SSSD is showing "sss_pac_make_request failed" error.

Solution Verified - Updated -

Issue

  • Random error message related to pac responder
  • Users are able to login without any issue however /var/log/sssd/krb5_child.log has below mentioned error messages when Active Directory user tries to login.
(Thu Sep 20 14:51:39 2018) [[sssd[krb5_child[91116]]]] [sss_child_krb5_trace_cb] (0x4000): [91116] 1537447899.75584: Retrieving host/server.example.com@EXAMPLE.COM from MEMORY:/etc/krb5.keytab (vno 2, enctype aes256-cts) with result: 0/Success

(Thu Sep 20 14:51:39 2018) [[sssd[krb5_child[91116]]]] [sss_send_pac] (0x0040): sss_pac_make_request failed [-1][2]. 
(Thu Sep 20 14:51:39 2018) [[sssd[krb5_child[91116]]]] [validate_tgt] (0x0040): sss_send_pac failed, group membership for user with principal [tuser\@EXAMPLE.COM@EXAMPLE.COM] might not be correct.

Environment

  • Red Hat Enterprise Linux 7

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content