Issue #4123: RFE: Use alternate subject name for certificates without subject - sssd

SSSD / sssd

#4123 RFE: Use alternate subject name for certificates without subject

Closed: wontfix 5 years ago by pbrezina. Opened 5 years ago by orion.

We are trying to workaround an issue with the way Windows clients cache certificates. See https://docs.microsoft.com/en-us/windows/security/identity-protection/smart-cards/smart-card-certificate-requirements-and-enumeration#smart-card-sign-in-flow-in-windows for more info, but basically:

Note Smartcard cache entries are created for certificates with a subject name or with a subject key identifier. If the certificate has a subject name, it is stored with an index that is based on the subject name and certificate issuer. If another certificate with the same subject name and certificate issuer is used, it will replace the existing cached entry. A change in this behavior after Windows Vista, allows for the condition when the certificate does not have a subject name, the cache is created with an index that is based on the subject key identifier and certificate issuer.

So, we would like to use certificates without a subject because the subject key identifier is unique for each certificate. However, sssd appears to not be able to lookup the user for the certificate:

client sssd_pam.log:

(Wed Nov 27 09:54:09 2019) [sssd[pam]] [cache_req_set_plugin] (0x2000): CR #15: Setting "User by certificate" plugin
(Wed Nov 27 09:54:09 2019) [sssd[pam]] [cache_req_send] (0x0400): CR #15: New request 'User by certificate'
(Wed Nov 27 09:54:09 2019) [sssd[pam]] [cache_req_select_domains] (0x0400): CR #15: Performing a multi-domain search
(Wed Nov 27 09:54:09 2019) [sssd[pam]] [cache_req_search_domains] (0x0400): CR #15: Search will check the cache and check the data provider
(Wed Nov 27 09:54:09 2019) [sssd[pam]] [cache_req_validate_domain_type] (0x2000): Request type POSIX-only for domain implicit_files type POSIX is valid
(Wed Nov 27 09:54:09 2019) [sssd[pam]] [cache_req_set_domain] (0x0400): CR #15: Using domain [implicit_files]
(Wed Nov 27 09:54:09 2019) [sssd[pam]] [cache_req_search_send] (0x0400): CR #15: Looking up CERT:Uty0Rvz/U=@implicit_files
(Wed Nov 27 09:54:09 2019) [sssd[pam]] [cache_req_search_ncache] (0x0400): CR #15: Checking negative cache for [CERT:Uty0Rvz/U=@implicit_files]
(Wed Nov 27 09:54:09 2019) [sssd[pam]] [sss_ncache_check_str] (0x2000): Checking negative cache for [NCE/CERT/MIIHgTCCBWmgAwIBAgITdgAAAuC+PzqtwK38UwAAAAAC4DANBgkqhkiG9w0BAQ0FADBcMRMwEQYKCZImiZPyLGQBGRYDY29tMRQwEgYKCZImiZPyLGQBGRYEbndyYTESMBAGCgmSJomT8ixkARkWAmFkMRswGQYDVQQDExJhZC1BRC1TRUFUVExFMDEtQ0EwHhcNMTkxMTI1MjEyOTE4WhcNMjExMTI1MjEzOTE4WjAAMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr42+cQaubOMtGQqRiw5qWo5mEPTLqhU9QAg6/qvs5XfoHZQqF0+y7EgI4CVtX991hDbuNGZt0hXuTj4qIrShAwKHEJA5N+kW4BhrKlksIoK1p+V3xzJwrwesXmLPNnLLafzRaQXpcV6ZJUkR/+nsnvMf7kopYosY9pE8ntby3xyVl+re4p4dkloacrm6Sb/UTdtPSBx7LGXpcNHtyBMQqUKxBnOawu5SIkUnjCDDmoM88wCdgx6zGnjU+dxXz2XPEE8uiTgVgefliHdiRp7vtHoo4K1Hiyw9zbkKBqw0ZxfmXBJSinDFasQvUCvSLSB0FRwPd+TzHAqStqYISz3+6wIDAQABo4IDljCCA5IwPgYJKwYBBAGCNxUHBDEwLwYnKwYBBAGCNxUIg+SaI4OlokOBjZ0QgZ7gGoGqhgaBMoSJzH2DstUQAgFkAgEWMB8GA1UdJQQYMBYGCisGAQQBgjcUAgIGCCsGAQUFBwMCMA4GA1UdDwEB/wQEAwIFoDApBgkrBgEEAYI3FQoEHDAaMAwGCisGAQQBgjcUAgIwCgYIKwYBBQUHAwIwgZQGCSqGSIb3DQEJDwSBhjCBgzALBglghkgBZQMEASowCwYJYIZIAWUDBAEtMAsGCWCGSAFlAwQBFjALBglghkgBZQMEARkwCwYJYIZIAWUDBAECMAsGCWCGSAFlAwQBBTAKBggqhkiG9w0DBzAHBgUrDgMCBzAOBggqhkiG9w0DAgICAIAwDgYIKoZIhvcNAwQCAgIAMB0GA1UdDgQWBBRpAI0xkrWObCIFfJwNkvKW2PGd7jAfBgNVHSMEGDAWgBR80kxpkDyTnbTOQ8W+/kd+XgwNOTCCASAGA1UdHwSCARcwggETMIIBD6CCAQugggEHhkFodHRwOi8vQUQtU0VBVFRMRTAxLmFkLm53cmEuY29tL0NlcnRFbnJvbGwvYWQtQUQtU0VBVFRMRTAxLUNBLmNybIaBwWxkYXA6Ly8vQ049YWQtQUQtU0VBVFRMRTAxLUNBLENOPUFELVNFQVRUTEUwMSxDTj1DRFAsQ049UHVibGljJTIwS2V5JTIwU2VydmljZXMsQ049U2VydmljZXMsQ049Q29uZmlndXJhdGlvbixEQz1hZCxEQz1ud3JhLERDPWNvbT9jZXJ0aWZpY2F0ZVJldm9jYXRpb25MaXN0P2Jhc2U/b2JqZWN0Q2xhc3M9Y1JMRGlzdHJpYnV0aW9uUG9pbnQwgccGCCsGAQUFBwEBBIG6MIG3MIG0BggrBgEFBQcwAoaBp2xkYXA6Ly8vQ049YWQtQUQtU0VBVFRMRTAxLUNBLENOPUFJQSxDTj1QdWJsaWMlMjBLZXklMjBTZXJ2aWNlcyxDTj1TZXJ2aWNlcyxDTj1Db25maWd1cmF0aW9uLERDPWFkLERDPW53cmEsREM9Y29tP2NBQ2VydGlmaWNhdGU/YmFzZT9vYmplY3RDbGFzcz1jZXJ0aWZpY2F0aW9uQXV0aG9yaXR5MC8GA1UdEQEB/wQlMCOgIQYKKwYBBAGCNxQCA6ATDBFvcmlvbkBhZC5ud3JhLmNvbTANBgkqhkiG9w0BAQ0FAAOCAgEAUm2LQQgKIxQnlvQQe6djX8AwE52RCKNA51lSuogYcQlko1DSURQTSuRsn3Onza8cekRCn2jm14XUrRo+8aTigimKrESFZloqZ8P1wZ+zM0k+FmBzvIO/5oBkJRLm5izM7CNOQEBXI53oWL+bZlF+RBOvs2IK5o0QOhZnCXwMspu9s3i9ab2ko2TV/j1dvBgS/mu2a7q/F3k7BHO80bXtPzfcX1fhUMyCAzuQ/JpEs2y95FS32xK7ZqZO1rHWKftz4MxKrkxccVxmGOUriJDPHb8+wbWB1ChWSXkPLaV4xdSF1he26xCbADVyfOPM/kHkzd0D9raYyeMfpLoC0nE8f0zQoiL+HFPKOrcuRWkJoTXZ2bCGR9ZvACI4HQQABUmWkjCleSmiwxlbxMu2wlF0BbYQYWs6Hq6fFY1PSevJab4FJlg3KssspAkbQsG7HaaFbs7en5Tkrrc5dWTFRFPoK3f2NWvdhV9eajKyZTQJPQPAM2xCYKJ7dOv+Y9wDTq2h/6fmeIsWc5rq0ZPFc8zYkFD/ca/jWLn44oRcrbFZza6hVI24qMrQ6CQ4TwwZJ14g+Ft7l3ECtC1ott/BW76/xeu9daVnNYjbwnekbWnu1C2hfM4zC4z0fW/FynFjPNjffRGGPBqE3EKnIcrBAx76TRRvdJk8gLBOxYUty0Rvz/U=]
(Wed Nov 27 09:54:09 2019) [sssd[pam]] [cache_req_search_ncache] (0x0400): CR #15: [CERT:Uty0Rvz/U=@implicit_files] does not exist (negative cache)
(Wed Nov 27 09:54:09 2019) [sssd[pam]] [cache_req_validate_domain_type] (0x2000): Request type POSIX-only for domain nwra.com type POSIX is valid
(Wed Nov 27 09:54:09 2019) [sssd[pam]] [cache_req_set_domain] (0x0400): CR #15: Using domain [nwra.com]
(Wed Nov 27 09:54:09 2019) [sssd[pam]] [cache_req_search_send] (0x0400): CR #15: Looking up CERT:Uty0Rvz/U=@nwra.com
(Wed Nov 27 09:54:09 2019) [sssd[pam]] [cache_req_search_ncache] (0x0400): CR #15: Checking negative cache for [CERT:Uty0Rvz/U=@nwra.com]
(Wed Nov 27 09:54:09 2019) [sssd[pam]] [sss_ncache_check_str] (0x2000): Checking negative cache for [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]
(Wed Nov 27 09:54:09 2019) [sssd[pam]] [cache_req_search_ncache] (0x0400): CR #15: [CERT:Uty0Rvz/U=@nwra.com] does not exist (negative cache)
(Wed Nov 27 09:54:09 2019) [sssd[pam]] [cache_req_validate_domain_type] (0x2000): Request type POSIX-only for domain ad.nwra.com type POSIX is valid
(Wed Nov 27 09:54:09 2019) [sssd[pam]] [cache_req_set_domain] (0x0400): CR #15: Using domain [ad.nwra.com]
(Wed Nov 27 09:54:09 2019) [sssd[pam]] [cache_req_search_send] (0x0400): CR #15: Looking up CERT:Uty0Rvz/U=@ad.nwra.com
(Wed Nov 27 09:54:09 2019) [sssd[pam]] [cache_req_search_ncache] (0x0400): CR #15: Checking negative cache for [CERT:Uty0Rvz/U=@ad.nwra.com]
(Wed Nov 27 09:54:09 2019) [sssd[pam]] [sss_ncache_check_str] (0x2000): Checking negative cache for [NCE/CERT/MIIHgTCCBWmgAwIBAgITdgAAAuC+PzqtwK38UwAAAAAC4DANBgkqhkiG9w0BAQ0FADBcMRMwEQYKCZImiZPyLGQBGRYDY29tMRQwEgYKCZImiZPyLGQBGRYEbndyYTESMBAGCgmSJomT8ixkARkWAmFkMRswGQYDVQQDExJhZC1BRC1TRUFUVExFMDEtQ0EwHhcNMTkxMTI1MjEyOTE4WhcNMjExMTI1MjEzOTE4WjAAMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr42+cQaubOMtGQqRiw5qWo5mEPTLqhU9QAg6/qvs5XfoHZQqF0+y7EgI4CVtX991hDbuNGZt0hXuTj4qIrShAwKHEJA5N+kW4BhrKlksIoK1p+V3xzJwrwesXmLPNnLLafzRaQXpcV6ZJUkR/+nsnvMf7kopYosY9pE8ntby3xyVl+re4p4dkloacrm6Sb/UTdtPSBx7LGXpcNHtyBMQqUKxBnOawu5SIkUnjCDDmoM88wCdgx6zGnjU+dxXz2XPEE8uiTgVgefliHdiRp7vtHoo4K1Hiyw9zbkKBqw0ZxfmXBJSinDFasQvUCvSLSB0FRwPd+TzHAqStqYISz3+6wIDAQABo4IDljCCA5IwPgYJKwYBBAGCNxUHBDEwLwYnKwYBBAGCNxUIg+SaI4OlokOBjZ0QgZ7gGoGqhgaBMoSJzH2DstUQAgFkAgEWMB8GA1UdJQQYMBYGCisGAQQBgjcUAgIGCCsGAQUFBwMCMA4GA1UdDwEB/wQEAwIFoDApBgkrBgEEAYI3FQoEHDAaMAwGCisGAQQBgjcUAgIwCgYIKwYBBQUHAwIwgZQGCSqGSIb3DQEJDwSBhjCBgzALBglghkgBZQMEASowCwYJYIZIAWUDBAEtMAsGCWCGSAFlAwQBFjALBglghkgBZQMEARkwCwYJYIZIAWUDBAECMAsGCWCGSAFlAwQBBTAKBggqhkiG9w0DBzAHBgUrDgMCBzAOBggqhkiG9w0DAgICAIAwDgYIKoZIhvcNAwQCAgIAMB0GA1UdDgQWBBRpAI0xkrWObCIFfJwNkvKW2PGd7jAfBgNVHSMEGDAWgBR80kxpkDyTnbTOQ8W+/kd+XgwNOTCCASAGA1UdHwSCARcwggETMIIBD6CCAQugggEHhkFodHRwOi8vQUQtU0VBVFRMRTAxLmFkLm53cmEuY29tL0NlcnRFbnJvbGwvYWQtQUQtU0VBVFRMRTAxLUNBLmNybIaBwWxkYXA6Ly8vQ049YWQtQUQtU0VBVFRMRTAxLUNBLENOPUFELVNFQVRUTEUwMSxDTj1DRFAsQ049UHVibGljJTIwS2V5JTIwU2VydmljZXMsQ049U2VydmljZXMsQ049Q29uZmlndXJhdGlvbixEQz1hZCxEQz1ud3JhLERDPWNvbT9jZXJ0aWZpY2F0ZVJldm9jYXRpb25MaXN0P2Jhc2U/b2JqZWN0Q2xhc3M9Y1JMRGlzdHJpYnV0aW9uUG9pbnQwgccGCCsGAQUFBwEBBIG6MIG3MIG0BggrBgEFBQcwAoaBp2xkYXA6Ly8vQ049YWQtQUQtU0VBVFRMRTAxLUNBLENOPUFJQSxDTj1QdWJsaWMlMjBLZXklMjBTZXJ2aWNlcyxDTj1TZXJ2aWNlcyxDTj1Db25maWd1cmF0aW9uLERDPWFkLERDPW53cmEsREM9Y29tP2NBQ2VydGlmaWNhdGU/YmFzZT9vYmplY3RDbGFzcz1jZXJ0aWZpY2F0aW9uQXV0aG9yaXR5MC8GA1UdEQEB/wQlMCOgIQYKKwYBBAGCNxQCA6ATDBFvcmlvbkBhZC5ud3JhLmNvbTANBgkqhkiG9w0BAQ0FAAOCAgEAUm2LQQgKIxQnlvQQe6djX8AwE52RCKNA51lSuogYcQlko1DSURQTSuRsn3Onza8cekRCn2jm14XUrRo+8aTigimKrESFZloqZ8P1wZ+zM0k+FmBzvIO/5oBkJRLm5izM7CNOQEBXI53oWL+bZlF+RBOvs2IK5o0QOhZnCXwMspu9s3i9ab2ko2TV/j1dvBgS/mu2a7q/F3k7BHO80bXtPzfcX1fhUMyCAzuQ/JpEs2y95FS32xK7ZqZO1rHWKftz4MxKrkxccVxmGOUriJDPHb8+wbWB1ChWSXkPLaV4xdSF1he26xCbADVyfOPM/kHkzd0D9raYyeMfpLoC0nE8f0zQoiL+HFPKOrcuRWkJoTXZ2bCGR9ZvACI4HQQABUmWkjCleSmiwxlbxMu2wlF0BbYQYWs6Hq6fFY1PSevJab4FJlg3KssspAkbQsG7HaaFbs7en5Tkrrc5dWTFRFPoK3f2NWvdhV9eajKyZTQJPQPAM2xCYKJ7dOv+Y9wDTq2h/6fmeIsWc5rq0ZPFc8zYkFD/ca/jWLn44oRcrbFZza6hVI24qMrQ6CQ4TwwZJ14g+Ft7l3ECtC1ott/BW76/xeu9daVnNYjbwnekbWnu1C2hfM4zC4z0fW/FynFjPNjffRGGPBqE3EKnIcrBAx76TRRvdJk8gLBOxYUty0Rvz/U=]
(Wed Nov 27 09:54:09 2019) [sssd[pam]] [cache_req_search_ncache] (0x0400): CR #15: [CERT:Uty0Rvz/U=@ad.nwra.com] does not exist (negative cache)
(Wed Nov 27 09:54:09 2019) [sssd[pam]] [cache_req_process_result] (0x0400): CR #15: Finished: Not found
(Wed Nov 27 09:54:09 2019) [sssd[pam]] [pam_forwarder_lookup_by_cert_done] (0x4000): Found [0] certificates and [0] related users.
(Wed Nov 27 09:54:09 2019) [sssd[pam]] [pam_forwarder_lookup_by_cert_done] (0x0020): Missing logon name and no certificate user found.
(Wed Nov 27 09:54:09 2019) [sssd[pam]] [pam_reply] (0x4000): pam_reply initially called with result [10]: User not known to the underlying authentication module. this result might be changed during processing

(Wed Nov 27 09:54:34 2019) [sssd[be[nwra.com]]] [sbus_method_handler] (0x2000): Received D-Bus method sssd.dataprovider.getAccountInfo on /sssd
(Wed Nov 27 09:54:34 2019) [sssd[be[nwra.com]]] [sbus_senders_lookup] (0x2000): Looking for identity of sender [sssd.pam]
(Wed Nov 27 09:54:34 2019) [sssd[be[nwra.com]]] [dp_get_account_info_send] (0x0200): Got request for [0x14][BE_REQ_BY_CERT][cert=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]
(Wed Nov 27 09:54:34 2019) [sssd[be[nwra.com]]] [dp_attach_req] (0x0400): DP Request [Account #13]: New request. Flags [0x0001].
(Wed Nov 27 09:54:34 2019) [sssd[be[nwra.com]]] [dp_attach_req] (0x0400): Number of active DP request: 1
(Wed Nov 27 09:54:34 2019) [sssd[be[nwra.com]]] [sss_domain_get_state] (0x1000): Domain nwra.com is Active
(Wed Nov 27 09:54:34 2019) [sssd[be[nwra.com]]] [sss_domain_get_state] (0x1000): Domain nwra.com is Active
(Wed Nov 27 09:54:34 2019) [sssd[be[nwra.com]]] [sss_cert_derb64_to_ldap_filter] (0x0400): Rule does not apply to current domain [nwra.com].
(Wed Nov 27 09:54:34 2019) [sssd[be[nwra.com]]] [users_get_send] (0x0040): sss_cert_derb64_to_ldap_filter failed.
(Wed Nov 27 09:54:34 2019) [sssd[be[nwra.com]]] [ldb] (0x4000): Added timed event "ldb_kv_callback": 0x5650235f9ff0

(Wed Nov 27 09:54:34 2019) [sssd[be[nwra.com]]] [ldb] (0x4000): Added timed event "ldb_kv_timeout": 0x565023604710

(Wed Nov 27 09:54:34 2019) [sssd[be[nwra.com]]] [ldb] (0x4000): Running timer event 0x5650235f9ff0 "ldb_kv_callback"

(Wed Nov 27 09:54:34 2019) [sssd[be[nwra.com]]] [ldb] (0x4000): Destroying timer event 0x565023604710 "ldb_kv_timeout"

(Wed Nov 27 09:54:34 2019) [sssd[be[nwra.com]]] [ldb] (0x4000): Destroying timer event 0x5650235f9ff0 "ldb_kv_callback"

(Wed Nov 27 09:54:34 2019) [sssd[be[nwra.com]]] [sysdb_search_object_attr] (0x0400): No such entry.
(Wed Nov 27 09:54:34 2019) [sssd[be[nwra.com]]] [ldb] (0x4000): Added timed event "ldb_kv_callback": 0x5650235c34d0

(Wed Nov 27 09:54:34 2019) [sssd[be[nwra.com]]] [ldb] (0x4000): Added timed event "ldb_kv_timeout": 0x5650235f9ff0

(Wed Nov 27 09:54:34 2019) [sssd[be[nwra.com]]] [ldb] (0x4000): Running timer event 0x5650235c34d0 "ldb_kv_callback"

(Wed Nov 27 09:54:34 2019) [sssd[be[nwra.com]]] [ldb] (0x4000): Destroying timer event 0x5650235f9ff0 "ldb_kv_timeout"

(Wed Nov 27 09:54:34 2019) [sssd[be[nwra.com]]] [ldb] (0x4000): Destroying timer event 0x5650235c34d0 "ldb_kv_callback"

(Wed Nov 27 09:54:34 2019) [sssd[be[nwra.com]]] [sysdb_search_object_attr] (0x0400): No such entry.
(Wed Nov 27 09:54:34 2019) [sssd[be[nwra.com]]] [ipa_id_get_account_info_orig_done] (0x0040): Failed to make request to our cache: [2]: [No such file or directory]
(Wed Nov 27 09:54:34 2019) [sssd[be[nwra.com]]] [dp_reply_std_set] (0x0080): DP Error is OK on failed request?
(Wed Nov 27 09:54:34 2019) [sssd[be[nwra.com]]] [dp_req_done] (0x0400): DP Request [Account #13]: Request handler finished [0]: Success
(Wed Nov 27 09:54:34 2019) [sssd[be[nwra.com]]] [_dp_req_recv] (0x0400): DP Request [Account #13]: Receiving request data.
(Wed Nov 27 09:54:34 2019) [sssd[be[nwra.com]]] [dp_req_destructor] (0x0400): DP Request [Account #13]: Request removed.
(Wed Nov 27 09:54:34 2019) [sssd[be[nwra.com]]] [dp_req_destructor] (0x0400): Number of active DP request: 0
(Wed Nov 27 09:54:34 2019) [sssd[be[nwra.com]]] [dp_req_reply_std] (0x1000): DP Request [Account #13]: Returning [Success]: 0,2,Success
(Wed Nov 27 09:54:34 2019) [sssd[be[nwra.com]]] [sbus_issue_request_done] (0x0400): sssd.dataprovider.getAccountInfo: Success
(Wed Nov 27 09:54:34 2019) [sssd[be[nwra.com]]] [sbus_dispatch] (0x4000): Dispatching.
(Wed Nov 27 09:54:34 2019) [sssd[be[nwra.com]]] [sbus_dispatch] (0x4000): Dispatching.
(Wed Nov 27 09:54:34 2019) [sssd[be[nwra.com]]] [sbus_dispatch] (0x4000): Dispatching.
(Wed Nov 27 09:54:34 2019) [sssd[be[nwra.com]]] [sbus_method_handler] (0x2000): Received D-Bus method sssd.dataprovider.getAccountInfo on /sssd
(Wed Nov 27 09:54:34 2019) [sssd[be[nwra.com]]] [sbus_senders_lookup] (0x2000): Looking for identity of sender [sssd.pam]
(Wed Nov 27 09:54:34 2019) [sssd[be[nwra.com]]] [dp_get_account_info_send] (0x0200): Got request for [0x14][BE_REQ_BY_CERT][cert=MIIHgTCCBWmgAwIBAgITdgAAAuC+PzqtwK38UwAAAAAC4DANBgkqhkiG9w0BAQ0FADBcMRMwEQYKCZImiZPyLGQBGRYDY29tMRQwEgYKCZImiZPyLGQBGRYEbndyYTESMBAGCgmSJomT8ixkARkWAmFkMRswGQYDVQQDExJhZC1BRC1TRUFUVExFMDEtQ0EwHhcNMTkxMTI1MjEyOTE4WhcNMjExMTI1MjEzOTE4WjAAMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr42+cQaubOMtGQqRiw5qWo5mEPTLqhU9QAg6/qvs5XfoHZQqF0+y7EgI4CVtX991hDbuNGZt0hXuTj4qIrShAwKHEJA5N+kW4BhrKlksIoK1p+V3xzJwrwesXmLPNnLLafzRaQXpcV6ZJUkR/+nsnvMf7kopYosY9pE8ntby3xyVl+re4p4dkloacrm6Sb/UTdtPSBx7LGXpcNHtyBMQqUKxBnOawu5SIkUnjCDDmoM88wCdgx6zGnjU+dxXz2XPEE8uiTgVgefliHdiRp7vtHoo4K1Hiyw9zbkKBqw0ZxfmXBJSinDFasQvUCvSLSB0FRwPd+TzHAqStqYISz3+6wIDAQABo4IDljCCA5IwPgYJKwYBBAGCNxUHBDEwLwYnKwYBBAGCNxUIg+SaI4OlokOBjZ0QgZ7gGoGqhgaBMoSJzH2DstUQAgFkAgEWMB8GA1UdJQQYMBYGCisGAQQBgjcUAgIGCCsGAQUFBwMCMA4GA1UdDwEB/wQEAwIFoDApBgkrBgEEAYI3FQoEHDAaMAwGCisGAQQBgjcUAgIwCgYIKwYBBQUHAwIwgZQGCSqGSIb3DQEJDwSBhjCBgzALBglghkgBZQMEASowCwYJYIZIAWUDBAEtMAsGCWCGSAFlAwQBFjALBglghkgBZQMEARkwCwYJYIZIAWUDBAECMAsGCWCGSAFlAwQBBTAKBggqhkiG9w0DBzAHBgUrDgMCBzAOBggqhkiG9w0DAgICAIAwDgYIKoZIhvcNAwQCAgIAMB0GA1UdDgQWBBRpAI0xkrWObCIFfJwNkvKW2PGd7jAfBgNVHSMEGDAWgBR80kxpkDyTnbTOQ8W+/kd+XgwNOTCCASAGA1UdHwSCARcwggETMIIBD6CCAQugggEHhkFodHRwOi8vQUQtU0VBVFRMRTAxLmFkLm53cmEuY29tL0NlcnRFbnJvbGwvYWQtQUQtU0VBVFRMRTAxLUNBLmNybIaBwWxkYXA6Ly8vQ049YWQtQUQtU0VBVFRMRTAxLUNBLENOPUFELVNFQVRUTEUwMSxDTj1DRFAsQ049UHVibGljJTIwS2V5JTIwU2VydmljZXMsQ049U2VydmljZXMsQ049Q29uZmlndXJhdGlvbixEQz1hZCxEQz1ud3JhLERDPWNvbT9jZXJ0aWZpY2F0ZVJldm9jYXRpb25MaXN0P2Jhc2U/b2JqZWN0Q2xhc3M9Y1JMRGlzdHJpYnV0aW9uUG9pbnQwgccGCCsGAQUFBwEBBIG6MIG3MIG0BggrBgEFBQcwAoaBp2xkYXA6Ly8vQ049YWQtQUQtU0VBVFRMRTAxLUNBLENOPUFJQSxDTj1QdWJsaWMlMjBLZXklMjBTZXJ2aWNlcyxDTj1TZXJ2aWNlcyxDTj1Db25maWd1cmF0aW9uLERDPWFkLERDPW53cmEsREM9Y29tP2NBQ2VydGlmaWNhdGU/YmFzZT9vYmplY3RDbGFzcz1jZXJ0aWZpY2F0aW9uQXV0aG9yaXR5MC8GA1UdEQEB/wQlMCOgIQYKKwYBBAGCNxQCA6ATDBFvcmlvbkBhZC5ud3JhLmNvbTANBgkqhkiG9w0BAQ0FAAOCAgEAUm2LQQgKIxQnlvQQe6djX8AwE52RCKNA51lSuogYcQlko1DSURQTSuRsn3Onza8cekRCn2jm14XUrRo+8aTigimKrESFZloqZ8P1wZ+zM0k+FmBzvIO/5oBkJRLm5izM7CNOQEBXI53oWL+bZlF+RBOvs2IK5o0QOhZnCXwMspu9s3i9ab2ko2TV/j1dvBgS/mu2a7q/F3k7BHO80bXtPzfcX1fhUMyCAzuQ/JpEs2y95FS32xK7ZqZO1rHWKftz4MxKrkxccVxmGOUriJDPHb8+wbWB1ChWSXkPLaV4xdSF1he26xCbADVyfOPM/kHkzd0D9raYyeMfpLoC0nE8f0zQoiL+HFPKOrcuRWkJoTXZ2bCGR9ZvACI4HQQABUmWkjCleSmiwxlbxMu2wlF0BbYQYWs6Hq6fFY1PSevJab4FJlg3KssspAkbQsG7HaaFbs7en5Tkrrc5dWTFRFPoK3f2NWvdhV9eajKyZTQJPQPAM2xCYKJ7dOv+Y9wDTq2h/6fmeIsWc5rq0ZPFc8zYkFD/ca/jWLn44oRcrbFZza6hVI24qMrQ6CQ4TwwZJ14g+Ft7l3ECtC1ott/BW76/xeu9daVnNYjbwnekbWnu1C2hfM4zC4z0fW/FynFjPNjffRGGPBqE3EKnIcrBAx76TRRvdJk8gLBOxYUty0Rvz/U=]
(Wed Nov 27 09:54:34 2019) [sssd[be[nwra.com]]] [dp_attach_req] (0x0400): DP Request [Account #14]: New request. Flags [0x0001].
(Wed Nov 27 09:54:34 2019) [sssd[be[nwra.com]]] [dp_attach_req] (0x0400): Number of active DP request: 1
(Wed Nov 27 09:54:34 2019) [sssd[be[nwra.com]]] [sss_domain_get_state] (0x1000): Domain nwra.com is Active
(Wed Nov 27 09:54:34 2019) [sssd[be[nwra.com]]] [sss_domain_get_state] (0x1000): Domain ad.nwra.com is Active
(Wed Nov 27 09:54:34 2019) [sssd[be[nwra.com]]] [sss_domain_get_state] (0x1000): Domain nwra.com is Active
(Wed Nov 27 09:54:34 2019) [sssd[be[nwra.com]]] [sss_domain_get_state] (0x1000): Domain ad.nwra.com is Active
(Wed Nov 27 09:54:34 2019) [sssd[be[nwra.com]]] [sdap_id_op_connect_step] (0x4000): reusing cached connection
(Wed Nov 27 09:54:34 2019) [sssd[be[nwra.com]]] [sdap_id_op_connect_step] (0x4000): reusing cached connection
(Wed Nov 27 09:54:34 2019) [sssd[be[nwra.com]]] [ipa_get_ad_override_connect_done] (0x4000): Searching for overrides in view [Tcsh] with filter [(&(objectClass=ipaUserOverride)(userCertificate;binary=\30\82\07\81\30\82\05\69\a0\03\02\01\02\02\13\76\00\00\02\e0\be\3f\3a\ad\c0\ad\fc\53\00\00\00\00\02\e0\30\0d\06\09\2a\86\48\86\f7\0d\01\01\0d\05\00\30\5c\31\13\30\11\06\0a\09\92\26\89\93\f2\2c\64\01\19\16\03\63\6f\6d\31\14\30\12\06\0a\09\92\26\89\93\f2\2c\64\01\19\16\04\6e\77\72\61\31\12\30\10\06\0a\09\92\26\89\93\f2\2c\64\01\19\16\02\61\64\31\1b\30\19\06\03\55\04\03\13\12\61\64\2d\41\44\2d\53\45\41\54\54\4c\45\30\31\2d\43\41\30\1e\17\0d\31\39\31\31\32\35\32\31\32\39\31\38\5a\17\0d\32\31\31\31\32\35\32\31\33\39\31\38\5a\30\00\30\82\01\22\30\0d\06\09\2a\86\48\86\f7\0d\01\01\01\05\00\03\82\01\0f\00\30\82\01\0a\02\82\01\01\00\af\8d\be\71\06\ae\6c\e3\2d\19\0a\91\8b\0e\6a\5a\8e\66\10\f4\cb\aa\15\3d\40\08\3a\fe\ab\ec\e5\77\e8\1d\94\2a\17\4f\b2\ec\48\08\e0\25\6d\5f\df\75\84\36\ee\34\66\6d\d2\15\ee\4e\3e\2a\22\b4\a1\03\02\87\10\90\39\37\e9\16\e0\18\6b\2a\59\2c\22\82\b5\a7\e5\77\c7\32\70\af\07\ac\5e\62\cf\36\72\cb\69\fc\d1\69\05\e9\71\5e\99\25\49\11\ff\e9\ec\9e\f3\1f\ee\4a\29\62\8b\18\f6\91\3c\9e\d6\f2\df\1c\95\97\ea\de\e2\9e\1d\92\5a\1a\72\b9\ba\49\bf\d4\4d\db\4f\48\1c\7b\2c\65\e9\70\d1\ed\c8\13\10\a9\42\b1\06\73\9a\c2\ee\52\22\45\27\8c\20\c3\9a\83\3c\f3\00\9d\83\1e\b3\1a\78\d4\f9\dc\57\cf\65\cf\10\4f\2e\89\38\15\81\e7\e5\88\77\62\46\9e\ef\b4\7a\28\e0\ad\47\8b\2c\3d\cd\b9\0a\06\ac\34\67\17\e6\5c\12\52\8a\70\c5\6a\c4\2f\50\2b\d2\2d\20\74\15\1c\0f\77\e4\f3\1c\0a\92\b6\a6\08\4b\3d\fe\eb\02\03\01\00\01\a3\82\03\96\30\82\03\92\30\3e\06\09\2b\06\01\04\01\82\37\15\07\04\31\30\2f\06\27\2b\06\01\04\01\82\37\15\08\83\e4\9a\23\83\a5\a2\43\81\8d\9d\10\81\9e\e0\1a\81\aa\86\06\81\32\84\89\cc\7d\83\b2\d5\10\02\01\64\02\01\16\30\1f\06\03\55\1d\25\04\18\30\16\06\0a\2b\06\01\04\01\82\37\14\02\02\06\08\2b\06\01\05\05\07\03\02\30\0e\06\03\55\1d\0f\01\01\ff\04\04\03\02\05\a0\30\29\06\09\2b\06\01\04\01\82\37\15\0a\04\1c\30\1a\30\0c\06\0a\2b\06\01\04\01\82\37\14\02\02\30\0a\06\08\2b\06\01\05\05\07\03\02\30\81\94\06\09\2a\86\48\86\f7\0d\01\09\0f\04\81\86\30\81\83\30\0b\06\09\60\86\48\01\65\03\04\01\2a\30\0b\06\09\60\86\48\01\65\03\04\01\2d\30\0b\06\09\60\86\48\01\65\03\04\01\16\30\0b\06\09\60\86\48\01\65\03\04\01\19\30\0b\06\09\60\86\48\01\65\03\04\01\02\30\0b\06\09\60\86\48\01\65\03\04\01\05\30\0a\06\08\2a\86\48\86\f7\0d\03\07\30\07\06\05\2b\0e\03\02\07\30\0e\06\08\2a\86\48\86\f7\0d\03\02\02\02\00\80\30\0e\06\08\2a\86\48\86\f7\0d\03\04\02\02\02\00\30\1d\06\03\55\1d\0e\04\16\04\14\69\00\8d\31\92\b5\8e\6c\22\05\7c\9c\0d\92\f2\96\d8\f1\9d\ee\30\1f\06\03\55\1d\23\04\18\30\16\80\14\7c\d2\4c\69\90\3c\93\9d\b4\ce\43\c5\be\fe\47\7e\5e\0c\0d\39\30\82\01\20\06\03\55\1d\1f\04\82\01\17\30\82\01\13\30\82\01\0f\a0\82\01\0b\a0\82\01\07\86\41\68\74\74\70\3a\2f\2f\41\44\2d\53\45\41\54\54\4c\45\30\31\2e\61\64\2e\6e\77\72\61\2e\63\6f\6d\2f\43\65\72\74\45\6e\72\6f\6c\6c\2f\61\64\2d\41\44\2d\53\45\41\54\54\4c\45\30\31\2d\43\41\2e\63\72\6c\86\81\c1\6c\64\61\70\3a\2f\2f\2f\43\4e\3d\61\64\2d\41\44\2d\53\45\41\54\54\4c\45\30\31\2d\43\41\2c\43\4e\3d\41\44\2d\53\45\41\54\54\4c\45\30\31\2c\43\4e\3d\43\44\50\2c\43\4e\3d\50\75\62\6c\69\63\25\32\30\4b\65\79\25\32\30\53\65\72\76\69\63\65\73\2c\43\4e\3d\53\65\72\76\69\63\65\73\2c\43\4e\3d\43\6f\6e\66\69\67\75\72\61\74\69\6f\6e\2c\44\43\3d\61\64\2c\44\43\3d\6e\77\72\61\2c\44\43\3d\63\6f\6d\3f\63\65\72\74\69\66\69\63\61\74\65\52\65\76\6f\63\61\74\69\6f\6e\4c\69\73\74\3f\62\61\73\65\3f\6f\62\6a\65\63\74\43\6c\61\73\73\3d\63\52\4c\44\69\73\74\72\69\62\75\74\69\6f\6e\50\6f\69\6e\74\30\81\c7\06\08\2b\06\01\05\05\07\01\01\04\81\ba\30\81\b7\30\81\b4\06\08\2b\06\01\05\05\07\30\02\86\81\a7\6c\64\61\70\3a\2f\2f\2f\43\4e\3d\61\64\2d\41\44\2d\53\45\41\54\54\4c\45\30\31\2d\43\41\2c\43\4e\3d\41\49\41\2c\43\4e\3d\50\75\62\6c\69\63\25\32\30\4b\65\79\25\32\30\53\65\72\76\69\63\65\73\2c\43\4e\3d\53\65\72\76\69\63\65\73\2c\43\4e\3d\43\6f\6e\66\69\67\75\72\61\74\69\6f\6e\2c\44\43\3d\61\64\2c\44\43\3d\6e\77\72\61\2c\44\43\3d\63\6f\6d\3f\63\41\43\65\72\74\69\66\69\63\61\74\65\3f\62\61\73\65\3f\6f\62\6a\65\63\74\43\6c\61\73\73\3d\63\65\72\74\69\66\69\63\61\74\69\6f\6e\41\75\74\68\6f\72\69\74\79\30\2f\06\03\55\1d\11\01\01\ff\04\25\30\23\a0\21\06\0a\2b\06\01\04\01\82\37\14\02\03\a0\13\0c\11\6f\72\69\6f\6e\40\61\64\2e\6e\77\72\61\2e\63\6f\6d\30\0d\06\09\2a\86\48\86\f7\0d\01\01\0d\05\00\03\82\02\01\00\52\6d\8b\41\08\0a\23\14\27\96\f4\10\7b\a7\63\5f\c0\30\13\9d\91\08\a3\40\e7\59\52\ba\88\18\71\09\64\a3\50\d2\51\14\13\4a\e4\6c\9f\73\a7\cd\af\1c\7a\44\42\9f\68\e6\d7\85\d4\ad\1a\3e\f1\a4\e2\82\29\8a\ac\44\85\66\5a\2a\67\c3\f5\c1\9f\b3\33\49\3e\16\60\73\bc\83\bf\e6\80\64\25\12\e6\e6\2c\cc\ec\23\4e\40\40\57\23\9d\e8\58\bf\9b\66\51\7e\44\13\af\b3\62\0a\e6\8d\10\3a\16\67\09\7c\0c\b2\9b\bd\b3\78\bd\69\bd\a4\a3\64\d5\fe\3d\5d\bc\18\12\fe\6b\b6\6b\ba\bf\17\79\3b\04\73\bc\d1\b5\ed\3f\37\dc\5f\57\e1\50\cc\82\03\3b\90\fc\9a\44\b3\6c\bd\e4\54\b7\db\12\bb\66\a6\4e\d6\b1\d6\29\fb\73\e0\cc\4a\ae\4c\5c\71\5c\66\18\e5\2b\88\90\cf\1d\bf\3e\c1\b5\81\d4\28\56\49\79\0f\2d\a5\78\c5\d4\85\d6\17\b6\eb\10\9b\00\35\72\7c\e3\cc\fe\41\e4\cd\dd\03\f6\b6\98\c9\e3\1f\a4\ba\02\d2\71\3c\7f\4c\d0\a2\22\fe\1c\53\ca\3a\b7\2e\45\69\09\a1\35\d9\d9\b0\86\47\d6\6f\00\22\38\1d\04\00\05\49\96\92\30\a5\79\29\a2\c3\19\5b\c4\cb\b6\c2\51\74\05\b6\10\61\6b\3a\1e\ae\9f\15\8d\4f\49\eb\c9\69\be\05\26\58\37\2a\cb\2c\a4\09\1b\42\c1\bb\1d\a6\85\6e\ce\de\9f\94\e4\ae\b7\39\75\64\c5\44\53\e8\2b\77\f6\35\6b\dd\85\5f\5e\6a\32\b2\65\34\09\3d\03\c0\33\6c\42\60\a2\7b\74\eb\fe\63\dc\03\4e\ad\a1\ff\a7\e6\78\8b\16\73\9a\ea\d1\93\c5\73\cc\d8\90\50\ff\71\af\e3\58\b9\f8\e2\84\5c\ad\b1\59\cd\ae\a1\54\8d\b8\a8\ca\d0\e8\24\38\4f\0c\19\27\5e\20\f8\5b\7b\97\71\02\b4\2d\68\b6\df\c1\5b\be\bf\c5\eb\bd\75\a5\67\35\88\db\c2\77\a4\6d\69\ee\d4\2d\a1\7c\ce\33\0b\8c\f4\7d\6f\c5\ca\71\63\3c\d8\df\7d\11\86\3c\1a\84\dc\42\a7\21\ca\c1\03\1e\fa\4d\14\6f\74\99\3c\80\b0\4e\c5\85\2d\cb\44\6f\cf\f5))].
(Wed Nov 27 09:54:34 2019) [sssd[be[nwra.com]]] [sdap_print_server] (0x2000): Searching 10.10.41.4:389
(Wed Nov 27 09:54:34 2019) [sssd[be[nwra.com]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(&(objectClass=ipaUserOverride)(userCertificate;binary=\30\82\07\81\30\82\05\69\a0\03\02\01\02\02\13\76\00\00\02\e0\be\3f\3a\ad\c0\ad\fc\53\00\00\00\00\02\e0\30\0d\06\09\2a\86\48\86\f7\0d\01\01\0d\05\00\30\5c\31\13\30\11\06\0a\09\92\26\89\93\f2\2c\64\01\19\16\03\63\6f\6d\31\14\30\12\06\0a\09\92\26\89\93\f2\2c\64\01\19\16\04\6e\77\72\61\31\12\30\10\06\0a\09\92\26\89\93\f2\2c\64\01\19\16\02\61\64\31\1b\30\19\06\03\55\04\03\13\12\61\64\2d\41\44\2d\53\45\41\54\54\4c\45\30\31\2d\43\41\30\1e\17\0d\31\39\31\31\32\35\32\31\32\39\31\38\5a\17\0d\32\31\31\31\32\35\32\31\33\39\31\38\5a\30\00\30\82\01\22\30\0d\06\09\2a\86\48\86\f7\0d\01\01\01\05\00\03\82\01\0f\00\30\82\01\0a\02\82\01\01\00\af\8d\be\71\06\ae\6c\e3\2d\19\0a\91\8b\0e\6a\5a\8e\66\10\f4\cb\aa\15\3d\40\08\3a\fe\ab\ec\e5\77\e8\1d\94\2a\17\4f\b2\ec\48\08\e0\25\6d\5f\df\75\84\36\ee\34\66\6d\d2\15\ee\4e\3e\2a\22\b4\a1\03\02\87\10\90\39\37\e9\16\e0\18\6b\2a\59\2c\22\82\b5\a7\e5\77\c7\32\70\af\07\ac\5e\62\cf\36\72\cb\69\fc\d1\69\05\e9\71\5e\99\25\49\11\ff\e9\ec\9e\f3\1f\ee\4a\29\62\8b\18\f6\91\3c\9e\d6\f2\df\1c\95\97\ea\de\e2\9e\1d\92\5a\1a\72\b9\ba\49\bf\d4\4d\db\4f\48\1c\7b\2c\65\e9\70\d1\ed\c8\13\10\a9\42\b1\06\73\9a\c2\ee\52\22\45\27\8c\20\c3\9a\83\3c\f3\00\9d\83\1e\b3\1a\78\d4\f9\dc\57\cf\65\cf\10\4f\2e\89\38\15\81\e7\e5\88\77\62\46\9e\ef\b4\7a\28\e0\ad\47\8b\2c\3d\cd\b9\0a\06\ac\34\67\17\e6\5c\12\52\8a\70\c5\6a\c4\2f\50\2b\d2\2d\20\74\15\1c\0f\77\e4\f3\1c\0a\92\b6\a6\08\4b\3d\fe\eb\02\03\01\00\01\a3\82\03\96\30\82\03\92\30\3e\06\09\2b\06\01\04\01\82\37\15\07\04\31\30\2f\06\27\2b\06\01\04\01\82\37\15\08\83\e4\9a\23\83\a5\a2\43\81\8d\9d\10\81\9e\e0\1a\81\aa\86\06\81\32\84\89\cc\7d\83\b2\d5\10\02\01\64\02\01\16\30\1f\06\03\55\1d\25\04\18\30\16\06\0a\2b\06\01\04\01\82\37\14\02\02\06\08\2b\06\01\05\05\07\03\02\30\0e\06\03\55\1d\0f\01\01\ff\04\04\03\02\05\a0\30\29\06\09\2b\06\01\04\01\82\37\15\0a\04\1c\30\1a\30\0c\06\0a\2b\06\01\04\01\82\37\14\02\02\30\0a\06\08\2b\06\01\05\05\07\03\02\30\81\94\06\09\2a\86\48\86\f7\0d\01\09\0f\04\81\86\30\81\83\30\0b\06\09\60\86\48\01\65\03\04\01\2a\30\0b\06\09\60\86\48\01\65\03\04\01\2d\30\0b\06\09\60\86\48\01\65\03\04\01\16\30\0b\06\09\60\86\48\01\65\03\04\01\19\30\0b\06\09\60\86\48\01\65\03\04\01\02\30\0b\06\09\60\86\48\01\65\03\04\01\05\30\0a\06\08\2a\86\48\86\f7\0d\03\07\30\07\06\05\2b\0e\03\02\07\30\0e\06\08\2a\86\48\86\f7\0d\03\02\02\02\00\80\30\0e\06\08\2a\86\48\86\f7\0d\03\04\02\02\02\00\30\1d\06\03\55\1d\0e\04\16\04\14\69\00\8d\31\92\b5\8e\6c\22\05\7c\9c\0d\92\f2\96\d8\f1\9d\ee\30\1f\06\03\55\1d\23\04\18\30\16\80\14\7c\d2\4c\69\90\3c\93\9d\b4\ce\43\c5\be\fe\47\7e\5e\0c\0d\39\30\82\01\20\06\03\55\1d\1f\04\82\01\17\30\82\01\13\30\82\01\0f\a0\82\01\0b\a0\82\01\07\86\41\68\74\74\70\3a\2f\2f\41\44\2d\53\45\41\54\54\4c\45\30\31\2e\61\64\2e\6e\77\72\61\2e\63\6f\6d\2f\43\65\72\74\45\6e\72\6f\6c\6c\2f\61\64\2d\41\44\2d\53\45\41\54\54\4c\45\30\31\2d\43\41\2e\63\72\6c\86\81\c1\6c\64\61\70\3a\2f\2f\2f\43\4e\3d\61\64\2d\41\44\2d\53\45\41\54\54\4c\45\30\31\2d\43\41\2c\43\4e\3d\41\44\2d\53\45\41\54\54\4c\45\30\31\2c\43\4e\3d\43\44\50\2c\43\4e\3d\50\75\62\6c\69\63\25\32\30\4b\65\79\25\32\30\53\65\72\76\69\63\65\73\2c\43\4e\3d\53\65\72\76\69\63\65\73\2c\43\4e\3d\43\6f\6e\66\69\67\75\72\61\74\69\6f\6e\2c\44\43\3d\61\64\2c\44\43\3d\6e\77\72\61\2c\44\43\3d\63\6f\6d\3f\63\65\72\74\69\66\69\63\61\74\65\52\65\76\6f\63\61\74\69\6f\6e\4c\69\73\74\3f\62\61\73\65\3f\6f\62\6a\65\63\74\43\6c\61\73\73\3d\63\52\4c\44\69\73\74\72\69\62\75\74\69\6f\6e\50\6f\69\6e\74\30\81\c7\06\08\2b\06\01\05\05\07\01\01\04\81\ba\30\81\b7\30\81\b4\06\08\2b\06\01\05\05\07\30\02\86\81\a7\6c\64\61\70\3a\2f\2f\2f\43\4e\3d\61\64\2d\41\44\2d\53\45\41\54\54\4c\45\30\31\2d\43\41\2c\43\4e\3d\41\49\41\2c\43\4e\3d\50\75\62\6c\69\63\25\32\30\4b\65\79\25\32\30\53\65\72\76\69\63\65\73\2c\43\4e\3d\53\65\72\76\69\63\65\73\2c\43\4e\3d\43\6f\6e\66\69\67\75\72\61\74\69\6f\6e\2c\44\43\3d\61\64\2c\44\43\3d\6e\77\72\61\2c\44\43\3d\63\6f\6d\3f\63\41\43\65\72\74\69\66\69\63\61\74\65\3f\62\61\73\65\3f\6f\62\6a\65\63\74\43\6c\61\73\73\3d\63\65\72\74\69\66\69\63\61\74\69\6f\6e\41\75\74\68\6f\72\69\74\79\30\2f\06\03\55\1d\11\01\01\ff\04\25\30\23\a0\21\06\0a\2b\06\01\04\01\82\37\14\02\03\a0\13\0c\11\6f\72\69\6f\6e\40\61\64\2e\6e\77\72\61\2e\63\6f\6d\30\0d\06\09\2a\86\48\86\f7\0d\01\01\0d\05\00\03\82\02\01\00\52\6d\8b\41\08\0a\23\14\27\96\f4\10\7b\a7\63\5f\c0\30\13\9d\91\08\a3\40\e7\59\52\ba\88\18\71\09\64\a3\50\d2\51\14\13\4a\e4\6c\9f\73\a7\cd\af\1c\7a\44\42\9f\68\e6\d7\85\d4\ad\1a\3e\f1\a4\e2\82\29\8a\ac\44\85\66\5a\2a\67\c3\f5\c1\9f\b3\33\49\3e\16\60\73\bc\83\bf\e6\80\64\25\12\e6\e6\2c\cc\ec\23\4e\40\40\57\23\9d\e8\58\bf\9b\66\51\7e\44\13\af\b3\62\0a\e6\8d\10\3a\16\67\09\7c\0c\b2\9b\bd\b3\78\bd\69\bd\a4\a3\64\d5\fe\3d\5d\bc\18\12\fe\6b\b6\6b\ba\bf\17\79\3b\04\73\bc\d1\b5\ed\3f\37\dc\5f\57\e1\50\cc\82\03\3b\90\fc\9a\44\b3\6c\bd\e4\54\b7\db\12\bb\66\a6\4e\d6\b1\d6\29\fb\73\e0\cc\4a\ae\4c\5c\71\5c\66\18\e5\2b\88\90\cf\1d\bf\3e\c1\b5\81\d4\28\56\49\79\0f\2d\a5\78\c5\d4\85\d6\17\b6\eb\10\9b\00\35\72\7c\e3\cc\fe\41\e4\cd\dd\03\f6\b6\98\c9\e3\1f\a4\ba\02\d2\71\3c\7f\4c\d0\a2\22\fe\1c\53\ca\3a\b7\2e\45\69\09\a1\35\d9\d9\b0\86\47\d6\6f\00\22\38\1d\04\00\05\49\96\92\30\a5\79\29\a2\c3\19\5b\c4\cb\b6\c2\51\74\05\b6\10\61\6b\3a\1e\ae\9f\15\8d\4f\49\eb\c9\69\be\05\26\58\37\2a\cb\2c\a4\09\1b\42\c1\bb\1d\a6\85\6e\ce\de\9f\94\e4\ae\b7\39\75\64\c5\44\53\e8\2b\77\f6\35\6b\dd\85\5f\5e\6a\32\b2\65\34\09\3d\03\c0\33\6c\42\60\a2\7b\74\eb\fe\63\dc\03\4e\ad\a1\ff\a7\e6\78\8b\16\73\9a\ea\d1\93\c5\73\cc\d8\90\50\ff\71\af\e3\58\b9\f8\e2\84\5c\ad\b1\59\cd\ae\a1\54\8d\b8\a8\ca\d0\e8\24\38\4f\0c\19\27\5e\20\f8\5b\7b\97\71\02\b4\2d\68\b6\df\c1\5b\be\bf\c5\eb\bd\75\a5\67\35\88\db\c2\77\a4\6d\69\ee\d4\2d\a1\7c\ce\33\0b\8c\f4\7d\6f\c5\ca\71\63\3c\d8\df\7d\11\86\3c\1a\84\dc\42\a7\21\ca\c1\03\1e\fa\4d\14\6f\74\99\3c\80\b0\4e\c5\85\2d\cb\44\6f\cf\f5))][cn=Tcsh,cn=views,cn=accounts,dc=nwra,dc=com].
(Wed Nov 27 09:54:34 2019) [sssd[be[nwra.com]]] [sdap_get_generic_ext_step] (0x2000): ldap_search_ext called, msgid = 27
(Wed Nov 27 09:54:34 2019) [sssd[be[nwra.com]]] [sdap_op_add] (0x2000): New operation 27 timeout 6
(Wed Nov 27 09:54:34 2019) [sssd[be[nwra.com]]] [sdap_process_result] (0x2000): Trace: sh[0x56502359bfd0], connected[1], ops[0x565023602240], ldap[0x565023598cf0]
(Wed Nov 27 09:54:34 2019) [sssd[be[nwra.com]]] [sdap_process_message] (0x4000): Message type: [LDAP_RES_SEARCH_RESULT]
(Wed Nov 27 09:54:34 2019) [sssd[be[nwra.com]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set
(Wed Nov 27 09:54:34 2019) [sssd[be[nwra.com]]] [sdap_op_destructor] (0x2000): Operation 27 finished
(Wed Nov 27 09:54:34 2019) [sssd[be[nwra.com]]] [ipa_get_ad_override_done] (0x4000): No override found with filter [(&(objectClass=ipaUserOverride)(userCertificate;binary=\30\82\07\81\30\82\05\69\a0\03\02\01\02\02\13\76\00\00\02\e0\be\3f\3a\ad\c0\ad\fc\53\00\00\00\00\02\e0\30\0d\06\09\2a\86\48\86\f7\0d\01\01\0d\05\00\30\5c\31\13\30\11\06\0a\09\92\26\89\93\f2\2c\64\01\19\16\03\63\6f\6d\31\14\30\12\06\0a\09\92\26\89\93\f2\2c\64\01\19\16\04\6e\77\72\61\31\12\30\10\06\0a\09\92\26\89\93\f2\2c\64\01\19\16\02\61\64\31\1b\30\19\06\03\55\04\03\13\12\61\64\2d\41\44\2d\53\45\41\54\54\4c\45\30\31\2d\43\41\30\1e\17\0d\31\39\31\31\32\35\32\31\32\39\31\38\5a\17\0d\32\31\31\31\32\35\32\31\33\39\31\38\5a\30\00\30\82\01\22\30\0d\06\09\2a\86\48\86\f7\0d\01\01\01\05\00\03\82\01\0f\00\30\82\01\0a\02\82\01\01\00\af\8d\be\71\06\ae\6c\e3\2d\19\0a\91\8b\0e\6a\5a\8e\66\10\f4\cb\aa\15\3d\40\08\3a\fe\ab\ec\e5\77\e8\1d\94\2a\17\4f\b2\ec\48\08\e0\25\6d\5f\df\75\84\36\ee\34\66\6d\d2\15\ee\4e\3e\2a\22\b4\a1\03\02\87\10\90\39\37\e9\16\e0\18\6b\2a\59\2c\22\82\b5\a7\e5\77\c7\32\70\af\07\ac\5e\62\cf\36\72\cb\69\fc\d1\69\05\e9\71\5e\99\25\49\11\ff\e9\ec\9e\f3\1f\ee\4a\29\62\8b\18\f6\91\3c\9e\d6\f2\df\1c\95\97\ea\de\e2\9e\1d\92\5a\1a\72\b9\ba\49\bf\d4\4d\db\4f\48\1c\7b\2c\65\e9\70\d1\ed\c8\13\10\a9\42\b1\06\73\9a\c2\ee\52\22\45\27\8c\20\c3\9a\83\3c\f3\00\9d\83\1e\b3\1a\78\d4\f9\dc\57\cf\65\cf\10\4f\2e\89\38\15\81\e7\e5\88\77\62\46\9e\ef\b4\7a\28\e0\ad\47\8b\2c\3d\cd\b9\0a\06\ac\34\67\17\e6\5c\12\52\8a\70\c5\6a\c4\2f\50\2b\d2\2d\20\74\15\1c\0f\77\e4\f3\1c\0a\92\b6\a6\08\4b\3d\fe\eb\02\03\01\00\01\a3\82\03\96\30\82\03\92\30\3e\06\09\2b\06\01\04\01\82\37\15\07\04\31\30\2f\06\27\2b\06\01\04\01\82\37\15\08\83\e4\9a\23\83\a5\a2\43\81\8d\9d\10\81\9e\e0\1a\81\aa\86\06\81\32\84\89\cc\7d\83\b2\d5\10\02\01\64\02\01\16\30\1f\06\03\55\1d\25\04\18\30\16\06\0a\2b\06\01\04\01\82\37\14\02\02\06\08\2b\06\01\05\05\07\03\02\30\0e\06\03\55\1d\0f\01\01\ff\04\04\03\02\05\a0\30\29\06\09\2b\06\01\04\01\82\37\15\0a\04\1c\30\1a\30\0c\06\0a\2b\06\01\04\01\82\37\14\02\02\30\0a\06\08\2b\06\01\05\05\07\03\02\30\81\94\06\09\2a\86\48\86\f7\0d\01\09\0f\04\81\86\30\81\83\30\0b\06\09\60\86\48\01\65\03\04\01\2a\30\0b\06\09\60\86\48\01\65\03\04\01\2d\30\0b\06\09\60\86\48\01\65\03\04\01\16\30\0b\06\09\60\86\48\01\65\03\04\01\19\30\0b\06\09\60\86\48\01\65\03\04\01\02\30\0b\06\09\60\86\48\01\65\03\04\01\05\30\0a\06\08\2a\86\48\86\f7\0d\03\07\30\07\06\05\2b\0e\03\02\07\30\0e\06\08\2a\86\48\86\f7\0d\03\02\02\02\00\80\30\0e\06\08\2a\86\48\86\f7\0d\03\04\02\02\02\00\30\1d\06\03\55\1d\0e\04\16\04\14\69\00\8d\31\92\b5\8e\6c\22\05\7c\9c\0d\92\f2\96\d8\f1\9d\ee\30\1f\06\03\55\1d\23\04\18\30\16\80\14\7c\d2\4c\69\90\3c\93\9d\b4\ce\43\c5\be\fe\47\7e\5e\0c\0d\39\30\82\01\20\06\03\55\1d\1f\04\82\01\17\30\82\01\13\30\82\01\0f\a0\82\01\0b\a0\82\01\07\86\41\68\74\74\70\3a\2f\2f\41\44\2d\53\45\41\54\54\4c\45\30\31\2e\61\64\2e\6e\77\72\61\2e\63\6f\6d\2f\43\65\72\74\45\6e\72\6f\6c\6c\2f\61\64\2d\41\44\2d\53\45\41\54\54\4c\45\30\31\2d\43\41\2e\63\72\6c\86\81\c1\6c\64\61\70\3a\2f\2f\2f\43\4e\3d\61\64\2d\41\44\2d\53\45\41\54\54\4c\45\30\31\2d\43\41\2c\43\4e\3d\41\44\2d\53\45\41\54\54\4c\45\30\31\2c\43\4e\3d\43\44\50\2c\43\4e\3d\50\75\62\6c\69\63\25\32\30\4b\65\79\25\32\30\53\65\72\76\69\63\65\73\2c\43\4e\3d\53\65\72\76\69\63\65\73\2c\43\4e\3d\43\6f\6e\66\69\67\75\72\61\74\69\6f\6e\2c\44\43\3d\61\64\2c\44\43\3d\6e\77\72\61\2c\44\43\3d\63\6f\6d\3f\63\65\72\74\69\66\69\63\61\74\65\52\65\76\6f\63\61\74\69\6f\6e\4c\69\73\74\3f\62\61\73\65\3f\6f\62\6a\65\63\74\43\6c\61\73\73\3d\63\52\4c\44\69\73\74\72\69\62\75\74\69\6f\6e\50\6f\69\6e\74\30\81\c7\06\08\2b\06\01\05\05\07\01\01\04\81\ba\30\81\b7\30\81\b4\06\08\2b\06\01\05\05\07\30\02\86\81\a7\6c\64\61\70\3a\2f\2f\2f\43\4e\3d\61\64\2d\41\44\2d\53\45\41\54\54\4c\45\30\31\2d\43\41\2c\43\4e\3d\41\49\41\2c\43\4e\3d\50\75\62\6c\69\63\25\32\30\4b\65\79\25\32\30\53\65\72\76\69\63\65\73\2c\43\4e\3d\53\65\72\76\69\63\65\73\2c\43\4e\3d\43\6f\6e\66\69\67\75\72\61\74\69\6f\6e\2c\44\43\3d\61\64\2c\44\43\3d\6e\77\72\61\2c\44\43\3d\63\6f\6d\3f\63\41\43\65\72\74\69\66\69\63\61\74\65\3f\62\61\73\65\3f\6f\62\6a\65\63\74\43\6c\61\73\73\3d\63\65\72\74\69\66\69\63\61\74\69\6f\6e\41\75\74\68\6f\72\69\74\79\30\2f\06\03\55\1d\11\01\01\ff\04\25\30\23\a0\21\06\0a\2b\06\01\04\01\82\37\14\02\03\a0\13\0c\11\6f\72\69\6f\6e\40\61\64\2e\6e\77\72\61\2e\63\6f\6d\30\0d\06\09\2a\86\48\86\f7\0d\01\01\0d\05\00\03\82\02\01\00\52\6d\8b\41\08\0a\23\14\27\96\f4\10\7b\a7\63\5f\c0\30\13\9d\91\08\a3\40\e7\59\52\ba\88\18\71\09\64\a3\50\d2\51\14\13\4a\e4\6c\9f\73\a7\cd\af\1c\7a\44\42\9f\68\e6\d7\85\d4\ad\1a\3e\f1\a4\e2\82\29\8a\ac\44\85\66\5a\2a\67\c3\f5\c1\9f\b3\33\49\3e\16\60\73\bc\83\bf\e6\80\64\25\12\e6\e6\2c\cc\ec\23\4e\40\40\57\23\9d\e8\58\bf\9b\66\51\7e\44\13\af\b3\62\0a\e6\8d\10\3a\16\67\09\7c\0c\b2\9b\bd\b3\78\bd\69\bd\a4\a3\64\d5\fe\3d\5d\bc\18\12\fe\6b\b6\6b\ba\bf\17\79\3b\04\73\bc\d1\b5\ed\3f\37\dc\5f\57\e1\50\cc\82\03\3b\90\fc\9a\44\b3\6c\bd\e4\54\b7\db\12\bb\66\a6\4e\d6\b1\d6\29\fb\73\e0\cc\4a\ae\4c\5c\71\5c\66\18\e5\2b\88\90\cf\1d\bf\3e\c1\b5\81\d4\28\56\49\79\0f\2d\a5\78\c5\d4\85\d6\17\b6\eb\10\9b\00\35\72\7c\e3\cc\fe\41\e4\cd\dd\03\f6\b6\98\c9\e3\1f\a4\ba\02\d2\71\3c\7f\4c\d0\a2\22\fe\1c\53\ca\3a\b7\2e\45\69\09\a1\35\d9\d9\b0\86\47\d6\6f\00\22\38\1d\04\00\05\49\96\92\30\a5\79\29\a2\c3\19\5b\c4\cb\b6\c2\51\74\05\b6\10\61\6b\3a\1e\ae\9f\15\8d\4f\49\eb\c9\69\be\05\26\58\37\2a\cb\2c\a4\09\1b\42\c1\bb\1d\a6\85\6e\ce\de\9f\94\e4\ae\b7\39\75\64\c5\44\53\e8\2b\77\f6\35\6b\dd\85\5f\5e\6a\32\b2\65\34\09\3d\03\c0\33\6c\42\60\a2\7b\74\eb\fe\63\dc\03\4e\ad\a1\ff\a7\e6\78\8b\16\73\9a\ea\d1\93\c5\73\cc\d8\90\50\ff\71\af\e3\58\b9\f8\e2\84\5c\ad\b1\59\cd\ae\a1\54\8d\b8\a8\ca\d0\e8\24\38\4f\0c\19\27\5e\20\f8\5b\7b\97\71\02\b4\2d\68\b6\df\c1\5b\be\bf\c5\eb\bd\75\a5\67\35\88\db\c2\77\a4\6d\69\ee\d4\2d\a1\7c\ce\33\0b\8c\f4\7d\6f\c5\ca\71\63\3c\d8\df\7d\11\86\3c\1a\84\dc\42\a7\21\ca\c1\03\1e\fa\4d\14\6f\74\99\3c\80\b0\4e\c5\85\2d\cb\44\6f\cf\f5))].
(Wed Nov 27 09:54:34 2019) [sssd[be[nwra.com]]] [sdap_id_op_destroy] (0x4000): releasing operation connection
(Wed Nov 27 09:54:34 2019) [sssd[be[nwra.com]]] [sss_domain_get_state] (0x1000): Domain nwra.com is Active
(Wed Nov 27 09:54:34 2019) [sssd[be[nwra.com]]] [sss_domain_get_state] (0x1000): Domain ad.nwra.com is Active
(Wed Nov 27 09:54:34 2019) [sssd[be[nwra.com]]] [sdap_id_op_connect_step] (0x4000): reusing cached connection
(Wed Nov 27 09:54:34 2019) [sssd[be[nwra.com]]] [ipa_s2n_get_acct_info_send] (0x0400): Sending request_type: [REQ_SIMPLE] for trust user [MIIHgTCCBWmgAwIBAgITdgAAAuC+PzqtwK38UwAAAAAC4DANBgkqhkiG9w0BAQ0FADBcMRMwEQYKCZImiZPyLGQBGRYDY29tMRQwEgYKCZImiZPyLGQBGRYEbndyYTESMBAGCgmSJomT8ixkARkWAmFkMRswGQYDVQQDExJhZC1BRC1TRUFUVExFMDEtQ0EwHhcNMTkxMTI1MjEyOTE4WhcNMjExMTI1MjEzOTE4WjAAMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr42+cQaubOMtGQqRiw5qWo5mEPTLqhU9QAg6/qvs5XfoHZQqF0+y7EgI4CVtX991hDbuNGZt0hXuTj4qIrShAwKHEJA5N+kW4BhrKlksIoK1p+V3xzJwrwesXmLPNnLLafzRaQXpcV6ZJUkR/+nsnvMf7kopYosY9pE8ntby3xyVl+re4p4dkloacrm6Sb/UTdtPSBx7LGXpcNHtyBMQqUKxBnOawu5SIkUnjCDDmoM88wCdgx6zGnjU+dxXz2XPEE8uiTgVgefliHdiRp7vtHoo4K1Hiyw9zbkKBqw0ZxfmXBJSinDFasQvUCvSLSB0FRwPd+TzHAqStqYISz3+6wIDAQABo4IDljCCA5IwPgYJKwYBBAGCNxUHBDEwLwYnKwYBBAGCNxUIg+SaI4OlokOBjZ0QgZ7gGoGqhgaBMoSJzH2DstUQAgFkAgEWMB8GA1UdJQQYMBYGCisGAQQBgjcUAgIGCCsGAQUFBwMCMA4GA1UdDwEB/wQEAwIFoDApBgkrBgEEAYI3FQoEHDAaMAwGCisGAQQBgjcUAgIwCgYIKwYBBQUHAwIwgZQGCSqGSIb3DQEJDwSBhjCBgzALBglghkgBZQMEASowCwYJYIZIAWUDBAEtMAsGCWCGSAFlAwQBFjALBglghkgBZQMEARkwCwYJYIZIAWUDBAECMAsGCWCGSAFlAwQBBTAKBggqhkiG9w0DBzAHBgUrDgMCBzAOBggqhkiG9w0DAgICAIAwDgYIKoZIhvcNAwQCAgIAMB0GA1UdDgQWBBRpAI0xkrWObCIFfJwNkvKW2PGd7jAfBgNVHSMEGDAWgBR80kxpkDyTnbTOQ8W+/kd+XgwNOTCCASAGA1UdHwSCARcwggETMIIBD6CCAQugggEHhkFodHRwOi8vQUQtU0VBVFRMRTAxLmFkLm53cmEuY29tL0NlcnRFbnJvbGwvYWQtQUQtU0VBVFRMRTAxLUNBLmNybIaBwWxkYXA6Ly8vQ049YWQtQUQtU0VBVFRMRTAxLUNBLENOPUFELVNFQVRUTEUwMSxDTj1DRFAsQ049UHVibGljJTIwS2V5JTIwU2VydmljZXMsQ049U2VydmljZXMsQ049Q29uZmlndXJhdGlvbixEQz1hZCxEQz1ud3JhLERDPWNvbT9jZXJ0aWZpY2F0ZVJldm9jYXRpb25MaXN0P2Jhc2U/b2JqZWN0Q2xhc3M9Y1JMRGlzdHJpYnV0aW9uUG9pbnQwgccGCCsGAQUFBwEBBIG6MIG3MIG0BggrBgEFBQcwAoaBp2xkYXA6Ly8vQ049YWQtQUQtU0VBVFRMRTAxLUNBLENOPUFJQSxDTj1QdWJsaWMlMjBLZXklMjBTZXJ2aWNlcyxDTj1TZXJ2aWNlcyxDTj1Db25maWd1cmF0aW9uLERDPWFkLERDPW53cmEsREM9Y29tP2NBQ2VydGlmaWNhdGU/YmFzZT9vYmplY3RDbGFzcz1jZXJ0aWZpY2F0aW9uQXV0aG9yaXR5MC8GA1UdEQEB/wQlMCOgIQYKKwYBBAGCNxQCA6ATDBFvcmlvbkBhZC5ud3JhLmNvbTANBgkqhkiG9w0BAQ0FAAOCAgEAUm2LQQgKIxQnlvQQe6djX8AwE52RCKNA51lSuogYcQlko1DSURQTSuRsn3Onza8cekRCn2jm14XUrRo+8aTigimKrESFZloqZ8P1wZ+zM0k+FmBzvIO/5oBkJRLm5izM7CNOQEBXI53oWL+bZlF+RBOvs2IK5o0QOhZnCXwMspu9s3i9ab2ko2TV/j1dvBgS/mu2a7q/F3k7BHO80bXtPzfcX1fhUMyCAzuQ/JpEs2y95FS32xK7ZqZO1rHWKftz4MxKrkxccVxmGOUriJDPHb8+wbWB1ChWSXkPLaV4xdSF1he26xCbADVyfOPM/kHkzd0D9raYyeMfpLoC0nE8f0zQoiL+HFPKOrcuRWkJoTXZ2bCGR9ZvACI4HQQABUmWkjCleSmiwxlbxMu2wlF0BbYQYWs6Hq6fFY1PSevJab4FJlg3KssspAkbQsG7HaaFbs7en5Tkrrc5dWTFRFPoK3f2NWvdhV9eajKyZTQJPQPAM2xCYKJ7dOv+Y9wDTq2h/6fmeIsWc5rq0ZPFc8zYkFD/ca/jWLn44oRcrbFZza6hVI24qMrQ6CQ4TwwZJ14g+Ft7l3ECtC1ott/BW76/xeu9daVnNYjbwnekbWnu1C2hfM4zC4z0fW/FynFjPNjffRGGPBqE3EKnIcrBAx76TRRvdJk8gLBOxYUty0Rvz/U=] to IPA server
(Wed Nov 27 09:54:34 2019) [sssd[be[nwra.com]]] [ipa_s2n_exop_send] (0x0400): Executing extended operation
(Wed Nov 27 09:54:34 2019) [sssd[be[nwra.com]]] [ipa_s2n_exop_send] (0x2000): ldap_extended_operation sent, msgid = 28
(Wed Nov 27 09:54:34 2019) [sssd[be[nwra.com]]] [sdap_op_add] (0x2000): New operation 28 timeout 6
(Wed Nov 27 09:54:34 2019) [sssd[be[nwra.com]]] [sdap_process_result] (0x2000): Trace: sh[0x56502359bfd0], connected[1], ops[0x56502359e8e0], ldap[0x565023598cf0]
(Wed Nov 27 09:54:34 2019) [sssd[be[nwra.com]]] [sdap_process_result] (0x2000): Trace: end of ldap_result list
(Wed Nov 27 09:54:34 2019) [sssd[be[nwra.com]]] [sdap_process_result] (0x2000): Trace: sh[0x56502359bfd0], connected[1], ops[0x56502359e8e0], ldap[0x565023598cf0]
(Wed Nov 27 09:54:34 2019) [sssd[be[nwra.com]]] [sdap_process_message] (0x4000): Message type: [LDAP_RES_EXTENDED]
(Wed Nov 27 09:54:34 2019) [sssd[be[nwra.com]]] [ipa_s2n_exop_done] (0x0040): ldap_extended_operation result: No such object(32), (null).
(Wed Nov 27 09:54:34 2019) [sssd[be[nwra.com]]] [sdap_op_destructor] (0x2000): Operation 28 finished
(Wed Nov 27 09:54:34 2019) [sssd[be[nwra.com]]] [sdap_id_op_done] (0x4000): releasing operation connection
(Wed Nov 27 09:54:34 2019) [sssd[be[nwra.com]]] [sdap_id_op_destroy] (0x4000): releasing operation connection

sssd-2.2.2-3.fc31.x86_64
We have the following certmap rules:

--------------------------------------------
2 Certificate Identity Mapping Rules matched
--------------------------------------------
  Rule name: ad_cert_for_ad_users
  Mapping rule: (distinguishedName={subject_dn})
  Matching rule: <ISSUER>CN=ad-AD-
                 SEATTLE01-CA,DC=ad,DC=nwra,DC=com<EKU>clientAuth,1.3.6.1.4.1.311.20.2.2
  Domain name: ad.nwra.com
  Enabled: TRUE

  Rule name: ad_cert_upn_from_san
  Mapping rule: (|(userPrincipal={subject_nt_principal})(samAccountName={subject_nt_principal.short_name}))
  Matching rule: <ISSUER>CN=ad-AD-
                 SEATTLE01-CA,DC=ad,DC=nwra,DC=com<EKU>clientAuth,1.3.6.1.4.1.311.20.2.2
  Domain name: ad.nwra.com
  Priority: 10
  Enabled: TRUE

The first rule was our initial one that uses the subject_dn. We added the second to try to use the UPN in the SAN. Not sure if that is the correct syntax.

This is the openssl version of issue #4122

orion commented 5 years ago

sssd_nwra.com.log on IPA server:

(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [dp_get_account_info_handler] (0x0200): Got request for [0x14][BE_REQ_BY_CERT][cert=MIIHgTCCBWmgAwIBAgITdgAAAuC+PzqtwK38UwAAAAAC4DANBgkqhkiG9w0BAQ0FADBcMRMwEQYKCZImiZPyLGQBGRYDY29tMRQwEgYKCZImiZPyLGQBGRYEbndyYTESMBAGCgmSJomT8ixkARkWAmFkMRswGQYDVQQDExJhZC1BRC1TRUFUVExFMDEtQ0EwHhcNMTkxMTI1MjEyOTE4WhcNMjExMTI1MjEzOTE4WjAAMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr42+cQaubOMtGQqRiw5qWo5mEPTLqhU9QAg6/qvs5XfoHZQqF0+y7EgI4CVtX991hDbuNGZt0hXuTj4qIrShAwKHEJA5N+kW4BhrKlksIoK1p+V3xzJwrwesXmLPNnLLafzRaQXpcV6ZJUkR/+nsnvMf7kopYosY9pE8ntby3xyVl+re4p4dkloacrm6Sb/UTdtPSBx7LGXpcNHtyBMQqUKxBnOawu5SIkUnjCDDmoM88wCdgx6zGnjU+dxXz2XPEE8uiTgVgefliHdiRp7vtHoo4K1Hiyw9zbkKBqw0ZxfmXBJSinDFasQvUCvSLSB0FRwPd+TzHAqStqYISz3+6wIDAQABo4IDljCCA5IwPgYJKwYBBAGCNxUHBDEwLwYnKwYBBAGCNxUIg+SaI4OlokOBjZ0QgZ7gGoGqhgaBMoSJzH2DstUQAgFkAgEWMB8GA1UdJQQYMBYGCisGAQQBgjcUAgIGCCsGAQUFBwMCMA4GA1UdDwEB/wQEAwIFoDApBgkrBgEEAYI3FQoEHDAaMAwGCisGAQQBgjcUAgIwCgYIKwYBBQUHAwIwgZQGCSqGSIb3DQEJDwSBhjCBgzALBglghkgBZQMEASowCwYJYIZIAWUDBAEtMAsGCWCGSAFlAwQBFjALBglghkgBZQMEARkwCwYJYIZIAWUDBAECMAsGCWCGSAFlAwQBBTAKBggqhkiG9w0DBzAHBgUrDgMCBzAOBggqhkiG9w0DAgICAIAwDgYIKoZIhvcNAwQCAgIAMB0GA1UdDgQWBBRpAI0xkrWObCIFfJwNkvKW2PGd7jAfBgNVHSMEGDAWgBR80kxpkDyTnbTOQ8W+/kd+XgwNOTCCASAGA1UdHwSCARcwggETMIIBD6CCAQugggEHhkFodHRwOi8vQUQtU0VBVFRMRTAxLmFkLm53cmEuY29tL0NlcnRFbnJvbGwvYWQtQUQtU0VBVFRMRTAxLUNBLmNybIaBwWxkYXA6Ly8vQ049YWQtQUQtU0VBVFRMRTAxLUNBLENOPUFELVNFQVRUTEUwMSxDTj1DRFAsQ049UHVibGljJTIwS2V5JTIwU2VydmljZXMsQ049U2VydmljZXMsQ049Q29uZmlndXJhdGlvbixEQz1hZCxEQz1ud3JhLERDPWNvbT9jZXJ0aWZpY2F0ZVJldm9jYXRpb25MaXN0P2Jhc2U/b2JqZWN0Q2xhc3M9Y1JMRGlzdHJpYnV0aW9uUG9pbnQwgccGCCsGAQUFBwEBBIG6MIG3MIG0BggrBgEFBQcwAoaBp2xkYXA6Ly8vQ049YWQtQUQtU0VBVFRMRTAxLUNBLENOPUFJQSxDTj1QdWJsaWMlMjBLZXklMjBTZXJ2aWNlcyxDTj1TZXJ2aWNlcyxDTj1Db25maWd1cmF0aW9uLERDPWFkLERDPW53cmEsREM9Y29tP2NBQ2VydGlmaWNhdGU/YmFzZT9vYmplY3RDbGFzcz1jZXJ0aWZpY2F0aW9uQXV0aG9yaXR5MC8GA1UdEQEB/wQlMCOgIQYKKwYBBAGCNxQCA6ATDBFvcmlvbkBhZC5ud3JhLmNvbTANBgkqhkiG9w0BAQ0FAAOCAgEAUm2LQQgKIxQnlvQQe6djX8AwE52RCKNA51lSuogYcQlko1DSURQTSuRsn3Onza8cekRCn2jm14XUrRo+8aTigimKrESFZloqZ8P1wZ+zM0k+FmBzvIO/5oBkJRLm5izM7CNOQEBXI53oWL+bZlF+RBOvs2IK5o0QOhZnCXwMspu9s3i9ab2ko2TV/j1dvBgS/mu2a7q/F3k7BHO80bXtPzfcX1fhUMyCAzuQ/JpEs2y95FS32xK7ZqZO1rHWKftz4MxKrkxccVxmGOUriJDPHb8+wbWB1ChWSXkPLaV4xdSF1he26xCbADVyfOPM/kHkzd0D9raYyeMfpLoC0nE8f0zQoiL+HFPKOrcuRWkJoTXZ2bCGR9ZvACI4HQQABUmWkjCleSmiwxlbxMu2wlF0BbYQYWs6Hq6fFY1PSevJab4FJlg3KssspAkbQsG7HaaFbs7en5Tkrrc5dWTFRFPoK3f2NWvdhV9eajKyZTQJPQPAM2xCYKJ7dOv+Y9wDTq2h/6fmeIsWc5rq0ZPFc8zYkFD/ca/jWLn44oRcrbFZza6hVI24qMrQ6CQ4TwwZJ14g+Ft7l3ECtC1ott/BW76/xeu9daVnNYjbwnekbWnu1C2hfM4zC4z0fW/FynFjPNjffRGGPBqE3EKnIcrBAx76TRRvdJk8gLBOxYUty0Rvz/U=]
(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [dp_attach_req] (0x0400): DP Request [Account #355]: New request. Flags [0x0001].
(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [dp_attach_req] (0x0400): Number of active DP request: 1
(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [sss_domain_get_state] (0x1000): Domain nwra.com is Active
(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [sss_domain_get_state] (0x1000): Domain nwra.com is Active
(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [sss_certmap_get_search_filter] (0x0040): Failed to get certificate content [12].
(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [sss_cert_derb64_to_ldap_filter] (0x0040): sss_certmap_get_search_filter failed.
(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [users_get_send] (0x0040): sss_cert_derb64_to_ldap_filter failed.
(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [ldb] (0x4000): Added timed event "ltdb_callback": 0x56174f81f4f0

(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [ldb] (0x4000): Added timed event "ltdb_timeout": 0x56174f81eef0

(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [ldb] (0x4000): Running timer event 0x56174f81f4f0 "ltdb_callback"

(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [ldb] (0x4000): Destroying timer event 0x56174f81eef0 "ltdb_timeout"

(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [ldb] (0x4000): Destroying timer event 0x56174f81f4f0 "ltdb_callback"

(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [sysdb_search_object_attr] (0x0400): No such entry.
(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [ldb] (0x4000): Added timed event "ltdb_callback": 0x56174f81f4f0

(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [ldb] (0x4000): Added timed event "ltdb_timeout": 0x56174f7bfcb0

(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [ldb] (0x4000): Running timer event 0x56174f81f4f0 "ltdb_callback"

(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [ldb] (0x4000): Destroying timer event 0x56174f7bfcb0 "ltdb_timeout"

(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [ldb] (0x4000): Destroying timer event 0x56174f81f4f0 "ltdb_callback"

(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [sysdb_search_object_attr] (0x0400): No such entry.
(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [ipa_id_get_account_info_orig_done] (0x0040): Failed to make request to our cache: [2]: [No such file or directory]
(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [dp_reply_std_set] (0x0080): DP Error is OK on failed request?
(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [dp_req_done] (0x0400): DP Request [Account #355]: Request handler finished [0]: Success
(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [_dp_req_recv] (0x0400): DP Request [Account #355]: Receiving request data.
(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [dp_req_reply_list_success] (0x0400): DP Request [Account #355]: Finished. Success.
(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [dp_req_reply_std] (0x1000): DP Request [Account #355]: Returning [Success]: 0,2,Success
(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [dp_table_value_destructor] (0x0400): Removing [0:1:0x0001:20::nwra.com:cert=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] from reply table
(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [dp_req_destructor] (0x0400): DP Request [Account #355]: Request removed.
(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [dp_req_destructor] (0x0400): Number of active DP request: 0
(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [sbus_dispatch] (0x4000): dbus conn: 0x56174f7ccf00
(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [sbus_dispatch] (0x4000): Dispatching.
(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [sbus_message_handler] (0x2000): Received SBUS method org.freedesktop.sssd.dataprovider.getAccountInfo on path /org/freedesktop/sssd/dataprovider
(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [sbus_get_sender_id_send] (0x2000): Not a sysbus message, quit
(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [dp_get_account_info_handler] (0x0200): Got request for [0x14][BE_REQ_BY_CERT][cert=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]
(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [dp_attach_req] (0x0400): DP Request [Account #356]: New request. Flags [0x0001].
(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [dp_attach_req] (0x0400): Number of active DP request: 1
(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [sss_domain_get_state] (0x1000): Domain nwra.com is Active
(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [sss_domain_get_state] (0x1000): Domain ad.nwra.com is Active
(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [sss_domain_get_state] (0x1000): Domain nwra.com is Active
(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [sss_domain_get_state] (0x1000): Domain ad.nwra.com is Active
(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [sdap_id_op_connect_step] (0x4000): reusing cached connection
(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [sdap_id_op_connect_step] (0x4000): reusing cached connection
(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [ipa_get_ad_override_connect_done] (0x4000): Searching for overrides in view [Default Trust View] with filter [(&(objectClass=ipaUserOverride)(userCertificate;binary=\30\82\07\81\30\82\05\69\a0\03\02\01\02\02\13\76\00\00\02\e0\be\3f\3a\ad\c0\ad\fc\53\00\00\00\00\02\e0\30\0d\06\09\2a\86\48\86\f7\0d\01\01\0d\05\00\30\5c\31\13\30\11\06\0a\09\92\26\89\93\f2\2c\64\01\19\16\03\63\6f\6d\31\14\30\12\06\0a\09\92\26\89\93\f2\2c\64\01\19\16\04\6e\77\72\61\31\12\30\10\06\0a\09\92\26\89\93\f2\2c\64\01\19\16\02\61\64\31\1b\30\19\06\03\55\04\03\13\12\61\64\2d\41\44\2d\53\45\41\54\54\4c\45\30\31\2d\43\41\30\1e\17\0d\31\39\31\31\32\35\32\31\32\39\31\38\5a\17\0d\32\31\31\31\32\35\32\31\33\39\31\38\5a\30\00\30\82\01\22\30\0d\06\09\2a\86\48\86\f7\0d\01\01\01\05\00\03\82\01\0f\00\30\82\01\0a\02\82\01\01\00\af\8d\be\71\06\ae\6c\e3\2d\19\0a\91\8b\0e\6a\5a\8e\66\10\f4\cb\aa\15\3d\40\08\3a\fe\ab\ec\e5\77\e8\1d\94\2a\17\4f\b2\ec\48\08\e0\25\6d\5f\df\75\84\36\ee\34\66\6d\d2\15\ee\4e\3e\2a\22\b4\a1\03\02\87\10\90\39\37\e9\16\e0\18\6b\2a\59\2c\22\82\b5\a7\e5\77\c7\32\70\af\07\ac\5e\62\cf\36\72\cb\69\fc\d1\69\05\e9\71\5e\99\25\49\11\ff\e9\ec\9e\f3\1f\ee\4a\29\62\8b\18\f6\91\3c\9e\d6\f2\df\1c\95\97\ea\de\e2\9e\1d\92\5a\1a\72\b9\ba\49\bf\d4\4d\db\4f\48\1c\7b\2c\65\e9\70\d1\ed\c8\13\10\a9\42\b1\06\73\9a\c2\ee\52\22\45\27\8c\20\c3\9a\83\3c\f3\00\9d\83\1e\b3\1a\78\d4\f9\dc\57\cf\65\cf\10\4f\2e\89\38\15\81\e7\e5\88\77\62\46\9e\ef\b4\7a\28\e0\ad\47\8b\2c\3d\cd\b9\0a\06\ac\34\67\17\e6\5c\12\52\8a\70\c5\6a\c4\2f\50\2b\d2\2d\20\74\15\1c\0f\77\e4\f3\1c\0a\92\b6\a6\08\4b\3d\fe\eb\02\03\01\00\01\a3\82\03\96\30\82\03\92\30\3e\06\09\2b\06\01\04\01\82\37\15\07\04\31\30\2f\06\27\2b\06\01\04\01\82\37\15\08\83\e4\9a\23\83\a5\a2\43\81\8d\9d\10\81\9e\e0\1a\81\aa\86\06\81\32\84\89\cc\7d\83\b2\d5\10\02\01\64\02\01\16\30\1f\06\03\55\1d\25\04\18\30\16\06\0a\2b\06\01\04\01\82\37\14\02\02\06\08\2b\06\01\05\05\07\03\02\30\0e\06\03\55\1d\0f\01\01\ff\04\04\03\02\05\a0\30\29\06\09\2b\06\01\04\01\82\37\15\0a\04\1c\30\1a\30\0c\06\0a\2b\06\01\04\01\82\37\14\02\02\30\0a\06\08\2b\06\01\05\05\07\03\02\30\81\94\06\09\2a\86\48\86\f7\0d\01\09\0f\04\81\86\30\81\83\30\0b\06\09\60\86\48\01\65\03\04\01\2a\30\0b\06\09\60\86\48\01\65\03\04\01\2d\30\0b\06\09\60\86\48\01\65\03\04\01\16\30\0b\06\09\60\86\48\01\65\03\04\01\19\30\0b\06\09\60\86\48\01\65\03\04\01\02\30\0b\06\09\60\86\48\01\65\03\04\01\05\30\0a\06\08\2a\86\48\86\f7\0d\03\07\30\07\06\05\2b\0e\03\02\07\30\0e\06\08\2a\86\48\86\f7\0d\03\02\02\02\00\80\30\0e\06\08\2a\86\48\86\f7\0d\03\04\02\02\02\00\30\1d\06\03\55\1d\0e\04\16\04\14\69\00\8d\31\92\b5\8e\6c\22\05\7c\9c\0d\92\f2\96\d8\f1\9d\ee\30\1f\06\03\55\1d\23\04\18\30\16\80\14\7c\d2\4c\69\90\3c\93\9d\b4\ce\43\c5\be\fe\47\7e\5e\0c\0d\39\30\82\01\20\06\03\55\1d\1f\04\82\01\17\30\82\01\13\30\82\01\0f\a0\82\01\0b\a0\82\01\07\86\41\68\74\74\70\3a\2f\2f\41\44\2d\53\45\41\54\54\4c\45\30\31\2e\61\64\2e\6e\77\72\61\2e\63\6f\6d\2f\43\65\72\74\45\6e\72\6f\6c\6c\2f\61\64\2d\41\44\2d\53\45\41\54\54\4c\45\30\31\2d\43\41\2e\63\72\6c\86\81\c1\6c\64\61\70\3a\2f\2f\2f\43\4e\3d\61\64\2d\41\44\2d\53\45\41\54\54\4c\45\30\31\2d\43\41\2c\43\4e\3d\41\44\2d\53\45\41\54\54\4c\45\30\31\2c\43\4e\3d\43\44\50\2c\43\4e\3d\50\75\62\6c\69\63\25\32\30\4b\65\79\25\32\30\53\65\72\76\69\63\65\73\2c\43\4e\3d\53\65\72\76\69\63\65\73\2c\43\4e\3d\43\6f\6e\66\69\67\75\72\61\74\69\6f\6e\2c\44\43\3d\61\64\2c\44\43\3d\6e\77\72\61\2c\44\43\3d\63\6f\6d\3f\63\65\72\74\69\66\69\63\61\74\65\52\65\76\6f\63\61\74\69\6f\6e\4c\69\73\74\3f\62\61\73\65\3f\6f\62\6a\65\63\74\43\6c\61\73\73\3d\63\52\4c\44\69\73\74\72\69\62\75\74\69\6f\6e\50\6f\69\6e\74\30\81\c7\06\08\2b\06\01\05\05\07\01\01\04\81\ba\30\81\b7\30\81\b4\06\08\2b\06\01\05\05\07\30\02\86\81\a7\6c\64\61\70\3a\2f\2f\2f\43\4e\3d\61\64\2d\41\44\2d\53\45\41\54\54\4c\45\30\31\2d\43\41\2c\43\4e\3d\41\49\41\2c\43\4e\3d\50\75\62\6c\69\63\25\32\30\4b\65\79\25\32\30\53\65\72\76\69\63\65\73\2c\43\4e\3d\53\65\72\76\69\63\65\73\2c\43\4e\3d\43\6f\6e\66\69\67\75\72\61\74\69\6f\6e\2c\44\43\3d\61\64\2c\44\43\3d\6e\77\72\61\2c\44\43\3d\63\6f\6d\3f\63\41\43\65\72\74\69\66\69\63\61\74\65\3f\62\61\73\65\3f\6f\62\6a\65\63\74\43\6c\61\73\73\3d\63\65\72\74\69\66\69\63\61\74\69\6f\6e\41\75\74\68\6f\72\69\74\79\30\2f\06\03\55\1d\11\01\01\ff\04\25\30\23\a0\21\06\0a\2b\06\01\04\01\82\37\14\02\03\a0\13\0c\11\6f\72\69\6f\6e\40\61\64\2e\6e\77\72\61\2e\63\6f\6d\30\0d\06\09\2a\86\48\86\f7\0d\01\01\0d\05\00\03\82\02\01\00\52\6d\8b\41\08\0a\23\14\27\96\f4\10\7b\a7\63\5f\c0\30\13\9d\91\08\a3\40\e7\59\52\ba\88\18\71\09\64\a3\50\d2\51\14\13\4a\e4\6c\9f\73\a7\cd\af\1c\7a\44\42\9f\68\e6\d7\85\d4\ad\1a\3e\f1\a4\e2\82\29\8a\ac\44\85\66\5a\2a\67\c3\f5\c1\9f\b3\33\49\3e\16\60\73\bc\83\bf\e6\80\64\25\12\e6\e6\2c\cc\ec\23\4e\40\40\57\23\9d\e8\58\bf\9b\66\51\7e\44\13\af\b3\62\0a\e6\8d\10\3a\16\67\09\7c\0c\b2\9b\bd\b3\78\bd\69\bd\a4\a3\64\d5\fe\3d\5d\bc\18\12\fe\6b\b6\6b\ba\bf\17\79\3b\04\73\bc\d1\b5\ed\3f\37\dc\5f\57\e1\50\cc\82\03\3b\90\fc\9a\44\b3\6c\bd\e4\54\b7\db\12\bb\66\a6\4e\d6\b1\d6\29\fb\73\e0\cc\4a\ae\4c\5c\71\5c\66\18\e5\2b\88\90\cf\1d\bf\3e\c1\b5\81\d4\28\56\49\79\0f\2d\a5\78\c5\d4\85\d6\17\b6\eb\10\9b\00\35\72\7c\e3\cc\fe\41\e4\cd\dd\03\f6\b6\98\c9\e3\1f\a4\ba\02\d2\71\3c\7f\4c\d0\a2\22\fe\1c\53\ca\3a\b7\2e\45\69\09\a1\35\d9\d9\b0\86\47\d6\6f\00\22\38\1d\04\00\05\49\96\92\30\a5\79\29\a2\c3\19\5b\c4\cb\b6\c2\51\74\05\b6\10\61\6b\3a\1e\ae\9f\15\8d\4f\49\eb\c9\69\be\05\26\58\37\2a\cb\2c\a4\09\1b\42\c1\bb\1d\a6\85\6e\ce\de\9f\94\e4\ae\b7\39\75\64\c5\44\53\e8\2b\77\f6\35\6b\dd\85\5f\5e\6a\32\b2\65\34\09\3d\03\c0\33\6c\42\60\a2\7b\74\eb\fe\63\dc\03\4e\ad\a1\ff\a7\e6\78\8b\16\73\9a\ea\d1\93\c5\73\cc\d8\90\50\ff\71\af\e3\58\b9\f8\e2\84\5c\ad\b1\59\cd\ae\a1\54\8d\b8\a8\ca\d0\e8\24\38\4f\0c\19\27\5e\20\f8\5b\7b\97\71\02\b4\2d\68\b6\df\c1\5b\be\bf\c5\eb\bd\75\a5\67\35\88\db\c2\77\a4\6d\69\ee\d4\2d\a1\7c\ce\33\0b\8c\f4\7d\6f\c5\ca\71\63\3c\d8\df\7d\11\86\3c\1a\84\dc\42\a7\21\ca\c1\03\1e\fa\4d\14\6f\74\99\3c\80\b0\4e\c5\85\2d\cb\44\6f\cf\f5))].
(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [sdap_print_server] (0x2000): Searching 10.10.41.4:389
(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(&(objectClass=ipaUserOverride)(userCertificate;binary=\30\82\07\81\30\82\05\69\a0\03\02\01\02\02\13\76\00\00\02\e0\be\3f\3a\ad\c0\ad\fc\53\00\00\00\00\02\e0\30\0d\06\09\2a\86\48\86\f7\0d\01\01\0d\05\00\30\5c\31\13\30\11\06\0a\09\92\26\89\93\f2\2c\64\01\19\16\03\63\6f\6d\31\14\30\12\06\0a\09\92\26\89\93\f2\2c\64\01\19\16\04\6e\77\72\61\31\12\30\10\06\0a\09\92\26\89\93\f2\2c\64\01\19\16\02\61\64\31\1b\30\19\06\03\55\04\03\13\12\61\64\2d\41\44\2d\53\45\41\54\54\4c\45\30\31\2d\43\41\30\1e\17\0d\31\39\31\31\32\35\32\31\32\39\31\38\5a\17\0d\32\31\31\31\32\35\32\31\33\39\31\38\5a\30\00\30\82\01\22\30\0d\06\09\2a\86\48\86\f7\0d\01\01\01\05\00\03\82\01\0f\00\30\82\01\0a\02\82\01\01\00\af\8d\be\71\06\ae\6c\e3\2d\19\0a\91\8b\0e\6a\5a\8e\66\10\f4\cb\aa\15\3d\40\08\3a\fe\ab\ec\e5\77\e8\1d\94\2a\17\4f\b2\ec\48\08\e0\25\6d\5f\df\75\84\36\ee\34\66\6d\d2\15\ee\4e\3e\2a\22\b4\a1\03\02\87\10\90\39\37\e9\16\e0\18\6b\2a\59\2c\22\82\b5\a7\e5\77\c7\32\70\af\07\ac\5e\62\cf\36\72\cb\69\fc\d1\69\05\e9\71\5e\99\25\49\11\ff\e9\ec\9e\f3\1f\ee\4a\29\62\8b\18\f6\91\3c\9e\d6\f2\df\1c\95\97\ea\de\e2\9e\1d\92\5a\1a\72\b9\ba\49\bf\d4\4d\db\4f\48\1c\7b\2c\65\e9\70\d1\ed\c8\13\10\a9\42\b1\06\73\9a\c2\ee\52\22\45\27\8c\20\c3\9a\83\3c\f3\00\9d\83\1e\b3\1a\78\d4\f9\dc\57\cf\65\cf\10\4f\2e\89\38\15\81\e7\e5\88\77\62\46\9e\ef\b4\7a\28\e0\ad\47\8b\2c\3d\cd\b9\0a\06\ac\34\67\17\e6\5c\12\52\8a\70\c5\6a\c4\2f\50\2b\d2\2d\20\74\15\1c\0f\77\e4\f3\1c\0a\92\b6\a6\08\4b\3d\fe\eb\02\03\01\00\01\a3\82\03\96\30\82\03\92\30\3e\06\09\2b\06\01\04\01\82\37\15\07\04\31\30\2f\06\27\2b\06\01\04\01\82\37\15\08\83\e4\9a\23\83\a5\a2\43\81\8d\9d\10\81\9e\e0\1a\81\aa\86\06\81\32\84\89\cc\7d\83\b2\d5\10\02\01\64\02\01\16\30\1f\06\03\55\1d\25\04\18\30\16\06\0a\2b\06\01\04\01\82\37\14\02\02\06\08\2b\06\01\05\05\07\03\02\30\0e\06\03\55\1d\0f\01\01\ff\04\04\03\02\05\a0\30\29\06\09\2b\06\01\04\01\82\37\15\0a\04\1c\30\1a\30\0c\06\0a\2b\06\01\04\01\82\37\14\02\02\30\0a\06\08\2b\06\01\05\05\07\03\02\30\81\94\06\09\2a\86\48\86\f7\0d\01\09\0f\04\81\86\30\81\83\30\0b\06\09\60\86\48\01\65\03\04\01\2a\30\0b\06\09\60\86\48\01\65\03\04\01\2d\30\0b\06\09\60\86\48\01\65\03\04\01\16\30\0b\06\09\60\86\48\01\65\03\04\01\19\30\0b\06\09\60\86\48\01\65\03\04\01\02\30\0b\06\09\60\86\48\01\65\03\04\01\05\30\0a\06\08\2a\86\48\86\f7\0d\03\07\30\07\06\05\2b\0e\03\02\07\30\0e\06\08\2a\86\48\86\f7\0d\03\02\02\02\00\80\30\0e\06\08\2a\86\48\86\f7\0d\03\04\02\02\02\00\30\1d\06\03\55\1d\0e\04\16\04\14\69\00\8d\31\92\b5\8e\6c\22\05\7c\9c\0d\92\f2\96\d8\f1\9d\ee\30\1f\06\03\55\1d\23\04\18\30\16\80\14\7c\d2\4c\69\90\3c\93\9d\b4\ce\43\c5\be\fe\47\7e\5e\0c\0d\39\30\82\01\20\06\03\55\1d\1f\04\82\01\17\30\82\01\13\30\82\01\0f\a0\82\01\0b\a0\82\01\07\86\41\68\74\74\70\3a\2f\2f\41\44\2d\53\45\41\54\54\4c\45\30\31\2e\61\64\2e\6e\77\72\61\2e\63\6f\6d\2f\43\65\72\74\45\6e\72\6f\6c\6c\2f\61\64\2d\41\44\2d\53\45\41\54\54\4c\45\30\31\2d\43\41\2e\63\72\6c\86\81\c1\6c\64\61\70\3a\2f\2f\2f\43\4e\3d\61\64\2d\41\44\2d\53\45\41\54\54\4c\45\30\31\2d\43\41\2c\43\4e\3d\41\44\2d\53\45\41\54\54\4c\45\30\31\2c\43\4e\3d\43\44\50\2c\43\4e\3d\50\75\62\6c\69\63\25\32\30\4b\65\79\25\32\30\53\65\72\76\69\63\65\73\2c\43\4e\3d\53\65\72\76\69\63\65\73\2c\43\4e\3d\43\6f\6e\66\69\67\75\72\61\74\69\6f\6e\2c\44\43\3d\61\64\2c\44\43\3d\6e\77\72\61\2c\44\43\3d\63\6f\6d\3f\63\65\72\74\69\66\69\63\61\74\65\52\65\76\6f\63\61\74\69\6f\6e\4c\69\73\74\3f\62\61\73\65\3f\6f\62\6a\65\63\74\43\6c\61\73\73\3d\63\52\4c\44\69\73\74\72\69\62\75\74\69\6f\6e\50\6f\69\6e\74\30\81\c7\06\08\2b\06\01\05\05\07\01\01\04\81\ba\30\81\b7\30\81\b4\06\08\2b\06\01\05\05\07\30\02\86\81\a7\6c\64\61\70\3a\2f\2f\2f\43\4e\3d\61\64\2d\41\44\2d\53\45\41\54\54\4c\45\30\31\2d\43\41\2c\43\4e\3d\41\49\41\2c\43\4e\3d\50\75\62\6c\69\63\25\32\30\4b\65\79\25\32\30\53\65\72\76\69\63\65\73\2c\43\4e\3d\53\65\72\76\69\63\65\73\2c\43\4e\3d\43\6f\6e\66\69\67\75\72\61\74\69\6f\6e\2c\44\43\3d\61\64\2c\44\43\3d\6e\77\72\61\2c\44\43\3d\63\6f\6d\3f\63\41\43\65\72\74\69\66\69\63\61\74\65\3f\62\61\73\65\3f\6f\62\6a\65\63\74\43\6c\61\73\73\3d\63\65\72\74\69\66\69\63\61\74\69\6f\6e\41\75\74\68\6f\72\69\74\79\30\2f\06\03\55\1d\11\01\01\ff\04\25\30\23\a0\21\06\0a\2b\06\01\04\01\82\37\14\02\03\a0\13\0c\11\6f\72\69\6f\6e\40\61\64\2e\6e\77\72\61\2e\63\6f\6d\30\0d\06\09\2a\86\48\86\f7\0d\01\01\0d\05\00\03\82\02\01\00\52\6d\8b\41\08\0a\23\14\27\96\f4\10\7b\a7\63\5f\c0\30\13\9d\91\08\a3\40\e7\59\52\ba\88\18\71\09\64\a3\50\d2\51\14\13\4a\e4\6c\9f\73\a7\cd\af\1c\7a\44\42\9f\68\e6\d7\85\d4\ad\1a\3e\f1\a4\e2\82\29\8a\ac\44\85\66\5a\2a\67\c3\f5\c1\9f\b3\33\49\3e\16\60\73\bc\83\bf\e6\80\64\25\12\e6\e6\2c\cc\ec\23\4e\40\40\57\23\9d\e8\58\bf\9b\66\51\7e\44\13\af\b3\62\0a\e6\8d\10\3a\16\67\09\7c\0c\b2\9b\bd\b3\78\bd\69\bd\a4\a3\64\d5\fe\3d\5d\bc\18\12\fe\6b\b6\6b\ba\bf\17\79\3b\04\73\bc\d1\b5\ed\3f\37\dc\5f\57\e1\50\cc\82\03\3b\90\fc\9a\44\b3\6c\bd\e4\54\b7\db\12\bb\66\a6\4e\d6\b1\d6\29\fb\73\e0\cc\4a\ae\4c\5c\71\5c\66\18\e5\2b\88\90\cf\1d\bf\3e\c1\b5\81\d4\28\56\49\79\0f\2d\a5\78\c5\d4\85\d6\17\b6\eb\10\9b\00\35\72\7c\e3\cc\fe\41\e4\cd\dd\03\f6\b6\98\c9\e3\1f\a4\ba\02\d2\71\3c\7f\4c\d0\a2\22\fe\1c\53\ca\3a\b7\2e\45\69\09\a1\35\d9\d9\b0\86\47\d6\6f\00\22\38\1d\04\00\05\49\96\92\30\a5\79\29\a2\c3\19\5b\c4\cb\b6\c2\51\74\05\b6\10\61\6b\3a\1e\ae\9f\15\8d\4f\49\eb\c9\69\be\05\26\58\37\2a\cb\2c\a4\09\1b\42\c1\bb\1d\a6\85\6e\ce\de\9f\94\e4\ae\b7\39\75\64\c5\44\53\e8\2b\77\f6\35\6b\dd\85\5f\5e\6a\32\b2\65\34\09\3d\03\c0\33\6c\42\60\a2\7b\74\eb\fe\63\dc\03\4e\ad\a1\ff\a7\e6\78\8b\16\73\9a\ea\d1\93\c5\73\cc\d8\90\50\ff\71\af\e3\58\b9\f8\e2\84\5c\ad\b1\59\cd\ae\a1\54\8d\b8\a8\ca\d0\e8\24\38\4f\0c\19\27\5e\20\f8\5b\7b\97\71\02\b4\2d\68\b6\df\c1\5b\be\bf\c5\eb\bd\75\a5\67\35\88\db\c2\77\a4\6d\69\ee\d4\2d\a1\7c\ce\33\0b\8c\f4\7d\6f\c5\ca\71\63\3c\d8\df\7d\11\86\3c\1a\84\dc\42\a7\21\ca\c1\03\1e\fa\4d\14\6f\74\99\3c\80\b0\4e\c5\85\2d\cb\44\6f\cf\f5))][cn=Default Trust View,cn=views,cn=accounts,dc=nwra,dc=com].
(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [sdap_get_generic_ext_step] (0x2000): ldap_search_ext called, msgid = 376
(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [sdap_op_add] (0x2000): New operation 376 timeout 6
(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [sdap_process_result] (0x2000): Trace: sh[0x56174f7bd690], connected[1], ops[0x56174f7fcc20], ldap[0x56174f7b96e0]
(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [sdap_process_message] (0x4000): Message type: [LDAP_RES_SEARCH_RESULT]
(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set
(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [sdap_op_destructor] (0x2000): Operation 376 finished
(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [ipa_get_ad_override_done] (0x4000): No override found with filter [(&(objectClass=ipaUserOverride)(userCertificate;binary=\30\82\07\81\30\82\05\69\a0\03\02\01\02\02\13\76\00\00\02\e0\be\3f\3a\ad\c0\ad\fc\53\00\00\00\00\02\e0\30\0d\06\09\2a\86\48\86\f7\0d\01\01\0d\05\00\30\5c\31\13\30\11\06\0a\09\92\26\89\93\f2\2c\64\01\19\16\03\63\6f\6d\31\14\30\12\06\0a\09\92\26\89\93\f2\2c\64\01\19\16\04\6e\77\72\61\31\12\30\10\06\0a\09\92\26\89\93\f2\2c\64\01\19\16\02\61\64\31\1b\30\19\06\03\55\04\03\13\12\61\64\2d\41\44\2d\53\45\41\54\54\4c\45\30\31\2d\43\41\30\1e\17\0d\31\39\31\31\32\35\32\31\32\39\31\38\5a\17\0d\32\31\31\31\32\35\32\31\33\39\31\38\5a\30\00\30\82\01\22\30\0d\06\09\2a\86\48\86\f7\0d\01\01\01\05\00\03\82\01\0f\00\30\82\01\0a\02\82\01\01\00\af\8d\be\71\06\ae\6c\e3\2d\19\0a\91\8b\0e\6a\5a\8e\66\10\f4\cb\aa\15\3d\40\08\3a\fe\ab\ec\e5\77\e8\1d\94\2a\17\4f\b2\ec\48\08\e0\25\6d\5f\df\75\84\36\ee\34\66\6d\d2\15\ee\4e\3e\2a\22\b4\a1\03\02\87\10\90\39\37\e9\16\e0\18\6b\2a\59\2c\22\82\b5\a7\e5\77\c7\32\70\af\07\ac\5e\62\cf\36\72\cb\69\fc\d1\69\05\e9\71\5e\99\25\49\11\ff\e9\ec\9e\f3\1f\ee\4a\29\62\8b\18\f6\91\3c\9e\d6\f2\df\1c\95\97\ea\de\e2\9e\1d\92\5a\1a\72\b9\ba\49\bf\d4\4d\db\4f\48\1c\7b\2c\65\e9\70\d1\ed\c8\13\10\a9\42\b1\06\73\9a\c2\ee\52\22\45\27\8c\20\c3\9a\83\3c\f3\00\9d\83\1e\b3\1a\78\d4\f9\dc\57\cf\65\cf\10\4f\2e\89\38\15\81\e7\e5\88\77\62\46\9e\ef\b4\7a\28\e0\ad\47\8b\2c\3d\cd\b9\0a\06\ac\34\67\17\e6\5c\12\52\8a\70\c5\6a\c4\2f\50\2b\d2\2d\20\74\15\1c\0f\77\e4\f3\1c\0a\92\b6\a6\08\4b\3d\fe\eb\02\03\01\00\01\a3\82\03\96\30\82\03\92\30\3e\06\09\2b\06\01\04\01\82\37\15\07\04\31\30\2f\06\27\2b\06\01\04\01\82\37\15\08\83\e4\9a\23\83\a5\a2\43\81\8d\9d\10\81\9e\e0\1a\81\aa\86\06\81\32\84\89\cc\7d\83\b2\d5\10\02\01\64\02\01\16\30\1f\06\03\55\1d\25\04\18\30\16\06\0a\2b\06\01\04\01\82\37\14\02\02\06\08\2b\06\01\05\05\07\03\02\30\0e\06\03\55\1d\0f\01\01\ff\04\04\03\02\05\a0\30\29\06\09\2b\06\01\04\01\82\37\15\0a\04\1c\30\1a\30\0c\06\0a\2b\06\01\04\01\82\37\14\02\02\30\0a\06\08\2b\06\01\05\05\07\03\02\30\81\94\06\09\2a\86\48\86\f7\0d\01\09\0f\04\81\86\30\81\83\30\0b\06\09\60\86\48\01\65\03\04\01\2a\30\0b\06\09\60\86\48\01\65\03\04\01\2d\30\0b\06\09\60\86\48\01\65\03\04\01\16\30\0b\06\09\60\86\48\01\65\03\04\01\19\30\0b\06\09\60\86\48\01\65\03\04\01\02\30\0b\06\09\60\86\48\01\65\03\04\01\05\30\0a\06\08\2a\86\48\86\f7\0d\03\07\30\07\06\05\2b\0e\03\02\07\30\0e\06\08\2a\86\48\86\f7\0d\03\02\02\02\00\80\30\0e\06\08\2a\86\48\86\f7\0d\03\04\02\02\02\00\30\1d\06\03\55\1d\0e\04\16\04\14\69\00\8d\31\92\b5\8e\6c\22\05\7c\9c\0d\92\f2\96\d8\f1\9d\ee\30\1f\06\03\55\1d\23\04\18\30\16\80\14\7c\d2\4c\69\90\3c\93\9d\b4\ce\43\c5\be\fe\47\7e\5e\0c\0d\39\30\82\01\20\06\03\55\1d\1f\04\82\01\17\30\82\01\13\30\82\01\0f\a0\82\01\0b\a0\82\01\07\86\41\68\74\74\70\3a\2f\2f\41\44\2d\53\45\41\54\54\4c\45\30\31\2e\61\64\2e\6e\77\72\61\2e\63\6f\6d\2f\43\65\72\74\45\6e\72\6f\6c\6c\2f\61\64\2d\41\44\2d\53\45\41\54\54\4c\45\30\31\2d\43\41\2e\63\72\6c\86\81\c1\6c\64\61\70\3a\2f\2f\2f\43\4e\3d\61\64\2d\41\44\2d\53\45\41\54\54\4c\45\30\31\2d\43\41\2c\43\4e\3d\41\44\2d\53\45\41\54\54\4c\45\30\31\2c\43\4e\3d\43\44\50\2c\43\4e\3d\50\75\62\6c\69\63\25\32\30\4b\65\79\25\32\30\53\65\72\76\69\63\65\73\2c\43\4e\3d\53\65\72\76\69\63\65\73\2c\43\4e\3d\43\6f\6e\66\69\67\75\72\61\74\69\6f\6e\2c\44\43\3d\61\64\2c\44\43\3d\6e\77\72\61\2c\44\43\3d\63\6f\6d\3f\63\65\72\74\69\66\69\63\61\74\65\52\65\76\6f\63\61\74\69\6f\6e\4c\69\73\74\3f\62\61\73\65\3f\6f\62\6a\65\63\74\43\6c\61\73\73\3d\63\52\4c\44\69\73\74\72\69\62\75\74\69\6f\6e\50\6f\69\6e\74\30\81\c7\06\08\2b\06\01\05\05\07\01\01\04\81\ba\30\81\b7\30\81\b4\06\08\2b\06\01\05\05\07\30\02\86\81\a7\6c\64\61\70\3a\2f\2f\2f\43\4e\3d\61\64\2d\41\44\2d\53\45\41\54\54\4c\45\30\31\2d\43\41\2c\43\4e\3d\41\49\41\2c\43\4e\3d\50\75\62\6c\69\63\25\32\30\4b\65\79\25\32\30\53\65\72\76\69\63\65\73\2c\43\4e\3d\53\65\72\76\69\63\65\73\2c\43\4e\3d\43\6f\6e\66\69\67\75\72\61\74\69\6f\6e\2c\44\43\3d\61\64\2c\44\43\3d\6e\77\72\61\2c\44\43\3d\63\6f\6d\3f\63\41\43\65\72\74\69\66\69\63\61\74\65\3f\62\61\73\65\3f\6f\62\6a\65\63\74\43\6c\61\73\73\3d\63\65\72\74\69\66\69\63\61\74\69\6f\6e\41\75\74\68\6f\72\69\74\79\30\2f\06\03\55\1d\11\01\01\ff\04\25\30\23\a0\21\06\0a\2b\06\01\04\01\82\37\14\02\03\a0\13\0c\11\6f\72\69\6f\6e\40\61\64\2e\6e\77\72\61\2e\63\6f\6d\30\0d\06\09\2a\86\48\86\f7\0d\01\01\0d\05\00\03\82\02\01\00\52\6d\8b\41\08\0a\23\14\27\96\f4\10\7b\a7\63\5f\c0\30\13\9d\91\08\a3\40\e7\59\52\ba\88\18\71\09\64\a3\50\d2\51\14\13\4a\e4\6c\9f\73\a7\cd\af\1c\7a\44\42\9f\68\e6\d7\85\d4\ad\1a\3e\f1\a4\e2\82\29\8a\ac\44\85\66\5a\2a\67\c3\f5\c1\9f\b3\33\49\3e\16\60\73\bc\83\bf\e6\80\64\25\12\e6\e6\2c\cc\ec\23\4e\40\40\57\23\9d\e8\58\bf\9b\66\51\7e\44\13\af\b3\62\0a\e6\8d\10\3a\16\67\09\7c\0c\b2\9b\bd\b3\78\bd\69\bd\a4\a3\64\d5\fe\3d\5d\bc\18\12\fe\6b\b6\6b\ba\bf\17\79\3b\04\73\bc\d1\b5\ed\3f\37\dc\5f\57\e1\50\cc\82\03\3b\90\fc\9a\44\b3\6c\bd\e4\54\b7\db\12\bb\66\a6\4e\d6\b1\d6\29\fb\73\e0\cc\4a\ae\4c\5c\71\5c\66\18\e5\2b\88\90\cf\1d\bf\3e\c1\b5\81\d4\28\56\49\79\0f\2d\a5\78\c5\d4\85\d6\17\b6\eb\10\9b\00\35\72\7c\e3\cc\fe\41\e4\cd\dd\03\f6\b6\98\c9\e3\1f\a4\ba\02\d2\71\3c\7f\4c\d0\a2\22\fe\1c\53\ca\3a\b7\2e\45\69\09\a1\35\d9\d9\b0\86\47\d6\6f\00\22\38\1d\04\00\05\49\96\92\30\a5\79\29\a2\c3\19\5b\c4\cb\b6\c2\51\74\05\b6\10\61\6b\3a\1e\ae\9f\15\8d\4f\49\eb\c9\69\be\05\26\58\37\2a\cb\2c\a4\09\1b\42\c1\bb\1d\a6\85\6e\ce\de\9f\94\e4\ae\b7\39\75\64\c5\44\53\e8\2b\77\f6\35\6b\dd\85\5f\5e\6a\32\b2\65\34\09\3d\03\c0\33\6c\42\60\a2\7b\74\eb\fe\63\dc\03\4e\ad\a1\ff\a7\e6\78\8b\16\73\9a\ea\d1\93\c5\73\cc\d8\90\50\ff\71\af\e3\58\b9\f8\e2\84\5c\ad\b1\59\cd\ae\a1\54\8d\b8\a8\ca\d0\e8\24\38\4f\0c\19\27\5e\20\f8\5b\7b\97\71\02\b4\2d\68\b6\df\c1\5b\be\bf\c5\eb\bd\75\a5\67\35\88\db\c2\77\a4\6d\69\ee\d4\2d\a1\7c\ce\33\0b\8c\f4\7d\6f\c5\ca\71\63\3c\d8\df\7d\11\86\3c\1a\84\dc\42\a7\21\ca\c1\03\1e\fa\4d\14\6f\74\99\3c\80\b0\4e\c5\85\2d\cb\44\6f\cf\f5))].
(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [sdap_id_op_destroy] (0x4000): releasing operation connection
(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [ldb] (0x4000): Added timed event "ltdb_callback": 0x56174f81ba80

(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [ldb] (0x4000): Added timed event "ltdb_timeout": 0x56174f7bfcb0

(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [ldb] (0x4000): Running timer event 0x56174f81ba80 "ltdb_callback"

(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [ldb] (0x4000): Destroying timer event 0x56174f7bfcb0 "ltdb_timeout"

(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [ldb] (0x4000): Destroying timer event 0x56174f81ba80 "ltdb_callback"

(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [sysdb_search_object_attr] (0x0400): No such entry.
(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [sysdb_remove_mapped_data] (0x4000): Mapped data not found.
(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [sss_domain_get_state] (0x1000): Domain nwra.com is Active
(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [sss_domain_get_state] (0x1000): Domain ad.nwra.com is Active
(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [ipa_srv_ad_acct_lookup_step] (0x0400): Looking up AD account
(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [sss_domain_get_state] (0x1000): Domain nwra.com is Active
(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [sss_domain_get_state] (0x1000): Domain ad.nwra.com is Active
(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [sss_domain_get_state] (0x1000): Domain ad.nwra.com is Active
(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [sss_certmap_get_search_filter] (0x0040): Failed to get certificate content [12].
(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [sss_cert_derb64_to_ldap_filter] (0x0040): sss_certmap_get_search_filter failed.
(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [users_get_send] (0x0040): sss_cert_derb64_to_ldap_filter failed.
(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [ldb] (0x4000): Added timed event "ltdb_callback": 0x56174f81eef0

(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [ldb] (0x4000): Added timed event "ltdb_timeout": 0x56174f81ba80

(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [ldb] (0x4000): Running timer event 0x56174f81eef0 "ltdb_callback"

(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [ldb] (0x4000): Destroying timer event 0x56174f81ba80 "ltdb_timeout"

(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [ldb] (0x4000): Destroying timer event 0x56174f81eef0 "ltdb_callback"

(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [sysdb_search_object_attr] (0x0400): No such entry.
(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [ldb] (0x4000): Added timed event "ltdb_callback": 0x56174f7bfcb0

(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [ldb] (0x4000): Added timed event "ltdb_timeout": 0x56174f81eef0

(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [ldb] (0x4000): Running timer event 0x56174f7bfcb0 "ltdb_callback"

(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [ldb] (0x4000): Destroying timer event 0x56174f81eef0 "ltdb_timeout"

(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [ldb] (0x4000): Destroying timer event 0x56174f7bfcb0 "ltdb_callback"

(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [sysdb_search_object_attr] (0x0400): No such entry.
(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [get_object_from_cache] (0x0040): Failed to make request to our cache: [2]: [No such file or directory]
(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [ipa_get_ad_acct_ad_part_done] (0x0080): Object not found, ending request
(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [sdap_id_op_destroy] (0x4000): releasing operation connection
(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [dp_req_done] (0x0400): DP Request [Account #356]: Request handler finished [0]: Success
(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [_dp_req_recv] (0x0400): DP Request [Account #356]: Receiving request data.
(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [dp_req_reply_list_success] (0x0400): DP Request [Account #356]: Finished. Success.
(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [dp_req_reply_std] (0x1000): DP Request [Account #356]: Returning [Success]: 0,0,Success
(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [dp_table_value_destructor] (0x0400): Removing [0:1:0x0001:20::ad.nwra.com:cert=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] from reply table
(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [dp_req_destructor] (0x0400): DP Request [Account #356]: Request removed.
(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [dp_req_destructor] (0x0400): Number of active DP request: 0
(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [sdap_process_result] (0x2000): Trace: sh[0x56174f7bd690], connected[1], ops[(nil)], ldap[0x56174f7b96e0]
(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [sdap_process_result] (0x2000): Trace: end of ldap_result list

orion commented 5 years ago

Hmm, perhaps this is:

(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [sss_certmap_get_search_filter] (0x0040): Failed to get certificate content [12].
(Wed Nov 27 10:51:54 2019) [sssd[be[nwra.com]]] [sss_cert_derb64_to_ldap_filter] (0x0040): sss_certmap_get_search_filter failed.

So perhaps the same issue as #4122 because the server is running on EL7

orion commented 5 years ago

Looks like I can get this to work on Fedora 31 with an EL8 IPA server. However, the gdm login display is odd because I believe it is set to display the certificate subject (I have multiple certificates on the card):

Please select a certificate by typing the ...

[1]
Retired Certificate for Key Management

[2]
Certificate for PIV Authentication

however after selecting the certificate it displays:

PIN for Orion Poplawski

But I think this will have to be taken up with the GDM folks. In any case, this appears to be working with recent sssd/IPA code.

Metadata Update from @orion:
- Issue close_status updated to: Fixed
- Issue status updated to: Closed (was: Open)

5 years ago

orion commented 5 years ago

I suppose it is still possible that there is some issue looking up the DN to display on the sssd side of things. See also https://gitlab.gnome.org/GNOME/gdm/issues/549

orion commented 5 years ago

gdm-smartcard][11455]: GdmSessionWorker: received pam message of type 2 with payload 'Please select a certificate by typing the corresponding number

                                                        [1]:
                                                        Retired Certificate for Key Management 1


                                                        [2]:
                                                        Certificate for PIV Authentication

(Tue Dec 31 16:51:37 2019) [sssd[pam]] [add_pam_cert_response] (0x0020): Unable to parse name '' [1432158283]: The internal name format cannot be parsed, using full name.
(Tue Dec 31 16:51:37 2019) [sssd[pam]] [add_pam_cert_response] (0x0020): Unable to parse name '' [1432158283]: The internal name format cannot be parsed, using full name.
(Tue Dec 31 16:51:37 2019) [sssd[pam]] [filter_responses] (0x0100): [pam_response_filter] not available, not fatal.

So it looks like sssd is responsible for generating the prompt.

Metadata Update from @orion:
- Issue status updated to: Open (was: Closed)

5 years ago

orion commented 5 years ago

So the subject name was previously the DN, so there was nothing to lookup here. It would be helpful if when the subject was empty (set to "None" on the windows certificate template properties) that it presented the alternate subject name which we are setting to the UPN (user principal name).

Metadata Update from @thalman:
- Issue tagged with: Future milestone, Patch is welcome

5 years ago

pbrezina commented 5 years ago

Thank you for taking time to submit this request for SSSD. Unfortunately this issue was not given priority and the team lacks the capacity to work on it at this time.

Given that we are unable to fulfill this request I am closing the issue as wontfix.

If the issue still persist on recent SSSD you can request re-consideration of this decision by reopening this issue. Please provide additional technical details about its importance to you.

Thank you for understanding.

Metadata Update from @pbrezina:
- Issue close_status updated to: wontfix
- Issue status updated to: Closed (was: Open)

5 years ago

pbrezina commented 5 years ago

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/5084

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.

Metadata

Assignee

None

Tags

Blocking

None

Depending on

None

Priority

minor

Milestone

None

type

None

component

None

version

None

selected

None

testsupdated

None

patch

None

rhbz

None

design_review

None

review

None

changelog

None

keywords

None

coverity

None

mark

None

blocking

None

design

None

sensitive

None

blockedby

None

feature_milestone

None

SSSD / sssd

Source Code

Documentation

#4123 RFE: Use alternate subject name for certificates without subject Closed: wontfix 5 years ago by pbrezina. Opened 5 years ago by orion.

Metadata

Patch is welcome Future milestone

#4123 RFE: Use alternate subject name for certificates without subject

Closed: wontfix 5 years ago by pbrezina. Opened 5 years ago by orion.