SSSD が "File ownership and permissions check failed" を表示して起動に失敗する

Issue

• SSSD が起動に失敗します。

  # systemctl restart sssd
  Job for sssd.service failed because the control process exited with error code.
  See "systemctl status sssd.service" and "journalctl -xe" for details.
  

• systemd は /var/log/messages に以下のエラーメッセージを記録しました。

  sssd[sssd][22160]: SSSD couldn't load the configuration database [1432158317]: Unknown error 1432158317.
  systemd[1]: sssd.service: Main process exited, code=exited, status=4/NOPERMISSION
  systemd[1]: sssd.service: Failed with result 'exit-code'.
  systemd[1]: sssd.service: Service RestartSec=100ms expired, scheduling restart.
  systemd[1]: sssd.service: Scheduled restart job, restart counter is at 5.
  systemd[1]: sssd.service: Start request repeated too quickly.
  systemd[1]: sssd.service: Failed with result 'exit-code'.
  

• sssd.conf で debug_level=9 を設定すると、以下のエラーが /var/log/sssd/sssd.log に記録されます。

  [sssd] [sss_ini_read_sssd_conf] (0x0020): Permission check on config file failed.
  [sssd] [confdb_init_db] (0x0020): Cannot convert INI to LDIF [1432158317]: [File ownership and permissions check failed]
  [sssd] [confdb_setup] (0x0010): ConfDB initialization has failed [1432158317]: File ownership and permissions check failed
  [sssd] [load_configuration] (0x0010): Unable to setup ConfDB [1432158317]: File ownership and permissions check failed
  [sssd] [main] (0x0010): SSSD couldn't load the configuration database.