldap_account_expire_policy has value ad
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ldap_access_order has value filter
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ldap_chpass_uri has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ldap_chpass_backup_uri has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ldap_chpass_dns_service_name has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ldap_chpass_update_last_change is FALSE
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ldap_enumeration_search_timeout has value 60
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ldap_auth_disable_tls_never_use_in_production is FALSE
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ldap_page_size has value 1000
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ldap_deref_threshold has value 10
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ldap_sasl_canonicalize is FALSE
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ldap_connection_expire_timeout has value 900
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ldap_disable_paging is FALSE
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ldap_idmap_range_min has value 200000
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ldap_idmap_range_max has value 2000200000
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ldap_idmap_range_size has value 200000
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ldap_idmap_autorid_compat is FALSE
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ldap_idmap_default_domain has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ldap_idmap_default_domain_sid has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ldap_idmap_helper_table_size has value 10
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ldap_groups_use_matching_rule_in_chain is FALSE
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ldap_initgroups_use_matching_rule_in_chain is FALSE
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ldap_use_tokengroups is TRUE
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ldap_rfc2307_fallback_to_local_users is FALSE
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ldap_disable_range_retrieval is FALSE
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ldap_min_id has value 0
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ldap_max_id has value 0
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option ldap_pwdlockout_dn has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option wildcard_limit has value 1000
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [sdap_get_map] (0x0400): Option ldap_entry_usn has value uSNChanged
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [sdap_get_map] (0x0400): Option ldap_rootdse_last_usn has value highestCommittedUSN
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [sdap_get_map] (0x0400): Option ldap_user_object_class has value user
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [sdap_get_map] (0x0400): Option ldap_user_name has value sAMAccountName
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [sdap_get_map] (0x0400): Option ldap_user_pwd has value unixUserPassword
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [sdap_get_map] (0x0400): Option ldap_user_uid_number has value uidNumber
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [sdap_get_map] (0x0400): Option ldap_user_gid_number has value gidNumber
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [sdap_get_map] (0x0400): Option ldap_user_gecos has value gecos
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [sdap_get_map] (0x0400): Option ldap_user_home_directory has value unixHomeDirectory
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [sdap_get_map] (0x0400): Option ldap_user_shell has value loginShell
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [sdap_get_map] (0x0400): Option ldap_user_principal has value userPrincipalName
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [sdap_get_map] (0x0400): Option ldap_user_fullname has value name
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [sdap_get_map] (0x0400): Option ldap_user_member_of has value memberOf
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [sdap_get_map] (0x0400): Option ldap_user_uuid has value objectGUID
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [sdap_get_map] (0x0400): Option ldap_user_objectsid has value objectSID
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [sdap_get_map] (0x0400): Option ldap_user_primary_group has value primaryGroupID
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [sdap_get_map] (0x0400): Option ldap_user_modify_timestamp has value whenChanged
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [sdap_get_map] (0x0400): Option ldap_user_entry_usn has value uSNChanged
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [sdap_get_map] (0x0400): Option ldap_user_shadow_last_change has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [sdap_get_map] (0x0400): Option ldap_user_shadow_min has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [sdap_get_map] (0x0400): Option ldap_user_shadow_max has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [sdap_get_map] (0x0400): Option ldap_user_shadow_warning has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [sdap_get_map] (0x0400): Option ldap_user_shadow_inactive has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [sdap_get_map] (0x0400): Option ldap_user_shadow_expire has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [sdap_get_map] (0x0400): Option ldap_user_shadow_flag has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [sdap_get_map] (0x0400): Option ldap_user_krb_last_pwd_change has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [sdap_get_map] (0x0400): Option ldap_user_krb_password_expiration has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [sdap_get_map] (0x0400): Option ldap_pwd_attribute has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [sdap_get_map] (0x0400): Option ldap_user_authorized_service has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [sdap_get_map] (0x0400): Option ldap_user_ad_account_expires has value accountExpires
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [sdap_get_map] (0x0400): Option ldap_user_ad_user_account_control has value userAccountControl
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [sdap_get_map] (0x0400): Option ldap_ns_account_lock has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [sdap_get_map] (0x0400): Option ldap_user_authorized_host has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [sdap_get_map] (0x0400): Option ldap_user_nds_login_disabled has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [sdap_get_map] (0x0400): Option ldap_user_nds_login_expiration_time has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [sdap_get_map] (0x0400): Option ldap_user_nds_login_allowed_time_map has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [sdap_get_map] (0x0400): Option ldap_user_ssh_public_key has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [sdap_get_map] (0x0400): Option ldap_user_auth_type has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [sdap_get_map] (0x0400): Option ldap_user_certificate has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [sdap_get_map] (0x0400): Option ldap_group_object_class has value group
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [sdap_get_map] (0x0400): Option ldap_group_object_class_alt has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [sdap_get_map] (0x0400): Option ldap_group_name has value sAMAccountName
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [sdap_get_map] (0x0400): Option ldap_group_pwd has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [sdap_get_map] (0x0400): Option ldap_group_gid_number has value gidNumber
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [sdap_get_map] (0x0400): Option ldap_group_member has value member
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [sdap_get_map] (0x0400): Option ldap_group_uuid has value objectGUID
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [sdap_get_map] (0x0400): Option ldap_group_objectsid has value objectSID
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [sdap_get_map] (0x0400): Option ldap_group_modify_timestamp has value whenChanged
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [sdap_get_map] (0x0400): Option ldap_group_entry_usn has value uSNChanged
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [sdap_get_map] (0x0400): Option ldap_group_type has value groupType
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [sdap_get_map] (0x0400): Option ldap_netgroup_object_class has value nisNetgroup
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [sdap_get_map] (0x0400): Option ldap_netgroup_name has value cn
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [sdap_get_map] (0x0400): Option ldap_netgroup_member has value memberNisNetgroup
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [sdap_get_map] (0x0400): Option ldap_netgroup_triple has value nisNetgroupTriple
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [sdap_get_map] (0x0400): Option ldap_netgroup_modify_timestamp has value modifyTimestamp
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [sdap_get_map] (0x0400): Option ldap_service_object_class has value ipService
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [sdap_get_map] (0x0400): Option ldap_service_name has value cn
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [sdap_get_map] (0x0400): Option ldap_service_port has value ipServicePort
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [sdap_get_map] (0x0400): Option ldap_service_proto has value ipServiceProtocol
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [sdap_get_map] (0x0400): Option ldap_service_entry_usn has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [ad_set_sdap_options] (0x0100): Option krb5_realm set to ad.domain.com
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [sdap_set_sasl_options] (0x0100): Will look for ad-lnx-test.ad.domain....@ad.domain.com in default keytab
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [select_principal_from_keytab] (0x0200): trying to select the most appropriate principal from keytab
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [find_principal_in_keytab] (0x4000): Trying to find principal ad-lnx-test.ad.domain....@ad.domain.com in keytab.
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [find_principal_in_keytab] (0x0400): No principal matching ad-lnx-test.ad.domain....@ad.domain.com found in keytab.
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [find_principal_in_keytab] (0x4000): Trying to find principal ad-lnx-test$@ad.domain.com in keytab.
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [match_principal] (0x1000): Principal matched to the sample (ad-lnx-test$@ad.domain.com).
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [select_principal_from_keytab] (0x0200): Selected primary: ad-lnx-test$
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [select_principal_from_keytab] (0x0200): Selected realm: ad.domain.com
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [sdap_set_sasl_options] (0x0100): Option ldap_sasl_authid set to ad-lnx-test$
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [sdap_set_sasl_options] (0x0100): Option ldap_sasl_realm set to ad.domain.com
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [ad_set_search_bases] (0x0100): Search base not set. SSSD will attempt to discover it later, when connecting to the LDAP server.
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [sdap_id_setup_tasks] (0x0400): Setting up cleanup task for ad.domain.com
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [sysdb_idmap_get_mappings] (0x4000): cn=id_mappings,cn=ad.domain.com,cn=sysdb
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [ldb] (0x4000): Added timed event "ltdb_callback": 0x8e8cf0
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [ldb] (0x4000): Added timed event "ltdb_timeout": 0x8ece60
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [ldb] (0x4000): Running timer event 0x8e8cf0 "ltdb_callback"
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [ldb] (0x4000): Destroying timer event 0x8ece60 "ltdb_timeout"
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [ldb] (0x4000): Ending timer event 0x8e8cf0 "ltdb_callback"
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [sysdb_idmap_get_mappings] (0x0080): Could not locate ID mappings: [No such file or directory]
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [be_fo_set_srv_lookup_plugin] (0x0400): Trying to set SRV lookup plugin to AD
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [be_fo_set_srv_lookup_plugin] (0x0400): SRV lookup plugin is now AD
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [be_ptask_create] (0x0400): Periodic task [AD machine account password renewal] was created
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [be_ptask_schedule] (0x0400): Task [AD machine account password renewal]: scheduling task 750 seconds from now [1493910902]
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [be_process_init] (0x2000): ID backend target successfully loaded from provider [ad].
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [load_backend_module] (0x1000): Backend [ad] already loaded.
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option krb5_server has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option krb5_backup_server has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option krb5_realm has value ad.domain.com
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option krb5_ccachedir has value /tmp
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option krb5_ccname_template has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option krb5_auth_timeout has value 6
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option krb5_keytab has value /etc/krb5.keytab
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option krb5_validate is TRUE
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option krb5_kpasswd has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option krb5_backup_kpasswd has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option krb5_store_password_if_offline is FALSE
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option krb5_renewable_lifetime has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option krb5_lifetime has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option krb5_renew_interval has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option krb5_use_fast has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option krb5_fast_principal has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option krb5_canonicalize is FALSE
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option krb5_use_enterprise_principal is TRUE
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option krb5_use_kdcinfo is TRUE
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_get_options] (0x0400): Option krb5_map_user has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [ad_get_auth_options] (0x0100): Option krb5_server set to (null)
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [ad_get_auth_options] (0x0100): Option krb5_realm set to ad.domain.com
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [ad_get_auth_options] (0x0100): Option krb5_use_kdcinfo set to true
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [check_and_export_lifetime] (0x0200): No lifetime configured.
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [check_and_export_lifetime] (0x0200): No lifetime configured.
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [check_and_export_options] (0x0100): No KDC explicitly configured, using defaults.
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [check_and_export_options] (0x0100): No kpasswd server explicitly configured, using the KDC or defaults.
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [check_and_export_options] (0x0100): ccache is of type FILE
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [parse_krb5_map_user] (0x0200): Warning: krb5_map_user is empty!
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [be_process_init] (0x2000): AUTH backend target successfully loaded from provider [ad].
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [load_backend_module] (0x1000): Backend [ad] already loaded.
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_copy_options_ex] (0x0400): Option ad_domain has value ad.domain.com
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_copy_options_ex] (0x0400): Option ad_enabled_domains has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_copy_options_ex] (0x0400): Option ad_server has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_copy_options_ex] (0x0400): Option ad_backup_server has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_copy_options_ex] (0x0400): Option ad_hostname has value ad-lnx-test.ad.domain.com
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_copy_options_ex] (0x0400): Option krb5_keytab has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_copy_options_ex] (0x0400): Option krb5_realm has value ad.domain.com
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_copy_options_ex] (0x0400): Option ad_enable_dns_sites is TRUE
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_copy_options_ex] (0x0400): Option ad_access_filter has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_copy_options_ex] (0x0400): Option ad_enable_gc is TRUE
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_copy_options_ex] (0x0400): Option ad_gpo_access_control has value enforcing
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_copy_options_ex] (0x0400): Option ad_gpo_cache_timeout has value 5
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_copy_options_ex] (0x0400): Option ad_gpo_map_interactive has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_copy_options_ex] (0x0400): Option ad_gpo_map_remote_interactive has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_copy_options_ex] (0x0400): Option ad_gpo_map_network has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_copy_options_ex] (0x0400): Option ad_gpo_map_batch has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_copy_options_ex] (0x0400): Option ad_gpo_map_service has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_copy_options_ex] (0x0400): Option ad_gpo_map_permit has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_copy_options_ex] (0x0400): Option ad_gpo_map_deny has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_copy_options_ex] (0x0400): Option ad_gpo_default_right has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_copy_options_ex] (0x0400): Option ad_site has no value
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_copy_options_ex] (0x0400): Option krb5_confd_path has value /var/lib/sss/pubconf/krb5.include.d
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_copy_options_ex] (0x0400): Option ad_maximum_machine_account_password_age has value 30
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [dp_copy_options_ex] (0x0400): Option ad_machine_account_password_renewal_opts has value 86400:750
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [ad_gpo_parse_map_option] (0x4000): gpo_map_type: Interactive
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [ad_gpo_parse_map_option] (0x4000): Default service (not explicitly removed): login
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [ad_gpo_parse_map_option] (0x4000): Default service (not explicitly removed): su
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [ad_gpo_parse_map_option] (0x4000): Default service (not explicitly removed): su-l
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [ad_gpo_parse_map_option] (0x4000): Default service (not explicitly removed): gdm-fingerprint
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [ad_gpo_parse_map_option] (0x4000): Default service (not explicitly removed): gdm-password
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [ad_gpo_parse_map_option] (0x4000): Default service (not explicitly removed): gdm-smartcard
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [ad_gpo_parse_map_option] (0x4000): Default service (not explicitly removed): kdm
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [ad_gpo_parse_map_option] (0x4000): gpo_map_type: Remote Interactive
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [ad_gpo_parse_map_option] (0x4000): Default service (not explicitly removed): sshd
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [ad_gpo_parse_map_option] (0x4000): gpo_map_type: Network
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [ad_gpo_parse_map_option] (0x4000): Default service (not explicitly removed): ftp
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [ad_gpo_parse_map_option] (0x4000): Default service (not explicitly removed): samba
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [ad_gpo_parse_map_option] (0x4000): gpo_map_type: Batch
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [ad_gpo_parse_map_option] (0x4000): Default service (not explicitly removed): crond
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [ad_gpo_parse_map_option] (0x4000): gpo_map_type: Service
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [ad_gpo_parse_map_option] (0x4000): gpo_map_type: Permitted
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [ad_gpo_parse_map_option] (0x4000): Default service (not explicitly removed): sudo
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [ad_gpo_parse_map_option] (0x4000): Default service (not explicitly removed): sudo-i
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [ad_gpo_parse_map_option] (0x4000): Default service (not explicitly removed): systemd-user
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [ad_gpo_parse_map_option] (0x4000): gpo_map_type: Denied
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [ad_gpo_parse_map_options] (0x4000): gpo_default_right_config: (null)
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [ad_gpo_parse_map_options] (0x4000): gpo_default_right: 6
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [be_process_init] (0x2000): ACCESS backend target successfully loaded from provider [ad].
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [load_backend_module] (0x1000): Backend [ad] already loaded.
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [be_process_init] (0x2000): CHPASS backend target successfully loaded from provider [ad].
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [be_process_init_sudo] (0x0400): SUDO is not listed in services, disabling SUDO module.
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [be_process_init] (0x0080): No SUDO module provided for [ad.domain.com] !!
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [load_backend_module] (0x0200): no module name found in confdb, using [ad].
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [load_backend_module] (0x1000): Backend [ad] already loaded.
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [sssm_ad_autofs_init] (0x2000): Initializing AD autofs handler
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [ad_autofs_init] (0x2000): Initializing autofs AD back end
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [sdap_autofs_init] (0x2000): Initializing autofs LDAP back end
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [ldap_get_autofs_options] (0x0400): Search base not set, trying to discover it later connecting to the LDAP server.
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [sdap_get_map] (0x0400): Option ldap_autofs_map_object_class has value automountMap
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [sdap_get_map] (0x0400): Option ldap_autofs_map_name has value automountMapName
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [sdap_get_map] (0x0400): Option ldap_autofs_entry_object_class has value automount
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [sdap_get_map] (0x0400): Option ldap_autofs_entry_key has value automountKey
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [sdap_get_map] (0x0400): Option ldap_autofs_entry_value has value automountInformation
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [sdap_get_map] (0x0400): Option ldap_autofs_map_object_class has value nisMap
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [sdap_get_map] (0x0400): Option ldap_autofs_map_name has value nisMapName
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [sdap_get_map] (0x0400): Option ldap_autofs_entry_object_class has value nisObject
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [sdap_get_map] (0x0400): Option ldap_autofs_entry_key has value cn
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [sdap_get_map] (0x0400): Option ldap_autofs_entry_value has value nisMapEntry
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [be_process_init] (0x2000): autofs backend target successfully loaded from provider [ad].
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [load_backend_module] (0x0200): no module name found in confdb, using [ad].
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [load_backend_module] (0x1000): Backend [ad] already loaded.
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [be_process_init] (0x0020): No selinux module provided for [ad.domain.com] !!
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [load_backend_module] (0x0200): no module name found in confdb, using [ad].
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [load_backend_module] (0x1000): Backend [ad] already loaded.
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [be_process_init] (0x0020): No host info module provided for [ad.domain.com] !!
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [load_backend_module] (0x0200): no module name found in confdb, using [ad].
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [load_backend_module] (0x1000): Backend [ad] already loaded.
(Thu May 4 10:02:32 2017) [sssd[be[ad.domain.com]]] [sss_write_krb5_localauth_snippet] (0x0200): File for localauth plugin configuration is [/var/lib/sss/pubconf/krb5.include.d/localauth_plugin]
...
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[0]->gpo_dn: cn={2D551881-E71B-40CF-8656-846671FAFAB0},cn=policies,cn=system,dc=ad,dc=domain,dc=com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[1]->gpo_dn: cn={ED8D7731-FE39-4511-9C7D-C100B49FA810},cn=policies,cn=system,dc=ad,dc=domain,dc=com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[2]->gpo_dn: cn={CBDD60BD-7BD4-4DB7-AE58-DCB05DB0C369},cn=policies,cn=system,dc=ad,dc=domain,dc=com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[3]->gpo_dn: cn={C8A5310D-7254-45E1-BA09-941785332A94},cn=policies,cn=system,dc=ad,dc=domain,dc=com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[4]->gpo_dn: cn={D565A8C3-3AB6-4614-8F90-D597D0873FC4},cn=policies,cn=system,dc=ad,dc=domain,dc=com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[5]->gpo_dn: cn={4BA3F124-F877-4FA0-B93C-C8C778315483},cn=policies,cn=system,dc=ad,dc=domain,dc=com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[6]->gpo_dn: cn={EF97AA7E-8C8E-44AD-B7E6-6377CF6F9489},cn=policies,cn=system,dc=ad,dc=domain,dc=com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[7]->gpo_dn: cn={16CBA102-7C28-4C22-A8B8-F5228827D654},cn=policies,cn=system,dc=ad,dc=domain,dc=com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[8]->gpo_dn: cn={F85551EC-A555-4F72-A4E7-BE3581FD2356},cn=policies,cn=system,dc=ad,dc=domain,dc=com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[9]->gpo_dn: cn={92923B04-3467-4897-8D33-5B50ED04CA5D},cn=policies,cn=system,dc=ad,dc=domain,dc=com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[10]->gpo_dn: cn={5B070F5E-062D-49C6-B4FF-B6473CA5E99A},cn=policies,cn=system,dc=ad,dc=domain,dc=com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[11]->gpo_dn: cn={A06ADFD5-6EB0-46E1-B722-0CC89C37641D},cn=policies,cn=system,dc=ad,dc=domain,dc=com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[12]->gpo_dn: cn={CD5F1FF1-F5B9-4BB6-8BA9-DB17AF661D71},cn=policies,cn=system,dc=ad,dc=domain,dc=com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[13]->gpo_dn: cn={D68EAC1A-963E-46EF-B742-ECBDE8369654},cn=policies,cn=system,dc=ad,dc=domain,dc=com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[14]->gpo_dn: cn={CF1CF9E5-0785-4CED-9AF3-23870969836B},cn=policies,cn=system,dc=ad,dc=domain,dc=com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[15]->gpo_dn: cn={AB5C917C-772C-4EE2-AB61-9AFE3B994A92},cn=policies,cn=system,dc=ad,dc=domain,dc=com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[16]->gpo_dn: cn={7DCCE3D9-E9A1-43CD-A20E-6F76B8B144F6},cn=policies,cn=system,dc=ad,dc=domain,dc=com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[17]->gpo_dn: cn={84E566CB-3B8A-458E-B805-A47FAD94D16E},cn=policies,cn=system,dc=ad,dc=domain,dc=com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[18]->gpo_dn: cn={5C5B1D0C-4DF8-4FA2-8C77-9FAE435356DE},cn=policies,cn=system,dc=ad,dc=domain,dc=com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[19]->gpo_dn: cn={5BFBF1CB-E51B-4C5B-AD83-2AECD5C39DF6},cn=policies,cn=system,dc=ad,dc=domain,dc=com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[20]->gpo_dn: cn={1A142B05-F482-429E-B2B9-8DDA00804FC4},cn=policies,cn=system,dc=ad,dc=domain,dc=com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[21]->gpo_dn: cn={0C3223EF-DA83-4398-BB7E-CED17CE1A483},cn=policies,cn=system,dc=ad,dc=domain,dc=com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[22]->gpo_dn: cn={49AFEABE-117A-4597-A6B5-2738571640F8},cn=policies,cn=system,dc=ad,dc=domain,dc=com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[23]->gpo_dn: cn={EE050F89-4219-43AB-ADBF-FBC9EB20B118},cn=policies,cn=system,dc=ad,dc=domain,dc=com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[24]->gpo_dn: cn={D7BB0398-3EDB-4D3C-B084-994CA3D88C42},cn=policies,cn=system,dc=ad,dc=domain,dc=com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[25]->gpo_dn: cn={2698163F-2A82-4A59-9EBE-34B9726A8645},cn=policies,cn=system,dc=ad,dc=domain,dc=com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[26]->gpo_dn: cn={1238467C-20CD-4E92-B70D-07FAE7FC3A40},cn=policies,cn=system,dc=ad,dc=domain,dc=com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[27]->gpo_dn: cn={C35F0B52-7C59-4973-8D6B-2ACB68B070AD},cn=policies,cn=system,dc=ad,dc=domain,dc=com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[28]->gpo_dn: cn={6DE13FF3-4580-4305-94F2-AFD7DB84CF4E},cn=policies,cn=system,dc=ad,dc=domain,dc=com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[29]->gpo_dn: cn={C64AD25A-5D68-491C-BFA0-C4E6A489A00C},cn=policies,cn=system,dc=ad,dc=domain,dc=com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[30]->gpo_dn: cn={3FA8402F-C3BE-4EA2-B387-5D706C147E07},cn=policies,cn=system,dc=ad,dc=domain,dc=com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[31]->gpo_dn: cn={31B2F340-016D-11D2-945F-00C04FB984F9},cn=policies,cn=system,dc=ad,dc=domain,dc=com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[32]->gpo_dn: cn={A159654C-BD39-4C5F-B470-8FD83AB98D03},cn=policies,cn=system,dc=ad,dc=domain,dc=com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[33]->gpo_dn: cn={B946BA43-8B64-40D9-98F3-2D283F16AD3B},cn=policies,cn=system,dc=ad,dc=domain,dc=com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[34]->gpo_dn: cn={286162ED-9463-4107-BA19-E717830028E4},cn=policies,cn=system,dc=ad,dc=domain,dc=com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[35]->gpo_dn: cn={F74553C5-C2E4-42A2-B98A-9D4F8ED21E29},cn=policies,cn=system,dc=ad,dc=domain,dc=com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[36]->gpo_dn: cn={FD479007-7962-45A8-941C-0460AB600E0C},cn=policies,cn=system,dc=ad,dc=domain,dc=com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[37]->gpo_dn: cn={B165310F-B548-4F12-B022-C0A1CADA1437},cn=policies,cn=system,dc=ad,dc=domain,dc=com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[38]->gpo_dn: cn={76A76118-218A-4EED-A45C-F22D510EB8C5},cn=policies,cn=system,dc=ad,dc=domain,dc=com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[39]->gpo_dn: cn={F438121B-AF88-455B-B915-9326F9F5AA62},cn=policies,cn=system,dc=ad,dc=domain,dc=com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[40]->gpo_dn: cn={FD186EAA-918B-4AEC-B94A-0E2B2384F00F},cn=policies,cn=system,dc=ad,dc=domain,dc=com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[41]->gpo_dn: cn={B65E442B-C3FD-4DAE-A07B-1156E3F16195},cn=policies,cn=system,dc=ad,dc=domain,dc=com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[42]->gpo_dn: cn={765CA5D7-BAD5-4AAA-B59A-B7F3F502EAEB},cn=policies,cn=system,dc=ad,dc=domain,dc=com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[43]->gpo_dn: cn={8660CC59-1642-430A-908E-012B3543FC9C},cn=policies,cn=system,dc=ad,dc=domain,dc=com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[44]->gpo_dn: cn={999B400E-963F-4687-BA4E-5950B86F9A6C},cn=policies,cn=system,dc=ad,dc=domain,dc=com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[45]->gpo_dn: cn={5449EDFB-892F-49AA-9234-04A53AAC0DDF},cn=policies,cn=system,dc=ad,dc=domain,dc=com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[46]->gpo_dn: cn={E7EF2FB1-04AE-4599-BFEB-9D297435C276},cn=policies,cn=system,dc=ad,dc=domain,dc=com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[47]->gpo_dn: cn={5C18A65F-1AFE-469D-B0FA-C16C50F06D51},cn=policies,cn=system,dc=ad,dc=domain,dc=com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[48]->gpo_dn: cn={CBC637AE-7B72-4C6D-9215-F3B58D6E0B33},cn=policies,cn=system,dc=ad,dc=domain,dc=com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[49]->gpo_dn: cn={233F9199-1BDB-467E-9492-76D140A1BE8D},cn=policies,cn=system,dc=ad,dc=domain,dc=com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[50]->gpo_dn: cn={872DFD29-E8BB-457A-8574-EB23CFDEE901},cn=policies,cn=system,dc=ad,dc=domain,dc=com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[51]->gpo_dn: cn={A1472CF5-FFDE-4EA7-8482-66155E81298F},cn=policies,cn=system,dc=ad,dc=domain,dc=com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[52]->gpo_dn: cn={B2A13057-9A78-4EA2-AB53-EA4174DAA2AB},cn=policies,cn=system,dc=ad,dc=domain,dc=com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[53]->gpo_dn: cn={4A7F21CB-0D46-4D65-AF3A-06DC4DBC4486},cn=policies,cn=system,dc=ad,dc=domain,dc=com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[54]->gpo_dn: cn={EC01AA0E-6142-4B7D-BD37-F4DF367A258E},cn=policies,cn=system,dc=ad,dc=domain,dc=com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[55]->gpo_dn: cn={CEE3CD13-09E3-44CB-B021-F90012AE63E0},cn=policies,cn=system,dc=ad,dc=domain,dc=com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[56]->gpo_dn: cn={5CBC4098-F6D4-4C0D-B0A7-1F781D898F0B},cn=policies,cn=system,dc=ad,dc=domain,dc=com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[57]->gpo_dn: cn={58C98E14-5DEE-4C72-8635-55153CED50D5},cn=policies,cn=system,dc=ad,dc=domain,dc=com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[58]->gpo_dn: cn={3AC15219-5C8C-4895-B723-7B66C392E35C},cn=policies,cn=system,dc=ad,dc=domain,dc=com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[59]->gpo_dn: cn={342A14CA-EA6E-417F-BF1F-F70F65B391D7},cn=policies,cn=system,dc=ad,dc=domain,dc=com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[60]->gpo_dn: cn={A0B6388C-A981-4290-9E95-094EF49AACDC},cn=policies,cn=system,dc=ad,dc=domain,dc=com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[61]->gpo_dn: cn={FC022C86-6F3A-45D6-A90A-DC316DDAE127},cn=policies,cn=system,dc=ad,dc=domain,dc=com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[62]->gpo_dn: cn={FBE4E17A-2BB0-41A9-A4B1-B416D53D4CD2},cn=policies,cn=system,dc=ad,dc=domain,dc=com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[63]->gpo_dn: cn={E7B1E7DE-2BFD-41FB-A9ED-668BCCD4B4AC},cn=policies,cn=system,dc=ad,dc=domain,dc=com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[64]->gpo_dn: cn={CB80884A-2CDC-4987-86F1-FAEAAE7AABEE},cn=policies,cn=system,dc=ad,dc=domain,dc=com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[65]->gpo_dn: cn={77E1DD84-B403-45CF-BB0F-28AA2A9DC50A},cn=policies,cn=system,dc=ad,dc=domain,dc=com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[66]->gpo_dn: cn={465EB03D-50C9-4527-A5EE-95F938099D22},cn=policies,cn=system,dc=ad,dc=domain,dc=com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[67]->gpo_dn: cn={40310844-E962-4A11-9F28-58E8350CBDE7},cn=policies,cn=system,dc=ad,dc=domain,dc=com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[68]->gpo_dn: cn={08125794-066F-449C-8163-C0ED39D1C190},cn=policies,cn=system,dc=ad,dc=domain,dc=com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[69]->gpo_dn: cn={DA107019-F2F8-4EE2-BACE-6BB3995DD338},cn=policies,cn=system,dc=ad,dc=domain,dc=com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[70]->gpo_dn: cn={CBFA5BF3-48B6-46D4-BDF7-0D93E0F194CD},cn=policies,cn=system,dc=ad,dc=domain,dc=com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[71]->gpo_dn: cn={6F21FD98-3637-44DA-BFBA-24C7DBBEF782},cn=policies,cn=system,dc=ad,dc=domain,dc=com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[72]->gpo_dn: cn={BC06ACB1-9D12-4226-8293-E003E4B41B9D},cn=policies,cn=system,dc=ad,dc=domain,dc=com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[73]->gpo_dn: cn={308BFCC2-1240-4F65-8758-33FD900A37F7},cn=policies,cn=system,dc=ad,dc=domain,dc=com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[74]->gpo_dn: cn={EBA83759-1E04-48C2-AD98-6A9DD6789FB6},cn=policies,cn=system,dc=ad,dc=domain,dc=com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[75]->gpo_dn: cn={D222F3F8-8FB2-47A5-9FE4-0BA381BD84BE},cn=policies,cn=system,dc=ad,dc=domain,dc=com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[76]->gpo_dn: cn={E9C0E4D1-114D-4C11-BB93-CF2370B938D8},cn=policies,cn=system,dc=ad,dc=domain,dc=com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[77]->gpo_dn: cn={E6968EA8-3804-4350-9D98-FE188123916D},cn=policies,cn=system,dc=ad,dc=domain,dc=com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[78]->gpo_dn: cn={09A3C398-6880-44FF-89F2-4D74444FF45A},cn=policies,cn=system,dc=ad,dc=domain,dc=com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[79]->gpo_dn: cn={79DE6CF1-C2E6-4F49-B2D8-F135241A73DA},cn=policies,cn=system,dc=ad,dc=domain,dc=com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[80]->gpo_dn: cn={EEFFE251-C232-4A6B-A4F9-908D88E1E4CE},cn=policies,cn=system,dc=ad,dc=domain,dc=com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[81]->gpo_dn: cn={E6968EA8-3804-4350-9D98-FE188123916D},cn=policies,cn=system,dc=ad,dc=domain,dc=com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[82]->gpo_dn: cn={A33FA762-FA38-4963-8786-77F8F5865F2D},cn=policies,cn=system,dc=ad,dc=domain,dc=com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[83]->gpo_dn: cn={09A3C398-6880-44FF-89F2-4D74444FF45A},cn=policies,cn=system,dc=ad,dc=domain,dc=com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[84]->gpo_dn: cn={1C5369BB-0210-46D9-966A-77B93B2E538B},cn=policies,cn=system,dc=ad,dc=domain,dc=com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[85]->gpo_dn: cn={79DE6CF1-C2E6-4F49-B2D8-F135241A73DA},cn=policies,cn=system,dc=ad,dc=domain,dc=com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[86]->gpo_dn: cn={8C43AC42-0B5E-4703-AB0C-E25460C9ED29},cn=policies,cn=system,dc=ad,dc=domain,dc=com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[87]->gpo_dn: cn={17A3A1EB-16F3-4B2A-9B01-0043A58239A8},cn=policies,cn=system,dc=ad,dc=domain,dc=com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[88]->gpo_dn: cn={D47FA940-3024-4F98-88E7-B77CC2F7CA20},cn=policies,cn=system,dc=ad,dc=domain,dc=com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_sd_search_send] (0x0400): Searching entry [cn={2D551881-E71B-40CF-8656-846671FAFAB0},cn=policies,cn=system,dc=ad,dc=domain,dc=com] using SD
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_print_server] (0x2000): Searching XXX.XXX.XXX.XXX
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_get_generic_ext_send] (0x0400): WARNING: Disabling paging because scope is set to base.
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(objectclass=*)][cn={2D551881-E71B-40CF-8656-846671FAFAB0},cn=policies,cn=system,dc=ad,dc=domain,dc=com].
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [nTSecurityDescriptor]
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [cn]
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [gPCFileSysPath]
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [gPCMachineExtensionNames]
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [gPCFunctionalityVersion]
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [flags]
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_get_generic_ext_step] (0x2000): ldap_search_ext called, msgid = 30
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_op_add] (0x2000): New operation 30 timeout 6
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_process_result] (0x2000): Trace: sh[0x8fe1d0], connected[1], ops[0x9cf020], ldap[0x8d9120]
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_process_result] (0x2000): Trace: ldap_result found nothing!
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_process_result] (0x2000): Trace: sh[0x8fe1d0], connected[1], ops[0x9cf020], ldap[0x8d9120]
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_process_message] (0x4000): Message type: [LDAP_RES_SEARCH_ENTRY]
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_parse_entry] (0x1000): OriginalDN: [cn={2D551881-E71B-40CF-8656-846671FAFAB0},cn=policies,cn=system,dc=ad,dc=domain,dc=com].
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_parse_range] (0x2000): No sub-attributes for [cn]
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_parse_range] (0x2000): No sub-attributes for [nTSecurityDescriptor]
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_parse_range] (0x2000): No sub-attributes for [flags]
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_parse_range] (0x2000): No sub-attributes for [gPCFunctionalityVersion]
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_parse_range] (0x2000): No sub-attributes for [gPCFileSysPath]
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_parse_range] (0x2000): No sub-attributes for [gPCMachineExtensionNames]
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_process_result] (0x2000): Trace: sh[0x8fe1d0], connected[1], ops[0x9cf020], ldap[0x8d9120]
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_process_message] (0x4000): Message type: [LDAP_RES_SEARCH_RESULT]
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_get_generic_op_finished] (0x2000): Total count [0]
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_op_destructor] (0x2000): Operation 30 finished
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_sd_process_attrs] (0x4000): populating attrs for gpo_guid: {2D551881-E71B-40CF-8656-846671FAFAB0}
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_extract_smb_components] (0x4000): input_path: \\ad.domain.com\SysVol\ad.domain.com\Policies\{2D551881-E71B-40CF-8656-846671FAFAB0}
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_sd_process_attrs] (0x4000): smb_server: smb://ad-dc01.ad.domain.com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_sd_process_attrs] (0x4000): smb_share: /SysVol
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_sd_process_attrs] (0x4000): smb_path: /ad.domain.com/Policies/{2D551881-E71B-40CF-8656-846671FAFAB0}
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_sd_process_attrs] (0x4000): gpo_func_version: 2
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_sd_process_attrs] (0x4000): gpo_flags: 0
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_parse_machine_ext_names] (0x4000): num_gpo_cse_guids: 1
...
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_parse_machine_ext_names] (0x4000): gpo_cse_guids[0] is {35378EAC-683F-11D2-A89A-00C04FBBCFA2}
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_sd_search_send] (0x0400): Searching entry [cn={79DE6CF1-C2E6-4F49-B2D8-F135241A73DA},cn=policies,cn=system,dc=ad,dc=domain,dc=com] using SD
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_print_server] (0x2000): Searching XXX.XXX.XXX.XXX
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_get_generic_ext_send] (0x0400): WARNING: Disabling paging because scope is set to base.
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(objectclass=*)][cn={79DE6CF1-C2E6-4F49-B2D8-F135241A73DA},cn=policies,cn=system,dc=ad,dc=domain,dc=com].
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [nTSecurityDescriptor]
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [cn]
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [gPCFileSysPath]
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [gPCMachineExtensionNames]
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [gPCFunctionalityVersion]
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [flags]
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_get_generic_ext_step] (0x2000): ldap_search_ext called, msgid = 115
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_op_add] (0x2000): New operation 115 timeout 6
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_process_result] (0x2000): Trace: sh[0x8fe1d0], connected[1], ops[0xa89190], ldap[0x8d9120]
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_process_result] (0x2000): Trace: ldap_result found nothing!
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_process_result] (0x2000): Trace: sh[0x8fe1d0], connected[1], ops[0xa89190], ldap[0x8d9120]
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_process_message] (0x4000): Message type: [LDAP_RES_SEARCH_ENTRY]
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_parse_entry] (0x1000): OriginalDN: [cn={79DE6CF1-C2E6-4F49-B2D8-F135241A73DA},cn=policies,cn=system,dc=ad,dc=domain,dc=com].
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_parse_range] (0x2000): No sub-attributes for [cn]
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_parse_range] (0x2000): No sub-attributes for [nTSecurityDescriptor]
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_parse_range] (0x2000): No sub-attributes for [flags]
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_parse_range] (0x2000): No sub-attributes for [gPCFunctionalityVersion]
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_parse_range] (0x2000): No sub-attributes for [gPCFileSysPath]
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_parse_range] (0x2000): No sub-attributes for [gPCMachineExtensionNames]
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_process_result] (0x2000): Trace: sh[0x8fe1d0], connected[1], ops[0xa89190], ldap[0x8d9120]
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_process_message] (0x4000): Message type: [LDAP_RES_SEARCH_RESULT]
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_get_generic_op_finished] (0x2000): Total count [0]
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_op_destructor] (0x2000): Operation 115 finished
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_sd_process_attrs] (0x4000): populating attrs for gpo_guid: {79DE6CF1-C2E6-4F49-B2D8-F135241A73DA}
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_extract_smb_components] (0x4000): input_path: \\ad.domain.com\SysVol\ad.domain.com\Policies\{79DE6CF1-C2E6-4F49-B2D8-F135241A73DA}
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_sd_process_attrs] (0x4000): smb_server: smb://ad-dc01.ad.domain.com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_sd_process_attrs] (0x4000): smb_share: /SysVol
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_sd_process_attrs] (0x4000): smb_path: /ad.domain.com/Policies/{79DE6CF1-C2E6-4F49-B2D8-F135241A73DA}
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_sd_process_attrs] (0x4000): gpo_func_version: 2
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_sd_process_attrs] (0x4000): gpo_flags: 0
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_parse_machine_ext_names] (0x4000): num_gpo_cse_guids: 1
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_parse_machine_ext_names] (0x4000): gpo_cse_guids[0] is {35378EAC-683F-11D2-A89A-00C04FBBCFA2}
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_sd_search_send] (0x0400): Searching entry [cn={8C43AC42-0B5E-4703-AB0C-E25460C9ED29},cn=policies,cn=system,dc=ad,dc=domain,dc=com] using SD
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_print_server] (0x2000): Searching XXX.XXX.XXX.XXX
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_get_generic_ext_send] (0x0400): WARNING: Disabling paging because scope is set to base.
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(objectclass=*)][cn={8C43AC42-0B5E-4703-AB0C-E25460C9ED29},cn=policies,cn=system,dc=ad,dc=domain,dc=com].
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [nTSecurityDescriptor]
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [cn]
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [gPCFileSysPath]
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [gPCMachineExtensionNames]
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [gPCFunctionalityVersion]
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [flags]
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_get_generic_ext_step] (0x2000): ldap_search_ext called, msgid = 116
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_op_add] (0x2000): New operation 116 timeout 6
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_process_result] (0x2000): Trace: sh[0x8fe1d0], connected[1], ops[0xa8b280], ldap[0x8d9120]
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_process_result] (0x2000): Trace: ldap_result found nothing!
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_process_result] (0x2000): Trace: sh[0x8fe1d0], connected[1], ops[0xa8b280], ldap[0x8d9120]
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_process_message] (0x4000): Message type: [LDAP_RES_SEARCH_ENTRY]
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_parse_entry] (0x1000): OriginalDN: [cn={8C43AC42-0B5E-4703-AB0C-E25460C9ED29},cn=policies,cn=system,dc=ad,dc=domain,dc=com].
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_parse_range] (0x2000): No sub-attributes for [cn]
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_parse_range] (0x2000): No sub-attributes for [nTSecurityDescriptor]
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_parse_range] (0x2000): No sub-attributes for [flags]
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_parse_range] (0x2000): No sub-attributes for [gPCFunctionalityVersion]
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_parse_range] (0x2000): No sub-attributes for [gPCFileSysPath]
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_parse_range] (0x2000): No sub-attributes for [gPCMachineExtensionNames]
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_process_result] (0x2000): Trace: sh[0x8fe1d0], connected[1], ops[0xa8b280], ldap[0x8d9120]
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_process_message] (0x4000): Message type: [LDAP_RES_SEARCH_RESULT]
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_get_generic_op_finished] (0x2000): Total count [0]
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_op_destructor] (0x2000): Operation 116 finished
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_sd_process_attrs] (0x4000): populating attrs for gpo_guid: {8C43AC42-0B5E-4703-AB0C-E25460C9ED29}
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_extract_smb_components] (0x4000): input_path: \\ad.domain.com\SysVol\ad.domain.com\Policies\{8C43AC42-0B5E-4703-AB0C-E25460C9ED29}
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_sd_process_attrs] (0x4000): smb_server: smb://ad-dc01.ad.domain.com
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_sd_process_attrs] (0x4000): smb_share: /SysVol
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_sd_process_attrs] (0x4000): smb_path: /ad.domain.com/Policies/{8C43AC42-0B5E-4703-AB0C-E25460C9ED29}
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_sd_process_attrs] (0x4000): gpo_func_version: 2
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_sd_process_attrs] (0x4000): gpo_flags: 0
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_parse_machine_ext_names] (0x4000): num_gpo_cse_guids: 1
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_parse_machine_ext_names] (0x4000): gpo_cse_guids[0] is {827D319E-6EAC-11D2-A4EA-00C04F79F83A}
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_sd_search_send] (0x0400): Searching entry [cn={17A3A1EB-16F3-4B2A-9B01-0043A58239A8},cn=policies,cn=system,dc=ad,dc=domain,dc=com] using SD
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_print_server] (0x2000): Searching XXX.XXX.XXX.XXX
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_get_generic_ext_send] (0x0400): WARNING: Disabling paging because scope is set to base.
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(objectclass=*)][cn={17A3A1EB-16F3-4B2A-9B01-0043A58239A8},cn=policies,cn=system,dc=ad,dc=domain,dc=com].
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [nTSecurityDescriptor]
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [cn]
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [gPCFileSysPath]
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [gPCMachineExtensionNames]
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [gPCFunctionalityVersion]
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [flags]
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_get_generic_ext_step] (0x2000): ldap_search_ext called, msgid = 117
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_op_add] (0x2000): New operation 117 timeout 6
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_process_result] (0x2000): Trace: sh[0x8fe1d0], connected[1], ops[0xa8d620], ldap[0x8d9120]
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_process_result] (0x2000): Trace: ldap_result found nothing!
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_process_result] (0x2000): Trace: sh[0x8fe1d0], connected[1], ops[0xa8d620], ldap[0x8d9120]
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_process_message] (0x4000): Message type: [LDAP_RES_SEARCH_ENTRY]
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_parse_entry] (0x1000): OriginalDN: [cn={17A3A1EB-16F3-4B2A-9B01-0043A58239A8},cn=policies,cn=system,dc=ad,dc=domain,dc=com].
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_parse_entry] (0x1000): Entry has no attributes [0(Success)]!?
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_process_result] (0x2000): Trace: sh[0x8fe1d0], connected[1], ops[0xa8d620], ldap[0x8d9120]
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_process_message] (0x4000): Message type: [LDAP_RES_SEARCH_RESULT]
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_get_generic_op_finished] (0x2000): Total count [0]
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_op_destructor] (0x2000): Operation 117 finished
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_sd_process_attrs] (0x0040): sysdb_attrs_get_string failed: [2](No such file or directory)
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sdap_id_op_done] (0x4000): releasing operation connection
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_process_gpo_done] (0x0400): No GPOs found that apply to this system.
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ldb] (0x4000): start ldb transaction (nesting: 0)
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sysdb_gpo_get_gpo_result_object] (0x4000): cn=gpos,cn=ad,cn=custom,cn=ad.domain.com,cn=sysdb
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ldb] (0x4000): Added timed event "ltdb_callback": 0x9bb150
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ldb] (0x4000): Added timed event "ltdb_timeout": 0x9bb290
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ldb] (0x4000): Running timer event 0x9bb150 "ltdb_callback"
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ldb] (0x4000): Destroying timer event 0x9bb290 "ltdb_timeout"
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ldb] (0x4000): Ending timer event 0x9bb150 "ltdb_callback"
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [sysdb_gpo_get_gpo_result_object] (0x4000): No GPO Result object.
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ldb] (0x4000): commit ldb transaction (nesting: 0)
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [ad_gpo_access_done] (0x0400): GPO-based access control successful.
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [be_pam_handler_callback] (0x0100): Backend returned: (0, 0, <NULL>) [Success]
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [be_pam_handler_callback] (0x0400): SELinux provider doesn't exist, not sending the request to it.
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [be_pam_handler_callback] (0x0100): Sending result [0][ad.domain.com]
(Thu May 4 10:02:44 2017) [sssd[be[ad.domain.com]]] [be_pam_handler_callback] (0x0100): Sent result [0][ad.domain.com]
_______________________________________________
sssd-users mailing list -- sssd-users@lists.fedorahosted.org
To unsubscribe send an email to sssd-users-le...@lists.fedorahosted.org
