SSSD is showing "sss_pac_make_request failed" error.

Solution Verified - Updated -

Issue

  • Random error message related to pac responder
  • Users are able to login without any issue however /var/log/sssd/krb5_child.log has below mentioned error messages when Active Directory user tries to login.
(Thu Sep 20 14:51:39 2018) [[sssd[krb5_child[91116]]]] [sss_child_krb5_trace_cb] (0x4000): [91116] 1537447899.75584: Retrieving host/server.example.com@EXAMPLE.COM from MEMORY:/etc/krb5.keytab (vno 2, enctype aes256-cts) with result: 0/Success

(Thu Sep 20 14:51:39 2018) [[sssd[krb5_child[91116]]]] [sss_send_pac] (0x0040): sss_pac_make_request failed [-1][2]. 
(Thu Sep 20 14:51:39 2018) [[sssd[krb5_child[91116]]]] [validate_tgt] (0x0040): sss_send_pac failed, group membership for user with principal [tuser\@EXAMPLE.COM@EXAMPLE.COM] might not be correct.

Environment

  • Red Hat Enterprise Linux 7

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.

Current Customers and Partners

Log in for full access

Log In