Issue #3101: sssd does not start if sub-domain user is used with simple access provider - sssd

SSSD / sssd

#3101 sssd does not start if sub-domain user is used with simple access provider

Closed: Fixed None Opened 7 years ago by lslebodn.

(Mon Jul 18 04:29:14 2016) [sssd[be[sssdad.com]]] [simple_access_obtain_filter_lists] (0x0020): Unable to parse Allow users list [1432158243]: Domain not found
(Mon Jul 18 04:29:14 2016) [sssd[be[sssdad.com]]] [dp_target_run_constructor] (0x0010): Target [access] constructor failed [1432158243]: Domain not found
(Mon Jul 18 04:29:14 2016) [sssd[be[sssdad.com]]] [dp_load_targets] (0x0020): Unable to load target [access] [1432158243]: Domain not found.
(Mon Jul 18 04:29:14 2016) [sssd[be[sssdad.com]]] [dp_init] (0x0020): Unable to initialize DP targets [1432158209]: Internal Error
(Mon Jul 18 04:29:14 2016) [sssd[be[sssdad.com]]] [be_process_init] (0x0010): Unable to setup data provider [1432158209]: Internal Error
(Mon Jul 18 04:29:14 2016) [sssd[be[sssdad.com]]] [be_ptask_destructor] (0x0400): Terminating periodic task [AD machine account password renewal]
(Mon Jul 18 04:29:14 2016) [sssd[be[sssdad.com]]] [main] (0x0010): Could not initialize backend [1432158209]



[sssd]
services = nss, pam
domains = sssdad.com

[domain/sssdad.com]
id_provider = ad
use_fully_qualified_names = True
access_provider = simple

simple_allow_users=user1_dom2-29758@child1.sssdad.com

lslebodn commented 7 years ago

There is just one domain in sysdb

[root@hp-dl380pgen8-0 sssd]# ldbsearch -H /var/lib/sss/db/cache_sssdad.com.ldb -s one -b cn=sysdb
asq: Unable to register control with rootdse!
# record 1
dn: cn=ranges,cn=sysdb
cn: ranges
distinguishedName: cn=ranges,cn=sysdb

# record 2
dn: cn=sssdad.com,cn=sysdb
cn: sssdad.com
distinguishedName: cn=sssdad.com,cn=sysdb

# returned 2 records
# 2 entries
# 0 referrals

lslebodn commented 7 years ago

Regression caused by commit eef359b