Lookups performed for some AD users from IPA client is failing with the error : "ipa_get_*_acct request failed: [12]: Cannot allocate memory"

Solution Verified - Updated -

Issue

Lookups performed for some AD users from IPA client is failing with the error : "ipa_get_*_acct request failed: [12]: Cannot allocate memory".
Other AD user lookups works.

Noticed the following errors in SSSD debug logs :

[sssd[be[ipa.example.com]]] [get_group_dn_list] (0x0040): find_domain_by_object_name failed.
[sssd[be[ipa.example.com]]] [ipa_s2n_get_user_done] (0x0040): get_group_dn_list failed.
[sssd[be[ipa.example.com]]] [sdap_id_op_done] (0x4000): releasing operation connection
[sssd[be[ipa.example.com]]] [ipa_subdomain_account_done] (0x0040): ipa_get_*_acct request failed: [12]: Cannot allocate memory.
[sssd[be[ipa.example.com]]] [sdap_id_op_destroy] (0x4000): releasing operation connection
[sssd[be[ipa.example.com]]] [acctinfo_callback] (0x0100): Request processed. Returned 3,12,Out of memory


-----snip ----
var/log/sssd/sssd_nss.log
[sssd[nss]] [sss_dp_get_reply] (0x1000): Got reply from Data Provider - DP error code: 3 errno: 12 error message: Out of memory

Environment

  • Red Hat Enterprise Linux 7.5

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.

Current Customers and Partners

Log in for full access

Log In
Close

Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.