Learn more about these different git repos.
Other Git URLs
SSSD applies and merges HBAC GPOs in an incorrect order (according to Microsoft's documentation here. According to Microsoft, GPOs linked at the same OU level should be applied with the highest numerical link order being applied first and lower link order GPOs overwriting conflicting settings. Put another way, the lower the numerical link order, the higher the GPO priority / precedence. Practically speaking, link order 1 should be the superior GPO at any particular OU level.
SSSD instead regards the highest link order as being the highest priority. This causes issues because one of the points of SSSD's GPO integration is to allow a single source of policy truth, but these differences in policy merge order can cause drastically different resultant HBAC policies.
Prerequisites: * Working Active Directory domain
Steps to reproduce: 1. Create an OU heirarchy with a parent OU and a leaf ou: OU=Leaf,OU=Parent,DC=domain,DC=com 2. Create AD security groups: hbac-allow-ssh, hbac-deny-ssh 3. Create HBAC-ssh-GPO linked to the Leaf OU. Set up HBAC rules for SSH login as follows: Allow login via remote desktop services = hbac-allow-ssh Deny log on through Terminal Services = hbac-deny-ssh, 4. Add your account to hbac-allow-ssh. 5. configure sssd.conf: ad_gpo_access_control = enforcing 6. Confirm that you are permitted SSH login through HBAC. 7. Create a second gpo HBAC-deny-gpo linked to the leaf OU. Configure: * Deny log on through Terminal Services = [user.name] 8. Set hbac-deny-gpo to link order 2 and hbac-ssh-gpo to link order 1 9. Attempt to log in via SSH again
OU=Leaf,OU=Parent,DC=domain,DC=com
hbac-allow-ssh
hbac-deny-ssh
HBAC-ssh-GPO
Allow login via remote desktop services = hbac-allow-ssh
Deny log on through Terminal Services = hbac-deny-ssh
ad_gpo_access_control = enforcing
HBAC-deny-gpo
Deny log on through Terminal Services = [user.name]
hbac-deny-gpo
hbac-ssh-gpo
Expected results: * SSH should allow the login, because the "deny" setting should be overwritten by the superior GPO * Switching the link orders of the two GPOs should cause login to be denied
Actual results: * Login is denied. * Switching the link orders such that hbac-deny-gpo is link order 1 will cause logins to succeed
Additional Information: * The correct behavior can be confirmed from the group policy management console (GPMC.MSC) using Group Policy Modelling. This confirms that settings from higher-numbered GPLinks should be overwritten by lower-numbered GPLinks. * This behavior can also be seen when one of the GPOs is faulty and causes SSSD processing to error out; see the mitigation for issue #4144
This is occurring on SSSD 2.2.0 on CentOS 8.
If sssd.conf debug is set to 6, it can be clearly seen in /var/log/sssd/sssd_domain.log that GPOs are being applied from lowest link order to greatest, which is opposite of correct order.
It appears that this may be happening in /src/providers/ad/ad_gpo.c in ad_gpo_populate_candidate_gpos. It appears that the prioritized list is being populated starting at index 0 and counting up, and that is the order in which the GPOs are subsequently merged.
The comments on that function correctly state the precedence order. They note that the output list will be as follows: As such, the _candidate_gpos output's dn fields looks like (in link order): * [unenforced {Site, Domain, OU}; enforced {Site, Domain, OU}]
As such, the _candidate_gpos output's dn fields looks like (in link order):
* [unenforced {Site, Domain, OU}; enforced {Site, Domain, OU}]
But when looking at a particular OU, the list is walked starting with link index zero. For correct precedence in a list starting at site level, GPLinks must be appended in reverse order.
Hi,
thank you for the report and your analysis. Are you using enforced or unenforced GPOs?
bye, Sumit
I am using unenforced GPOs, and relying solely on OU structure and link order.
sssd_domain.name.fqdn.log
(Thu Jan 30 20:58:01 2020) [sssd[be[domain.name.fqdn]]] [dp_get_options] (0x0400): Option ad_enable_dns_sites is TRUE (Thu Jan 30 20:58:01 2020) [sssd[be[domain.name.fqdn]]] [dp_get_options] (0x0400): Option ad_access_filter has no value (Thu Jan 30 20:58:01 2020) [sssd[be[domain.name.fqdn]]] [dp_get_options] (0x0400): Option ad_enable_gc is TRUE (Thu Jan 30 20:58:01 2020) [sssd[be[domain.name.fqdn]]] [dp_get_options] (0x0400): Option ad_gpo_access_control has value enforcing (Thu Jan 30 20:58:01 2020) [sssd[be[domain.name.fqdn]]] [dp_get_options] (0x0400): Option ad_gpo_implicit_deny is FALSE (Thu Jan 30 20:58:01 2020) [sssd[be[domain.name.fqdn]]] [dp_get_options] (0x0400): Option ad_gpo_ignore_unreadable is TRUE (Thu Jan 30 20:58:01 2020) [sssd[be[domain.name.fqdn]]] [dp_get_options] (0x0400): Option ad_gpo_cache_timeout has value 5 (Thu Jan 30 20:58:01 2020) [sssd[be[domain.name.fqdn]]] [dp_get_options] (0x0400): Option ad_gpo_map_interactive has value +vmtoolsd (Thu Jan 30 20:58:01 2020) [sssd[be[domain.name.fqdn]]] [dp_get_options] (0x0400): Option ad_gpo_map_remote_interactive has no value (Thu Jan 30 20:58:01 2020) [sssd[be[domain.name.fqdn]]] [dp_get_options] (0x0400): Option ad_gpo_map_network has no value (Thu Jan 30 20:58:01 2020) [sssd[be[domain.name.fqdn]]] [dp_get_options] (0x0400): Option ad_gpo_map_batch has no value (Thu Jan 30 20:58:01 2020) [sssd[be[domain.name.fqdn]]] [dp_get_options] (0x0400): Option ad_gpo_map_service has no value (Thu Jan 30 20:58:01 2020) [sssd[be[domain.name.fqdn]]] [dp_get_options] (0x0400): Option ad_gpo_map_permit has no value (Thu Jan 30 20:58:01 2020) [sssd[be[domain.name.fqdn]]] [dp_get_options] (0x0400): Option ad_gpo_map_deny has no value (Thu Jan 30 20:58:01 2020) [sssd[be[domain.name.fqdn]]] [dp_get_options] (0x0400): Option ad_gpo_default_right has no value (Thu Jan 30 20:58:01 2020) [sssd[be[domain.name.fqdn]]] [dp_get_options] (0x0400): Option ad_site has no value (Thu Jan 30 20:58:01 2020) [sssd[be[domain.name.fqdn]]] [dp_get_options] (0x0400): Option krb5_confd_path has value /var/lib/sss/pubconf/krb5.include.d (Thu Jan 30 20:58:01 2020) [sssd[be[domain.name.fqdn]]] [dp_get_options] (0x0400): Option ad_maximum_machine_account_password_age has value 30 (Thu Jan 30 20:58:01 2020) [sssd[be[domain.name.fqdn]]] [dp_get_options] (0x0400): Option ad_machine_account_password_renewal_opts has value 86400:750 (Thu Jan 30 20:58:01 2020) [sssd[be[domain.name.fqdn]]] [ad_get_common_options] (0x0100): No AD server set, will use service discovery! (Thu Jan 30 20:58:01 2020) [sssd[be[domain.name.fqdn]]] [ad_get_common_options] (0x0100): Setting ad_hostname to [myhost.domain.name.fqdn]. (Thu Jan 30 20:58:01 2020) [sssd[be[domain.name.fqdn]]] [ad_get_common_options] (0x0100): Setting domain option case_sensitive to [false] (Thu Jan 30 20:58:01 2020) [sssd[be[domain.name.fqdn]]] [krb5_service_new] (0x0100): write_kdcinfo for realm domain.name.fqdn set to false (Thu Jan 30 20:58:01 2020) [sssd[be[domain.name.fqdn]]] [fo_new_service] (0x0400): Creating new service 'AD' (Thu Jan 30 20:58:01 2020) [sssd[be[domain.name.fqdn]]] [fo_new_service] (0x0400): Creating new service 'AD_GC' -- (Thu Jan 30 20:58:01 2020) [sssd[be[domain.name.fqdn]]] [dp_copy_options_ex] (0x0400): Option ad_enable_dns_sites is TRUE (Thu Jan 30 20:58:01 2020) [sssd[be[domain.name.fqdn]]] [dp_copy_options_ex] (0x0400): Option ad_access_filter has no value (Thu Jan 30 20:58:01 2020) [sssd[be[domain.name.fqdn]]] [dp_copy_options_ex] (0x0400): Option ad_enable_gc is TRUE (Thu Jan 30 20:58:01 2020) [sssd[be[domain.name.fqdn]]] [dp_copy_options_ex] (0x0400): Option ad_gpo_access_control has value enforcing (Thu Jan 30 20:58:01 2020) [sssd[be[domain.name.fqdn]]] [dp_copy_options_ex] (0x0400): Option ad_gpo_implicit_deny is FALSE (Thu Jan 30 20:58:01 2020) [sssd[be[domain.name.fqdn]]] [dp_copy_options_ex] (0x0400): Option ad_gpo_ignore_unreadable is TRUE (Thu Jan 30 20:58:01 2020) [sssd[be[domain.name.fqdn]]] [dp_copy_options_ex] (0x0400): Option ad_gpo_cache_timeout has value 5 (Thu Jan 30 20:58:01 2020) [sssd[be[domain.name.fqdn]]] [dp_copy_options_ex] (0x0400): Option ad_gpo_map_interactive has value +vmtoolsd (Thu Jan 30 20:58:01 2020) [sssd[be[domain.name.fqdn]]] [dp_copy_options_ex] (0x0400): Option ad_gpo_map_remote_interactive has no value (Thu Jan 30 20:58:01 2020) [sssd[be[domain.name.fqdn]]] [dp_copy_options_ex] (0x0400): Option ad_gpo_map_network has no value (Thu Jan 30 20:58:01 2020) [sssd[be[domain.name.fqdn]]] [dp_copy_options_ex] (0x0400): Option ad_gpo_map_batch has no value (Thu Jan 30 20:58:01 2020) [sssd[be[domain.name.fqdn]]] [dp_copy_options_ex] (0x0400): Option ad_gpo_map_service has no value (Thu Jan 30 20:58:01 2020) [sssd[be[domain.name.fqdn]]] [dp_copy_options_ex] (0x0400): Option ad_gpo_map_permit has no value (Thu Jan 30 20:58:01 2020) [sssd[be[domain.name.fqdn]]] [dp_copy_options_ex] (0x0400): Option ad_gpo_map_deny has no value (Thu Jan 30 20:58:01 2020) [sssd[be[domain.name.fqdn]]] [dp_copy_options_ex] (0x0400): Option ad_gpo_default_right has no value (Thu Jan 30 20:58:01 2020) [sssd[be[domain.name.fqdn]]] [dp_copy_options_ex] (0x0400): Option ad_site has no value (Thu Jan 30 20:58:01 2020) [sssd[be[domain.name.fqdn]]] [dp_copy_options_ex] (0x0400): Option krb5_confd_path has value /var/lib/sss/pubconf/krb5.include.d (Thu Jan 30 20:58:01 2020) [sssd[be[domain.name.fqdn]]] [dp_copy_options_ex] (0x0400): Option ad_maximum_machine_account_password_age has value 30 (Thu Jan 30 20:58:01 2020) [sssd[be[domain.name.fqdn]]] [dp_copy_options_ex] (0x0400): Option ad_machine_account_password_renewal_opts has value 86400:750 (Thu Jan 30 20:58:01 2020) [sssd[be[domain.name.fqdn]]] [dp_target_init] (0x0400): Initializing target [chpass] with module [ad] (Thu Jan 30 20:58:01 2020) [sssd[be[domain.name.fqdn]]] [dp_load_module] (0x0400): Module [ad] is already loaded. (Thu Jan 30 20:58:01 2020) [sssd[be[domain.name.fqdn]]] [dp_target_run_constructor] (0x0400): Executing target [chpass] constructor (Thu Jan 30 20:58:01 2020) [sssd[be[domain.name.fqdn]]] [dp_load_module] (0x0400): Module [ad] is already loaded. -- (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [dp_attach_req] (0x0400): Number of active DP request: 1 (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_access_send] (0x0400): Performing access check for user [someuser.name@domain.name.fqdn] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_account_expired_ad] (0x0400): Performing AD access check for user [someuser.name@domain.name.fqdn] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_send] (0x0400): service sshd maps to Remote Interactive (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_connect_done] (0x0400): sam_account_name is myhost$ (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_print_server] (0x2000): Searching X.X.121.103]:389 (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(&(objectclass=user)(sAMAccountName=myhost$))][dc=domain,dc=name,dc=fqdn]. (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_ext_step] (0x2000): ldap_search_ext called, msgid = 11 (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_op_add] (0x2000): New operation 11 timeout 6 (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55bd95b54950], connected[1], ops[0x55bd95c9fde0], ldap[0x55bd95ad8dc0] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [distinguishedName] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [userAccountControl] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55bd95b54950], connected[1], ops[0x55bd95c9fde0], ldap[0x55bd95ad8dc0] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55bd95b54950], connected[1], ops[0x55bd95c9fde0], ldap[0x55bd95ad8dc0] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55bd95b54950], connected[1], ops[0x55bd95c9fde0], ldap[0x55bd95ad8dc0] -- (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [ad_master_domain_netlogon_done] (0x0400): Found flat name [name]. (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [ad_master_domain_netlogon_done] (0x0400): Found site [mysite]. (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [ad_master_domain_netlogon_done] (0x0400): Found forest [domain.name.fqdn]. (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_site_name_retrieval_done] (0x0400): Using AD site 'cn=mysite'. (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_print_server] (0x2000): Searching X.X.121.103]:389 (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(objectclass=*)][]. (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_ext_step] (0x2000): ldap_search_ext called, msgid = 14 (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_op_add] (0x2000): New operation 14 timeout 6 (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55bd95b54950], connected[1], ops[0x55bd95c9fde0], ldap[0x55bd95ad8dc0] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: end of ldap_result list (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55bd95b54950], connected[1], ops[0x55bd95c9fde0], ldap[0x55bd95ad8dc0] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [configurationNamingContext] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55bd95b54950], connected[1], ops[0x55bd95c9fde0], ldap[0x55bd95ad8dc0] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_op_destructor] (0x2000): Operation 14 finished (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_site_dn_retrieval_done] (0x0400): som_list[0]->som_dn is OU=Hosts,OU=kittens,OU=Projects,OU=something,OU=Orgs,DC=domain,DC=name,dc=fqdn (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_site_dn_retrieval_done] (0x0400): som_list[1]->som_dn is OU=kittens,OU=Projects,OU=something,OU=Orgs,DC=domain,DC=name,dc=fqdn (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_site_dn_retrieval_done] (0x0400): som_list[2]->som_dn is OU=Projects,OU=something,OU=Orgs,DC=domain,DC=name,dc=fqdn (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_site_dn_retrieval_done] (0x0400): som_list[3]->som_dn is OU=something,OU=Orgs,DC=domain,DC=name,dc=fqdn (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_site_dn_retrieval_done] (0x0400): som_list[4]->som_dn is OU=Orgs,DC=domain,DC=name,dc=fqdn (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_site_dn_retrieval_done] (0x0400): som_list[5]->som_dn is DC=domain,DC=name,dc=fqdn (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_site_dn_retrieval_done] (0x0400): som_list[6]->som_dn is cn=mysite,cn=Sites,CN=Configuration,DC=domain,DC=name,dc=fqdn (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_print_server] (0x2000): Searching X.X.121.103]:389 (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(objectclass=*)][OU=Hosts,OU=kittens,OU=Projects,OU=something,OU=Orgs,DC=domain,DC=name,dc=fqdn]. (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_ext_step] (0x2000): ldap_search_ext called, msgid = 15 (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_op_add] (0x2000): New operation 15 timeout 6 (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55bd95b54950], connected[1], ops[0x55bd95b8df50], ldap[0x55bd95ad8dc0] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: end of ldap_result list (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55bd95b54950], connected[1], ops[0x55bd95b8df50], ldap[0x55bd95ad8dc0] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [gPLink] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55bd95b54950], connected[1], ops[0x55bd95b8df50], ldap[0x55bd95ad8dc0] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_op_destructor] (0x2000): Operation 15 finished (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_populate_gplink_list] (0x0400): som_dn: OU=Hosts,OU=kittens,OU=Projects,OU=something,OU=Orgs,DC=domain,DC=name,dc=fqdn (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_print_server] (0x2000): Searching X.X.121.103]:389 (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(objectclass=*)][OU=kittens,OU=Projects,OU=something,OU=Orgs,DC=domain,DC=name,dc=fqdn]. (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_ext_step] (0x2000): ldap_search_ext called, msgid = 16 (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_op_add] (0x2000): New operation 16 timeout 6 (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55bd95b54950], connected[1], ops[0x55bd95b8df50], ldap[0x55bd95ad8dc0] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: end of ldap_result list (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55bd95b54950], connected[1], ops[0x55bd95b8df50], ldap[0x55bd95ad8dc0] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [gPLink] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55bd95b54950], connected[1], ops[0x55bd95b8df50], ldap[0x55bd95ad8dc0] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_op_destructor] (0x2000): Operation 16 finished (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_populate_gplink_list] (0x0400): som_dn: OU=kittens,OU=Projects,OU=something,OU=Orgs,DC=domain,DC=name,dc=fqdn (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_print_server] (0x2000): Searching X.X.121.103]:389 (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(objectclass=*)][OU=Projects,OU=something,OU=Orgs,DC=domain,DC=name,dc=fqdn]. (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_ext_step] (0x2000): ldap_search_ext called, msgid = 17 (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_op_add] (0x2000): New operation 17 timeout 6 (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55bd95b54950], connected[1], ops[0x55bd95b8df50], ldap[0x55bd95ad8dc0] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: end of ldap_result list (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55bd95b54950], connected[1], ops[0x55bd95b8df50], ldap[0x55bd95ad8dc0] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55bd95b54950], connected[1], ops[0x55bd95b8df50], ldap[0x55bd95ad8dc0] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_op_destructor] (0x2000): Operation 17 finished (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_get_som_attrs_done] (0x0040): no attrs found for SOM; try next SOM (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_print_server] (0x2000): Searching X.X.121.103]:389 (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(objectclass=*)][OU=something,OU=Orgs,DC=domain,DC=name,dc=fqdn]. (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_ext_step] (0x2000): ldap_search_ext called, msgid = 18 (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_op_add] (0x2000): New operation 18 timeout 6 (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55bd95b54950], connected[1], ops[0x55bd95b8df50], ldap[0x55bd95ad8dc0] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: end of ldap_result list (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55bd95b54950], connected[1], ops[0x55bd95b8df50], ldap[0x55bd95ad8dc0] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [gPLink] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55bd95b54950], connected[1], ops[0x55bd95b8df50], ldap[0x55bd95ad8dc0] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_op_destructor] (0x2000): Operation 18 finished (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_populate_gplink_list] (0x0400): som_dn: OU=something,OU=Orgs,DC=domain,DC=name,dc=fqdn (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_print_server] (0x2000): Searching X.X.121.103]:389 (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(objectclass=*)][OU=Orgs,DC=domain,DC=name,dc=fqdn]. (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_ext_step] (0x2000): ldap_search_ext called, msgid = 19 (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_op_add] (0x2000): New operation 19 timeout 6 (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55bd95b54950], connected[1], ops[0x55bd95b8df50], ldap[0x55bd95ad8dc0] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: end of ldap_result list (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55bd95b54950], connected[1], ops[0x55bd95b8df50], ldap[0x55bd95ad8dc0] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [gPLink] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55bd95b54950], connected[1], ops[0x55bd95b8df50], ldap[0x55bd95ad8dc0] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_op_destructor] (0x2000): Operation 19 finished (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_populate_gplink_list] (0x0400): som_dn: OU=Orgs,DC=domain,DC=name,dc=fqdn (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_print_server] (0x2000): Searching X.X.121.103]:389 (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(objectclass=*)][DC=domain,DC=name,dc=fqdn]. (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_ext_step] (0x2000): ldap_search_ext called, msgid = 20 (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_op_add] (0x2000): New operation 20 timeout 6 (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55bd95b54950], connected[1], ops[0x55bd95c9fde0], ldap[0x55bd95ad8dc0] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: end of ldap_result list (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55bd95b54950], connected[1], ops[0x55bd95c9fde0], ldap[0x55bd95ad8dc0] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [gPLink] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55bd95b54950], connected[1], ops[0x55bd95c9fde0], ldap[0x55bd95ad8dc0] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_op_destructor] (0x2000): Operation 20 finished (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_populate_gplink_list] (0x0400): som_dn: DC=domain,DC=name,dc=fqdn (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_print_server] (0x2000): Searching X.X.121.103]:389 (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(objectclass=*)][cn=mysite,cn=Sites,CN=Configuration,DC=domain,DC=name,dc=fqdn]. (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_ext_step] (0x2000): ldap_search_ext called, msgid = 21 (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_op_add] (0x2000): New operation 21 timeout 6 (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55bd95b54950], connected[1], ops[0x55bd95c9fde0], ldap[0x55bd95ad8dc0] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: end of ldap_result list (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55bd95b54950], connected[1], ops[0x55bd95c9fde0], ldap[0x55bd95ad8dc0] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55bd95b54950], connected[1], ops[0x55bd95c9fde0], ldap[0x55bd95ad8dc0] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_op_destructor] (0x2000): Operation 21 finished (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_get_som_attrs_done] (0x0040): no attrs found for SOM; try next SOM (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[0]->gpo_dn: cn={XXXXXXXX-XXXX-XXXX-XXXX-00C04FB984F9},cn=policies,cn=system,DC=domain,DC=name,dc=fqdn (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[1]->gpo_dn: cn={XXXXXXXX-XXXX-XXXX-XXXX-D759F821AF6F},cn=policies,cn=system,DC=domain,DC=name,dc=fqdn (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[2]->gpo_dn: cn={XXXXXXXX-XXXX-XXXX-XXXX-E6664AF32D1B},cn=policies,cn=system,DC=domain,DC=name,dc=fqdn (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[3]->gpo_dn: cn={XXXXXXXX-XXXX-XXXX-XXXX-B41CE916BF37},cn=policies,cn=system,DC=domain,DC=name,dc=fqdn (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[4]->gpo_dn: cn={XXXXXXXX-XXXX-XXXX-XXXX-D2930E129A69},cn=policies,cn=system,DC=domain,DC=name,dc=fqdn (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[5]->gpo_dn: cn={XXXXXXXX-XXXX-XXXX-XXXX-7519ED99BAAA},cn=policies,cn=system,DC=domain,DC=name,dc=fqdn (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[6]->gpo_dn: cn={XXXXXXXX-XXXX-XXXX-XXXX-1C676C587B88},cn=policies,cn=system,DC=domain,DC=name,dc=fqdn (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[7]->gpo_dn: cn={XXXXXXXX-XXXX-XXXX-XXXX-77998F413721},cn=policies,cn=system,DC=domain,DC=name,dc=fqdn (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[8]->gpo_dn: cn={XXXXXXXX-XXXX-XXXX-XXXX-31DA80D259C2},cn=policies,cn=system,DC=domain,DC=name,dc=fqdn (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_sd_search_send] (0x0400): Searching entry [cn={XXXXXXXX-XXXX-XXXX-XXXX-00C04FB984F9},cn=policies,cn=system,DC=domain,DC=name,dc=fqdn] using SD (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_print_server] (0x2000): Searching X.X.121.103]:389 (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_ext_send] (0x0400): WARNING: Disabling paging because scope is set to base. (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(objectclass=*)][cn={XXXXXXXX-XXXX-XXXX-XXXX-00C04FB984F9},cn=policies,cn=system,DC=domain,DC=name,dc=fqdn]. (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_ext_step] (0x2000): ldap_search_ext called, msgid = 22 (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_op_add] (0x2000): New operation 22 timeout 6 (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55bd95b54950], connected[1], ops[0x55bd95b9ce30], ldap[0x55bd95ad8dc0] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: end of ldap_result list (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55bd95b54950], connected[1], ops[0x55bd95b9ce30], ldap[0x55bd95ad8dc0] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [cn] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [nTSecurityDescriptor] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [flags] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [gPCFunctionalityVersion] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [gPCFileSysPath] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [gPCMachineExtensionNames] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55bd95b54950], connected[1], ops[0x55bd95b9ce30], ldap[0x55bd95ad8dc0] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_op_destructor] (0x2000): Operation 22 finished (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_sd_search_send] (0x0400): Searching entry [cn={XXXXXXXX-XXXX-XXXX-XXXX-D759F821AF6F},cn=policies,cn=system,DC=domain,DC=name,dc=fqdn] using SD (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_print_server] (0x2000): Searching X.X.121.103]:389 (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_ext_send] (0x0400): WARNING: Disabling paging because scope is set to base. (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(objectclass=*)][cn={XXXXXXXX-XXXX-XXXX-XXXX-D759F821AF6F},cn=policies,cn=system,DC=domain,DC=name,dc=fqdn]. (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_ext_step] (0x2000): ldap_search_ext called, msgid = 23 (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_op_add] (0x2000): New operation 23 timeout 6 (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55bd95b54950], connected[1], ops[0x55bd95c61330], ldap[0x55bd95ad8dc0] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: end of ldap_result list (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55bd95b54950], connected[1], ops[0x55bd95c61330], ldap[0x55bd95ad8dc0] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [cn] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [nTSecurityDescriptor] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [flags] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [gPCFunctionalityVersion] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [gPCFileSysPath] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [gPCMachineExtensionNames] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55bd95b54950], connected[1], ops[0x55bd95c61330], ldap[0x55bd95ad8dc0] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_op_destructor] (0x2000): Operation 23 finished (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_sd_search_send] (0x0400): Searching entry [cn={XXXXXXXX-XXXX-XXXX-XXXX-E6664AF32D1B},cn=policies,cn=system,DC=domain,DC=name,dc=fqdn] using SD (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_print_server] (0x2000): Searching X.X.121.103]:389 (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_ext_send] (0x0400): WARNING: Disabling paging because scope is set to base. (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(objectclass=*)][cn={XXXXXXXX-XXXX-XXXX-XXXX-E6664AF32D1B},cn=policies,cn=system,DC=domain,DC=name,dc=fqdn]. (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_ext_step] (0x2000): ldap_search_ext called, msgid = 24 (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_op_add] (0x2000): New operation 24 timeout 6 (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55bd95b54950], connected[1], ops[0x55bd95b40440], ldap[0x55bd95ad8dc0] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: end of ldap_result list (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55bd95b54950], connected[1], ops[0x55bd95b40440], ldap[0x55bd95ad8dc0] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [cn] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [nTSecurityDescriptor] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [flags] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [gPCFunctionalityVersion] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [gPCFileSysPath] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [gPCMachineExtensionNames] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55bd95b54950], connected[1], ops[0x55bd95b40440], ldap[0x55bd95ad8dc0] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_op_destructor] (0x2000): Operation 24 finished (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_sd_search_send] (0x0400): Searching entry [cn={XXXXXXXX-XXXX-XXXX-XXXX-B41CE916BF37},cn=policies,cn=system,DC=domain,DC=name,dc=fqdn] using SD (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_print_server] (0x2000): Searching X.X.121.103]:389 (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_ext_send] (0x0400): WARNING: Disabling paging because scope is set to base. (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(objectclass=*)][cn={XXXXXXXX-XXXX-XXXX-XXXX-B41CE916BF37},cn=policies,cn=system,DC=domain,DC=name,dc=fqdn]. (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_ext_step] (0x2000): ldap_search_ext called, msgid = 25 (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_op_add] (0x2000): New operation 25 timeout 6 (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55bd95b54950], connected[1], ops[0x55bd95c9fde0], ldap[0x55bd95ad8dc0] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: end of ldap_result list (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55bd95b54950], connected[1], ops[0x55bd95c9fde0], ldap[0x55bd95ad8dc0] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [cn] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [nTSecurityDescriptor] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [flags] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [gPCFunctionalityVersion] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [gPCFileSysPath] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [gPCMachineExtensionNames] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55bd95b54950], connected[1], ops[0x55bd95c9fde0], ldap[0x55bd95ad8dc0] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_op_destructor] (0x2000): Operation 25 finished (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_sd_search_send] (0x0400): Searching entry [cn={XXXXXXXX-XXXX-XXXX-XXXX-D2930E129A69},cn=policies,cn=system,DC=domain,DC=name,dc=fqdn] using SD (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_print_server] (0x2000): Searching X.X.121.103]:389 (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_ext_send] (0x0400): WARNING: Disabling paging because scope is set to base. (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(objectclass=*)][cn={XXXXXXXX-XXXX-XXXX-XXXX-D2930E129A69},cn=policies,cn=system,DC=domain,DC=name,dc=fqdn]. (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_ext_step] (0x2000): ldap_search_ext called, msgid = 26 (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_op_add] (0x2000): New operation 26 timeout 6 (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55bd95b54950], connected[1], ops[0x55bd95b0e460], ldap[0x55bd95ad8dc0] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: end of ldap_result list (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55bd95b54950], connected[1], ops[0x55bd95b0e460], ldap[0x55bd95ad8dc0] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [cn] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [nTSecurityDescriptor] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [flags] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [gPCFunctionalityVersion] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [gPCFileSysPath] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [gPCMachineExtensionNames] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55bd95b54950], connected[1], ops[0x55bd95b0e460], ldap[0x55bd95ad8dc0] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_op_destructor] (0x2000): Operation 26 finished (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_sd_search_send] (0x0400): Searching entry [cn={XXXXXXXX-XXXX-XXXX-XXXX-7519ED99BAAA},cn=policies,cn=system,DC=domain,DC=name,dc=fqdn] using SD (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_print_server] (0x2000): Searching X.X.121.103]:389 (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_ext_send] (0x0400): WARNING: Disabling paging because scope is set to base. (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(objectclass=*)][cn={XXXXXXXX-XXXX-XXXX-XXXX-7519ED99BAAA},cn=policies,cn=system,DC=domain,DC=name,dc=fqdn]. (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_ext_step] (0x2000): ldap_search_ext called, msgid = 27 (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_op_add] (0x2000): New operation 27 timeout 6 (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55bd95b54950], connected[1], ops[0x55bd95bf7320], ldap[0x55bd95ad8dc0] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: end of ldap_result list (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55bd95b54950], connected[1], ops[0x55bd95bf7320], ldap[0x55bd95ad8dc0] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [cn] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [nTSecurityDescriptor] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [flags] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [gPCFunctionalityVersion] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [gPCFileSysPath] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [gPCMachineExtensionNames] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55bd95b54950], connected[1], ops[0x55bd95bf7320], ldap[0x55bd95ad8dc0] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_op_destructor] (0x2000): Operation 27 finished (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_sd_search_send] (0x0400): Searching entry [cn={XXXXXXXX-XXXX-XXXX-XXXX-1C676C587B88},cn=policies,cn=system,DC=domain,DC=name,dc=fqdn] using SD (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_print_server] (0x2000): Searching X.X.121.103]:389 (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_ext_send] (0x0400): WARNING: Disabling paging because scope is set to base. (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(objectclass=*)][cn={XXXXXXXX-XXXX-XXXX-XXXX-1C676C587B88},cn=policies,cn=system,DC=domain,DC=name,dc=fqdn]. (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_ext_step] (0x2000): ldap_search_ext called, msgid = 28 (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_op_add] (0x2000): New operation 28 timeout 6 (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55bd95b54950], connected[1], ops[0x55bd95c61610], ldap[0x55bd95ad8dc0] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: end of ldap_result list (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55bd95b54950], connected[1], ops[0x55bd95c61610], ldap[0x55bd95ad8dc0] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [cn] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [nTSecurityDescriptor] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [flags] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [gPCFunctionalityVersion] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [gPCFileSysPath] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [gPCMachineExtensionNames] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55bd95b54950], connected[1], ops[0x55bd95c61610], ldap[0x55bd95ad8dc0] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_op_destructor] (0x2000): Operation 28 finished (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_sd_search_send] (0x0400): Searching entry [cn={XXXXXXXX-XXXX-XXXX-XXXX-77998F413721},cn=policies,cn=system,DC=domain,DC=name,dc=fqdn] using SD (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_print_server] (0x2000): Searching X.X.121.103]:389 (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_ext_send] (0x0400): WARNING: Disabling paging because scope is set to base. (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(objectclass=*)][cn={XXXXXXXX-XXXX-XXXX-XXXX-77998F413721},cn=policies,cn=system,DC=domain,DC=name,dc=fqdn]. (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_ext_step] (0x2000): ldap_search_ext called, msgid = 29 (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_op_add] (0x2000): New operation 29 timeout 6 (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55bd95b54950], connected[1], ops[0x55bd95c70820], ldap[0x55bd95ad8dc0] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: end of ldap_result list (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55bd95b54950], connected[1], ops[0x55bd95c70820], ldap[0x55bd95ad8dc0] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [cn] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [nTSecurityDescriptor] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [flags] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [gPCFunctionalityVersion] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [gPCFileSysPath] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [gPCMachineExtensionNames] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55bd95b54950], connected[1], ops[0x55bd95c70820], ldap[0x55bd95ad8dc0] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_op_destructor] (0x2000): Operation 29 finished (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_sd_search_send] (0x0400): Searching entry [cn={XXXXXXXX-XXXX-XXXX-XXXX-31DA80D259C2},cn=policies,cn=system,DC=domain,DC=name,dc=fqdn] using SD (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_print_server] (0x2000): Searching X.X.121.103]:389 (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_ext_send] (0x0400): WARNING: Disabling paging because scope is set to base. (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(objectclass=*)][cn={XXXXXXXX-XXXX-XXXX-XXXX-31DA80D259C2},cn=policies,cn=system,DC=domain,DC=name,dc=fqdn]. (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_ext_step] (0x2000): ldap_search_ext called, msgid = 30 (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_op_add] (0x2000): New operation 30 timeout 6 (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55bd95b54950], connected[1], ops[0x55bd95bf9910], ldap[0x55bd95ad8dc0] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: end of ldap_result list (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55bd95b54950], connected[1], ops[0x55bd95bf9910], ldap[0x55bd95ad8dc0] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [cn] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [nTSecurityDescriptor] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [flags] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [gPCFunctionalityVersion] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [gPCFileSysPath] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [gPCMachineExtensionNames] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55bd95b54950], connected[1], ops[0x55bd95bf9910], ldap[0x55bd95ad8dc0] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_op_destructor] (0x2000): Operation 30 finished (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_process_gpo_done] (0x0400): dacl_filtered_gpos[0]->gpo_guid is {XXXXXXXX-XXXX-XXXX-XXXX-D759F821AF6F} (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_process_gpo_done] (0x0400): dacl_filtered_gpos[1]->gpo_guid is {XXXXXXXX-XXXX-XXXX-XXXX-E6664AF32D1B} (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_process_gpo_done] (0x0400): dacl_filtered_gpos[2]->gpo_guid is {XXXXXXXX-XXXX-XXXX-XXXX-B41CE916BF37} (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_process_gpo_done] (0x0400): dacl_filtered_gpos[3]->gpo_guid is {XXXXXXXX-XXXX-XXXX-XXXX-D2930E129A69} (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_process_gpo_done] (0x0400): dacl_filtered_gpos[4]->gpo_guid is {XXXXXXXX-XXXX-XXXX-XXXX-7519ED99BAAA} (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_process_gpo_done] (0x0400): dacl_filtered_gpos[5]->gpo_guid is {XXXXXXXX-XXXX-XXXX-XXXX-1C676C587B88} (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_process_gpo_done] (0x0400): dacl_filtered_gpos[6]->gpo_guid is {XXXXXXXX-XXXX-XXXX-XXXX-77998F413721} (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_process_gpo_done] (0x0400): dacl_filtered_gpos[7]->gpo_guid is {XXXXXXXX-XXXX-XXXX-XXXX-31DA80D259C2} (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_process_gpo_done] (0x0400): cse_filtered_gpos[0]->gpo_guid is {XXXXXXXX-XXXX-XXXX-XXXX-B41CE916BF37} (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_process_gpo_done] (0x0400): cse_filtered_gpos[1]->gpo_guid is {XXXXXXXX-XXXX-XXXX-XXXX-D2930E129A69} (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_process_gpo_done] (0x0400): cse_filtered_gpos[2]->gpo_guid is {XXXXXXXX-XXXX-XXXX-XXXX-7519ED99BAAA} (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_process_gpo_done] (0x0400): cse_filtered_gpos[3]->gpo_guid is {XXXXXXXX-XXXX-XXXX-XXXX-1C676C587B88} (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_process_gpo_done] (0x0400): cse_filtered_gpos[4]->gpo_guid is {XXXXXXXX-XXXX-XXXX-XXXX-77998F413721} (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_process_gpo_done] (0x0400): cse_filtered_gpos[5]->gpo_guid is {XXXXXXXX-XXXX-XXXX-XXXX-31DA80D259C2} (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_process_gpo_done] (0x0400): num_cse_filtered_gpos: 6 (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): cse filtered_gpos[0]->gpo_guid is {XXXXXXXX-XXXX-XXXX-XXXX-B41CE916BF37} (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): smb_server: smb://myhost.domain.name.fqdn (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): smb_share: /SysVol (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): smb_path: /domain.name.fqdn/Policies/{XXXXXXXX-XXXX-XXXX-XXXX-B41CE916BF37} (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): gpo_guid: {XXXXXXXX-XXXX-XXXX-XXXX-B41CE916BF37} (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): retrieving GPO from cache [{XXXXXXXX-XXXX-XXXX-XXXX-B41CE916BF37}] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): send_to_child: 1 (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): cached_gpt_version: 1042 (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [child_handler_setup] (0x2000): Setting up signal handler up for pid [9724] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [child_handler_setup] (0x2000): Signal handler set up for pid [9724] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55bd95b54950], connected[1], ops[(nil)], ldap[0x55bd95ad8dc0] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: end of ldap_result list (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [write_pipe_handler] (0x0400): All data has been sent! (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [read_pipe_handler] (0x0400): EOF received, client finished (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [gpo_cse_done] (0x0400): sysvol_gpt_version: 1042 (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sysdb_merge_res_ts_attrs] (0x2000): TS cache doesn't handle this DN type, skipping (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_done] (0x0400): gpo_guid: {XXXXXXXX-XXXX-XXXX-XXXX-B41CE916BF37} (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sysdb_gpo_store_gpo_result_setting] (0x0400): Storing setting: key [SeInteractiveLogonRight] value [*S-1-5-21-XXXXXXXXXXXX-241297-3365,*S-1-5-21-XXXXXXXXXXXX-241297-513,hbac-global-Allow-interactive,*S-1-5-32-544] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sysdb_merge_res_ts_attrs] (0x2000): TS cache doesn't handle this DN type, skipping (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sysdb_gpo_store_gpo_result_setting] (0x0400): Updating setting: key [SeDenyInteractiveLogonRight] value [*S-1-5-21-XXXXXXXXXXXX-241297-2585,hbac-global-deny-interactive] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sysdb_merge_res_ts_attrs] (0x2000): TS cache doesn't handle this DN type, skipping (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sysdb_gpo_store_gpo_result_setting] (0x0400): Updating setting: key [SeRemoteInteractiveLogonRight] value [*S-1-5-21-XXXXXXXXXXXX-241297-1400,hbac-global-allow-remote_interactive,*S-1-5-32-544] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sysdb_merge_res_ts_attrs] (0x2000): TS cache doesn't handle this DN type, skipping (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sysdb_gpo_store_gpo_result_setting] (0x0400): Updating setting: key [SeDenyRemoteInteractiveLogonRight] value [*S-1-5-21-XXXXXXXXXXXX-241297-2586,hbac-global-deny-remote_interactive] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sysdb_merge_res_ts_attrs] (0x2000): TS cache doesn't handle this DN type, skipping (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sysdb_gpo_store_gpo_result_setting] (0x0400): Updating setting: key [SeNetworkLogonRight] value [*S-1-5-21-XXXXXXXXXXXX-241297-3367,hbac-global-Allow-network,*S-1-5-11] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sysdb_merge_res_ts_attrs] (0x2000): TS cache doesn't handle this DN type, skipping (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sysdb_gpo_store_gpo_result_setting] (0x0400): Updating setting: key [SeDenyNetworkLogonRight] value [*S-1-5-21-XXXXXXXXXXXX-241297-2587,hbac-global-deny-network] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sysdb_merge_res_ts_attrs] (0x2000): TS cache doesn't handle this DN type, skipping (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sysdb_gpo_store_gpo_result_setting] (0x0400): Updating setting: key [SeBatchLogonRight] value [*S-1-5-21-XXXXXXXXXXXX-241297-2372,hbac-global-allow-batch] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sysdb_merge_res_ts_attrs] (0x2000): TS cache doesn't handle this DN type, skipping (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sysdb_gpo_store_gpo_result_setting] (0x0400): Updating setting: key [SeDenyBatchLogonRight] value [*S-1-5-21-XXXXXXXXXXXX-241297-2587,hbac-global-deny-batch] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sysdb_merge_res_ts_attrs] (0x2000): TS cache doesn't handle this DN type, skipping (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sysdb_gpo_store_gpo_result_setting] (0x0400): Updating setting: key [SeServiceLogonRight] value [right-local-logon-service,*S-1-5-80-0,*S-1-5-21-XXXXXXXXXXXX-241297-2363,hbac-global-allow-service] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sysdb_merge_res_ts_attrs] (0x2000): TS cache doesn't handle this DN type, skipping (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sysdb_gpo_store_gpo_result_setting] (0x0400): Updating setting: key [SeDenyServiceLogonRight] value [*S-1-5-21-XXXXXXXXXXXX-241297-2590,hbac-global-deny-service] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): cse filtered_gpos[1]->gpo_guid is {XXXXXXXX-XXXX-XXXX-XXXX-D2930E129A69} (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): smb_server: smb://myhost.domain.name.fqdn (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): smb_share: /SysVol (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): smb_path: /domain.name.fqdn/Policies/{XXXXXXXX-XXXX-XXXX-XXXX-D2930E129A69} (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): gpo_guid: {XXXXXXXX-XXXX-XXXX-XXXX-D2930E129A69} (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): retrieving GPO from cache [{XXXXXXXX-XXXX-XXXX-XXXX-D2930E129A69}] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): send_to_child: 1 (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): cached_gpt_version: 452 (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [child_handler_setup] (0x2000): Setting up signal handler up for pid [9726] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [child_handler_setup] (0x2000): Signal handler set up for pid [9726] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [child_sig_handler] (0x0020): waitpid did not found a child with changed status. (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [child_sig_handler] (0x0100): child [9724] finished successfully. (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [write_pipe_handler] (0x0400): All data has been sent! (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [read_pipe_handler] (0x0400): EOF received, client finished (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [gpo_cse_done] (0x0400): sysvol_gpt_version: 452 (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sysdb_merge_res_ts_attrs] (0x2000): TS cache doesn't handle this DN type, skipping (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_done] (0x0400): gpo_guid: {XXXXXXXX-XXXX-XXXX-XXXX-D2930E129A69} (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_store_policy_settings] (0x0020): [/var/lib/sss/gpo_cache/domain.name.fqdn/Policies/{XXXXXXXX-XXXX-XXXX-XXXX-D2930E129A69}/Machine/Microsoft/Windows NT/SecEdit/GptTmpl.inf]: ini_config_parse failed [5][Input/output error] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_store_policy_settings] (0x0020): Error (5) on line 21: Equal sign is missing. (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_store_policy_settings] (0x0020): Error (5) on line 22: Equal sign is missing. (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_store_policy_settings] (0x0020): Error (5) on line 23: Equal sign is missing. (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_store_policy_settings] (0x0020): Error (5) on line 24: Equal sign is missing. (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_store_policy_settings] (0x0020): Error (5) on line 25: Equal sign is missing. (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_store_policy_settings] (0x0020): Error (5) on line 26: Equal sign is missing. (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_store_policy_settings] (0x0020): Error (5) on line 27: Equal sign is missing. (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_store_policy_settings] (0x0020): Error (5) on line 28: Equal sign is missing. (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_store_policy_settings] (0x0020): Error (5) on line 29: Equal sign is missing. (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_store_policy_settings] (0x0020): Error (5) on line 30: Equal sign is missing. (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_store_policy_settings] (0x0020): Error (5) on line 31: Equal sign is missing. (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_store_policy_settings] (0x0020): Error (5) on line 32: Equal sign is missing. (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sysdb_merge_res_ts_attrs] (0x2000): TS cache doesn't handle this DN type, skipping (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sysdb_gpo_store_gpo_result_setting] (0x0400): Updating setting: key [SeInteractiveLogonRight] value [*S-1-5-32-544,IAM.Servers.AllowLogonLocally] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sysdb_merge_res_ts_attrs] (0x2000): TS cache doesn't handle this DN type, skipping (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sysdb_gpo_store_gpo_result_setting] (0x0400): Updating setting: key [SeRemoteInteractiveLogonRight] value [*S-1-5-32-544,*S-1-5-32-555] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sysdb_merge_res_ts_attrs] (0x2000): TS cache doesn't handle this DN type, skipping (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sysdb_gpo_store_gpo_result_setting] (0x0400): Updating setting: key [SeNetworkLogonRight] value [*S-1-5-11] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sysdb_merge_res_ts_attrs] (0x2000): TS cache doesn't handle this DN type, skipping (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [sysdb_gpo_store_gpo_result_setting] (0x0400): Updating setting: key [SeDenyNetworkLogonRight] value [!NoUseGuest!] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): cse filtered_gpos[2]->gpo_guid is {XXXXXXXX-XXXX-XXXX-XXXX-7519ED99BAAA} (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): smb_server: smb://myhost.domain.name.fqdn (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): smb_share: /SysVol (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): smb_path: /domain.name.fqdn/Policies/{XXXXXXXX-XXXX-XXXX-XXXX-7519ED99BAAA} (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): gpo_guid: {XXXXXXXX-XXXX-XXXX-XXXX-7519ED99BAAA} (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): retrieving GPO from cache [{XXXXXXXX-XXXX-XXXX-XXXX-7519ED99BAAA}] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): send_to_child: 1 (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): cached_gpt_version: 171 (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [child_handler_setup] (0x2000): Setting up signal handler up for pid [9728] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [child_handler_setup] (0x2000): Signal handler set up for pid [9728] (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [child_sig_handler] (0x0020): waitpid did not found a child with changed status. (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [child_sig_handler] (0x0100): child [9726] finished successfully. (Thu Jan 30 20:58:16 2020) [sssd[be[domain.name.fqdn]]] [write_pipe_handler] (0x0400): All data has been sent! (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [read_pipe_handler] (0x0400): EOF received, client finished (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [gpo_cse_done] (0x0400): sysvol_gpt_version: 171 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [sysdb_merge_res_ts_attrs] (0x2000): TS cache doesn't handle this DN type, skipping (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_done] (0x0400): gpo_guid: {XXXXXXXX-XXXX-XXXX-XXXX-7519ED99BAAA} (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): cse filtered_gpos[3]->gpo_guid is {XXXXXXXX-XXXX-XXXX-XXXX-1C676C587B88} (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): smb_server: smb://myhost.domain.name.fqdn (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): smb_share: /SysVol (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): smb_path: /domain.name.fqdn/Policies/{XXXXXXXX-XXXX-XXXX-XXXX-1C676C587B88} (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): gpo_guid: {XXXXXXXX-XXXX-XXXX-XXXX-1C676C587B88} (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): retrieving GPO from cache [{XXXXXXXX-XXXX-XXXX-XXXX-1C676C587B88}] (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): send_to_child: 1 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): cached_gpt_version: 58 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [child_handler_setup] (0x2000): Setting up signal handler up for pid [9730] (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [child_handler_setup] (0x2000): Signal handler set up for pid [9730] (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [child_sig_handler] (0x0020): waitpid did not found a child with changed status. (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [child_sig_handler] (0x0100): child [9728] finished successfully. (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [write_pipe_handler] (0x0400): All data has been sent! (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [read_pipe_handler] (0x0400): EOF received, client finished (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [gpo_cse_done] (0x0400): sysvol_gpt_version: 58 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [sysdb_merge_res_ts_attrs] (0x2000): TS cache doesn't handle this DN type, skipping (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_done] (0x0400): gpo_guid: {XXXXXXXX-XXXX-XXXX-XXXX-1C676C587B88} (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [sysdb_merge_res_ts_attrs] (0x2000): TS cache doesn't handle this DN type, skipping (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [sysdb_gpo_store_gpo_result_setting] (0x0400): Updating setting: key [SeInteractiveLogonRight] value [*S-1-5-21-XXXXXXXXXXXX-241297-3365,*S-1-5-21-XXXXXXXXXXXX-241297-513,hbac-global-Allow-interactive,*S-1-5-32-544] (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [sysdb_merge_res_ts_attrs] (0x2000): TS cache doesn't handle this DN type, skipping (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [sysdb_gpo_store_gpo_result_setting] (0x0400): Updating setting: key [SeDenyInteractiveLogonRight] value [*S-1-5-21-XXXXXXXXXXXX-241297-2585,hbac-global-deny-interactive] (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [sysdb_merge_res_ts_attrs] (0x2000): TS cache doesn't handle this DN type, skipping (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [sysdb_gpo_store_gpo_result_setting] (0x0400): Updating setting: key [SeRemoteInteractiveLogonRight] value [*S-1-5-21-XXXXXXXXXXXX-241297-1400,hbac-global-allow-remote_interactive,*S-1-5-32-544] (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [sysdb_merge_res_ts_attrs] (0x2000): TS cache doesn't handle this DN type, skipping (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [sysdb_gpo_store_gpo_result_setting] (0x0400): Updating setting: key [SeDenyRemoteInteractiveLogonRight] value [*S-1-5-21-XXXXXXXXXXXX-241297-2586,hbac-global-deny-remote_interactive] (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [sysdb_merge_res_ts_attrs] (0x2000): TS cache doesn't handle this DN type, skipping (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [sysdb_gpo_store_gpo_result_setting] (0x0400): Updating setting: key [SeNetworkLogonRight] value [*S-1-5-21-XXXXXXXXXXXX-241297-3367,hbac-global-Allow-network,*S-1-5-11] (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [sysdb_merge_res_ts_attrs] (0x2000): TS cache doesn't handle this DN type, skipping (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [sysdb_gpo_store_gpo_result_setting] (0x0400): Updating setting: key [SeDenyNetworkLogonRight] value [*S-1-5-21-XXXXXXXXXXXX-241297-2587,hbac-global-deny-network] (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [sysdb_merge_res_ts_attrs] (0x2000): TS cache doesn't handle this DN type, skipping (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [sysdb_gpo_store_gpo_result_setting] (0x0400): Updating setting: key [SeBatchLogonRight] value [*S-1-5-21-XXXXXXXXXXXX-241297-2372,hbac-global-allow-batch] (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [sysdb_merge_res_ts_attrs] (0x2000): TS cache doesn't handle this DN type, skipping (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [sysdb_gpo_store_gpo_result_setting] (0x0400): Updating setting: key [SeDenyBatchLogonRight] value [*S-1-5-21-XXXXXXXXXXXX-241297-2587,hbac-global-deny-batch] (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [sysdb_merge_res_ts_attrs] (0x2000): TS cache doesn't handle this DN type, skipping (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [sysdb_gpo_store_gpo_result_setting] (0x0400): Updating setting: key [SeServiceLogonRight] value [right-local-logon-service,*S-1-5-80-0,*S-1-5-21-XXXXXXXXXXXX-241297-2363,hbac-global-allow-service] (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [sysdb_merge_res_ts_attrs] (0x2000): TS cache doesn't handle this DN type, skipping (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [sysdb_gpo_store_gpo_result_setting] (0x0400): Updating setting: key [SeDenyServiceLogonRight] value [*S-1-5-21-XXXXXXXXXXXX-241297-2590,hbac-global-deny-service] (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): cse filtered_gpos[4]->gpo_guid is {XXXXXXXX-XXXX-XXXX-XXXX-77998F413721} (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): smb_server: smb://myhost.domain.name.fqdn (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): smb_share: /SysVol (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): smb_path: /domain.name.fqdn/Policies/{XXXXXXXX-XXXX-XXXX-XXXX-77998F413721} (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): gpo_guid: {XXXXXXXX-XXXX-XXXX-XXXX-77998F413721} (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): retrieving GPO from cache [{XXXXXXXX-XXXX-XXXX-XXXX-77998F413721}] (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): send_to_child: 1 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): cached_gpt_version: 2 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [child_handler_setup] (0x2000): Setting up signal handler up for pid [9732] (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [child_handler_setup] (0x2000): Signal handler set up for pid [9732] (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [child_sig_handler] (0x0020): waitpid did not found a child with changed status. (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [child_sig_handler] (0x0100): child [9730] finished successfully. (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [write_pipe_handler] (0x0400): All data has been sent! (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [read_pipe_handler] (0x0400): EOF received, client finished (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [gpo_cse_done] (0x0400): sysvol_gpt_version: 2 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [sysdb_merge_res_ts_attrs] (0x2000): TS cache doesn't handle this DN type, skipping (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_done] (0x0400): gpo_guid: {XXXXXXXX-XXXX-XXXX-XXXX-77998F413721} (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [sysdb_merge_res_ts_attrs] (0x2000): TS cache doesn't handle this DN type, skipping (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [sysdb_gpo_store_gpo_result_setting] (0x0400): Updating setting: key [SeDenyRemoteInteractiveLogonRight] value [*S-1-5-21-XXXXXXXXXXXX-241297-1305] (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): cse filtered_gpos[5]->gpo_guid is {XXXXXXXX-XXXX-XXXX-XXXX-31DA80D259C2} (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): smb_server: smb://myhost.domain.name.fqdn (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): smb_share: /SysVol (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): smb_path: /domain.name.fqdn/Policies/{XXXXXXXX-XXXX-XXXX-XXXX-31DA80D259C2} (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): gpo_guid: {XXXXXXXX-XXXX-XXXX-XXXX-31DA80D259C2} (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): retrieving GPO from cache [{XXXXXXXX-XXXX-XXXX-XXXX-31DA80D259C2}] (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): send_to_child: 1 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): cached_gpt_version: 4 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [child_handler_setup] (0x2000): Setting up signal handler up for pid [9734] (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [child_handler_setup] (0x2000): Signal handler set up for pid [9734] (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [child_sig_handler] (0x0020): waitpid did not found a child with changed status. (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [child_sig_handler] (0x0100): child [9732] finished successfully. (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [write_pipe_handler] (0x0400): All data has been sent! (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [read_pipe_handler] (0x0400): EOF received, client finished (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [gpo_cse_done] (0x0400): sysvol_gpt_version: 4 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [sysdb_merge_res_ts_attrs] (0x2000): TS cache doesn't handle this DN type, skipping (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_done] (0x0400): gpo_guid: {XXXXXXXX-XXXX-XXXX-XXXX-31DA80D259C2} (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [sysdb_merge_res_ts_attrs] (0x2000): TS cache doesn't handle this DN type, skipping (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [sysdb_gpo_store_gpo_result_setting] (0x0400): Updating setting: key [SeInteractiveLogonRight] value [*S-1-5-21-XXXXXXXXXXXX-241297-3365,hbac-global-Allow-interactive,*S-1-5-32-544,*S-1-5-21-XXXXXXXXXXXX-241297-2575,hbac-kittens-Allow-interactive] (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [sysdb_merge_res_ts_attrs] (0x2000): TS cache doesn't handle this DN type, skipping (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [sysdb_gpo_store_gpo_result_setting] (0x0400): Updating setting: key [SeDenyInteractiveLogonRight] value [*S-1-5-21-XXXXXXXXXXXX-241297-2585,hbac-global-deny-interactive,*S-1-5-21-XXXXXXXXXXXX-241297-2576,hbac-kittens-Deny-interactive] (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [sysdb_merge_res_ts_attrs] (0x2000): TS cache doesn't handle this DN type, skipping (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [sysdb_gpo_store_gpo_result_setting] (0x0400): Updating setting: key [SeRemoteInteractiveLogonRight] value [*S-1-5-21-XXXXXXXXXXXX-241297-1400,hbac-global-allow-remote_interactive,*S-1-5-32-544,*S-1-5-21-XXXXXXXXXXXX-241297-2577,hbac-kittens-Allow-remote_interactive] (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [sysdb_merge_res_ts_attrs] (0x2000): TS cache doesn't handle this DN type, skipping (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [sysdb_gpo_store_gpo_result_setting] (0x0400): Updating setting: key [SeDenyRemoteInteractiveLogonRight] value [*S-1-5-21-XXXXXXXXXXXX-241297-2586,hbac-global-deny-remote_interactive,*S-1-5-21-XXXXXXXXXXXX-241297-2578,hbac-kittens-Deny-remote_interactive] (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [sysdb_merge_res_ts_attrs] (0x2000): TS cache doesn't handle this DN type, skipping (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [sysdb_gpo_store_gpo_result_setting] (0x0400): Updating setting: key [SeNetworkLogonRight] value [*S-1-5-21-XXXXXXXXXXXX-241297-3367,hbac-global-Allow-network,*S-1-5-11,*S-1-5-21-XXXXXXXXXXXX-241297-2579,hbac-kittens-Allow-network] (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [sysdb_merge_res_ts_attrs] (0x2000): TS cache doesn't handle this DN type, skipping (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [sysdb_gpo_store_gpo_result_setting] (0x0400): Updating setting: key [SeDenyNetworkLogonRight] value [*S-1-5-21-XXXXXXXXXXXX-241297-2587,hbac-global-deny-network,*S-1-5-21-XXXXXXXXXXXX-241297-2580,hbac-kittens-Deny-network] (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [sysdb_merge_res_ts_attrs] (0x2000): TS cache doesn't handle this DN type, skipping (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [sysdb_gpo_store_gpo_result_setting] (0x0400): Updating setting: key [SeBatchLogonRight] value [*S-1-5-21-XXXXXXXXXXXX-241297-2372,hbac-global-allow-batch,*S-1-5-21-XXXXXXXXXXXX-241297-2581,hbac-kittens-Allow-batch] (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [sysdb_merge_res_ts_attrs] (0x2000): TS cache doesn't handle this DN type, skipping (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [sysdb_gpo_store_gpo_result_setting] (0x0400): Updating setting: key [SeDenyBatchLogonRight] value [*S-1-5-21-XXXXXXXXXXXX-241297-2587,hbac-global-deny-batch,*S-1-5-21-XXXXXXXXXXXX-241297-2582,hbac-kittens-Deny-batch] (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [sysdb_merge_res_ts_attrs] (0x2000): TS cache doesn't handle this DN type, skipping (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [sysdb_gpo_store_gpo_result_setting] (0x0400): Updating setting: key [SeServiceLogonRight] value [*S-1-5-21-XXXXXXXXXXXX-241297-2363,hbac-global-allow-service,NT SERVICE\ALL SERVICES,right-local-logon-service,*S-1-5-21-XXXXXXXXXXXX-241297-2583,hbac-kittens-Allow-service] (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [sysdb_merge_res_ts_attrs] (0x2000): TS cache doesn't handle this DN type, skipping (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [sysdb_gpo_store_gpo_result_setting] (0x0400): Updating setting: key [SeDenyServiceLogonRight] value [*S-1-5-21-XXXXXXXXXXXX-241297-2590,hbac-global-deny-service,*S-1-5-21-XXXXXXXXXXXX-241297-2584,hbac-kittens-Deny-service] (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [sysdb_gpo_get_gpo_result_setting] (0x0400): key [SeRemoteInteractiveLogonRight] value [*S-1-5-21-XXXXXXXXXXXX-241297-1400,hbac-global-allow-remote_interactive,*S-1-5-32-544,*S-1-5-21-XXXXXXXXXXXX-241297-2577,hbac-kittens-Allow-remote_interactive] (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [sysdb_gpo_get_gpo_result_setting] (0x0400): key [SeDenyRemoteInteractiveLogonRight] value [*S-1-5-21-XXXXXXXXXXXX-241297-2586,hbac-global-deny-remote_interactive,*S-1-5-21-XXXXXXXXXXXX-241297-2578,hbac-kittens-Deny-remote_interactive] (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): RESULTANT POLICY: (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): gpo_map_type: Remote Interactive (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): allowed_size = 5 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): allowed_sids[0] = S-1-5-21-XXXXXXXXXXXX-241297-1400 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): allowed_sids[1] = bac-global-allow-remote_interactive (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): allowed_sids[2] = S-1-5-32-544 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): allowed_sids[3] = S-1-5-21-XXXXXXXXXXXX-241297-2577 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): allowed_sids[4] = bac-kittens-Allow-remote_interactive (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): denied_size = 4 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): denied_sids[0] = S-1-5-21-XXXXXXXXXXXX-241297-2586 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): denied_sids[1] = bac-global-deny-remote_interactive (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): denied_sids[2] = S-1-5-21-XXXXXXXXXXXX-241297-2578 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): denied_sids[3] = bac-kittens-Deny-remote_interactive (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): CURRENT USER: (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): user_sid = S-1-5-21-XXXXXXXXXXXX-241297-1305 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[0] = S-1-5-21-XXXXXXXXXXXX-241297-2365 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[1] = S-1-5-21-XXXXXXXXXXXX-241297-1129 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[2] = S-1-5-21-XXXXXXXXXXXX-241297-513 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[3] = S-1-5-21-XXXXXXXXXXXX-241297-1147 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[4] = S-1-5-21-XXXXXXXXXXXX-241297-1146 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[5] = S-1-5-21-XXXXXXXXXXXX-241297-1148 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[6] = S-1-5-21-XXXXXXXXXXXX-241297-2124 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[7] = S-1-5-21-XXXXXXXXXXXX-241297-2404 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[8] = S-1-5-21-XXXXXXXXXXXX-241297-2402 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[9] = S-1-5-21-XXXXXXXXXXXX-241297-2403 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[10] = S-1-5-21-XXXXXXXXXXXX-241297-1134 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[11] = S-1-5-21-XXXXXXXXXXXX-241297-1133 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[12] = S-1-5-21-XXXXXXXXXXXX-241297-1131 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[13] = S-1-5-21-XXXXXXXXXXXX-241297-1132 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[14] = S-1-5-21-XXXXXXXXXXXX-241297-1125 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[15] = S-1-5-21-XXXXXXXXXXXX-241297-1159 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[16] = S-1-5-21-XXXXXXXXXXXX-241297-2123 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[17] = S-1-5-21-XXXXXXXXXXXX-241297-1342 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[18] = S-1-5-21-XXXXXXXXXXXX-241297-3156 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[19] = S-1-5-21-XXXXXXXXXXXX-241297-2355 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[20] = S-1-5-21-XXXXXXXXXXXX-241297-1180 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[21] = S-1-5-21-XXXXXXXXXXXX-241297-1175 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[22] = S-1-5-21-XXXXXXXXXXXX-241297-1174 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[23] = S-1-5-21-XXXXXXXXXXXX-241297-1173 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[24] = S-1-5-21-XXXXXXXXXXXX-241297-1151 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[25] = S-1-5-21-XXXXXXXXXXXX-241297-1149 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[26] = S-1-5-21-XXXXXXXXXXXX-241297-1144 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[27] = S-1-5-21-XXXXXXXXXXXX-241297-1155 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[28] = S-1-5-21-XXXXXXXXXXXX-241297-2122 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[29] = S-1-5-21-XXXXXXXXXXXX-241297-512 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[30] = S-1-5-21-XXXXXXXXXXXX-241297-572 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[31] = S-1-5-21-XXXXXXXXXXXX-241297-1137 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[32] = S-1-5-21-XXXXXXXXXXXX-241297-1169 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[33] = S-1-5-21-XXXXXXXXXXXX-241297-1167 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[34] = S-1-5-21-XXXXXXXXXXXX-241297-1372 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[35] = S-1-5-21-XXXXXXXXXXXX-241297-1168 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[36] = S-1-5-21-XXXXXXXXXXXX-241297-1153 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[37] = S-1-5-21-XXXXXXXXXXXX-241297-1154 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[38] = S-1-5-21-XXXXXXXXXXXX-241297-1152 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[39] = S-1-5-21-XXXXXXXXXXXX-241297-1139 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[40] = S-1-5-21-XXXXXXXXXXXX-241297-1138 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[41] = S-1-5-21-XXXXXXXXXXXX-241297-1140 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[42] = S-1-5-21-XXXXXXXXXXXX-241297-1135 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[43] = S-1-5-21-XXXXXXXXXXXX-241297-1136 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[44] = S-1-5-21-XXXXXXXXXXXX-241297-1172 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[45] = S-1-5-21-XXXXXXXXXXXX-241297-1170 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[46] = S-1-5-21-XXXXXXXXXXXX-241297-1325 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[47] = S-1-5-21-XXXXXXXXXXXX-241297-1314 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[48] = S-1-5-21-XXXXXXXXXXXX-241297-1307 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[49] = S-1-5-21-XXXXXXXXXXXX-241297-2371 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[50] = S-1-5-21-XXXXXXXXXXXX-241297-1344 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[51] = S-1-5-21-XXXXXXXXXXXX-241297-1142 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[52] = S-1-5-21-XXXXXXXXXXXX-241297-3192 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[53] = S-1-5-21-XXXXXXXXXXXX-241297-3197 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[54] = S-1-5-21-XXXXXXXXXXXX-241297-2370 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[55] = S-1-5-21-XXXXXXXXXXXX-241297-1316 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[56] = S-1-5-21-XXXXXXXXXXXX-241297-2416 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[57] = S-1-5-21-XXXXXXXXXXXX-241297-1150 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[58] = S-1-5-21-XXXXXXXXXXXX-241297-3181 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[59] = S-1-5-21-XXXXXXXXXXXX-241297-1157 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[60] = S-1-5-21-XXXXXXXXXXXX-241297-1156 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[61] = S-1-5-21-XXXXXXXXXXXX-241297-1300 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[62] = S-1-5-21-XXXXXXXXXXXX-241297-1341 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[63] = S-1-5-21-XXXXXXXXXXXX-241297-1290 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[64] = S-1-5-21-XXXXXXXXXXXX-241297-1289 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[65] = S-1-5-21-XXXXXXXXXXXX-241297-1385 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[66] = S-1-5-21-XXXXXXXXXXXX-241297-1141 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[67] = S-1-5-21-XXXXXXXXXXXX-241297-1171 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[68] = S-1-5-21-XXXXXXXXXXXX-241297-3204 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[69] = S-1-5-21-XXXXXXXXXXXX-241297-1461 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[70] = S-1-5-21-XXXXXXXXXXXX-241297-3353 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[71] = S-1-5-21-XXXXXXXXXXXX-241297-3359 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[72] = S-1-5-21-XXXXXXXXXXXX-241297-1415 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[73] = S-1-5-21-XXXXXXXXXXXX-241297-1413 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[74] = S-1-5-21-XXXXXXXXXXXX-241297-3243 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[75] = S-1-5-21-XXXXXXXXXXXX-241297-3349 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[76] = S-1-5-21-XXXXXXXXXXXX-241297-2475 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[77] = S-1-5-21-XXXXXXXXXXXX-241297-3355 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[78] = S-1-5-21-XXXXXXXXXXXX-241297-1386 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[79] = S-1-5-21-XXXXXXXXXXXX-241297-3351 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[80] = S-1-5-21-XXXXXXXXXXXX-241297-3357 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[81] = S-1-5-21-XXXXXXXXXXXX-241297-1400 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[82] = S-1-5-21-XXXXXXXXXXXX-241297-1420 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[83] = S-1-5-21-XXXXXXXXXXXX-241297-3347 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[84] = S-1-5-21-XXXXXXXXXXXX-241297-3365 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[85] = S-1-5-21-XXXXXXXXXXXX-241297-3241 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[86] = S-1-5-11 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): POLICY DECISION: (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): access_granted = 1 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): access_denied = 0 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_done] (0x0400): GPO-based access control successful. (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [dp_req_done] (0x0400): DP Request [PAM Account #11]: Request handler finished [0]: Success (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [_dp_req_recv] (0x0400): DP Request [PAM Account #11]: Receiving request data. (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [dp_req_destructor] (0x0400): DP Request [PAM Account #11]: Request removed. (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [dp_req_destructor] (0x0400): Number of active DP request: 0 (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [dp_method_enabled] (0x0400): Target selinux is not configured (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [sbus_issue_request_done] (0x0400): sssd.dataprovider.pamHandler: Success (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [child_sig_handler] (0x0100): child [9734] finished successfully. (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [sbus_method_handler] (0x2000): Received D-Bus method sssd.dataprovider.pamHandler on /sssd (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [sbus_senders_lookup] (0x2000): Looking for identity of sender [sssd.pam] (Thu Jan 30 20:58:17 2020) [sssd[be[domain.name.fqdn]]] [dp_pam_handler_send] (0x0100): Got request with the following data -- (Thu Jan 30 21:11:36 2020) [sssd[be[domain.name.fqdn]]] [dp_get_options] (0x0400): Option ad_enable_dns_sites is TRUE (Thu Jan 30 21:11:36 2020) [sssd[be[domain.name.fqdn]]] [dp_get_options] (0x0400): Option ad_access_filter has no value (Thu Jan 30 21:11:36 2020) [sssd[be[domain.name.fqdn]]] [dp_get_options] (0x0400): Option ad_enable_gc is TRUE (Thu Jan 30 21:11:36 2020) [sssd[be[domain.name.fqdn]]] [dp_get_options] (0x0400): Option ad_gpo_access_control has value enforcing (Thu Jan 30 21:11:36 2020) [sssd[be[domain.name.fqdn]]] [dp_get_options] (0x0400): Option ad_gpo_implicit_deny is FALSE (Thu Jan 30 21:11:36 2020) [sssd[be[domain.name.fqdn]]] [dp_get_options] (0x0400): Option ad_gpo_ignore_unreadable is TRUE (Thu Jan 30 21:11:36 2020) [sssd[be[domain.name.fqdn]]] [dp_get_options] (0x0400): Option ad_gpo_cache_timeout has value 5 (Thu Jan 30 21:11:36 2020) [sssd[be[domain.name.fqdn]]] [dp_get_options] (0x0400): Option ad_gpo_map_interactive has value +vmtoolsd (Thu Jan 30 21:11:36 2020) [sssd[be[domain.name.fqdn]]] [dp_get_options] (0x0400): Option ad_gpo_map_remote_interactive has no value (Thu Jan 30 21:11:36 2020) [sssd[be[domain.name.fqdn]]] [dp_get_options] (0x0400): Option ad_gpo_map_network has no value (Thu Jan 30 21:11:36 2020) [sssd[be[domain.name.fqdn]]] [dp_get_options] (0x0400): Option ad_gpo_map_batch has no value (Thu Jan 30 21:11:36 2020) [sssd[be[domain.name.fqdn]]] [dp_get_options] (0x0400): Option ad_gpo_map_service has no value (Thu Jan 30 21:11:36 2020) [sssd[be[domain.name.fqdn]]] [dp_get_options] (0x0400): Option ad_gpo_map_permit has no value (Thu Jan 30 21:11:36 2020) [sssd[be[domain.name.fqdn]]] [dp_get_options] (0x0400): Option ad_gpo_map_deny has no value (Thu Jan 30 21:11:36 2020) [sssd[be[domain.name.fqdn]]] [dp_get_options] (0x0400): Option ad_gpo_default_right has no value (Thu Jan 30 21:11:36 2020) [sssd[be[domain.name.fqdn]]] [dp_get_options] (0x0400): Option ad_site has no value (Thu Jan 30 21:11:36 2020) [sssd[be[domain.name.fqdn]]] [dp_get_options] (0x0400): Option krb5_confd_path has value /var/lib/sss/pubconf/krb5.include.d (Thu Jan 30 21:11:36 2020) [sssd[be[domain.name.fqdn]]] [dp_get_options] (0x0400): Option ad_maximum_machine_account_password_age has value 30 (Thu Jan 30 21:11:36 2020) [sssd[be[domain.name.fqdn]]] [dp_get_options] (0x0400): Option ad_machine_account_password_renewal_opts has value 86400:750 (Thu Jan 30 21:11:36 2020) [sssd[be[domain.name.fqdn]]] [ad_get_common_options] (0x0100): No AD server set, will use service discovery! (Thu Jan 30 21:11:36 2020) [sssd[be[domain.name.fqdn]]] [ad_get_common_options] (0x0100): Setting ad_hostname to [myhost.domain.name.fqdn]. (Thu Jan 30 21:11:36 2020) [sssd[be[domain.name.fqdn]]] [ad_get_common_options] (0x0100): Setting domain option case_sensitive to [false] (Thu Jan 30 21:11:36 2020) [sssd[be[domain.name.fqdn]]] [krb5_service_new] (0x0100): write_kdcinfo for realm domain.name.fqdn set to false (Thu Jan 30 21:11:36 2020) [sssd[be[domain.name.fqdn]]] [fo_new_service] (0x0400): Creating new service 'AD' (Thu Jan 30 21:11:36 2020) [sssd[be[domain.name.fqdn]]] [fo_new_service] (0x0400): Creating new service 'AD_GC' -- (Thu Jan 30 21:11:36 2020) [sssd[be[domain.name.fqdn]]] [dp_copy_options_ex] (0x0400): Option ad_enable_dns_sites is TRUE (Thu Jan 30 21:11:36 2020) [sssd[be[domain.name.fqdn]]] [dp_copy_options_ex] (0x0400): Option ad_access_filter has no value (Thu Jan 30 21:11:36 2020) [sssd[be[domain.name.fqdn]]] [dp_copy_options_ex] (0x0400): Option ad_enable_gc is TRUE (Thu Jan 30 21:11:36 2020) [sssd[be[domain.name.fqdn]]] [dp_copy_options_ex] (0x0400): Option ad_gpo_access_control has value enforcing (Thu Jan 30 21:11:36 2020) [sssd[be[domain.name.fqdn]]] [dp_copy_options_ex] (0x0400): Option ad_gpo_implicit_deny is FALSE (Thu Jan 30 21:11:36 2020) [sssd[be[domain.name.fqdn]]] [dp_copy_options_ex] (0x0400): Option ad_gpo_ignore_unreadable is TRUE (Thu Jan 30 21:11:36 2020) [sssd[be[domain.name.fqdn]]] [dp_copy_options_ex] (0x0400): Option ad_gpo_cache_timeout has value 5 (Thu Jan 30 21:11:36 2020) [sssd[be[domain.name.fqdn]]] [dp_copy_options_ex] (0x0400): Option ad_gpo_map_interactive has value +vmtoolsd (Thu Jan 30 21:11:36 2020) [sssd[be[domain.name.fqdn]]] [dp_copy_options_ex] (0x0400): Option ad_gpo_map_remote_interactive has no value (Thu Jan 30 21:11:36 2020) [sssd[be[domain.name.fqdn]]] [dp_copy_options_ex] (0x0400): Option ad_gpo_map_network has no value (Thu Jan 30 21:11:36 2020) [sssd[be[domain.name.fqdn]]] [dp_copy_options_ex] (0x0400): Option ad_gpo_map_batch has no value (Thu Jan 30 21:11:36 2020) [sssd[be[domain.name.fqdn]]] [dp_copy_options_ex] (0x0400): Option ad_gpo_map_service has no value (Thu Jan 30 21:11:36 2020) [sssd[be[domain.name.fqdn]]] [dp_copy_options_ex] (0x0400): Option ad_gpo_map_permit has no value (Thu Jan 30 21:11:36 2020) [sssd[be[domain.name.fqdn]]] [dp_copy_options_ex] (0x0400): Option ad_gpo_map_deny has no value (Thu Jan 30 21:11:36 2020) [sssd[be[domain.name.fqdn]]] [dp_copy_options_ex] (0x0400): Option ad_gpo_default_right has no value (Thu Jan 30 21:11:36 2020) [sssd[be[domain.name.fqdn]]] [dp_copy_options_ex] (0x0400): Option ad_site has no value (Thu Jan 30 21:11:36 2020) [sssd[be[domain.name.fqdn]]] [dp_copy_options_ex] (0x0400): Option krb5_confd_path has value /var/lib/sss/pubconf/krb5.include.d (Thu Jan 30 21:11:36 2020) [sssd[be[domain.name.fqdn]]] [dp_copy_options_ex] (0x0400): Option ad_maximum_machine_account_password_age has value 30 (Thu Jan 30 21:11:36 2020) [sssd[be[domain.name.fqdn]]] [dp_copy_options_ex] (0x0400): Option ad_machine_account_password_renewal_opts has value 86400:750 (Thu Jan 30 21:11:36 2020) [sssd[be[domain.name.fqdn]]] [dp_target_init] (0x0400): Initializing target [chpass] with module [ad] (Thu Jan 30 21:11:36 2020) [sssd[be[domain.name.fqdn]]] [dp_load_module] (0x0400): Module [ad] is already loaded. (Thu Jan 30 21:11:36 2020) [sssd[be[domain.name.fqdn]]] [dp_target_run_constructor] (0x0400): Executing target [chpass] constructor (Thu Jan 30 21:11:36 2020) [sssd[be[domain.name.fqdn]]] [dp_load_module] (0x0400): Module [ad] is already loaded. -- (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [dp_attach_req] (0x0400): Number of active DP request: 1 (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_access_send] (0x0400): Performing access check for user [someuser.name@domain.name.fqdn] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_account_expired_ad] (0x0400): Performing AD access check for user [someuser.name@domain.name.fqdn] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_send] (0x0400): service sshd maps to Remote Interactive (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_connect_done] (0x0400): sam_account_name is myhost$ (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_print_server] (0x2000): Searching X.X.121.101]:389 (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(&(objectclass=user)(sAMAccountName=myhost$))][dc=domain,dc=name,dc=fqdn]. (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_ext_step] (0x2000): ldap_search_ext called, msgid = 99 (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_op_add] (0x2000): New operation 99 timeout 6 (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55a3e7172b50], connected[1], ops[0x55a3e723cba0], ldap[0x55a3e7167410] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [distinguishedName] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [userAccountControl] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55a3e7172b50], connected[1], ops[0x55a3e723cba0], ldap[0x55a3e7167410] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55a3e7172b50], connected[1], ops[0x55a3e723cba0], ldap[0x55a3e7167410] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55a3e7172b50], connected[1], ops[0x55a3e723cba0], ldap[0x55a3e7167410] -- (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [ad_master_domain_netlogon_done] (0x0400): Found flat name [name]. (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [ad_master_domain_netlogon_done] (0x0400): Found site [mysite]. (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [ad_master_domain_netlogon_done] (0x0400): Found forest [domain.name.fqdn]. (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_site_name_retrieval_done] (0x0400): Using AD site 'cn=mysite'. (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_print_server] (0x2000): Searching X.X.121.101]:389 (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(objectclass=*)][]. (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_ext_step] (0x2000): ldap_search_ext called, msgid = 102 (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_op_add] (0x2000): New operation 102 timeout 6 (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55a3e7172b50], connected[1], ops[0x55a3e7334720], ldap[0x55a3e7167410] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: end of ldap_result list (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55a3e7172b50], connected[1], ops[0x55a3e7334720], ldap[0x55a3e7167410] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [configurationNamingContext] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55a3e7172b50], connected[1], ops[0x55a3e7334720], ldap[0x55a3e7167410] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_op_destructor] (0x2000): Operation 102 finished (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_site_dn_retrieval_done] (0x0400): som_list[0]->som_dn is OU=Hosts,OU=kittens,OU=Projects,OU=something,OU=Orgs,DC=domain,DC=name,dc=fqdn (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_site_dn_retrieval_done] (0x0400): som_list[1]->som_dn is OU=kittens,OU=Projects,OU=something,OU=Orgs,DC=domain,DC=name,dc=fqdn (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_site_dn_retrieval_done] (0x0400): som_list[2]->som_dn is OU=Projects,OU=something,OU=Orgs,DC=domain,DC=name,dc=fqdn (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_site_dn_retrieval_done] (0x0400): som_list[3]->som_dn is OU=something,OU=Orgs,DC=domain,DC=name,dc=fqdn (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_site_dn_retrieval_done] (0x0400): som_list[4]->som_dn is OU=Orgs,DC=domain,DC=name,dc=fqdn (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_site_dn_retrieval_done] (0x0400): som_list[5]->som_dn is DC=domain,DC=name,dc=fqdn (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_site_dn_retrieval_done] (0x0400): som_list[6]->som_dn is cn=mysite,cn=Sites,CN=Configuration,DC=domain,DC=name,dc=fqdn (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_print_server] (0x2000): Searching X.X.121.101]:389 (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(objectclass=*)][OU=Hosts,OU=kittens,OU=Projects,OU=something,OU=Orgs,DC=domain,DC=name,dc=fqdn]. (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_ext_step] (0x2000): ldap_search_ext called, msgid = 103 (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_op_add] (0x2000): New operation 103 timeout 6 (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55a3e7172b50], connected[1], ops[0x55a3e717e120], ldap[0x55a3e7167410] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: end of ldap_result list (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55a3e7172b50], connected[1], ops[0x55a3e717e120], ldap[0x55a3e7167410] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [gPLink] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55a3e7172b50], connected[1], ops[0x55a3e717e120], ldap[0x55a3e7167410] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_op_destructor] (0x2000): Operation 103 finished (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_populate_gplink_list] (0x0400): som_dn: OU=Hosts,OU=kittens,OU=Projects,OU=something,OU=Orgs,DC=domain,DC=name,dc=fqdn (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_print_server] (0x2000): Searching X.X.121.101]:389 (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(objectclass=*)][OU=kittens,OU=Projects,OU=something,OU=Orgs,DC=domain,DC=name,dc=fqdn]. (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_ext_step] (0x2000): ldap_search_ext called, msgid = 104 (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_op_add] (0x2000): New operation 104 timeout 6 (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55a3e7172b50], connected[1], ops[0x55a3e723cba0], ldap[0x55a3e7167410] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: end of ldap_result list (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55a3e7172b50], connected[1], ops[0x55a3e723cba0], ldap[0x55a3e7167410] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [gPLink] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55a3e7172b50], connected[1], ops[0x55a3e723cba0], ldap[0x55a3e7167410] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_op_destructor] (0x2000): Operation 104 finished (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_populate_gplink_list] (0x0400): som_dn: OU=kittens,OU=Projects,OU=something,OU=Orgs,DC=domain,DC=name,dc=fqdn (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_print_server] (0x2000): Searching X.X.121.101]:389 (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(objectclass=*)][OU=Projects,OU=something,OU=Orgs,DC=domain,DC=name,dc=fqdn]. (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_ext_step] (0x2000): ldap_search_ext called, msgid = 105 (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_op_add] (0x2000): New operation 105 timeout 6 (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55a3e7172b50], connected[1], ops[0x55a3e7167830], ldap[0x55a3e7167410] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: end of ldap_result list (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55a3e7172b50], connected[1], ops[0x55a3e7167830], ldap[0x55a3e7167410] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55a3e7172b50], connected[1], ops[0x55a3e7167830], ldap[0x55a3e7167410] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_op_destructor] (0x2000): Operation 105 finished (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_get_som_attrs_done] (0x0040): no attrs found for SOM; try next SOM (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_print_server] (0x2000): Searching X.X.121.101]:389 (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(objectclass=*)][OU=something,OU=Orgs,DC=domain,DC=name,dc=fqdn]. (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_ext_step] (0x2000): ldap_search_ext called, msgid = 106 (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_op_add] (0x2000): New operation 106 timeout 6 (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55a3e7172b50], connected[1], ops[0x55a3e7167830], ldap[0x55a3e7167410] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: end of ldap_result list (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55a3e7172b50], connected[1], ops[0x55a3e7167830], ldap[0x55a3e7167410] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [gPLink] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55a3e7172b50], connected[1], ops[0x55a3e7167830], ldap[0x55a3e7167410] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_op_destructor] (0x2000): Operation 106 finished (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_populate_gplink_list] (0x0400): som_dn: OU=something,OU=Orgs,DC=domain,DC=name,dc=fqdn (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_print_server] (0x2000): Searching X.X.121.101]:389 (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(objectclass=*)][OU=Orgs,DC=domain,DC=name,dc=fqdn]. (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_ext_step] (0x2000): ldap_search_ext called, msgid = 107 (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_op_add] (0x2000): New operation 107 timeout 6 (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55a3e7172b50], connected[1], ops[0x55a3e715e450], ldap[0x55a3e7167410] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: end of ldap_result list (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55a3e7172b50], connected[1], ops[0x55a3e715e450], ldap[0x55a3e7167410] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [gPLink] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55a3e7172b50], connected[1], ops[0x55a3e715e450], ldap[0x55a3e7167410] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_op_destructor] (0x2000): Operation 107 finished (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_populate_gplink_list] (0x0400): som_dn: OU=Orgs,DC=domain,DC=name,dc=fqdn (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_print_server] (0x2000): Searching X.X.121.101]:389 (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(objectclass=*)][DC=domain,DC=name,dc=fqdn]. (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_ext_step] (0x2000): ldap_search_ext called, msgid = 108 (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_op_add] (0x2000): New operation 108 timeout 6 (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55a3e7172b50], connected[1], ops[0x55a3e727c4f0], ldap[0x55a3e7167410] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: end of ldap_result list (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55a3e7172b50], connected[1], ops[0x55a3e727c4f0], ldap[0x55a3e7167410] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [gPLink] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55a3e7172b50], connected[1], ops[0x55a3e727c4f0], ldap[0x55a3e7167410] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_op_destructor] (0x2000): Operation 108 finished (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_populate_gplink_list] (0x0400): som_dn: DC=domain,DC=name,dc=fqdn (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_print_server] (0x2000): Searching X.X.121.101]:389 (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(objectclass=*)][cn=mysite,cn=Sites,CN=Configuration,DC=domain,DC=name,dc=fqdn]. (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_ext_step] (0x2000): ldap_search_ext called, msgid = 109 (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_op_add] (0x2000): New operation 109 timeout 6 (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55a3e7172b50], connected[1], ops[0x55a3e7176d50], ldap[0x55a3e7167410] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: end of ldap_result list (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55a3e7172b50], connected[1], ops[0x55a3e7176d50], ldap[0x55a3e7167410] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55a3e7172b50], connected[1], ops[0x55a3e7176d50], ldap[0x55a3e7167410] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_op_destructor] (0x2000): Operation 109 finished (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_get_som_attrs_done] (0x0040): no attrs found for SOM; try next SOM (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[0]->gpo_dn: cn={XXXXXXXX-XXXX-XXXX-XXXX-00C04FB984F9},cn=policies,cn=system,DC=domain,DC=name,dc=fqdn (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[1]->gpo_dn: cn={XXXXXXXX-XXXX-XXXX-XXXX-D759F821AF6F},cn=policies,cn=system,DC=domain,DC=name,dc=fqdn (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[2]->gpo_dn: cn={XXXXXXXX-XXXX-XXXX-XXXX-E6664AF32D1B},cn=policies,cn=system,DC=domain,DC=name,dc=fqdn (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[3]->gpo_dn: cn={XXXXXXXX-XXXX-XXXX-XXXX-B41CE916BF37},cn=policies,cn=system,DC=domain,DC=name,dc=fqdn (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[4]->gpo_dn: cn={XXXXXXXX-XXXX-XXXX-XXXX-D2930E129A69},cn=policies,cn=system,DC=domain,DC=name,dc=fqdn (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[5]->gpo_dn: cn={XXXXXXXX-XXXX-XXXX-XXXX-7519ED99BAAA},cn=policies,cn=system,DC=domain,DC=name,dc=fqdn (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[6]->gpo_dn: cn={XXXXXXXX-XXXX-XXXX-XXXX-1C676C587B88},cn=policies,cn=system,DC=domain,DC=name,dc=fqdn (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[7]->gpo_dn: cn={XXXXXXXX-XXXX-XXXX-XXXX-77998F413721},cn=policies,cn=system,DC=domain,DC=name,dc=fqdn (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_populate_candidate_gpos] (0x0400): candidate_gpos[8]->gpo_dn: cn={XXXXXXXX-XXXX-XXXX-XXXX-31DA80D259C2},cn=policies,cn=system,DC=domain,DC=name,dc=fqdn (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_sd_search_send] (0x0400): Searching entry [cn={XXXXXXXX-XXXX-XXXX-XXXX-00C04FB984F9},cn=policies,cn=system,DC=domain,DC=name,dc=fqdn] using SD (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_print_server] (0x2000): Searching X.X.121.101]:389 (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_ext_send] (0x0400): WARNING: Disabling paging because scope is set to base. (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(objectclass=*)][cn={XXXXXXXX-XXXX-XXXX-XXXX-00C04FB984F9},cn=policies,cn=system,DC=domain,DC=name,dc=fqdn]. (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_ext_step] (0x2000): ldap_search_ext called, msgid = 110 (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_op_add] (0x2000): New operation 110 timeout 6 (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55a3e7172b50], connected[1], ops[0x55a3e71c2c10], ldap[0x55a3e7167410] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: end of ldap_result list (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55a3e7172b50], connected[1], ops[0x55a3e71c2c10], ldap[0x55a3e7167410] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [cn] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [nTSecurityDescriptor] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [flags] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [gPCFunctionalityVersion] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [gPCFileSysPath] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [gPCMachineExtensionNames] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55a3e7172b50], connected[1], ops[0x55a3e71c2c10], ldap[0x55a3e7167410] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_op_destructor] (0x2000): Operation 110 finished (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_sd_search_send] (0x0400): Searching entry [cn={XXXXXXXX-XXXX-XXXX-XXXX-D759F821AF6F},cn=policies,cn=system,DC=domain,DC=name,dc=fqdn] using SD (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_print_server] (0x2000): Searching X.X.121.101]:389 (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_ext_send] (0x0400): WARNING: Disabling paging because scope is set to base. (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(objectclass=*)][cn={XXXXXXXX-XXXX-XXXX-XXXX-D759F821AF6F},cn=policies,cn=system,DC=domain,DC=name,dc=fqdn]. (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_ext_step] (0x2000): ldap_search_ext called, msgid = 111 (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_op_add] (0x2000): New operation 111 timeout 6 (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55a3e7172b50], connected[1], ops[0x55a3e727c4f0], ldap[0x55a3e7167410] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: end of ldap_result list (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55a3e7172b50], connected[1], ops[0x55a3e727c4f0], ldap[0x55a3e7167410] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [cn] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [nTSecurityDescriptor] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [flags] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [gPCFunctionalityVersion] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [gPCFileSysPath] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [gPCMachineExtensionNames] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55a3e7172b50], connected[1], ops[0x55a3e727c4f0], ldap[0x55a3e7167410] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_op_destructor] (0x2000): Operation 111 finished (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_sd_search_send] (0x0400): Searching entry [cn={XXXXXXXX-XXXX-XXXX-XXXX-E6664AF32D1B},cn=policies,cn=system,DC=domain,DC=name,dc=fqdn] using SD (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_print_server] (0x2000): Searching X.X.121.101]:389 (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_ext_send] (0x0400): WARNING: Disabling paging because scope is set to base. (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(objectclass=*)][cn={XXXXXXXX-XXXX-XXXX-XXXX-E6664AF32D1B},cn=policies,cn=system,DC=domain,DC=name,dc=fqdn]. (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_ext_step] (0x2000): ldap_search_ext called, msgid = 112 (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_op_add] (0x2000): New operation 112 timeout 6 (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55a3e7172b50], connected[1], ops[0x55a3e72129a0], ldap[0x55a3e7167410] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: end of ldap_result list (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55a3e7172b50], connected[1], ops[0x55a3e72129a0], ldap[0x55a3e7167410] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [cn] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [nTSecurityDescriptor] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [flags] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [gPCFunctionalityVersion] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [gPCFileSysPath] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [gPCMachineExtensionNames] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55a3e7172b50], connected[1], ops[0x55a3e72129a0], ldap[0x55a3e7167410] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_op_destructor] (0x2000): Operation 112 finished (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_sd_search_send] (0x0400): Searching entry [cn={XXXXXXXX-XXXX-XXXX-XXXX-B41CE916BF37},cn=policies,cn=system,DC=domain,DC=name,dc=fqdn] using SD (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_print_server] (0x2000): Searching X.X.121.101]:389 (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_ext_send] (0x0400): WARNING: Disabling paging because scope is set to base. (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(objectclass=*)][cn={XXXXXXXX-XXXX-XXXX-XXXX-B41CE916BF37},cn=policies,cn=system,DC=domain,DC=name,dc=fqdn]. (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_ext_step] (0x2000): ldap_search_ext called, msgid = 113 (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_op_add] (0x2000): New operation 113 timeout 6 (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55a3e7172b50], connected[1], ops[0x55a3e7176d50], ldap[0x55a3e7167410] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: end of ldap_result list (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55a3e7172b50], connected[1], ops[0x55a3e7176d50], ldap[0x55a3e7167410] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [cn] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [nTSecurityDescriptor] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [flags] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [gPCFunctionalityVersion] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [gPCFileSysPath] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [gPCMachineExtensionNames] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55a3e7172b50], connected[1], ops[0x55a3e7176d50], ldap[0x55a3e7167410] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_op_destructor] (0x2000): Operation 113 finished (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_sd_search_send] (0x0400): Searching entry [cn={XXXXXXXX-XXXX-XXXX-XXXX-D2930E129A69},cn=policies,cn=system,DC=domain,DC=name,dc=fqdn] using SD (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_print_server] (0x2000): Searching X.X.121.101]:389 (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_ext_send] (0x0400): WARNING: Disabling paging because scope is set to base. (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(objectclass=*)][cn={XXXXXXXX-XXXX-XXXX-XXXX-D2930E129A69},cn=policies,cn=system,DC=domain,DC=name,dc=fqdn]. (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_ext_step] (0x2000): ldap_search_ext called, msgid = 114 (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_op_add] (0x2000): New operation 114 timeout 6 (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55a3e7172b50], connected[1], ops[0x55a3e7358650], ldap[0x55a3e7167410] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: end of ldap_result list (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55a3e7172b50], connected[1], ops[0x55a3e7358650], ldap[0x55a3e7167410] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [cn] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [nTSecurityDescriptor] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [flags] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [gPCFunctionalityVersion] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [gPCFileSysPath] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [gPCMachineExtensionNames] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55a3e7172b50], connected[1], ops[0x55a3e7358650], ldap[0x55a3e7167410] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_op_destructor] (0x2000): Operation 114 finished (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_sd_search_send] (0x0400): Searching entry [cn={XXXXXXXX-XXXX-XXXX-XXXX-7519ED99BAAA},cn=policies,cn=system,DC=domain,DC=name,dc=fqdn] using SD (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_print_server] (0x2000): Searching X.X.121.101]:389 (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_ext_send] (0x0400): WARNING: Disabling paging because scope is set to base. (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(objectclass=*)][cn={XXXXXXXX-XXXX-XXXX-XXXX-7519ED99BAAA},cn=policies,cn=system,DC=domain,DC=name,dc=fqdn]. (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_ext_step] (0x2000): ldap_search_ext called, msgid = 115 (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_op_add] (0x2000): New operation 115 timeout 6 (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55a3e7172b50], connected[1], ops[0x55a3e7182c10], ldap[0x55a3e7167410] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: end of ldap_result list (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55a3e7172b50], connected[1], ops[0x55a3e7182c10], ldap[0x55a3e7167410] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [cn] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [nTSecurityDescriptor] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [flags] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [gPCFunctionalityVersion] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [gPCFileSysPath] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [gPCMachineExtensionNames] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55a3e7172b50], connected[1], ops[0x55a3e7182c10], ldap[0x55a3e7167410] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_op_destructor] (0x2000): Operation 115 finished (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_sd_search_send] (0x0400): Searching entry [cn={XXXXXXXX-XXXX-XXXX-XXXX-1C676C587B88},cn=policies,cn=system,DC=domain,DC=name,dc=fqdn] using SD (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_print_server] (0x2000): Searching X.X.121.101]:389 (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_ext_send] (0x0400): WARNING: Disabling paging because scope is set to base. (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(objectclass=*)][cn={XXXXXXXX-XXXX-XXXX-XXXX-1C676C587B88},cn=policies,cn=system,DC=domain,DC=name,dc=fqdn]. (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_ext_step] (0x2000): ldap_search_ext called, msgid = 116 (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_op_add] (0x2000): New operation 116 timeout 6 (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55a3e7172b50], connected[1], ops[0x55a3e719d4d0], ldap[0x55a3e7167410] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: end of ldap_result list (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55a3e7172b50], connected[1], ops[0x55a3e719d4d0], ldap[0x55a3e7167410] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [cn] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [nTSecurityDescriptor] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [flags] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [gPCFunctionalityVersion] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [gPCFileSysPath] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [gPCMachineExtensionNames] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55a3e7172b50], connected[1], ops[0x55a3e719d4d0], ldap[0x55a3e7167410] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_op_destructor] (0x2000): Operation 116 finished (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_sd_search_send] (0x0400): Searching entry [cn={XXXXXXXX-XXXX-XXXX-XXXX-77998F413721},cn=policies,cn=system,DC=domain,DC=name,dc=fqdn] using SD (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_print_server] (0x2000): Searching X.X.121.101]:389 (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_ext_send] (0x0400): WARNING: Disabling paging because scope is set to base. (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(objectclass=*)][cn={XXXXXXXX-XXXX-XXXX-XXXX-77998F413721},cn=policies,cn=system,DC=domain,DC=name,dc=fqdn]. (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_ext_step] (0x2000): ldap_search_ext called, msgid = 117 (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_op_add] (0x2000): New operation 117 timeout 6 (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55a3e7172b50], connected[1], ops[0x55a3e716cbb0], ldap[0x55a3e7167410] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: end of ldap_result list (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55a3e7172b50], connected[1], ops[0x55a3e716cbb0], ldap[0x55a3e7167410] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [cn] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [nTSecurityDescriptor] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [flags] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [gPCFunctionalityVersion] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [gPCFileSysPath] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [gPCMachineExtensionNames] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55a3e7172b50], connected[1], ops[0x55a3e716cbb0], ldap[0x55a3e7167410] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_op_destructor] (0x2000): Operation 117 finished (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_sd_search_send] (0x0400): Searching entry [cn={XXXXXXXX-XXXX-XXXX-XXXX-31DA80D259C2},cn=policies,cn=system,DC=domain,DC=name,dc=fqdn] using SD (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_print_server] (0x2000): Searching X.X.121.101]:389 (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_ext_send] (0x0400): WARNING: Disabling paging because scope is set to base. (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(objectclass=*)][cn={XXXXXXXX-XXXX-XXXX-XXXX-31DA80D259C2},cn=policies,cn=system,DC=domain,DC=name,dc=fqdn]. (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_ext_step] (0x2000): ldap_search_ext called, msgid = 118 (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_op_add] (0x2000): New operation 118 timeout 6 (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55a3e7172b50], connected[1], ops[0x55a3e7213d40], ldap[0x55a3e7167410] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: end of ldap_result list (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55a3e7172b50], connected[1], ops[0x55a3e7213d40], ldap[0x55a3e7167410] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [cn] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [nTSecurityDescriptor] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [flags] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [gPCFunctionalityVersion] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [gPCFileSysPath] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_parse_range] (0x2000): No sub-attributes for [gPCMachineExtensionNames] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55a3e7172b50], connected[1], ops[0x55a3e7213d40], ldap[0x55a3e7167410] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_get_generic_op_finished] (0x0400): Search result: Success(0), no errmsg set (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_op_destructor] (0x2000): Operation 118 finished (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_process_gpo_done] (0x0400): dacl_filtered_gpos[0]->gpo_guid is {XXXXXXXX-XXXX-XXXX-XXXX-D759F821AF6F} (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_process_gpo_done] (0x0400): dacl_filtered_gpos[1]->gpo_guid is {XXXXXXXX-XXXX-XXXX-XXXX-E6664AF32D1B} (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_process_gpo_done] (0x0400): dacl_filtered_gpos[2]->gpo_guid is {XXXXXXXX-XXXX-XXXX-XXXX-B41CE916BF37} (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_process_gpo_done] (0x0400): dacl_filtered_gpos[3]->gpo_guid is {XXXXXXXX-XXXX-XXXX-XXXX-D2930E129A69} (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_process_gpo_done] (0x0400): dacl_filtered_gpos[4]->gpo_guid is {XXXXXXXX-XXXX-XXXX-XXXX-7519ED99BAAA} (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_process_gpo_done] (0x0400): dacl_filtered_gpos[5]->gpo_guid is {XXXXXXXX-XXXX-XXXX-XXXX-1C676C587B88} (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_process_gpo_done] (0x0400): dacl_filtered_gpos[6]->gpo_guid is {XXXXXXXX-XXXX-XXXX-XXXX-77998F413721} (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_process_gpo_done] (0x0400): dacl_filtered_gpos[7]->gpo_guid is {XXXXXXXX-XXXX-XXXX-XXXX-31DA80D259C2} (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_process_gpo_done] (0x0400): cse_filtered_gpos[0]->gpo_guid is {XXXXXXXX-XXXX-XXXX-XXXX-B41CE916BF37} (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_process_gpo_done] (0x0400): cse_filtered_gpos[1]->gpo_guid is {XXXXXXXX-XXXX-XXXX-XXXX-D2930E129A69} (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_process_gpo_done] (0x0400): cse_filtered_gpos[2]->gpo_guid is {XXXXXXXX-XXXX-XXXX-XXXX-7519ED99BAAA} (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_process_gpo_done] (0x0400): cse_filtered_gpos[3]->gpo_guid is {XXXXXXXX-XXXX-XXXX-XXXX-1C676C587B88} (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_process_gpo_done] (0x0400): cse_filtered_gpos[4]->gpo_guid is {XXXXXXXX-XXXX-XXXX-XXXX-77998F413721} (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_process_gpo_done] (0x0400): cse_filtered_gpos[5]->gpo_guid is {XXXXXXXX-XXXX-XXXX-XXXX-31DA80D259C2} (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_process_gpo_done] (0x0400): num_cse_filtered_gpos: 6 (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sysdb_gpo_delete_gpo_result_object] (0x0400): Deleting GPO Result object (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): cse filtered_gpos[0]->gpo_guid is {XXXXXXXX-XXXX-XXXX-XXXX-B41CE916BF37} (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): smb_server: smb://myhost.domain.name.fqdn (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): smb_share: /SysVol (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): smb_path: /domain.name.fqdn/Policies/{XXXXXXXX-XXXX-XXXX-XXXX-B41CE916BF37} (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): gpo_guid: {XXXXXXXX-XXXX-XXXX-XXXX-B41CE916BF37} (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): retrieving GPO from cache [{XXXXXXXX-XXXX-XXXX-XXXX-B41CE916BF37}] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): send_to_child: 1 (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): cached_gpt_version: 1042 (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [child_handler_setup] (0x2000): Setting up signal handler up for pid [22011] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [child_handler_setup] (0x2000): Signal handler set up for pid [22011] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: sh[0x55a3e7172b50], connected[1], ops[(nil)], ldap[0x55a3e7167410] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sdap_process_result] (0x2000): Trace: end of ldap_result list (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [write_pipe_handler] (0x0400): All data has been sent! (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [read_pipe_handler] (0x0400): EOF received, client finished (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [gpo_cse_done] (0x0400): sysvol_gpt_version: 1042 (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sysdb_merge_res_ts_attrs] (0x2000): TS cache doesn't handle this DN type, skipping (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_done] (0x0400): gpo_guid: {XXXXXXXX-XXXX-XXXX-XXXX-B41CE916BF37} (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sysdb_gpo_store_gpo_result_setting] (0x0400): Storing setting: key [SeInteractiveLogonRight] value [*S-1-5-21-XXXXXXXXXXXX-241297-3365,*S-1-5-21-XXXXXXXXXXXX-241297-513,hbac-global-Allow-interactive,*S-1-5-32-544] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sysdb_merge_res_ts_attrs] (0x2000): TS cache doesn't handle this DN type, skipping (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sysdb_gpo_store_gpo_result_setting] (0x0400): Updating setting: key [SeDenyInteractiveLogonRight] value [*S-1-5-21-XXXXXXXXXXXX-241297-2585,hbac-global-deny-interactive] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sysdb_merge_res_ts_attrs] (0x2000): TS cache doesn't handle this DN type, skipping (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sysdb_gpo_store_gpo_result_setting] (0x0400): Updating setting: key [SeRemoteInteractiveLogonRight] value [*S-1-5-21-XXXXXXXXXXXX-241297-1400,hbac-global-allow-remote_interactive,*S-1-5-32-544] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sysdb_merge_res_ts_attrs] (0x2000): TS cache doesn't handle this DN type, skipping (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sysdb_gpo_store_gpo_result_setting] (0x0400): Updating setting: key [SeDenyRemoteInteractiveLogonRight] value [*S-1-5-21-XXXXXXXXXXXX-241297-2586,hbac-global-deny-remote_interactive] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sysdb_merge_res_ts_attrs] (0x2000): TS cache doesn't handle this DN type, skipping (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sysdb_gpo_store_gpo_result_setting] (0x0400): Updating setting: key [SeNetworkLogonRight] value [*S-1-5-21-XXXXXXXXXXXX-241297-3367,hbac-global-Allow-network,*S-1-5-11] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sysdb_merge_res_ts_attrs] (0x2000): TS cache doesn't handle this DN type, skipping (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sysdb_gpo_store_gpo_result_setting] (0x0400): Updating setting: key [SeDenyNetworkLogonRight] value [*S-1-5-21-XXXXXXXXXXXX-241297-2587,hbac-global-deny-network] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sysdb_merge_res_ts_attrs] (0x2000): TS cache doesn't handle this DN type, skipping (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sysdb_gpo_store_gpo_result_setting] (0x0400): Updating setting: key [SeBatchLogonRight] value [*S-1-5-21-XXXXXXXXXXXX-241297-2372,hbac-global-allow-batch] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sysdb_merge_res_ts_attrs] (0x2000): TS cache doesn't handle this DN type, skipping (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sysdb_gpo_store_gpo_result_setting] (0x0400): Updating setting: key [SeDenyBatchLogonRight] value [*S-1-5-21-XXXXXXXXXXXX-241297-2587,hbac-global-deny-batch] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sysdb_merge_res_ts_attrs] (0x2000): TS cache doesn't handle this DN type, skipping (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sysdb_gpo_store_gpo_result_setting] (0x0400): Updating setting: key [SeServiceLogonRight] value [right-local-logon-service,*S-1-5-80-0,*S-1-5-21-XXXXXXXXXXXX-241297-2363,hbac-global-allow-service] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sysdb_merge_res_ts_attrs] (0x2000): TS cache doesn't handle this DN type, skipping (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sysdb_gpo_store_gpo_result_setting] (0x0400): Updating setting: key [SeDenyServiceLogonRight] value [*S-1-5-21-XXXXXXXXXXXX-241297-2590,hbac-global-deny-service] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): cse filtered_gpos[1]->gpo_guid is {XXXXXXXX-XXXX-XXXX-XXXX-D2930E129A69} (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): smb_server: smb://myhost.domain.name.fqdn (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): smb_share: /SysVol (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): smb_path: /domain.name.fqdn/Policies/{XXXXXXXX-XXXX-XXXX-XXXX-D2930E129A69} (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): gpo_guid: {XXXXXXXX-XXXX-XXXX-XXXX-D2930E129A69} (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): retrieving GPO from cache [{XXXXXXXX-XXXX-XXXX-XXXX-D2930E129A69}] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): send_to_child: 1 (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): cached_gpt_version: 452 (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [child_handler_setup] (0x2000): Setting up signal handler up for pid [22013] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [child_handler_setup] (0x2000): Signal handler set up for pid [22013] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [child_sig_handler] (0x0020): waitpid did not found a child with changed status. (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [child_sig_handler] (0x0100): child [22011] finished successfully. (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [write_pipe_handler] (0x0400): All data has been sent! (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [read_pipe_handler] (0x0400): EOF received, client finished (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [gpo_cse_done] (0x0400): sysvol_gpt_version: 452 (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sysdb_merge_res_ts_attrs] (0x2000): TS cache doesn't handle this DN type, skipping (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_done] (0x0400): gpo_guid: {XXXXXXXX-XXXX-XXXX-XXXX-D2930E129A69} (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_store_policy_settings] (0x0020): [/var/lib/sss/gpo_cache/domain.name.fqdn/Policies/{XXXXXXXX-XXXX-XXXX-XXXX-D2930E129A69}/Machine/Microsoft/Windows NT/SecEdit/GptTmpl.inf]: ini_config_parse failed [5][Input/output error] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_store_policy_settings] (0x0020): Error (5) on line 21: Equal sign is missing. (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_store_policy_settings] (0x0020): Error (5) on line 22: Equal sign is missing. (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_store_policy_settings] (0x0020): Error (5) on line 23: Equal sign is missing. (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_store_policy_settings] (0x0020): Error (5) on line 24: Equal sign is missing. (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_store_policy_settings] (0x0020): Error (5) on line 25: Equal sign is missing. (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_store_policy_settings] (0x0020): Error (5) on line 26: Equal sign is missing. (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_store_policy_settings] (0x0020): Error (5) on line 27: Equal sign is missing. (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_store_policy_settings] (0x0020): Error (5) on line 28: Equal sign is missing. (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_store_policy_settings] (0x0020): Error (5) on line 29: Equal sign is missing. (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_store_policy_settings] (0x0020): Error (5) on line 30: Equal sign is missing. (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_store_policy_settings] (0x0020): Error (5) on line 31: Equal sign is missing. (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_store_policy_settings] (0x0020): Error (5) on line 32: Equal sign is missing. (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sysdb_merge_res_ts_attrs] (0x2000): TS cache doesn't handle this DN type, skipping (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sysdb_gpo_store_gpo_result_setting] (0x0400): Updating setting: key [SeInteractiveLogonRight] value [*S-1-5-32-544,IAM.Servers.AllowLogonLocally] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sysdb_merge_res_ts_attrs] (0x2000): TS cache doesn't handle this DN type, skipping (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sysdb_gpo_store_gpo_result_setting] (0x0400): Updating setting: key [SeRemoteInteractiveLogonRight] value [*S-1-5-32-544,*S-1-5-32-555] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sysdb_merge_res_ts_attrs] (0x2000): TS cache doesn't handle this DN type, skipping (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sysdb_gpo_store_gpo_result_setting] (0x0400): Updating setting: key [SeNetworkLogonRight] value [*S-1-5-11] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sysdb_merge_res_ts_attrs] (0x2000): TS cache doesn't handle this DN type, skipping (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [sysdb_gpo_store_gpo_result_setting] (0x0400): Updating setting: key [SeDenyNetworkLogonRight] value [!NoUseGuest!] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): cse filtered_gpos[2]->gpo_guid is {XXXXXXXX-XXXX-XXXX-XXXX-7519ED99BAAA} (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): smb_server: smb://myhost.domain.name.fqdn (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): smb_share: /SysVol (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): smb_path: /domain.name.fqdn/Policies/{XXXXXXXX-XXXX-XXXX-XXXX-7519ED99BAAA} (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): gpo_guid: {XXXXXXXX-XXXX-XXXX-XXXX-7519ED99BAAA} (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): retrieving GPO from cache [{XXXXXXXX-XXXX-XXXX-XXXX-7519ED99BAAA}] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): send_to_child: 1 (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): cached_gpt_version: 171 (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [child_handler_setup] (0x2000): Setting up signal handler up for pid [22015] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [child_handler_setup] (0x2000): Signal handler set up for pid [22015] (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [child_sig_handler] (0x0020): waitpid did not found a child with changed status. (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [child_sig_handler] (0x0100): child [22013] finished successfully. (Thu Jan 30 21:11:45 2020) [sssd[be[domain.name.fqdn]]] [write_pipe_handler] (0x0400): All data has been sent! (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [read_pipe_handler] (0x0400): EOF received, client finished (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [gpo_cse_done] (0x0400): sysvol_gpt_version: 171 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [sysdb_merge_res_ts_attrs] (0x2000): TS cache doesn't handle this DN type, skipping (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_done] (0x0400): gpo_guid: {XXXXXXXX-XXXX-XXXX-XXXX-7519ED99BAAA} (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): cse filtered_gpos[3]->gpo_guid is {XXXXXXXX-XXXX-XXXX-XXXX-1C676C587B88} (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): smb_server: smb://myhost.domain.name.fqdn (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): smb_share: /SysVol (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): smb_path: /domain.name.fqdn/Policies/{XXXXXXXX-XXXX-XXXX-XXXX-1C676C587B88} (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): gpo_guid: {XXXXXXXX-XXXX-XXXX-XXXX-1C676C587B88} (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): retrieving GPO from cache [{XXXXXXXX-XXXX-XXXX-XXXX-1C676C587B88}] (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): send_to_child: 1 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): cached_gpt_version: 58 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [child_handler_setup] (0x2000): Setting up signal handler up for pid [22017] (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [child_handler_setup] (0x2000): Signal handler set up for pid [22017] (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [child_sig_handler] (0x0020): waitpid did not found a child with changed status. (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [child_sig_handler] (0x0100): child [22015] finished successfully. (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [write_pipe_handler] (0x0400): All data has been sent! (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [read_pipe_handler] (0x0400): EOF received, client finished (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [gpo_cse_done] (0x0400): sysvol_gpt_version: 58 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [sysdb_merge_res_ts_attrs] (0x2000): TS cache doesn't handle this DN type, skipping (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_done] (0x0400): gpo_guid: {XXXXXXXX-XXXX-XXXX-XXXX-1C676C587B88} (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [sysdb_merge_res_ts_attrs] (0x2000): TS cache doesn't handle this DN type, skipping (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [sysdb_gpo_store_gpo_result_setting] (0x0400): Updating setting: key [SeInteractiveLogonRight] value [*S-1-5-21-XXXXXXXXXXXX-241297-3365,*S-1-5-21-XXXXXXXXXXXX-241297-513,hbac-global-Allow-interactive,*S-1-5-32-544] (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [sysdb_merge_res_ts_attrs] (0x2000): TS cache doesn't handle this DN type, skipping (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [sysdb_gpo_store_gpo_result_setting] (0x0400): Updating setting: key [SeDenyInteractiveLogonRight] value [*S-1-5-21-XXXXXXXXXXXX-241297-2585,hbac-global-deny-interactive] (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [sysdb_merge_res_ts_attrs] (0x2000): TS cache doesn't handle this DN type, skipping (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [sysdb_gpo_store_gpo_result_setting] (0x0400): Updating setting: key [SeRemoteInteractiveLogonRight] value [*S-1-5-21-XXXXXXXXXXXX-241297-1400,hbac-global-allow-remote_interactive,*S-1-5-32-544] (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [sysdb_merge_res_ts_attrs] (0x2000): TS cache doesn't handle this DN type, skipping (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [sysdb_gpo_store_gpo_result_setting] (0x0400): Updating setting: key [SeDenyRemoteInteractiveLogonRight] value [*S-1-5-21-XXXXXXXXXXXX-241297-2586,hbac-global-deny-remote_interactive] (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [sysdb_merge_res_ts_attrs] (0x2000): TS cache doesn't handle this DN type, skipping (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [sysdb_gpo_store_gpo_result_setting] (0x0400): Updating setting: key [SeNetworkLogonRight] value [*S-1-5-21-XXXXXXXXXXXX-241297-3367,hbac-global-Allow-network,*S-1-5-11] (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [sysdb_merge_res_ts_attrs] (0x2000): TS cache doesn't handle this DN type, skipping (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [sysdb_gpo_store_gpo_result_setting] (0x0400): Updating setting: key [SeDenyNetworkLogonRight] value [*S-1-5-21-XXXXXXXXXXXX-241297-2587,hbac-global-deny-network] (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [sysdb_merge_res_ts_attrs] (0x2000): TS cache doesn't handle this DN type, skipping (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [sysdb_gpo_store_gpo_result_setting] (0x0400): Updating setting: key [SeBatchLogonRight] value [*S-1-5-21-XXXXXXXXXXXX-241297-2372,hbac-global-allow-batch] (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [sysdb_merge_res_ts_attrs] (0x2000): TS cache doesn't handle this DN type, skipping (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [sysdb_gpo_store_gpo_result_setting] (0x0400): Updating setting: key [SeDenyBatchLogonRight] value [*S-1-5-21-XXXXXXXXXXXX-241297-2587,hbac-global-deny-batch] (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [sysdb_merge_res_ts_attrs] (0x2000): TS cache doesn't handle this DN type, skipping (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [sysdb_gpo_store_gpo_result_setting] (0x0400): Updating setting: key [SeServiceLogonRight] value [right-local-logon-service,*S-1-5-80-0,*S-1-5-21-XXXXXXXXXXXX-241297-2363,hbac-global-allow-service] (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [sysdb_merge_res_ts_attrs] (0x2000): TS cache doesn't handle this DN type, skipping (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [sysdb_gpo_store_gpo_result_setting] (0x0400): Updating setting: key [SeDenyServiceLogonRight] value [*S-1-5-21-XXXXXXXXXXXX-241297-2590,hbac-global-deny-service] (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): cse filtered_gpos[4]->gpo_guid is {XXXXXXXX-XXXX-XXXX-XXXX-77998F413721} (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): smb_server: smb://myhost.domain.name.fqdn (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): smb_share: /SysVol (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): smb_path: /domain.name.fqdn/Policies/{XXXXXXXX-XXXX-XXXX-XXXX-77998F413721} (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): gpo_guid: {XXXXXXXX-XXXX-XXXX-XXXX-77998F413721} (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): retrieving GPO from cache [{XXXXXXXX-XXXX-XXXX-XXXX-77998F413721}] (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): send_to_child: 1 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): cached_gpt_version: 2 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [child_handler_setup] (0x2000): Setting up signal handler up for pid [22019] (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [child_handler_setup] (0x2000): Signal handler set up for pid [22019] (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [child_sig_handler] (0x0020): waitpid did not found a child with changed status. (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [child_sig_handler] (0x0100): child [22017] finished successfully. (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [write_pipe_handler] (0x0400): All data has been sent! (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [read_pipe_handler] (0x0400): EOF received, client finished (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [gpo_cse_done] (0x0400): sysvol_gpt_version: 2 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [sysdb_merge_res_ts_attrs] (0x2000): TS cache doesn't handle this DN type, skipping (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_done] (0x0400): gpo_guid: {XXXXXXXX-XXXX-XXXX-XXXX-77998F413721} (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [sysdb_merge_res_ts_attrs] (0x2000): TS cache doesn't handle this DN type, skipping (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [sysdb_gpo_store_gpo_result_setting] (0x0400): Updating setting: key [SeDenyRemoteInteractiveLogonRight] value [*S-1-5-21-XXXXXXXXXXXX-241297-1305] (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): cse filtered_gpos[5]->gpo_guid is {XXXXXXXX-XXXX-XXXX-XXXX-31DA80D259C2} (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): smb_server: smb://myhost.domain.name.fqdn (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): smb_share: /SysVol (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): smb_path: /domain.name.fqdn/Policies/{XXXXXXXX-XXXX-XXXX-XXXX-31DA80D259C2} (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): gpo_guid: {XXXXXXXX-XXXX-XXXX-XXXX-31DA80D259C2} (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): retrieving GPO from cache [{XXXXXXXX-XXXX-XXXX-XXXX-31DA80D259C2}] (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): send_to_child: 1 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_step] (0x0400): cached_gpt_version: 4 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [child_handler_setup] (0x2000): Setting up signal handler up for pid [22021] (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [child_handler_setup] (0x2000): Signal handler set up for pid [22021] (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [child_sig_handler] (0x0020): waitpid did not found a child with changed status. (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [child_sig_handler] (0x0100): child [22019] finished successfully. (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [write_pipe_handler] (0x0400): All data has been sent! (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [read_pipe_handler] (0x0400): EOF received, client finished (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [gpo_cse_done] (0x0400): sysvol_gpt_version: 4 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [sysdb_merge_res_ts_attrs] (0x2000): TS cache doesn't handle this DN type, skipping (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_cse_done] (0x0400): gpo_guid: {XXXXXXXX-XXXX-XXXX-XXXX-31DA80D259C2} (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [sysdb_merge_res_ts_attrs] (0x2000): TS cache doesn't handle this DN type, skipping (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [sysdb_gpo_store_gpo_result_setting] (0x0400): Updating setting: key [SeInteractiveLogonRight] value [*S-1-5-21-XXXXXXXXXXXX-241297-3365,hbac-global-Allow-interactive,*S-1-5-32-544,*S-1-5-21-XXXXXXXXXXXX-241297-2575,hbac-kittens-Allow-interactive] (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [sysdb_merge_res_ts_attrs] (0x2000): TS cache doesn't handle this DN type, skipping (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [sysdb_gpo_store_gpo_result_setting] (0x0400): Updating setting: key [SeDenyInteractiveLogonRight] value [*S-1-5-21-XXXXXXXXXXXX-241297-2585,hbac-global-deny-interactive,*S-1-5-21-XXXXXXXXXXXX-241297-2576,hbac-kittens-Deny-interactive] (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [sysdb_merge_res_ts_attrs] (0x2000): TS cache doesn't handle this DN type, skipping (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [sysdb_gpo_store_gpo_result_setting] (0x0400): Updating setting: key [SeRemoteInteractiveLogonRight] value [*S-1-5-21-XXXXXXXXXXXX-241297-1400,hbac-global-allow-remote_interactive,*S-1-5-32-544,*S-1-5-21-XXXXXXXXXXXX-241297-2577,hbac-kittens-Allow-remote_interactive] (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [sysdb_merge_res_ts_attrs] (0x2000): TS cache doesn't handle this DN type, skipping (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [sysdb_gpo_store_gpo_result_setting] (0x0400): Updating setting: key [SeDenyRemoteInteractiveLogonRight] value [*S-1-5-21-XXXXXXXXXXXX-241297-2586,hbac-global-deny-remote_interactive,*S-1-5-21-XXXXXXXXXXXX-241297-2578,hbac-kittens-Deny-remote_interactive] (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [sysdb_merge_res_ts_attrs] (0x2000): TS cache doesn't handle this DN type, skipping (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [sysdb_gpo_store_gpo_result_setting] (0x0400): Updating setting: key [SeNetworkLogonRight] value [*S-1-5-21-XXXXXXXXXXXX-241297-3367,hbac-global-Allow-network,*S-1-5-11,*S-1-5-21-XXXXXXXXXXXX-241297-2579,hbac-kittens-Allow-network] (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [sysdb_merge_res_ts_attrs] (0x2000): TS cache doesn't handle this DN type, skipping (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [sysdb_gpo_store_gpo_result_setting] (0x0400): Updating setting: key [SeDenyNetworkLogonRight] value [*S-1-5-21-XXXXXXXXXXXX-241297-2587,hbac-global-deny-network,*S-1-5-21-XXXXXXXXXXXX-241297-2580,hbac-kittens-Deny-network] (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [sysdb_merge_res_ts_attrs] (0x2000): TS cache doesn't handle this DN type, skipping (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [sysdb_gpo_store_gpo_result_setting] (0x0400): Updating setting: key [SeBatchLogonRight] value [*S-1-5-21-XXXXXXXXXXXX-241297-2372,hbac-global-allow-batch,*S-1-5-21-XXXXXXXXXXXX-241297-2581,hbac-kittens-Allow-batch] (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [sysdb_merge_res_ts_attrs] (0x2000): TS cache doesn't handle this DN type, skipping (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [sysdb_gpo_store_gpo_result_setting] (0x0400): Updating setting: key [SeDenyBatchLogonRight] value [*S-1-5-21-XXXXXXXXXXXX-241297-2587,hbac-global-deny-batch,*S-1-5-21-XXXXXXXXXXXX-241297-2582,hbac-kittens-Deny-batch] (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [sysdb_merge_res_ts_attrs] (0x2000): TS cache doesn't handle this DN type, skipping (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [sysdb_gpo_store_gpo_result_setting] (0x0400): Updating setting: key [SeServiceLogonRight] value [*S-1-5-21-XXXXXXXXXXXX-241297-2363,hbac-global-allow-service,NT SERVICE\ALL SERVICES,right-local-logon-service,*S-1-5-21-XXXXXXXXXXXX-241297-2583,hbac-kittens-Allow-service] (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [sysdb_merge_res_ts_attrs] (0x2000): TS cache doesn't handle this DN type, skipping (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [sysdb_gpo_store_gpo_result_setting] (0x0400): Updating setting: key [SeDenyServiceLogonRight] value [*S-1-5-21-XXXXXXXXXXXX-241297-2590,hbac-global-deny-service,*S-1-5-21-XXXXXXXXXXXX-241297-2584,hbac-kittens-Deny-service] (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [sysdb_gpo_get_gpo_result_setting] (0x0400): key [SeRemoteInteractiveLogonRight] value [*S-1-5-21-XXXXXXXXXXXX-241297-1400,hbac-global-allow-remote_interactive,*S-1-5-32-544,*S-1-5-21-XXXXXXXXXXXX-241297-2577,hbac-kittens-Allow-remote_interactive] (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [sysdb_gpo_get_gpo_result_setting] (0x0400): key [SeDenyRemoteInteractiveLogonRight] value [*S-1-5-21-XXXXXXXXXXXX-241297-2586,hbac-global-deny-remote_interactive,*S-1-5-21-XXXXXXXXXXXX-241297-2578,hbac-kittens-Deny-remote_interactive] (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): RESULTANT POLICY: (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): gpo_map_type: Remote Interactive (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): allowed_size = 5 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): allowed_sids[0] = S-1-5-21-XXXXXXXXXXXX-241297-1400 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): allowed_sids[1] = bac-global-allow-remote_interactive (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): allowed_sids[2] = S-1-5-32-544 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): allowed_sids[3] = S-1-5-21-XXXXXXXXXXXX-241297-2577 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): allowed_sids[4] = bac-kittens-Allow-remote_interactive (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): denied_size = 4 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): denied_sids[0] = S-1-5-21-XXXXXXXXXXXX-241297-2586 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): denied_sids[1] = bac-global-deny-remote_interactive (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): denied_sids[2] = S-1-5-21-XXXXXXXXXXXX-241297-2578 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): denied_sids[3] = bac-kittens-Deny-remote_interactive (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): CURRENT USER: (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): user_sid = S-1-5-21-XXXXXXXXXXXX-241297-1305 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[0] = S-1-5-21-XXXXXXXXXXXX-241297-2365 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[1] = S-1-5-21-XXXXXXXXXXXX-241297-1129 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[2] = S-1-5-21-XXXXXXXXXXXX-241297-513 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[3] = S-1-5-21-XXXXXXXXXXXX-241297-1147 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[4] = S-1-5-21-XXXXXXXXXXXX-241297-1146 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[5] = S-1-5-21-XXXXXXXXXXXX-241297-1148 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[6] = S-1-5-21-XXXXXXXXXXXX-241297-2124 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[7] = S-1-5-21-XXXXXXXXXXXX-241297-2404 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[8] = S-1-5-21-XXXXXXXXXXXX-241297-2402 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[9] = S-1-5-21-XXXXXXXXXXXX-241297-2403 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[10] = S-1-5-21-XXXXXXXXXXXX-241297-1134 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[11] = S-1-5-21-XXXXXXXXXXXX-241297-1133 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[12] = S-1-5-21-XXXXXXXXXXXX-241297-1131 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[13] = S-1-5-21-XXXXXXXXXXXX-241297-1132 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[14] = S-1-5-21-XXXXXXXXXXXX-241297-1125 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[15] = S-1-5-21-XXXXXXXXXXXX-241297-1159 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[16] = S-1-5-21-XXXXXXXXXXXX-241297-2123 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[17] = S-1-5-21-XXXXXXXXXXXX-241297-1342 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[18] = S-1-5-21-XXXXXXXXXXXX-241297-3156 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[19] = S-1-5-21-XXXXXXXXXXXX-241297-2355 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[20] = S-1-5-21-XXXXXXXXXXXX-241297-1180 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[21] = S-1-5-21-XXXXXXXXXXXX-241297-1175 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[22] = S-1-5-21-XXXXXXXXXXXX-241297-1174 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[23] = S-1-5-21-XXXXXXXXXXXX-241297-1173 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[24] = S-1-5-21-XXXXXXXXXXXX-241297-1151 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[25] = S-1-5-21-XXXXXXXXXXXX-241297-1149 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[26] = S-1-5-21-XXXXXXXXXXXX-241297-1144 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[27] = S-1-5-21-XXXXXXXXXXXX-241297-1155 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[28] = S-1-5-21-XXXXXXXXXXXX-241297-2122 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[29] = S-1-5-21-XXXXXXXXXXXX-241297-512 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[30] = S-1-5-21-XXXXXXXXXXXX-241297-572 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[31] = S-1-5-21-XXXXXXXXXXXX-241297-1137 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[32] = S-1-5-21-XXXXXXXXXXXX-241297-1169 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[33] = S-1-5-21-XXXXXXXXXXXX-241297-1167 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[34] = S-1-5-21-XXXXXXXXXXXX-241297-1372 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[35] = S-1-5-21-XXXXXXXXXXXX-241297-1168 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[36] = S-1-5-21-XXXXXXXXXXXX-241297-1153 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[37] = S-1-5-21-XXXXXXXXXXXX-241297-1154 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[38] = S-1-5-21-XXXXXXXXXXXX-241297-1152 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[39] = S-1-5-21-XXXXXXXXXXXX-241297-1139 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[40] = S-1-5-21-XXXXXXXXXXXX-241297-1138 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[41] = S-1-5-21-XXXXXXXXXXXX-241297-1140 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[42] = S-1-5-21-XXXXXXXXXXXX-241297-1135 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[43] = S-1-5-21-XXXXXXXXXXXX-241297-1136 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[44] = S-1-5-21-XXXXXXXXXXXX-241297-1172 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[45] = S-1-5-21-XXXXXXXXXXXX-241297-1170 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[46] = S-1-5-21-XXXXXXXXXXXX-241297-1325 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[47] = S-1-5-21-XXXXXXXXXXXX-241297-1314 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[48] = S-1-5-21-XXXXXXXXXXXX-241297-1307 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[49] = S-1-5-21-XXXXXXXXXXXX-241297-2371 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[50] = S-1-5-21-XXXXXXXXXXXX-241297-1344 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[51] = S-1-5-21-XXXXXXXXXXXX-241297-1142 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[52] = S-1-5-21-XXXXXXXXXXXX-241297-3192 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[53] = S-1-5-21-XXXXXXXXXXXX-241297-3197 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[54] = S-1-5-21-XXXXXXXXXXXX-241297-2370 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[55] = S-1-5-21-XXXXXXXXXXXX-241297-1316 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[56] = S-1-5-21-XXXXXXXXXXXX-241297-2416 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[57] = S-1-5-21-XXXXXXXXXXXX-241297-1150 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[58] = S-1-5-21-XXXXXXXXXXXX-241297-3181 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[59] = S-1-5-21-XXXXXXXXXXXX-241297-1157 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[60] = S-1-5-21-XXXXXXXXXXXX-241297-1156 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[61] = S-1-5-21-XXXXXXXXXXXX-241297-1300 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[62] = S-1-5-21-XXXXXXXXXXXX-241297-1341 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[63] = S-1-5-21-XXXXXXXXXXXX-241297-1290 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[64] = S-1-5-21-XXXXXXXXXXXX-241297-1289 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[65] = S-1-5-21-XXXXXXXXXXXX-241297-1385 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[66] = S-1-5-21-XXXXXXXXXXXX-241297-1141 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[67] = S-1-5-21-XXXXXXXXXXXX-241297-1171 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[68] = S-1-5-21-XXXXXXXXXXXX-241297-3204 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[69] = S-1-5-21-XXXXXXXXXXXX-241297-1461 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[70] = S-1-5-21-XXXXXXXXXXXX-241297-3353 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[71] = S-1-5-21-XXXXXXXXXXXX-241297-3359 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[72] = S-1-5-21-XXXXXXXXXXXX-241297-1415 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[73] = S-1-5-21-XXXXXXXXXXXX-241297-1413 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[74] = S-1-5-21-XXXXXXXXXXXX-241297-3243 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[75] = S-1-5-21-XXXXXXXXXXXX-241297-3349 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[76] = S-1-5-21-XXXXXXXXXXXX-241297-2475 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[77] = S-1-5-21-XXXXXXXXXXXX-241297-3355 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[78] = S-1-5-21-XXXXXXXXXXXX-241297-1386 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[79] = S-1-5-21-XXXXXXXXXXXX-241297-3351 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[80] = S-1-5-21-XXXXXXXXXXXX-241297-3357 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[81] = S-1-5-21-XXXXXXXXXXXX-241297-1400 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[82] = S-1-5-21-XXXXXXXXXXXX-241297-1420 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[83] = S-1-5-21-XXXXXXXXXXXX-241297-3347 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[84] = S-1-5-21-XXXXXXXXXXXX-241297-3365 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[85] = S-1-5-21-XXXXXXXXXXXX-241297-3241 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): group_sids[86] = S-1-5-11 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): POLICY DECISION: (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): access_granted = 1 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_check] (0x0400): access_denied = 0 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_gpo_access_done] (0x0400): GPO-based access control successful. (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [dp_req_done] (0x0400): DP Request [PAM Account #91]: Request handler finished [0]: Success (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [_dp_req_recv] (0x0400): DP Request [PAM Account #91]: Receiving request data. (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [dp_req_destructor] (0x0400): DP Request [PAM Account #91]: Request removed. (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [dp_req_destructor] (0x0400): Number of active DP request: 0 (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [dp_method_enabled] (0x0400): Target selinux is not configured (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [sbus_issue_request_done] (0x0400): sssd.dataprovider.pamHandler: Success (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [child_sig_handler] (0x0100): child [22021] finished successfully. (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [be_ptask_execute] (0x0400): Task [Dyndns update]: executing task, timeout 86400 seconds (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [ad_dyndns_update_send] (0x0400): Performing update (Thu Jan 30 21:11:46 2020) [sssd[be[domain.name.fqdn]]] [check_ipv6_addr] (0x0200): Link local IPv6 address [IPv6::ADDR]
thank you for the log details.
Maybe the reason is a wrong interpretation of how the components in the gpLink attribute are ordered. From https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-gpol/08090b22-bc16-49f4-8e10-f27a8fb16d18 I got the impression that the first entry corresponds to the GPO with the highest priority, but this is wrong. https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/dn581922(v%3Dws.11) has more details:
Group Policy inherently assigns each GPO precedence based on the order it reads the list—left to right. Therefore, the first GPO in the value has the lowest precedence in the list of linked Group Policy objects. The next GPO in the value has a higher precedence than the previous GPO because it applies its policy settings after the previous GPO; by winning any policy setting conflicts between the two GPOs. Each GPO that follows has a higher precedence than the Group Policy object before it in the link order. The last GPO in the value has the highest precedence because it is the last Group Policy object the Group Policy service applies.
Currently it looks the code is correct for enforced GPOs, because here the processing order is effectively the other way round, but wrong for un-enforced GPOs.
Metadata Update from @sbose: - Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=1804005
Issue linked to Bugzilla: Bug 1804005
I have created a test build at https://sbose.fedorapeople.org/sssd/gpo_order/sssd-2.2.0-19.el8_1sb.tar.gz . If it can be installed in your environment please let me know if it fixes the issue.
Metadata Update from @thalman: - Issue tagged with: bugzilla
SSSD is moving from Pagure to Github. This means that new issues and pull requests will be accepted only in SSSD's github repository.
This issue has been cloned to Github and is available here: - https://github.com/SSSD/sssd/issues/5103
If you want to receive further updates on the issue, please navigate to the github issue and click on subscribe button.
subscribe
Thank you for understanding. We apologize for all inconvenience.
Metadata Update from @pbrezina: - Issue close_status updated to: cloned-to-github - Issue status updated to: Closed (was: Open)
Login to comment on this ticket.