sssd log file for domain
sssd_ticom.com.log

Can you please add you sssd.conf too?

Fields changed

description: FreeIPA version 2.x fresh install of server and client on Fedora 13.

When the client installs everything works flawlessly, but when you try to log in with an Free IPA user you get a generic "System Error" in the GDM screen. If you log in with a local user and try to su (with or without the -) you are told to change your password, and that completes successfully.

Log out of the local account and try GDM again meets with the same generic "System Error" and fails to log the user in. If you log in again with the local user and try to su (with or without the -) you are told incorrect password.

server.rpms
sssd-1.1.1-3.fc13.x86_64
sssd-client-1.1.1-3.fc13.x86_64
ipa-python-1.91-0.2010052714git49b3d3b.fc13.x86_64
ipa-admintools-1.91-0.2010052714git49b3d3b.fc13.x86_64
ipa-server-selinux-1.91-0.2010052714git49b3d3b.fc13.x86_64
ipa-client-1.91-0.2010052714git49b3d3b.fc13.x86_64
ipa-server-1.91-0.2010052714git49b3d3b.fc13.x86_64

client rpms
ipa-python-1.91-0.2010052714git49b3d3b.fc13.x86_64
ipa-client-1.91-0.2010052714git49b3d3b.fc13.x86_64
=> FreeIPA version 2.x fresh install of server and client on Fedora 13.

When the client installs everything works flawlessly, but when you try to log in with an Free IPA user you get a generic "System Error" in the GDM screen. If you log in with a local user and try to su (with or without the -) you are told to change your password, and that completes successfully.

Log out of the local account and try GDM again meets with the same generic "System Error" and fails to log the user in. If you log in again with the local user and try to su (with or without the -) you are told incorrect password.

server.rpms
* sssd-1.1.1-3.fc13.x86_64
* sssd-client-1.1.1-3.fc13.x86_64
* ipa-python-1.91-0.2010052714git49b3d3b.fc13.x86_64
* ipa-admintools-1.91-0.2010052714git49b3d3b.fc13.x86_64
* ipa-server-selinux-1.91-0.2010052714git49b3d3b.fc13.x86_64
* ipa-client-1.91-0.2010052714git49b3d3b.fc13.x86_64
* ipa-server-1.91-0.2010052714git49b3d3b.fc13.x86_64

client rpms
* ipa-python-1.91-0.2010052714git49b3d3b.fc13.x86_64
* ipa-client-1.91-0.2010052714git49b3d3b.fc13.x86_64

I think the reason is here:

(Thu May 27 12:28:40 2010) [sssd[be[ticom.com]]] [sldb_request_callback] (6): LDB Error: 19 (attribute originalMemberOf on name=client1.ticom.com,cn=hbac_hosts,cn=custom,cn=ticom.com,cn=sysdb specified, but with 0 values (illegal))

The version of libldb which comes with F13 does not like empty attributes. I see this issue after upgrading, too. A fix should be on the list quite soon.

Fields changed

milestone: NEEDS_TRIAGE => SSSD 1.2.1

This bug is also tracked in bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=598496

Fields changed

owner: somebody => sbose

Fixed by 044ea57 and ee613f4

fixedin: => 1.2.1
keywords: sssd freeipa =>
resolution: => fixed
status: new => closed

Fields changed

rhbz: => 0

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/1541

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.