я использую sssd для аутентификации в RedHat IdM. В большинстве случаев он работает нормально, но иногда пользователи не могут войти в систему. Мы обнаружили, что в большинстве случаев нам нужно прекратить sssd, удалите его кеш и перезапустите sssd. В частности, sss_cache -E не решать проблему.
Я хотел бы понять, что происходит с кешем, что не позволяет авторизованному пользователю войти в систему, и почему использование обычного метода аннулирования кеша не работает.
Увеличение количества входов в систему sssd показывает это в журналах для sssd_pam когда пользователь пытается войти в систему:
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [get_client_cred] (0x4000): Client creds: euid[0] egid[0] pid[25524].
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [setup_client_idle_timer] (0x4000): Idle timer re-set for client [0x55ecd4c84500][19]
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [accept_fd_handler] (0x0400): Client connected to privileged pipe!
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [sss_cmd_get_version] (0x0200): Received client version [3].
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [sss_cmd_get_version] (0x0200): Offered version [3].
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_cmd_preauth] (0x0100): entering pam_cmd_preauth
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [sss_parse_name_for_domains] (0x0200): name 'remoteuser' matched without domain, user is remoteuser
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_print_data] (0x0100): command: SSS_PAM_PREAUTH
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_print_data] (0x0100): domain: not set
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_print_data] (0x0100): user: remoteuser
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_print_data] (0x0100): service: sshd
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_print_data] (0x0100): tty: ssh
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_print_data] (0x0100): ruser: not set
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_print_data] (0x0100): rhost: 10.11.12.13
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_print_data] (0x0100): authtok type: 0
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_print_data] (0x0100): newauthtok type: 0
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_print_data] (0x0100): priv: 1
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_print_data] (0x0100): cli_pid: 25524
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_print_data] (0x0100): logon name: remoteuser
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_initgr_check_timeout] (0x4000): User [remoteuser] not found in PAM cache.
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [cache_req_set_plugin] (0x2000): CR #0: Setting "Initgroups by name" plugin
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [cache_req_send] (0x0400): CR #0: New request 'Initgroups by name'
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [cache_req_process_input] (0x0400): CR #0: Parsing input name [remoteuser]
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [sss_parse_name_for_domains] (0x0200): name 'remoteuser' matched without domain, user is remoteuser
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [cache_req_set_name] (0x0400): CR #0: Setting name [remoteuser]
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [cache_req_select_domains] (0x0400): CR #0: Performing a multi-domain search
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [cache_req_search_domains] (0x0400): CR #0: Search will bypass the cache and check the data provider
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [cache_req_validate_domain_type] (0x2000): Request type POSIX-only for domain example.com type POSIX is valid
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [cache_req_set_domain] (0x0400): CR #0: Using domain [example.com]
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [cache_req_prepare_domain_data] (0x0400): CR #0: Preparing input data for domain [example.com] rules
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [cache_req_search_send] (0x0400): CR #0: Looking up remoteuser@example.com
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [cache_req_search_ncache] (0x0400): CR #0: Checking negative cache for [remoteuser@example.com]
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [sss_ncache_check_str] (0x2000): Checking negative cache for [NCE/USER/example.com/remoteuser@example.com]
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [cache_req_search_ncache] (0x0400): CR #0: [remoteuser@example.com] is not present in negative cache
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [cache_req_search_dp] (0x0400): CR #0: Looking up [remoteuser@example.com] in data provider
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [sss_dp_issue_request] (0x0400): Issuing request for [0x55ecd43b1550:3:remoteuser@example.com@example.com]
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [sss_dp_get_account_msg] (0x0400): Creating request for [example.com][0x3][BE_REQ_INITGROUPS][name=remoteuser@example.com:-]
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [sbus_add_timeout] (0x2000): 0x55ecd4c7eec0
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [sss_dp_internal_get_send] (0x0400): Entering request [0x55ecd43b1550:3:remoteuser@example.com@example.com]
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [sbus_remove_timeout] (0x2000): 0x55ecd4c7eec0
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [sbus_dispatch] (0x4000): dbus conn: 0x55ecd4c828d0
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [sbus_dispatch] (0x4000): Dispatching.
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [sss_dp_get_reply] (0x1000): Got reply from Data Provider - DP error code: 0 errno: 0 error message: Success
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [cache_req_search_cache] (0x0400): CR #0: Looking up [remoteuser@example.com] in cache
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [cache_req_search_ncache_filter] (0x0400): CR #0: This request type does not support filtering result by negative cache
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [cache_req_search_done] (0x0400): CR #0: Returning updated object [remoteuser@example.com]
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [cache_req_create_and_add_result] (0x0400): CR #0: Found 5 entries in domain example.com
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [sss_dp_req_destructor] (0x0400): Deleting request: [0x55ecd43b1550:3:remoteuser@example.com@example.com]
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [cache_req_done] (0x0400): CR #0: Finished: Success
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pd_set_primary_name] (0x0400): User's primary name is remoteuser@example.com
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_initgr_cache_set] (0x2000): [remoteuser] added to PAM initgroup cache
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_dp_send_req] (0x0100): Sending request with the following data:
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_print_data] (0x0100): command: SSS_PAM_PREAUTH
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_print_data] (0x0100): domain: example.com
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_print_data] (0x0100): user: remoteuser@example.com
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_print_data] (0x0100): service: sshd
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_print_data] (0x0100): tty: ssh
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_print_data] (0x0100): ruser: not set
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_print_data] (0x0100): rhost: 10.11.12.13
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_print_data] (0x0100): authtok type: 0
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_print_data] (0x0100): newauthtok type: 0
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_print_data] (0x0100): priv: 1
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_print_data] (0x0100): cli_pid: 25524
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_print_data] (0x0100): logon name: remoteuser
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [sbus_add_timeout] (0x2000): 0x55ecd4c7eec0
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_dom_forwarder] (0x0100): pam_dp_send_req returned 0
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [sbus_remove_timeout] (0x2000): 0x55ecd4c7eec0
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [sbus_dispatch] (0x4000): dbus conn: 0x55ecd4c828d0
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [sbus_dispatch] (0x4000): Dispatching.
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_dp_process_reply] (0x0200): received: [0 (Success)][example.com]
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_reply] (0x0200): pam_reply called with result [0]: Success.
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [filter_responses] (0x0100): [pam_response_filter] not available, not fatal.
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_reply] (0x0200): blen: 42
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_cmd_authenticate] (0x0100): entering pam_cmd_authenticate
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [sss_parse_name_for_domains] (0x0200): name 'remoteuser' matched without domain, user is remoteuser
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_print_data] (0x0100): command: SSS_PAM_AUTHENTICATE
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_print_data] (0x0100): domain: not set
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_print_data] (0x0100): user: remoteuser
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_print_data] (0x0100): service: sshd
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_print_data] (0x0100): tty: ssh
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_print_data] (0x0100): ruser: not set
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_print_data] (0x0100): rhost: 10.11.12.13
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_print_data] (0x0100): authtok type: 1
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_print_data] (0x0100): newauthtok type: 0
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_print_data] (0x0100): priv: 1
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_print_data] (0x0100): cli_pid: 25524
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_print_data] (0x0100): logon name: remoteuser
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_initgr_check_timeout] (0x2000): User [remoteuser] found in PAM cache.
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [cache_req_set_plugin] (0x2000): CR #1: Setting "Initgroups by name" plugin
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [cache_req_send] (0x0400): CR #1: New request 'Initgroups by name'
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [cache_req_process_input] (0x0400): CR #1: Parsing input name [remoteuser]
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [sss_parse_name_for_domains] (0x0200): name 'remoteuser' matched without domain, user is remoteuser
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [cache_req_set_name] (0x0400): CR #1: Setting name [remoteuser]
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [cache_req_select_domains] (0x0400): CR #1: Performing a multi-domain search
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [cache_req_search_domains] (0x0400): CR #1: Search will check the cache and check the data provider
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [cache_req_validate_domain_type] (0x2000): Request type POSIX-only for domain example.com type POSIX is valid
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [cache_req_set_domain] (0x0400): CR #1: Using domain [example.com]
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [cache_req_prepare_domain_data] (0x0400): CR #1: Preparing input data for domain [example.com] rules
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [cache_req_search_send] (0x0400): CR #1: Looking up remoteuser@example.com
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [cache_req_search_ncache] (0x0400): CR #1: Checking negative cache for [remoteuser@example.com]
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [sss_ncache_check_str] (0x2000): Checking negative cache for [NCE/USER/example.com/remoteuser@example.com]
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [cache_req_search_ncache] (0x0400): CR #1: [remoteuser@example.com] is not present in negative cache
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [cache_req_search_cache] (0x0400): CR #1: Looking up [remoteuser@example.com] in cache
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [cache_req_search_send] (0x0400): CR #1: Returning [remoteuser@example.com] from cache
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [cache_req_search_ncache_filter] (0x0400): CR #1: This request type does not support filtering result by negative cache
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [cache_req_create_and_add_result] (0x0400): CR #1: Found 5 entries in domain example.com
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [cache_req_done] (0x0400): CR #1: Finished: Success
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pd_set_primary_name] (0x0400): User's primary name is remoteuser@example.com
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_initgr_cache_set] (0x2000): [remoteuser] added to PAM initgroup cache
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_dp_send_req] (0x0100): Sending request with the following data:
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_print_data] (0x0100): command: SSS_PAM_AUTHENTICATE
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_print_data] (0x0100): domain: example.com
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_print_data] (0x0100): user: remoteuser@example.com
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_print_data] (0x0100): service: sshd
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_print_data] (0x0100): tty: ssh
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_print_data] (0x0100): ruser: not set
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_print_data] (0x0100): rhost: 10.11.12.13
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_print_data] (0x0100): authtok type: 1
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_print_data] (0x0100): newauthtok type: 0
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_print_data] (0x0100): priv: 1
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_print_data] (0x0100): cli_pid: 25524
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_print_data] (0x0100): logon name: remoteuser
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [sbus_add_timeout] (0x2000): 0x55ecd4c7eec0
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_dom_forwarder] (0x0100): pam_dp_send_req returned 0
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [sbus_remove_timeout] (0x2000): 0x55ecd4c7eec0
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [sbus_dispatch] (0x4000): dbus conn: 0x55ecd4c828d0
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [sbus_dispatch] (0x4000): Dispatching.
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_dp_process_reply] (0x0200): received: [0 (Success)][example.com]
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_reply] (0x0200): pam_reply called with result [0]: Success.
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [sysdb_ldb_msg_difference] (0x2000): Replaced/extended attr [lastOnlineAuth] of entry [name=remoteuser@example.com,cn=users,cn=example.com,cn=sysdb]
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [ldb] (0x4000): start ldb transaction (nesting: 0)
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [ldb] (0x4000): commit ldb transaction (nesting: 0)
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [sysdb_set_entry_attr] (0x0200): Entry [name=remoteuser@example.com,cn=users,cn=example.com,cn=sysdb] has set [cache, ts_cache] attrs.
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_reply] (0x0200): pam_reply called with result [0]: Success.
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [filter_responses] (0x0100): [pam_response_filter] not available, not fatal.
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_reply] (0x0200): blen: 78
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_cmd_acct_mgmt] (0x0100): entering pam_cmd_acct_mgmt
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [sss_parse_name_for_domains] (0x0200): name 'remoteuser' matched without domain, user is remoteuser
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_print_data] (0x0100): command: SSS_PAM_ACCT_MGMT
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_print_data] (0x0100): domain: not set
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_print_data] (0x0100): user: remoteuser
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_print_data] (0x0100): service: sshd
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_print_data] (0x0100): tty: ssh
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_print_data] (0x0100): ruser: not set
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_print_data] (0x0100): rhost: 10.11.12.13
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_print_data] (0x0100): authtok type: 0
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_print_data] (0x0100): newauthtok type: 0
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_print_data] (0x0100): priv: 1
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_print_data] (0x0100): cli_pid: 25524
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_print_data] (0x0100): logon name: remoteuser
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_initgr_check_timeout] (0x2000): User [remoteuser] found in PAM cache.
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [cache_req_set_plugin] (0x2000): CR #2: Setting "Initgroups by name" plugin
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [cache_req_send] (0x0400): CR #2: New request 'Initgroups by name'
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [cache_req_process_input] (0x0400): CR #2: Parsing input name [remoteuser]
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [sss_parse_name_for_domains] (0x0200): name 'remoteuser' matched without domain, user is remoteuser
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [cache_req_set_name] (0x0400): CR #2: Setting name [remoteuser]
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [cache_req_select_domains] (0x0400): CR #2: Performing a multi-domain search
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [cache_req_search_domains] (0x0400): CR #2: Search will check the cache and check the data provider
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [cache_req_validate_domain_type] (0x2000): Request type POSIX-only for domain example.com type POSIX is valid
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [cache_req_set_domain] (0x0400): CR #2: Using domain [example.com]
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [cache_req_prepare_domain_data] (0x0400): CR #2: Preparing input data for domain [example.com] rules
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [cache_req_search_send] (0x0400): CR #2: Looking up remoteuser@example.com
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [cache_req_search_ncache] (0x0400): CR #2: Checking negative cache for [remoteuser@example.com]
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [sss_ncache_check_str] (0x2000): Checking negative cache for [NCE/USER/example.com/remoteuser@example.com]
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [cache_req_search_ncache] (0x0400): CR #2: [remoteuser@example.com] is not present in negative cache
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [cache_req_search_cache] (0x0400): CR #2: Looking up [remoteuser@example.com] in cache
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [cache_req_search_send] (0x0400): CR #2: Returning [remoteuser@example.com] from cache
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [cache_req_search_ncache_filter] (0x0400): CR #2: This request type does not support filtering result by negative cache
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [cache_req_create_and_add_result] (0x0400): CR #2: Found 5 entries in domain example.com
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [cache_req_done] (0x0400): CR #2: Finished: Success
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pd_set_primary_name] (0x0400): User's primary name is remoteuser@example.com
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_initgr_cache_set] (0x2000): [remoteuser] added to PAM initgroup cache
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_dp_send_req] (0x0100): Sending request with the following data:
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_print_data] (0x0100): command: SSS_PAM_ACCT_MGMT
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_print_data] (0x0100): domain: example.com
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_print_data] (0x0100): user: remoteuser@example.com
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_print_data] (0x0100): service: sshd
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_print_data] (0x0100): tty: ssh
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_print_data] (0x0100): ruser: not set
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_print_data] (0x0100): rhost: 10.11.12.13
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_print_data] (0x0100): authtok type: 0
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_print_data] (0x0100): newauthtok type: 0
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_print_data] (0x0100): priv: 1
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_print_data] (0x0100): cli_pid: 25524
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_print_data] (0x0100): logon name: remoteuser
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [sbus_add_timeout] (0x2000): 0x55ecd4c7eec0
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_dom_forwarder] (0x0100): pam_dp_send_req returned 0
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [sbus_remove_timeout] (0x2000): 0x55ecd4c7eec0
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [sbus_dispatch] (0x4000): dbus conn: 0x55ecd4c828d0
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [sbus_dispatch] (0x4000): Dispatching.
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_dp_process_reply] (0x0200): received: [6 (Permission denied)][example.com]
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_reply] (0x0200): pam_reply called with result [6]: Permission denied.
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [filter_responses] (0x0100): [pam_response_filter] not available, not fatal.
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [pam_reply] (0x0200): blen: 34
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [client_recv] (0x0200): Client disconnected!
(Tue Oct 1 17:19:03 2019) [sssd[pam]] [client_close_fn] (0x2000): Terminated client [0x55ecd4c84500][19]