We need an option to enable OpenLDAP's internal debug logs.
Pushed PR: https://github.com/SSSD/sssd/pull/5178 * `master` * 5fb22633d2d35867aef26028a240b86c9da1a524 - ldap: add new option ldap_library_debug_level
Reproduce with # rpm -qa sssd sssd-2.3.0-9.el8.x86_64 [root@ci-vm-10-0-16-115 ~]# sssctl config-check Issues identified by validators: 1 [rule/allowed_domain_options]: Attribute 'ldap_library_debug_level' is not allowed in section 'domain/example1'. Check for typos. Messages generated during configuration merging: 0 Used configuration snippet files: 0 Verified with: # rpm -qa sssd sssd-2.4.0-2.el8.x86_64 from man page, ldap_library_debug_level (integer) Switches on libldap debugging with the given level. The libldap debug messages will be written independent of the general debug_level. OpenLDAP uses a bitmap to enable debugging for specific components, -1 will enable full debug output. Default: 0 (libldap debugging disabled) # sssctl config-check Issues identified by validators: 0 Messages generated during configuration merging: 0 Used configuration snippet files: 0 check corresponding logs case1 : disable the log, [root@ci-vm-10-0-98-44 ~]# cat /etc/sssd/sssd.conf | grep 'ldap_library_debug_level' ldap_library_debug_level = 0 [root@ci-vm-10-0-98-44 ~]# systemctl stop sssd; rm -rf /var/lib/sss/db/*; rm -rf /var/log/sssd/*; systemctl start sssd [root@ci-vm-10-0-98-44 ~]# cat /var/log/sssd/sssd_example1.log | grep libldap [root@ci-vm-10-0-98-44 ~]# case2: enable the debug log, [root@ci-vm-10-0-98-44 ~]# cat /etc/sssd/sssd.conf | grep 'ldap_library_debug_level' ldap_library_debug_level = 2 [root@ci-vm-10-0-98-44 ~]# systemctl stop sssd; rm -rf /var/lib/sss/db/*; rm -rf /var/log/sssd/*; systemctl start sssd (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_url_parse_ext(ldap://localhost/) (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_init: trying /etc/openldap/ldap.conf (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_init: using /etc/openldap/ldap.conf (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_init: HOME env is NULL (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_init: trying ldaprc (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_init: LDAPCONF env is NULL (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_init: LDAPRC env is NULL (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_create (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_url_parse_ext(ldaps://ci-vm-10-0-99-122.hosted.upshift.rdu2.redhat.com) (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_new_connection 1 0 0 (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: TLS trace: SSL_connect:before SSL initialization (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: TLS trace: SSL_connect:SSLv3/TLS write client hello (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: TLS trace: SSL_connect:SSLv3/TLS write client hello (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: TLS trace: SSL_connect:SSLv3/TLS read server hello (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: TLS trace: SSL_connect:TLSv1.3 read encrypted extensions (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: TLS trace: SSL_connect:SSLv3/TLS read server certificate request (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: TLS certificate verification: depth: 1, err: 0, subject: /C=US/L=Raleigh/O=Example/CN=ExampleCA,(2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: issuer: /C=US/L=Raleigh/O=Example/CN=ExampleCA (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: TLS certificate verification: depth: 0, err: 0, subject: /CN=ci-vm-10-0-99-122.hosted.upshift.rdu2.redhat.com,(2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: issuer: /C=US/L=Raleigh/O=Example/CN=ExampleCA (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: TLS trace: SSL_connect:SSLv3/TLS read server certificate (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: TLS trace: SSL_connect:TLSv1.3 read server certificate verify (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: TLS trace: SSL_connect:SSLv3/TLS read finished (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: TLS trace: SSL_connect:SSLv3/TLS write change cipher spec (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: TLS trace: SSL_connect:SSLv3/TLS write client certificate (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: TLS trace: SSL_connect:SSLv3/TLS write finished (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_url_parse_ext(ldaps://ci-vm-10-0-99-122.hosted.upshift.rdu2.redhat.com) (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_search_ext (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: put_filter: "(objectclass=*)" (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: put_filter: simple (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: put_simple_filter: "objectclass=*" (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_send_initial_request (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_send_server_request (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt ({it) ber: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt ({) ber: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_flush2: 260 bytes to sd 21 (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_result ld 0x561150c72100 msgid -1 (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: wait4msg ld 0x561150c72100 msgid -1 (timeout 0 usec) (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: wait4msg continue ld 0x561150c72100 msgid -1 all 0 (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ** ld 0x561150c72100 Connections: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: * host: ci-vm-10-0-99-122.hosted.upshift.rdu2.redhat.com port: 636 (default) (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: refcnt: 2 status: Connected (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: last used: Mon Nov 23 05:22:45 2020 (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ** ld 0x561150c72100 Outstanding Requests: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: * msgid 1, origid 1, status InProgress (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: outstanding referrals 0, parent count 0 (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ld 0x561150c72100 request count 1 (abandoned 0) (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ** ld 0x561150c72100 Response Queue: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: Empty (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ld 0x561150c72100 response count 0 (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_chkResponseList ld 0x561150c72100 msgid -1 all 0 (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_chkResponseList returns ld 0x561150c72100 NULL (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_int_select (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: read1msg: ld 0x561150c72100 msgid -1 all 0 (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_get_next (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_get_next: tag 0x30 len 1447 contents: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: read1msg: ld 0x561150c72100 msgid 1 message type search-entry (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_get_dn (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt ({a) ber: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_first_attribute (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt ({xl{) ber: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt ({ax}) ber: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_get_values_len (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt ({x{{a) ber: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt ([V]) ber: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_next_attribute (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt ({ax}) ber: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_get_values_len (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt ({x{{a) ber: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt (x}{a) ber: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt ([V]) ber: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_next_attribute (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt ({ax}) ber: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_get_values_len (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt ({x{{a) ber: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt (x}{a) ber: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt (x}{a) ber: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt ([V]) ber: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_next_attribute (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt ({ax}) ber: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_get_values_len (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt ({x{{a) ber: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt (x}{a) ber: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt (x}{a) ber: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt (x}{a) ber: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt ([V]) ber: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_next_attribute (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt ({ax}) ber: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_get_values_len (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt ({x{{a) ber: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt (x}{a) ber: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt (x}{a) ber: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt (x}{a) ber: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt (x}{a) ber: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt ([V]) ber: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_next_attribute (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt ({ax}) ber: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_get_values_len (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt ({x{{a) ber: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt (x}{a) ber: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt (x}{a) ber: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt (x}{a) ber: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt (x}{a) ber: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt (x}{a) ber: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt ([V]) ber: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_next_attribute (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt ({ax}) ber: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_get_values_len (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt ({x{{a) ber: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt (x}{a) ber: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt (x}{a) ber: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt (x}{a) ber: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt (x}{a) ber: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt (x}{a) ber: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt (x}{a) ber: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt ([V]) ber: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_next_attribute (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt ({ax}) ber: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_get_values_len (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt ({x{{a) ber: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt (x}{a) ber: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt (x}{a) ber: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt (x}{a) ber: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt (x}{a) ber: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt (x}{a) ber: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt (x}{a) ber: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt (x}{a) ber: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt ([V]) ber: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_next_attribute (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt ({ax}) ber: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_get_values_len (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt ({x{{a) ber: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt (x}{a) ber: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt (x}{a) ber: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt (x}{a) ber: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt (x}{a) ber: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt (x}{a) ber: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt (x}{a) ber: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt (x}{a) ber: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt (x}{a) ber: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt ([V]) ber: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_next_attribute (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt ({ax}) ber: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_get_values_len (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt ({x{{a) ber: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt (x}{a) ber: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt (x}{a) ber: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt (x}{a) ber: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt (x}{a) ber: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt (x}{a) ber: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt (x}{a) ber: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt (x}{a) ber: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt (x}{a) ber: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt (x}{a) ber: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt ([V]) ber: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_next_attribute (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_msgfree (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_result ld 0x561150c72100 msgid -1 (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: wait4msg ld 0x561150c72100 msgid -1 (timeout 0 usec) (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: wait4msg continue ld 0x561150c72100 msgid -1 all 0 (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ** ld 0x561150c72100 Connections: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: * host: ci-vm-10-0-99-122.hosted.upshift.rdu2.redhat.com port: 636 (default) (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: refcnt: 2 status: Connected (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: last used: Mon Nov 23 05:22:45 2020 (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ** ld 0x561150c72100 Outstanding Requests: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: * msgid 1, origid 1, status InProgress (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: outstanding referrals 0, parent count 0 (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ld 0x561150c72100 request count 1 (abandoned 0) (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ** ld 0x561150c72100 Response Queue: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: Empty (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ld 0x561150c72100 response count 0 (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_chkResponseList ld 0x561150c72100 msgid -1 all 0 (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_chkResponseList returns ld 0x561150c72100 NULL (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_int_select (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: read1msg: ld 0x561150c72100 msgid -1 all 0 (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_get_next (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_get_next: tag 0x30 len 12 contents: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: read1msg: ld 0x561150c72100 msgid 1 message type search-result (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt ({eAA) ber: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: read1msg: ld 0x561150c72100 0 new referrals (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: read1msg: mark request completed, ld 0x561150c72100 msgid 1 (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: request done: ld 0x561150c72100 msgid 1 (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: res_errno: 0, res_error: <>, res_matched: <> (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_free_request (origid 1, msgid 1) (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_parse_result (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt ({iAA) ber: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt (}) ber: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_err2string (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_msgfree (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_search_ext (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: put_filter: "(&(objectClass=sudoRole)(|(&(!(sudoHost=*))(cn=defaults))(sudoHost=ALL)(sudoHost=ci-vm-10-0-98-44.hosted.upshift.rdu2.redhat.com)(sudoHost=ci-vm-10-0-98-44)(sudoHost=10.0.99.43)(sudoHost=10.0.96.0/22)(sudoHost=fe80::f816:3eff:fe99:d50a)(sudoHost=fe80::/64)(sudoHost=+*)))" (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: put_filter: AND (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: put_filter_list "(objectClass=sudoRole)(|(&(!(sudoHost=*))(cn=defaults))(sudoHost=ALL)(sudoHost=ci-vm-10-0-98-44.hosted.upshift.rdu2.redhat.com)(sudoHost=ci-vm-10-0-98-44)(sudoHost=10.0.99.43)(sudoHost=10.0.96.0/22)(sudoHost=fe80::f816:3eff:fe99:d50a)(sudoHost=fe80::/64)(sudoHost=+*))" (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: put_filter: "(objectClass=sudoRole)" (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: put_filter: simple (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: put_simple_filter: "objectClass=sudoRole" (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: put_filter: "(|(&(!(sudoHost=*))(cn=defaults))(sudoHost=ALL)(sudoHost=ci-vm-10-0-98-44.hosted.upshift.rdu2.redhat.com)(sudoHost=ci-vm-10-0-98-44)(sudoHost=10.0.99.43)(sudoHost=10.0.96.0/22)(sudoHost=fe80::f816:3eff:fe99:d50a)(sudoHost=fe80::/64)(sudoHost=+*))" (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: put_filter: OR (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: put_filter_list "(&(!(sudoHost=*))(cn=defaults))(sudoHost=ALL)(sudoHost=ci-vm-10-0-98-44.hosted.upshift.rdu2.redhat.com)(sudoHost=ci-vm-10-0-98-44)(sudoHost=10.0.99.43)(sudoHost=10.0.96.0/22)(sudoHost=fe80::f816:3eff:fe99:d50a)(sudoHost=fe80::/64)(sudoHost=+*)" (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: put_filter: "(&(!(sudoHost=*))(cn=defaults))" (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: put_filter: AND (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: put_filter_list "(!(sudoHost=*))(cn=defaults)" (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: put_filter: "(!(sudoHost=*))" (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: put_filter: NOT (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: put_filter_list "(sudoHost=*)" (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: put_filter: "(sudoHost=*)" (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: put_filter: simple (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: put_simple_filter: "sudoHost=*" (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: put_filter: "(cn=defaults)" (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: put_filter: simple (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: put_simple_filter: "cn=defaults" (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: put_filter: "(sudoHost=ALL)" (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: put_filter: simple (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: put_simple_filter: "sudoHost=ALL" (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: put_filter: "(sudoHost=ci-vm-10-0-98-44.hosted.upshift.rdu2.redhat.com)" (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: put_filter: simple (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: put_simple_filter: "sudoHost=ci-vm-10-0-98-44.hosted.upshift.rdu2.redhat.com" (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: put_filter: "(sudoHost=ci-vm-10-0-98-44)" (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: put_filter: simple (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: put_simple_filter: "sudoHost=ci-vm-10-0-98-44" (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: put_filter: "(sudoHost=10.0.99.43)" (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: put_filter: simple (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: put_simple_filter: "sudoHost=10.0.99.43" (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: put_filter: "(sudoHost=10.0.96.0/22)" (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: put_filter: simple (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: put_simple_filter: "sudoHost=10.0.96.0/22" (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: put_filter: "(sudoHost=fe80::f816:3eff:fe99:d50a)" (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: put_filter: simple (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: put_simple_filter: "sudoHost=fe80::f816:3eff:fe99:d50a" (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: put_filter: "(sudoHost=fe80::/64)" (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: put_filter: simple (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: put_simple_filter: "sudoHost=fe80::/64" (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: put_filter: "(sudoHost=+*)" (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: put_filter: simple (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: put_simple_filter: "sudoHost=+*" (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: put_substring_filter "sudoHost=+*" (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_send_initial_request (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_send_server_request (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt ({it) ber: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt ({) ber: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_flush2: 561 bytes to sd 21 (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_result ld 0x561150c72100 msgid -1 (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: wait4msg ld 0x561150c72100 msgid -1 (timeout 0 usec) (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: wait4msg continue ld 0x561150c72100 msgid -1 all 0 (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ** ld 0x561150c72100 Connections: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: * host: ci-vm-10-0-99-122.hosted.upshift.rdu2.redhat.com port: 636 (default) (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: refcnt: 2 status: Connected (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: last used: Mon Nov 23 05:22:45 2020 (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ** ld 0x561150c72100 Outstanding Requests: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: * msgid 2, origid 2, status InProgress (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: outstanding referrals 0, parent count 0 (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ld 0x561150c72100 request count 1 (abandoned 0) (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ** ld 0x561150c72100 Response Queue: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: Empty (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ld 0x561150c72100 response count 0 (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_chkResponseList ld 0x561150c72100 msgid -1 all 0 (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_chkResponseList returns ld 0x561150c72100 NULL (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_int_select (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_result ld 0x561150c72100 msgid -1 (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: wait4msg ld 0x561150c72100 msgid -1 (timeout 0 usec) (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: wait4msg continue ld 0x561150c72100 msgid -1 all 0 (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ** ld 0x561150c72100 Connections: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: * host: ci-vm-10-0-99-122.hosted.upshift.rdu2.redhat.com port: 636 (default) (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: refcnt: 2 status: Connected (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: last used: Mon Nov 23 05:22:45 2020 (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ** ld 0x561150c72100 Outstanding Requests: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: * msgid 2, origid 2, status InProgress (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: outstanding referrals 0, parent count 0 (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ld 0x561150c72100 request count 1 (abandoned 0) (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ** ld 0x561150c72100 Response Queue: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: Empty (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ld 0x561150c72100 response count 0 (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_chkResponseList ld 0x561150c72100 msgid -1 all 0 (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_chkResponseList returns ld 0x561150c72100 NULL (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_int_select (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: read1msg: ld 0x561150c72100 msgid -1 all 0 (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_get_next (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_get_next: tag 0x30 len 49 contents: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: read1msg: ld 0x561150c72100 msgid 2 message type search-result (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt ({eAA) ber: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: read1msg: ld 0x561150c72100 0 new referrals (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: read1msg: mark request completed, ld 0x561150c72100 msgid 2 (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: request done: ld 0x561150c72100 msgid 2 (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: res_errno: 0, res_error: <>, res_matched: <> (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_free_request (origid 2, msgid 2) (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_parse_result (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt ({iAA) ber: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt ({a) ber: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt (o) ber: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt (}) ber: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_err2string (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt ({io}) ber: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_msgfree (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_result ld 0x561150c72100 msgid -1 (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: wait4msg ld 0x561150c72100 msgid -1 (timeout 0 usec) (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: wait4msg continue ld 0x561150c72100 msgid -1 all 0 (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ** ld 0x561150c72100 Connections: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: * host: ci-vm-10-0-99-122.hosted.upshift.rdu2.redhat.com port: 636 (default) (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: refcnt: 1 status: Connected (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: last used: Mon Nov 23 05:22:45 2020 (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ** ld 0x561150c72100 Outstanding Requests: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: Empty (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ld 0x561150c72100 request count 0 (abandoned 0) (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ** ld 0x561150c72100 Response Queue: (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: Empty (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ld 0x561150c72100 response count 0 (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_chkResponseList ld 0x561150c72100 msgid -1 all 0 (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_chkResponseList returns ld 0x561150c72100 NULL (2020-12-06 5:22:45): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_int_select [root@ci-vm-10-0-98-44 ~]# vi /etc/sssd/sssd.conf [root@ci-vm-10-0-98-44 ~]# systemctl stop sssd; rm -rf /var/lib/sss/db/*; rm -rf /var/log/sssd/*; systemctl start sssd [root@ci-vm-10-0-98-44 ~]# cat /var/log/sssd/sssd_example1.log | grep libldap (2020-12-06 5:27:05): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_url_parse_ext(ldap://localhost/) (2020-12-06 5:27:05): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_init: trying /etc/openldap/ldap.conf (2020-12-06 5:27:05): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_init: using /etc/openldap/ldap.conf (2020-12-06 5:27:05): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_init: HOME env is NULL (2020-12-06 5:27:05): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_init: trying ldaprc (2020-12-06 5:27:05): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_init: LDAPCONF env is NULL (2020-12-06 5:27:05): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_init: LDAPRC env is NULL (2020-12-06 5:27:05): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_create (2020-12-06 5:27:05): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_url_parse_ext(ldaps://ci-vm-10-0-99-122.hosted.upshift.rdu2.redhat.com) (2020-12-06 5:27:05): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_new_connection 1 0 0 (2020-12-06 5:27:05): [be[example1]] [sss_ldap_debug] (0x4000): libldap: TLS trace: SSL_connect:before SSL initialization (2020-12-06 5:27:05): [be[example1]] [sss_ldap_debug] (0x4000): libldap: TLS trace: SSL_connect:SSLv3/TLS write client hello (2020-12-06 5:27:05): [be[example1]] [sss_ldap_debug] (0x4000): libldap: TLS trace: SSL_connect:SSLv3/TLS write client hello (2020-12-06 5:27:05): [be[example1]] [sss_ldap_debug] (0x4000): libldap: TLS trace: SSL_connect:SSLv3/TLS read server hello (2020-12-06 5:27:05): [be[example1]] [sss_ldap_debug] (0x4000): libldap: TLS trace: SSL_connect:TLSv1.3 read encrypted extensions (2020-12-06 5:27:05): [be[example1]] [sss_ldap_debug] (0x4000): libldap: TLS trace: SSL_connect:SSLv3/TLS read server certificate request (2020-12-06 5:27:05): [be[example1]] [sss_ldap_debug] (0x4000): libldap: TLS certificate verification: depth: 1, err: 0, subject: /C=US/L=Raleigh/O=Example/CN=ExampleCA,(2020-12-06 5:27:05): [be[example1]] [sss_ldap_debug] (0x4000): libldap: issuer: /C=US/L=Raleigh/O=Example/CN=ExampleCA (2020-12-06 5:27:05): [be[example1]] [sss_ldap_debug] (0x4000): libldap: TLS certificate verification: depth: 0, err: 0, subject: /CN=ci-vm-10-0-99-122.hosted.upshift.rdu2.redhat.com,(2020-12-06 5:27:05): [be[example1]] [sss_ldap_debug] (0x4000): libldap: issuer: /C=US/L=Raleigh/O=Example/CN=ExampleCA (2020-12-06 5:27:05): [be[example1]] [sss_ldap_debug] (0x4000): libldap: TLS trace: SSL_connect:SSLv3/TLS read server certificate (2020-12-06 5:27:05): [be[example1]] [sss_ldap_debug] (0x4000): libldap: TLS trace: SSL_connect:TLSv1.3 read server certificate verify (2020-12-06 5:27:05): [be[example1]] [sss_ldap_debug] (0x4000): libldap: TLS trace: SSL_connect:SSLv3/TLS read finished (2020-12-06 5:27:05): [be[example1]] [sss_ldap_debug] (0x4000): libldap: TLS trace: SSL_connect:SSLv3/TLS write change cipher spec (2020-12-06 5:27:05): [be[example1]] [sss_ldap_debug] (0x4000): libldap: TLS trace: SSL_connect:SSLv3/TLS write client certificate (2020-12-06 5:27:05): [be[example1]] [sss_ldap_debug] (0x4000): libldap: TLS trace: SSL_connect:SSLv3/TLS write finished (2020-12-06 5:27:05): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_url_parse_ext(ldaps://ci-vm-10-0-99-122.hosted.upshift.rdu2.redhat.com) (2020-12-06 5:27:05): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_search_ext (2020-12-06 5:27:05): [be[example1]] [sss_ldap_debug] (0x4000): libldap: put_filter: "(objectclass=*)" (2020-12-06 5:27:05): [be[example1]] [sss_ldap_debug] (0x4000): libldap: put_filter: simple (2020-12-06 5:27:05): [be[example1]] [sss_ldap_debug] (0x4000): libldap: put_simple_filter: "objectclass=*" (2020-12-06 5:27:05): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_send_initial_request (2020-12-06 5:27:05): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_send_server_request (2020-12-06 5:27:05): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt ({it) ber: (2020-12-06 5:27:05): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt ({) ber: (2020-12-06 5:27:05): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_flush2: 260 bytes to sd 21 (2020-12-06 5:27:05): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_result ld 0x55a6a756b250 msgid -1 (2020-12-06 5:27:05): [be[example1]] [sss_ldap_debug] (0x4000): libldap: wait4msg ld 0x55a6a756b250 msgid -1 (timeout 0 usec) (2020-12-06 5:27:05): [be[example1]] [sss_ldap_debug] (0x4000): libldap: wait4msg continue ld 0x55a6a756b250 msgid -1 all 0 (2020-12-06 5:27:05): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ** ld 0x55a6a756b250 Connections: (2020-12-06 5:27:05): [be[example1]] [sss_ldap_debug] (0x4000): libldap: * host: ci-vm-10-0-99-122.hosted.upshift.rdu2.redhat.com port: 636 (default) (2020-12-06 5:27:05): [be[example1]] [sss_ldap_debug] (0x4000): libldap: refcnt: 2 status: Connected (2020-12-06 5:27:05): [be[example1]] [sss_ldap_debug] (0x4000): libldap: last used: Mon Nov 23 05:27:05 2020 (2020-12-06 5:27:05): [be[example1]] [sss_ldap_debug] (0x4000): libldap: (2020-12-06 5:27:05): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ** ld 0x55a6a756b250 Outstanding Requests: (2020-12-06 5:27:05): [be[example1]] [sss_ldap_debug] (0x4000): libldap: * msgid 1, origid 1, status InProgress (2020-12-06 5:27:05): [be[example1]] [sss_ldap_debug] (0x4000): libldap: outstanding referrals 0, parent count 0 (2020-12-06 5:27:05): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ld 0x55a6a756b250 request count 1 (abandoned 0) (2020-12-06 5:27:05): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ** ld 0x55a6a756b250 Response Queue: (2020-12-06 5:27:05): [be[example1]] [sss_ldap_debug] (0x4000): libldap: Empty (2020-12-06 5:27:05): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ld 0x55a6a756b250 response count 0 (2020-12-06 5:27:05): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_chkResponseList ld 0x55a6a756b250 msgid -1 all 0 (2020-12-06 5:27:05): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_chkResponseList returns ld 0x55a6a756b250 NULL (2020-12-06 5:27:05): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_int_select (2020-12-06 5:27:05): [be[example1]] [sss_ldap_debug] (0x4000): libldap: read1msg: ld 0x55a6a756b250 msgid -1 all 0 (2020-12-06 5:27:05): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_get_next (2020-12-06 5:27:05): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_get_next: tag 0x30 len 1447 contents: (2020-12-06 5:27:05): [be[example1]] [sss_ldap_debug] (0x4000): libldap: read1msg: ld 0x55a6a756b250 msgid 1 message type search-entry (2020-12-06 5:27:05): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_get_dn (2020-12-06 5:27:05): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt ({a) ber: (2020-12-06 5:27:05): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_first_attribute (2020-12-06 5:27:05): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt ({xl{) ber: (2020-12-06 5:27:05): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt ({ax}) ber: (2020-12-06 5:27:05): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_get_values_len (2020-12-06 5:27:05): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt ({x{{a) ber: (2020-12-06 5:27:05): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt ([V]) ber: (2020-12-06 5:27:05): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_next_attribute (2020-12-06 5:27:05): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt ({ax}) ber: (2020-12-06 5:27:05): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_get_values_len (2020-12-06 5:27:05): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt ({x{{a) ber: (2020-12-06 5:27:05): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt (x}{a) ber: (2020-12-06 5:27:05): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt ([V]) ber: (2020-12-06 5:27:05): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_next_attribute (2020-12-06 5:27:05): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt ({ax}) ber: (2020-12-06 5:27:05): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ldap_get_values_len (2020-12-06 5:27:05): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt ({x{{a) ber: (2020-12-06 5:27:05): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt (x}{a) ber: (2020-12-06 5:27:05): [be[example1]] [sss_ldap_debug] (0x4000): libldap: ber_scanf fmt (x}{a) ber: (2020-12-06 5:27:05): [be[example1]] .... .... ....
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (sssd bug fix and enhancement update), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2021:1666