Users in AD are not able to authenticate using SSSD with the Error : "Error writing to credentials cache"
Issue
Users in AD are not able to authenticate using SSSD with the Error : "Error writing to credentials cache"
krb5_child.log has the following logs :
[unpack_buffer] (0x0100): cmd [241] uid [5003] gid [5005] validate [true] enterprise principal [true] offline [false] UPN [user@EXAMPLE.COM]
[unpack_buffer] (0x0100): ccname: [KEYRING:persistent:5003] old_ccname: [not set] keytab: [/etc/krb5.keytab]
[check_use_fast] (0x0100): Not using FAST.
[privileged_krb5_setup] (0x0080): Cannot open the PAC responder socket
[become_user] (0x0200): Trying to become user [5003][5005].
[set_lifetime_options] (0x0100): Cannot read [SSSD_KRB5_RENEWABLE_LIFETIME] from environment.
[set_lifetime_options] (0x0100): Cannot read [SSSD_KRB5_LIFETIME] from environment.
[set_canonicalize_option] (0x0100): SSSD_KRB5_CANONICALIZE is set to [true]
[sss_send_pac] (0x0040): sss_pac_make_request failed [-1][111].
[validate_tgt] (0x0040): sss_send_pac failed, group membership for user with principal [user\@EXAMPLE.COM@EXAMPLE.COM] might not be correct.
[get_and_save_tgt] (0x0020): 1029: [-1765328187][Error writing to credentials cache]
[map_krb5_error] (0x0020): 1069: [-1765328187][Error writing to credentials cache]
[k5c_send_data] (0x0200): Received error code 1432158209
Environment
- Red Hat Enterprise Linux 6
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.