[prev in list] [next in list] [prev in thread] [next in thread]
List: sssd-users
Subject: =?utf-8?q?=5BSSSD-users=5D?= Re: System error 4 is reported in the secur log after provisioning new
From: Abhijit Roy <abroy () redhat ! com>
Date: 2021-05-08 3:50:45
Message-ID: CAHvh7UjXS=PZYSOkGj2R5eptHAdmtmmEetKbwa+U9uHAC9YYyA () mail ! gmail ! com
[Download RAW message or body]
[Attachment #2 (multipart/alternative)]
Hello,
Only system error 4 is not sufficient. System error 4 most of the time
indicates an issue with kerberos.
Are you able to do # kinit -C ad_user/ldap_user@domain_name
You need to enable sssd debugging and need to check.
Thank you,
*Abhijit Roy*
He/Him/His
Technical Support Engineer
Red Hat Insights - Predict Risk. Get Guidance. Improve Security.
<https://www.redhat.com/en/technologies/management/insights>
Red Hat Enterprise Linux 8. Any Cloud. Any Workload. One OS.
<https://www.redhat.com/en/enterprise-linux-8>
<https://red.ht/sig>
On Sat, May 8, 2021 at 12:51 AM Fahad Sayed <fsayed@afilias.info> wrote:
> Hello,
> We upgraded our LDAP/Kerberos servers to CentOS7. As a test we pointed a
> VM (that is configured to authenticate with ldap/kerberos) to new
> ldap/kerberos servers. However, we get system error 4 in /var/log/secur.
> Under the troubleshooting section of the site, we're asked to join this
> mailing list to figure out what is going on.
>
> Also, we tried to point back to the existing ldap/kerberos servers on our
> test VM, we still get the system error 4. The new ldap/kerberos servers are
> identical to the old ones. Please, advice us on how we can proceed with
> troubleshooting this issue. Thank you.
>
> -F
> _______________________________________________
> sssd-users mailing list -- sssd-users@lists.fedorahosted.org
> To unsubscribe send an email to sssd-users-leave@lists.fedorahosted.org
> Fedora Code of Conduct:
> https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
> https://lists.fedorahosted.org/archives/list/sssd-users@lists.fedorahosted.org
> Do not reply to spam on the list, report it:
> https://pagure.io/fedora-infrastructure
>
[Attachment #5 (text/html)]
<div dir="ltr">Hello,<div><br></div><div>Only system error 4 is not sufficient. \
System error 4 most of the time indicates an issue with kerberos. \
</div><div><br></div><div>Are you able to do # kinit -C ad_user/ldap_user@domain_name \
</div><div><br></div><div>You need to enable sssd debugging and need to check. \
</div><div><br></div><div><br clear="all"><div><div dir="ltr" class="gmail_signature" \
data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div \
dir="ltr"><p style="color:rgb(0,0,0);margin:0px;padding:0px;font-size:14px;text-transform:capitalize"><font \
face="garamond, times new roman, serif">Thank you,</font></p><p \
style="color:rgb(0,0,0);margin:0px;padding:0px;font-size:14px;text-transform:capitalize"><font \
face="garamond, times new roman, serif"><br></font></p><p \
style="color:rgb(0,0,0);margin:0px;padding:0px;font-size:14px;text-transform:capitalize"><font \
face="garamond, times new roman, serif"><b>Abhijit Roy</b></font><br></p><p \
style="margin:0px;padding:0px"><font color="#000000" face="garamond, times new roman, \
serif"><span style="font-size:14px;text-transform:capitalize">He/Him/His</span></font></p><p \
style="margin:0px;padding:0px"><font color="#000000" face="garamond, times new roman, \
serif"><span style="font-size:14px;text-transform:capitalize">Technical Support \
Engineer </span></font></p><p \
style="color:rgb(0,0,0);font-family:RedHatText,sans-serif;margin:0px;padding:0px;font-size:14px;text-transform:capitalize"><a \
href="https://www.redhat.com/en/technologies/management/insights" target="_blank">Red \
Hat Insights - Predict Risk. Get Guidance. Improve Security.</a><br></p><p \
style="color:rgb(0,0,0);font-family:RedHatText,sans-serif;margin:0px;padding:0px;font-size:14px;text-transform:capitalize"><a \
href="https://www.redhat.com/en/enterprise-linux-8" target="_blank">Red Hat \
Enterprise Linux 8. Any Cloud. Any Workload. One OS. </a><br></p><div \
style="color:rgb(0,0,0);font-family:RedHatText,sans-serif;font-size:medium;margin-bottom:4px"></div><p \
style="color:rgb(0,0,0);font-family:RedHatText,sans-serif;margin:0px;font-size:12px"></p><div \
style="color:rgb(0,0,0);font-family:RedHatText,sans-serif;font-size:medium;margin-top:12px"><table \
border="0"><tbody><tr><td width="100px"><a href="https://red.ht/sig" \
target="_blank"><img \
src="https://static.redhat.com/libs/redhat/brand-assets/latest/corp/logo.png" \
width="90" height="auto"></a></td></tr></tbody></table><br></div></div></div></div></div></div></div></div><br></div></div><br><div \
class="gmail_quote"><div dir="ltr" class="gmail_attr">On Sat, May 8, 2021 at 12:51 AM \
Fahad Sayed <<a href="mailto:fsayed@afilias.info">fsayed@afilias.info</a>> \
wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px \
0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div \
dir="ltr">Hello,<div>We upgraded our LDAP/Kerberos servers to CentOS7. As a test we \
pointed a VM (that is configured to authenticate with ldap/kerberos) to new \
ldap/kerberos servers. However, we get system error 4 in /var/log/secur. Under the \
troubleshooting section of the site, we're asked to join this mailing list to \
figure out what is going on.</div><div><br></div><div>Also, we tried to point back to \
the existing ldap/kerberos servers on our test VM, we still get the system error 4. \
The new ldap/kerberos servers are identical to the old ones. Please, advice us on \
how we can proceed with troubleshooting this issue. Thank \
you.</div><div><br></div><div>-F</div></div> \
_______________________________________________<br> sssd-users mailing list -- <a \
href="mailto:sssd-users@lists.fedorahosted.org" \
target="_blank">sssd-users@lists.fedorahosted.org</a><br> To unsubscribe send an \
email to <a href="mailto:sssd-users-leave@lists.fedorahosted.org" \
target="_blank">sssd-users-leave@lists.fedorahosted.org</a><br> Fedora Code of \
Conduct: <a href="https://docs.fedoraproject.org/en-US/project/code-of-conduct/" \
rel="noreferrer" target="_blank">https://docs.fedoraproject.org/en-US/project/code-of-conduct/</a><br>
List Guidelines: <a href="https://fedoraproject.org/wiki/Mailing_list_guidelines" \
rel="noreferrer" target="_blank">https://fedoraproject.org/wiki/Mailing_list_guidelines</a><br>
List Archives: <a href="https://lists.fedorahosted.org/archives/list/sssd-users@lists.fedorahosted.org" \
rel="noreferrer" target="_blank">https://lists.fedorahosted.org/archives/list/sssd-users@lists.fedorahosted.org</a><br>
Do not reply to spam on the list, report it: <a \
href="https://pagure.io/fedora-infrastructure" rel="noreferrer" \
target="_blank">https://pagure.io/fedora-infrastructure</a><br> </blockquote></div>
[Attachment #6 (text/plain)]
_______________________________________________
sssd-users mailing list -- sssd-users@lists.fedorahosted.org
To unsubscribe send an email to sssd-users-leave@lists.fedorahosted.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedorahosted.org/archives/list/sssd-users@lists.fedorahosted.org
Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic