On Thu, Mar 09, 2017 at 10:05:33AM +0100, Jakub Hrozek wrote:
On Mon, Mar 06, 2017 at 01:30:25PM -0600, Brenden Morgenthaler wrote:
It does appear to be GPO access, from the gpo_child.log (getting a tarball up somewhere to download also).
(Mon Mar 6 13:18:13 2017) [[sssd[gpo_child[24538]]]] [main] (0x0400): gpo_child started. (Mon Mar 6 13:18:13 2017) [[sssd[gpo_child[24538]]]] [main] (0x0400): context initialized (Mon Mar 6 13:18:13 2017) [[sssd[gpo_child[24538]]]] [unpack_buffer] (0x0400): cached_gpt_version: 327788 (Mon Mar 6 13:18:13 2017) [[sssd[gpo_child[24538]]]] [main] (0x0400): performing smb operations (Mon Mar 6 13:18:13 2017) [[sssd[gpo_child[24538]]]] [copy_smb_file_to_gpo_cache] (0x0400): smb_uri: smb://dc2.internal.example.domain/sysvol/internal.example.domain/Policies/{31B2F340-016D-11D2-945F-00C04FB984F9}/GPT.INI (Mon Mar 6 13:18:13 2017) [[sssd[gpo_child[24538]]]] [copy_smb_file_to_gpo_cache] (0x0020): smbc_getFunctionOpen failed [2][No such file or directory] (Mon Mar 6 13:18:13 2017) [[sssd[gpo_child[24538]]]] [perform_smb_operations] (0x0020): copy_smb_file_to_gpo_cache failed [2][No such file or directory] (Mon Mar 6 13:18:13 2017) [[sssd[gpo_child[24538]]]] [main] (0x0020): perform_smb_operations failed.[2][No such file or directory]. (Mon Mar 6 13:18:13 2017) [[sssd[gpo_child[24538]]]] [main] (0x0020): gpo_child failed!
I'm sorry I didn't notice your e-mail was stuck in moderation.
You can temporarily disable GPO processing if you don't use it with: ad_gpo_access_control = permissive
But honestly I can't tell if this is a bug in SSSD we should handle more gracafully.
In general libsmbclient should be capable to handle the newer version of the SMB protocol correctly, but maybe we have to set some other option or use libsmbclient differently?
bye, Sumit
sssd-users mailing list -- sssd-users@lists.fedorahosted.org To unsubscribe send an email to sssd-users-leave@lists.fedorahosted.org