[Freeipa-users] Re: ipa: ERROR: Failed to authenticate to CA REST API

[Florence Blanc-Renaud via FreeIPA-users]

Hi,

thanks for the logs. Definitely nothing reported here related to the login
attempt.
I would try to increase PKI's log level by editing
/var/lib/pki/pki-tomcat/conf/logging.properties (use FINE everywhere,
restart pki-tomcatd, run the ipa cert-show 1 command, revert to previous
log level), hoping to get more information. Otherwise reach out to PKI
community through us...@lists.dogtagpki.org
<https://lists.dogtagpki.org/archives/list/us...@lists.dogtagpki.org/>,
they may have more ideas.
flo

On Tue, Dec 20, 2022 at 9:40 AM junhou he via FreeIPA-users <
freeipa-users@lists.fedorahosted.org> wrote:

> Hi ,
> [20/Dec/2022:08:49:29.637099418 +0800] conn=2892 op=9 UNBIND
> [20/Dec/2022:08:49:29.637145006 +0800] conn=2892 op=9 fd=124 closed error
> - U1
> [20/Dec/2022:08:49:32.043506909 +0800] conn=27 op=3410 SRCH
> base="ou=sessions,ou=Security Domain,o=ipaca" scope=2
> filter="(objectClass=securityDomainSessionEntry)" attrs="cn"
> [20/Dec/2022:08:49:32.043782127 +0800] conn=27 op=3410 RESULT err=32
> tag=101 nentries=0 wtime=0.000153439 optime=0.000279769 etime=0.000430437
> [20/Dec/2022:08:49:38.148322772 +0800] conn=28 op=6817 SRCH
> base="ou=authorizations,ou=acme,o=ipaca" scope=2
> filter="(acmeExpires<=20221220004938+0000)" attrs="1.1"
> [20/Dec/2022:08:49:38.148586175 +0800] conn=28 op=6817 RESULT err=0
> tag=101 nentries=0 wtime=0.000138301 optime=0.000273350 etime=0.000408659
> [20/Dec/2022:08:49:38.148943213 +0800] conn=28 op=6818 SRCH
> base="ou=orders,ou=acme,o=ipaca" scope=2
> filter="(acmeExpires<=20221220004938+0000)" attrs="1.1"
> [20/Dec/2022:08:49:38.149071009 +0800] conn=28 op=6818 RESULT err=0
> tag=101 nentries=0 wtime=0.000206338 optime=0.000129557 etime=0.000333928
> [20/Dec/2022:08:49:38.149274125 +0800] conn=28 op=6819 SRCH
> base="ou=certificates,ou=acme,o=ipaca" scope=2
> filter="(acmeExpires<=20221220004938+0000)" attrs="1.1"
> [20/Dec/2022:08:49:38.149379198 +0800] conn=28 op=6819 RESULT err=0
> tag=101 nentries=0 wtime=0.000130714 optime=0.000106250 etime=0.000235350
> [20/Dec/2022:08:52:01.986729492 +0800] conn=2888 op=8 UNBIND
> [20/Dec/2022:08:52:01.986771904 +0800] conn=2888 op=8 fd=73 closed error -
> U1
> [20/Dec/2022:08:52:07.702869314 +0800] conn=4 op=13990 SRCH
> base="dc=wingon,dc=hk" scope=2
> filter="(&(|(objectClass=krbprincipalaux)(objectClass=krbprincipal)(objectClass=ipakrbprincipal))(|(ipaKrbPrincipalAlias=
> ad...@wingon.hk)(krbPrincipalName:caseIgnoreIA5Match:=ad...@wingon.hk)))"
> attrs="krbPrincipalName krbCanonicalName krbUPEnabled krbPrincipalKey
> krbTicketPolicyReference krbPrincipalExpiration krbPasswordExpiration
> krbPwdPolicyReference krbPrincipalType krbPwdHistory krbLastPwdChange
> krbPrincipalAliases krbLastSuccessfulAuth krbLastFailedAuth
> krbLoginFailedCount krbPrincipalAuthInd krbExtraData krbLastAdminUnlock
> krbObjectReferences krbTicketFlags krbMaxTicketLife krbMaxRenewableAge uid
> nsAccountLock passwordHistory ipaKrbAuthzData ipaUserAuthType
> ipatokenRadiusConfigLink krbAuthIndMaxT..."
> [20/Dec/2022:08:52:07.703402545 +0800] conn=4 op=13990 RESULT err=0
> tag=101 nentries=1 wtime=0.000193320 optime=0.000543635 etime=0.000734611
> [20/Dec/2022:08:52:07.703507147 +0800] conn=4 op=13991 SRCH
> base="cn=ipaConfig,cn=etc,dc=wingon,dc=hk" scope=0 filter="(objectClass=*)"
> attrs="ipaConfigString ipaKrbAuthzData ipaUserAuthType"
> [20/Dec/2022:08:52:07.703570031 +0800] conn=4 op=13991 RESULT err=0
> tag=101 nentries=1 wtime=0.000021034 optime=0.000063839 etime=0.000083694
> [20/Dec/2022:08:52:07.703713585 +0800] conn=4 op=13992 SRCH base="cn=
> WINGON.HK,cn=kerberos,dc=wingon,dc=hk" scope=0
> filter="(objectClass=krbticketpolicyaux)" attrs="krbMaxTicketLife
> krbMaxRenewableAge krbTicketFlags krbAuthIndMaxTicketLife
> krbAuthIndMaxRenewableAge"
> [20/Dec/2022:08:52:07.703808511 +0800] conn=4 op=13992 RESULT err=0
> tag=101 nentries=1 wtime=0.000023489 optime=0.000095938 etime=0.000118208
> [20/Dec/2022:08:52:07.703932548 +0800] conn=4 op=13993 SRCH
> base="dc=wingon,dc=hk" scope=2
> filter="(&(|(objectClass=krbprincipalaux)(objectClass=krbprincipal)(objectClass=ipakrbprincipal))(|(ipaKrbPrincipalAlias=krbtgt/
> wingon...@wingon.hk)(krbPrincipalName:caseIgnoreIA5Match:=krbtgt/
> wingon...@wingon.hk)))" attrs="krbPrincipalName krbCanonicalName
> krbUPEnabled krbPrincipalKey krbTicketPolicyReference
> krbPrincipalExpiration krbPasswordExpiration krbPwdPolicyReference
> krbPrincipalType krbPwdHistory krbLastPwdChange krbPrincipalAliases
> krbLastSuccessfulAuth krbLastFailedAuth krbLoginFailedCount
> krbPrincipalAuthInd krbExtraData krbLastAdminUnlock krbObjectReferences
> krbTicketFlags krbMaxTicketLife krbMaxRenewableAge uid nsAccountLock
> passwordHistory ipaKrbAuthzData ipaUserAuthType ipatokenRadiusConfigLink
> krbAuthIndMaxT..."
> [20/Dec/2022:08:52:07.704164824 +0800] conn=4 op=13993 RESULT err=0
> tag=101 nentries=1 wtime=0.000055700 optime=0.000233831 etime=0.000288007
> [20/Dec/2022:08:52:07.704454880 +0800] conn=4 op=13994 SRCH
> base="cn=global_policy,cn=WINGON.HK,cn=kerberos,dc=wingon,dc=hk" scope=0
> filter="(objectClass=*)" attrs="krbMaxPwdLife krbMinPwdLife
> krbPwdMinDiffChars krbPwdMinLength krbPwdHistoryLength krbPwdMaxFailure
> krbPwdFailureCountInterval krbPwdLockoutDuration ipaPwdMaxRepeat
> ipaPwdMaxSequence ipaPwdDictCheck ipaPwdUserCheck"
> [20/Dec/2022:08:52:07.704543319 +0800] conn=4 op=13994 RESULT err=0
> tag=101 nentries=1 wtime=0.000041266 optime=0.000090343 etime=0.000130370
> [20/Dec/2022:08:52:09.990863586 +0800] conn=2893 fd=73 slot=73 connection
> from 10.99.16.212 to 10.100.0.213
> [20/Dec/2022:08:52:09.991284876 +0800] conn=2893 op=0 SRCH base="" scope=0
> filter="(objectClass=*)" attrs="* altServer namingContexts supportedControl
> supportedExtension supportedFeatures supportedLDAPVersion
> supportedSASLMechanisms domaincontrollerfunctionality defaultnamingcontext
> lastusn highestcommittedusn aci"
> [20/Dec/2022:08:52:09.992883383 +0800] conn=2893 op=0 RESULT err=0 tag=101
> nentries=1 wtime=0.000306908 optime=0.001598916 etime=0.001904660
> [20/Dec/2022:08:52:10.020345323 +0800] conn=5 op=14421 SRCH
> base="dc=wingon,dc=hk" scope=2
> filter="(&(|(objectClass=krbprincipalaux)(objectClass=krbprincipal)(objectClass=ipakrbprincipal))(|(ipaKrbPrincipalAlias=host/
> wocfreeipa-rep.wingon...@wingon.hk
> )(krbPrincipalName:caseIgnoreIA5Match:=host/
> wocfreeipa-rep.wingon...@wingon.hk)))" attrs="krbPrincipalName
> krbCanonicalName krbUPEnabled krbPrincipalKey krbTicketPolicyReference
> krbPrincipalExpiration krbPasswordExpiration krbPwdPolicyReference
> krbPrincipalType krbPwdHistory krbLastPwdChange krbPrincipalAliases
> krbLastSuccessfulAuth krbLastFailedAuth krbLoginFailedCount
> krbPrincipalAuthInd krbExtraData krbLastAdminUnlock krbObjectReferences
> krbTicketFlags krbMaxTicketLife krbMaxRenewableAge uid nsAccountLock
> passwordHistory ipaKrbAuthzData ipaUserAuthType ipatokenRadiusConfigLink
> krbAuthIndMaxT..."
> [20/Dec/2022:08:52:10.020685934 +0800] conn=5 op=14421 RESULT err=0
> tag=101 nentries=1 wtime=0.000148639 optime=0.000343867 etime=0.000490293
> [20/Dec/2022:08:52:10.020796954 +0800] conn=5 op=14422 SRCH
> base="cn=ipaConfig,cn=etc,dc=wingon,dc=hk" scope=0 filter="(objectClass=*)"
> attrs="ipaConfigString ipaKrbAuthzData ipaUserAuthType"
> [20/Dec/2022:08:52:10.020859631 +0800] conn=5 op=14422 RESULT err=0
> tag=101 nentries=1 wtime=0.000024022 optime=0.000063922 etime=0.000086660
> [20/Dec/2022:08:52:10.021013120 +0800] conn=5 op=14423 SRCH base="cn=
> WINGON.HK,cn=kerberos,dc=wingon,dc=hk" scope=0
> filter="(objectClass=krbticketpolicyaux)" attrs="krbMaxTicketLife
> krbMaxRenewableAge krbTicketFlags krbAuthIndMaxTicketLife
> krbAuthIndMaxRenewableAge"
> [20/Dec/2022:08:52:10.021076265 +0800] conn=5 op=14423 RESULT err=0
> tag=101 nentries=1 wtime=0.000021565 optime=0.000064169 etime=0.000084552
> [20/Dec/2022:08:52:10.021190460 +0800] conn=5 op=14424 SRCH
> base="dc=wingon,dc=hk" scope=2
> filter="(&(|(objectClass=krbprincipalaux)(objectClass=krbprincipal)(objectClass=ipakrbprincipal))(|(ipaKrbPrincipalAlias=krbtgt/
> wingon...@wingon.hk)(krbPrincipalName:caseIgnoreIA5Match:=krbtgt/
> wingon...@wingon.hk)))" attrs="krbPrincipalName krbCanonicalName
> krbUPEnabled krbPrincipalKey krbTicketPolicyReference
> krbPrincipalExpiration krbPasswordExpiration krbPwdPolicyReference
> krbPrincipalType krbPwdHistory krbLastPwdChange krbPrincipalAliases
> krbLastSuccessfulAuth krbLastFailedAuth krbLoginFailedCount
> krbPrincipalAuthInd krbExtraData krbLastAdminUnlock krbObjectReferences
> krbTicketFlags krbMaxTicketLife krbMaxRenewableAge uid nsAccountLock
> passwordHistory ipaKrbAuthzData ipaUserAuthType ipatokenRadiusConfigLink
> krbAuthIndMaxT..."
> [20/Dec/2022:08:52:10.021431298 +0800] conn=5 op=14424 RESULT err=0
> tag=101 nentries=1 wtime=0.000054189 optime=0.000242208 etime=0.000294767
> [20/Dec/2022:08:52:10.021663559 +0800] conn=5 op=14425 SRCH
> base="cn=Default Host Password
> Policy,cn=computers,cn=accounts,dc=wingon,dc=hk" scope=0
> filter="(objectClass=*)" attrs="krbMaxPwdLife krbMinPwdLife
> krbPwdMinDiffChars krbPwdMinLength krbPwdHistoryLength krbPwdMaxFailure
> krbPwdFailureCountInterval krbPwdLockoutDuration ipaPwdMaxRepeat
> ipaPwdMaxSequence ipaPwdDictCheck ipaPwdUserCheck"
> [20/Dec/2022:08:52:10.021749877 +0800] conn=5 op=14425 RESULT err=0
> tag=101 nentries=1 wtime=0.000032347 optime=0.000088078 etime=0.000119139
> [20/Dec/2022:08:52:10.033772246 +0800] conn=5 op=14426 SRCH
> base="dc=wingon,dc=hk" scope=2
> filter="(&(|(objectClass=krbprincipalaux)(objectClass=krbprincipal)(objectClass=ipakrbprincipal))(|(ipaKrbPrincipalAlias=host/
> wocfreeipa-rep.wingon...@wingon.hk
> )(krbPrincipalName:caseIgnoreIA5Match:=host/
> wocfreeipa-rep.wingon...@wingon.hk)))" attrs="krbPrincipalName
> krbCanonicalName krbUPEnabled krbPrincipalKey krbTicketPolicyReference
> krbPrincipalExpiration krbPasswordExpiration krbPwdPolicyReference
> krbPrincipalType krbPwdHistory krbLastPwdChange krbPrincipalAliases
> krbLastSuccessfulAuth krbLastFailedAuth krbLoginFailedCount
> krbPrincipalAuthInd krbExtraData krbLastAdminUnlock krbObjectReferences
> krbTicketFlags krbMaxTicketLife krbMaxRenewableAge uid nsAccountLock
> passwordHistory ipaKrbAuthzData ipaUserAuthType ipatokenRadiusConfigLink
> krbAuthIndMaxT..."
> [20/Dec/2022:08:52:10.034022601 +0800] conn=5 op=14426 RESULT err=0
> tag=101 nentries=1 wtime=0.011565691 optime=0.000252782 etime=0.011816585
> [20/Dec/2022:08:52:10.034170111 +0800] conn=5 op=14427 SRCH base="cn=
> WINGON.HK,cn=kerberos,dc=wingon,dc=hk" scope=0
> filter="(objectClass=krbticketpolicyaux)" attrs="krbMaxTicketLife
> krbMaxRenewableAge krbTicketFlags krbAuthIndMaxTicketLife
> krbAuthIndMaxRenewableAge"
> [20/Dec/2022:08:52:10.034236031 +0800] conn=5 op=14427 RESULT err=0
> tag=101 nentries=1 wtime=0.000022773 optime=0.000067234 etime=0.000088827
> [20/Dec/2022:08:52:10.034349405 +0800] conn=5 op=14428 SRCH
> base="dc=wingon,dc=hk" scope=2
> filter="(&(|(objectClass=krbprincipalaux)(objectClass=krbprincipal)(objectClass=ipakrbprincipal))(|(ipaKrbPrincipalAlias=krbtgt/
> wingon...@wingon.hk)(krbPrincipalName:caseIgnoreIA5Match:=krbtgt/
> wingon...@wingon.hk)))" attrs="krbPrincipalName krbCanonicalName
> krbUPEnabled krbPrincipalKey krbTicketPolicyReference
> krbPrincipalExpiration krbPasswordExpiration krbPwdPolicyReference
> krbPrincipalType krbPwdHistory krbLastPwdChange krbPrincipalAliases
> krbLastSuccessfulAuth krbLastFailedAuth krbLoginFailedCount
> krbPrincipalAuthInd krbExtraData krbLastAdminUnlock krbObjectReferences
> krbTicketFlags krbMaxTicketLife krbMaxRenewableAge uid nsAccountLock
> passwordHistory ipaKrbAuthzData ipaUserAuthType ipatokenRadiusConfigLink
> krbAuthIndMaxT..."
> [20/Dec/2022:08:52:10.034560533 +0800] conn=5 op=14428 RESULT err=0
> tag=101 nentries=1 wtime=0.000062169 optime=0.000212339 etime=0.000273015
> [20/Dec/2022:08:52:10.034725055 +0800] conn=5 op=14429 SRCH
> base="cn=Default Host Password
> Policy,cn=computers,cn=accounts,dc=wingon,dc=hk" scope=0
> filter="(objectClass=*)" attrs="krbMaxPwdLife krbMinPwdLife
> krbPwdMinDiffChars krbPwdMinLength krbPwdHistoryLength krbPwdMaxFailure
> krbPwdFailureCountInterval krbPwdLockoutDuration ipaPwdMaxRepeat
> ipaPwdMaxSequence ipaPwdDictCheck ipaPwdUserCheck"
> [20/Dec/2022:08:52:10.034805632 +0800] conn=5 op=14429 RESULT err=0
> tag=101 nentries=1 wtime=0.000027824 optime=0.000081903 etime=0.000108561
> [20/Dec/2022:08:52:10.035180909 +0800] conn=5 op=14430 SRCH
> base="cn=ad,cn=trusts,dc=wingon,dc=hk" scope=2
> filter="(objectClass=ipaNTTrustedDomain)" attrs=ALL
> [20/Dec/2022:08:52:10.035239166 +0800] conn=5 op=14430 RESULT err=0
> tag=101 nentries=0 wtime=0.000016420 optime=0.000058741 etime=0.000073879
> [20/Dec/2022:08:52:10.035287403 +0800] conn=5 op=14431 SRCH
> base="dc=wingon,dc=hk" scope=2 filter="(objectClass=ipaNTDomainAttrs)"
> attrs="ipaNTFlatName ipaNTFallbackPrimaryGroup ipaNTSecurityIdentifier"
> [20/Dec/2022:08:52:10.035383748 +0800] conn=5 op=14431 RESULT err=0
> tag=101 nentries=1 wtime=0.000017953 optime=0.000096850 etime=0.000113571
> [20/Dec/2022:08:52:10.035441566 +0800] conn=5 op=14432 SRCH
> base="cn=Default SMB Group,cn=groups,cn=accounts,dc=wingon,dc=hk" scope=0
> filter="(objectClass=posixGroup)" attrs="ipaNTSecurityIdentifier"
> [20/Dec/2022:08:52:10.035491471 +0800] conn=5 op=14432 RESULT err=0
> tag=101 nentries=1 wtime=0.000015040 optime=0.000050416 etime=0.000064443
> [20/Dec/2022:08:52:10.035545178 +0800] conn=5 op=14433 SRCH
> base="cn=ad,cn=trusts,dc=wingon,dc=hk" scope=2
> filter="(objectClass=ipaNTTrustedDomain)" attrs="cn ipaNTTrustPartner
> ipaNTFlatName ipaNTTrustedDomainSID ipaNTSIDBlacklistIncoming
> ipaNTSIDBlacklistOutgoing ipaNTAdditionalSuffixes"
> [20/Dec/2022:08:52:10.035587789 +0800] conn=5 op=14433 RESULT err=0
> tag=101 nentries=0 wtime=0.000017675 optime=0.000043192 etime=0.000059863
> [20/Dec/2022:08:52:10.035672369 +0800] conn=5 op=14434 SRCH base="fqdn=
> wocfreeipa-rep.wingon.hk,cn=computers,cn=accounts,dc=wingon,dc=hk"
> scope=0 filter="(objectClass=*)" attrs="objectClass uid cn fqdn gidNumber
> krbPrincipalName krbCanonicalName krbTicketPolicyReference
> krbPrincipalExpiration krbPasswordExpiration krbPwdPolicyReference
> krbPrincipalType krbLastPwdChange krbPrincipalAliases krbLastSuccessfulAuth
> krbLastFailedAuth krbLoginFailedCount krbLastAdminUnlock krbTicketFlags
> ipaNTSecurityIdentifier ipaNTLogonScript ipaNTProfilePath
> ipaNTHomeDirectory ipaNTHomeDirectoryDrive"
> [20/Dec/2022:08:52:10.036234906 +0800] conn=5 op=14434 RESULT err=0
> tag=101 nentries=1 wtime=0.000033128 optime=0.000563748 etime=0.000595431
> [20/Dec/2022:08:52:10.036351846 +0800] conn=5 op=14435 SRCH base="cn=
> wocfreeipa-rep.wingon.hk,cn=masters,cn=ipa,cn=etc,dc=wingon,dc=hk"
> scope=0 filter="(objectClass=*)" attrs=ALL
> [20/Dec/2022:08:52:10.036415781 +0800] conn=5 op=14435 RESULT err=0
> tag=101 nentries=1 wtime=0.000017116 optime=0.000064859 etime=0.000080843
> [20/Dec/2022:08:52:10.054500251 +0800] conn=5 op=14436 SRCH
> base="dc=wingon,dc=hk" scope=2
> filter="(&(|(objectClass=krbprincipalaux)(objectClass=krbprincipal)(objectClass=ipakrbprincipal))(|(ipaKrbPrincipalAlias=krbtgt/
> wingon...@wingon.hk)(krbPrincipalName:caseIgnoreIA5Match:=krbtgt/
> wingon...@wingon.hk)))" attrs="krbPrincipalName krbCanonicalName
> krbUPEnabled krbPrincipalKey krbTicketPolicyReference
> krbPrincipalExpiration krbPasswordExpiration krbPwdPolicyReference
> krbPrincipalType krbPwdHistory krbLastPwdChange krbPrincipalAliases
> krbLastSuccessfulAuth krbLastFailedAuth krbLoginFailedCount
> krbPrincipalAuthInd krbExtraData krbLastAdminUnlock krbObjectReferences
> krbTicketFlags krbMaxTicketLife krbMaxRenewableAge uid nsAccountLock
> passwordHistory ipaKrbAuthzData ipaUserAuthType ipatokenRadiusConfigLink
> krbAuthIndMaxT..."
> [20/Dec/2022:08:52:10.054733532 +0800] conn=5 op=14436 RESULT err=0
> tag=101 nentries=1 wtime=0.017673549 optime=0.000235438 etime=0.017907231
> [20/Dec/2022:08:52:10.055075637 +0800] conn=5 op=14437 SRCH
> base="dc=wingon,dc=hk" scope=2
> filter="(&(|(objectClass=krbprincipalaux)(objectClass=krbprincipal)(objectClass=ipakrbprincipal))(|(ipaKrbPrincipalAlias=ldap/
> wocfreeipa.wingon...@wingon.hk)(krbPrincipalName:caseIgnoreIA5Match:=ldap/
> wocfreeipa.wingon...@wingon.hk)))" attrs="krbPrincipalName
> krbCanonicalName krbUPEnabled krbPrincipalKey krbTicketPolicyReference
> krbPrincipalExpiration krbPasswordExpiration krbPwdPolicyReference
> krbPrincipalType krbPwdHistory krbLastPwdChange krbPrincipalAliases
> krbLastSuccessfulAuth krbLastFailedAuth krbLoginFailedCount
> krbPrincipalAuthInd krbExtraData krbLastAdminUnlock krbObjectReferences
> krbTicketFlags krbMaxTicketLife krbMaxRenewableAge uid nsAccountLock
> passwordHistory ipaKrbAuthzData ipaUserAuthType ipatokenRadiusConfigLink
> krbAuthIndMaxT..."
> [20/Dec/2022:08:52:10.055292342 +0800] conn=5 op=14437 RESULT err=0
> tag=101 nentries=1 wtime=0.000052636 optime=0.000218403 etime=0.000269568
> [20/Dec/2022:08:52:10.055431453 +0800] conn=5 op=14438 SRCH base="cn=
> WINGON.HK,cn=kerberos,dc=wingon,dc=hk" scope=0
> filter="(objectClass=krbticketpolicyaux)" attrs="krbMaxTicketLife
> krbMaxRenewableAge krbTicketFlags krbAuthIndMaxTicketLife
> krbAuthIndMaxRenewableAge"
> [20/Dec/2022:08:52:10.055491849 +0800] conn=5 op=14438 RESULT err=0
> tag=101 nentries=1 wtime=0.000020352 optime=0.000061341 etime=0.000080566
> [20/Dec/2022:08:52:10.055663216 +0800] conn=5 op=14439 SRCH
> base="dc=wingon,dc=hk" scope=2
> filter="(&(|(objectClass=krbprincipalaux)(objectClass=krbprincipal)(objectClass=ipakrbprincipal))(|(ipaKrbPrincipalAlias=host/
> wocfreeipa-rep.wingon...@wingon.hk
> )(krbPrincipalName:caseIgnoreIA5Match:=host/
> wocfreeipa-rep.wingon...@wingon.hk)))" attrs="krbPrincipalName
> krbCanonicalName krbUPEnabled krbPrincipalKey krbTicketPolicyReference
> krbPrincipalExpiration krbPasswordExpiration krbPwdPolicyReference
> krbPrincipalType krbPwdHistory krbLastPwdChange krbPrincipalAliases
> krbLastSuccessfulAuth krbLastFailedAuth krbLoginFailedCount
> krbPrincipalAuthInd krbExtraData krbLastAdminUnlock krbObjectReferences
> krbTicketFlags krbMaxTicketLife krbMaxRenewableAge uid nsAccountLock
> passwordHistory ipaKrbAuthzData ipaUserAuthType ipatokenRadiusConfigLink
> krbAuthIndMaxT..."
> [20/Dec/2022:08:52:10.055880149 +0800] conn=5 op=14439 RESULT err=0
> tag=101 nentries=1 wtime=0.000048562 optime=0.000218419 etime=0.000265458
> [20/Dec/2022:08:52:10.056004896 +0800] conn=5 op=14440 SRCH base="cn=
> WINGON.HK,cn=kerberos,dc=wingon,dc=hk" scope=0
> filter="(objectClass=krbticketpolicyaux)" attrs="krbMaxTicketLife
> krbMaxRenewableAge krbTicketFlags krbAuthIndMaxTicketLife
> krbAuthIndMaxRenewableAge"
> [20/Dec/2022:08:52:10.056062326 +0800] conn=5 op=14440 RESULT err=0
> tag=101 nentries=1 wtime=0.000018653 optime=0.000058227 etime=0.000075792
> [20/Dec/2022:08:52:10.056230702 +0800] conn=5 op=14441 SRCH
> base="dc=wingon,dc=hk" scope=2
> filter="(&(|(objectClass=krbprincipalaux)(objectClass=krbprincipal)(objectClass=ipakrbprincipal))(|(ipaKrbPrincipalAlias=host/
> wocfreeipa-rep.wingon...@wingon.hk
> )(krbPrincipalName:caseIgnoreIA5Match:=host/
> wocfreeipa-rep.wingon...@wingon.hk)))" attrs="krbPrincipalName
> krbCanonicalName krbUPEnabled krbPrincipalKey krbTicketPolicyReference
> krbPrincipalExpiration krbPasswordExpiration krbPwdPolicyReference
> krbPrincipalType krbPwdHistory krbLastPwdChange krbPrincipalAliases
> krbLastSuccessfulAuth krbLastFailedAuth krbLoginFailedCount
> krbPrincipalAuthInd krbExtraData krbLastAdminUnlock krbObjectReferences
> krbTicketFlags krbMaxTicketLife krbMaxRenewableAge uid nsAccountLock
> passwordHistory ipaKrbAuthzData ipaUserAuthType ipatokenRadiusConfigLink
> krbAuthIndMaxT..."
> [20/Dec/2022:08:52:10.056463992 +0800] conn=5 op=14441 RESULT err=0
> tag=101 nentries=1 wtime=0.000052619 optime=0.000234983 etime=0.000285946
> [20/Dec/2022:08:52:10.056592816 +0800] conn=5 op=14442 SRCH base="cn=
> WINGON.HK,cn=kerberos,dc=wingon,dc=hk" scope=0
> filter="(objectClass=krbticketpolicyaux)" attrs="krbMaxTicketLife
> krbMaxRenewableAge krbTicketFlags krbAuthIndMaxTicketLife
> krbAuthIndMaxRenewableAge"
> [20/Dec/2022:08:52:10.056651155 +0800] conn=5 op=14442 RESULT err=0
> tag=101 nentries=1 wtime=0.000019182 optime=0.000059079 etime=0.000077173
> [20/Dec/2022:08:52:10.058554640 +0800] conn=2893 op=1 BIND dn=""
> method=sasl version=3 mech=GSSAPI
> [20/Dec/2022:08:52:10.061134122 +0800] conn=2893 op=1 RESULT err=14 tag=97
> nentries=0 wtime=0.000059172 optime=0.002585693 etime=0.002643652, SASL
> bind in progress
> [20/Dec/2022:08:52:10.062668409 +0800] conn=2893 op=2 BIND dn=""
> method=sasl version=3 mech=GSSAPI
> [20/Dec/2022:08:52:10.064085004 +0800] conn=2893 op=2 RESULT err=14 tag=97
> nentries=0 wtime=0.000050077 optime=0.001419041 etime=0.001467480, SASL
> bind in progress
> [20/Dec/2022:08:52:10.065014341 +0800] conn=2893 op=3 BIND dn=""
> method=sasl version=3 mech=GSSAPI
> [20/Dec/2022:08:52:10.065666815 +0800] conn=2893 op=3 RESULT err=0 tag=97
> nentries=0 wtime=0.000041031 optime=0.000660380 etime=0.000700410 dn="fqdn=
> wocfreeipa-rep.wingon.hk,cn=computers,cn=accounts,dc=wingon,dc=hk"
> [20/Dec/2022:08:52:10.067604557 +0800] conn=2893 op=4 SRCH
> base="cn=accounts,dc=wingon,dc=hk" scope=2
> filter="(&(objectClass=ipaHost)(fqdn=wocfreeipa-rep.wingon.hk))"
> attrs="objectClass cn fqdn serverHostName memberOf ipaSshPubKey ipaUniqueID"
> [20/Dec/2022:08:52:10.068161053 +0800] conn=2893 op=4 RESULT err=0 tag=101
> nentries=1 wtime=0.000095350 optime=0.000556958 etime=0.000650469 notes=P
> details="Paged Search" pr_idx=0 pr_cookie=-1
> [20/Dec/2022:08:52:10.071342521 +0800] conn=2893 op=5 SRCH base="fqdn=
> wocfreeipa-rep.wingon.hk,cn=computers,cn=accounts,dc=wingon,dc=hk"
> scope=0 filter="(objectClass=*)" attrs="objectClass cn memberOf ipaUniqueID"
> [20/Dec/2022:08:52:10.073536868 +0800] conn=2893 op=5 RESULT err=0 tag=101
> nentries=1 wtime=0.000104954 optime=0.002194820 etime=0.002297765 notes=P
> details="Paged Search" pr_idx=0 pr_cookie=-1
> [20/Dec/2022:08:52:10.074690660 +0800] conn=2893 op=6 SRCH
> base="cn=sudo,dc=wingon,dc=hk" scope=2
> filter="(&(objectClass=ipasudocmdgrp)(entryusn>=48491))" attrs="objectClass
> ipaUniqueID cn member entryusn"
> [20/Dec/2022:08:52:10.074851580 +0800] conn=2893 op=6 RESULT err=0 tag=101
> nentries=0 wtime=0.000076126 optime=0.000161713 etime=0.000235912 notes=P
> details="Paged Search" pr_idx=0 pr_cookie=-1
> [20/Dec/2022:08:52:10.075980709 +0800] conn=2893 op=7 SRCH
> base="cn=sudo,dc=wingon,dc=hk" scope=2
> filter="(&(objectClass=ipasudorule)(ipaEnabledFlag=TRUE)(|(&(!(memberHost=*))(cn=defaults))(hostCategory=ALL)(memberHost=fqdn=
> wocfreeipa-rep.wingon.hk,cn=computers,cn=accounts,dc=wingon,dc=hk)(memberHost=cn=ipaservers,cn=hostgroups,cn=accounts,dc=wingon,dc=hk))(entryusn>=48491))"
> attrs="objectClass cn ipaUniqueID ipaEnabledFlag ipaSudoOpt ipaSudoRunAs
> ipaSudoRunAsGroup memberAllowCmd memberDenyCmd memberHost memberUser
> sudoNotAfter sudoNotBefore sudoOrder cmdCategory hostCategory userCategory
> ipaSudoRunAsUserCategory ipaSudoRunAsGroupCategory ipaSudoRunAsExtUser
> ipaSudoRunAsExtGroup ipaSudoRunAsExtUserGroup externalUser entryusn"
> [20/Dec/2022:08:52:10.076123960 +0800] conn=2893 op=7 RESULT err=0 tag=101
> nentries=0 wtime=0.000130861 optime=0.000144629 etime=0.000273690 notes=P
> details="Paged Search" pr_idx=0 pr_cookie=-1
> [20/Dec/2022:08:52:32.207041120 +0800] conn=4 op=13996 SRCH
> base="dc=wingon,dc=hk" scope=2
> filter="(&(|(objectClass=krbprincipalaux)(objectClass=krbprincipal)(objectClass=ipakrbprincipal))(|(ipaKrbPrincipalAlias=
> ad...@wingon.hk)(krbPrincipalName:caseIgnoreIA5Match:=ad...@wingon.hk)))"
> attrs="krbPrincipalName krbCanonicalName krbUPEnabled krbPrincipalKey
> krbTicketPolicyReference krbPrincipalExpiration krbPasswordExpiration
> krbPwdPolicyReference krbPrincipalType krbPwdHistory krbLastPwdChange
> krbPrincipalAliases krbLastSuccessfulAuth krbLastFailedAuth
> krbLoginFailedCount krbPrincipalAuthInd krbExtraData krbLastAdminUnlock
> krbObjectReferences krbTicketFlags krbMaxTicketLife krbMaxRenewableAge uid
> nsAccountLock passwordHistory ipaKrbAuthzData ipaUserAuthType
> ipatokenRadiusConfigLink krbAuthIndMaxT..."
> [20/Dec/2022:08:52:32.207436448 +0800] conn=4 op=13996 RESULT err=0
> tag=101 nentries=1 wtime=0.000184164 optime=0.000398522 etime=0.000580416
> [20/Dec/2022:08:52:32.207620899 +0800] conn=4 op=13997 SRCH base="cn=
> WINGON.HK,cn=kerberos,dc=wingon,dc=hk" scope=0
> filter="(objectClass=krbticketpolicyaux)" attrs="krbMaxTicketLife
> krbMaxRenewableAge krbTicketFlags krbAuthIndMaxTicketLife
> krbAuthIndMaxRenewableAge"
> [20/Dec/2022:08:52:32.207691911 +0800] conn=4 op=13997 RESULT err=0
> tag=101 nentries=1 wtime=0.000025598 optime=0.000071976 etime=0.000096282
> [20/Dec/2022:08:52:32.207801336 +0800] conn=4 op=13998 SRCH
> base="dc=wingon,dc=hk" scope=2
> filter="(&(|(objectClass=krbprincipalaux)(objectClass=krbprincipal)(objectClass=ipakrbprincipal))(|(ipaKrbPrincipalAlias=krbtgt/
> wingon...@wingon.hk)(krbPrincipalName:caseIgnoreIA5Match:=krbtgt/
> wingon...@wingon.hk)))" attrs="krbPrincipalName krbCanonicalName
> krbUPEnabled krbPrincipalKey krbTicketPolicyReference
> krbPrincipalExpiration krbPasswordExpiration krbPwdPolicyReference
> krbPrincipalType krbPwdHistory krbLastPwdChange krbPrincipalAliases
> krbLastSuccessfulAuth krbLastFailedAuth krbLoginFailedCount
> krbPrincipalAuthInd krbExtraData krbLastAdminUnlock krbObjectReferences
> krbTicketFlags krbMaxTicketLife krbMaxRenewableAge uid nsAccountLock
> passwordHistory ipaKrbAuthzData ipaUserAuthType ipatokenRadiusConfigLink
> krbAuthIndMaxT..."
> [20/Dec/2022:08:52:32.208021391 +0800] conn=4 op=13998 RESULT err=0
> tag=101 nentries=1 wtime=0.000052053 optime=0.000221186 etime=0.000271763
> [20/Dec/2022:08:52:32.208202844 +0800] conn=4 op=13999 SRCH
> base="cn=global_policy,cn=WINGON.HK,cn=kerberos,dc=wingon,dc=hk" scope=0
> filter="(objectClass=*)" attrs="krbMaxPwdLife krbMinPwdLife
> krbPwdMinDiffChars krbPwdMinLength krbPwdHistoryLength krbPwdMaxFailure
> krbPwdFailureCountInterval krbPwdLockoutDuration ipaPwdMaxRepeat
> ipaPwdMaxSequence ipaPwdDictCheck ipaPwdUserCheck"
> [20/Dec/2022:08:52:32.208281042 +0800] conn=4 op=13999 RESULT err=0
> tag=101 nentries=1 wtime=0.000025947 optime=0.000079289 etime=0.000104134
> [20/Dec/2022:08:52:32.208927398 +0800] conn=4 op=14000 MOD
> dn="uid=admin,cn=users,cn=accounts,dc=wingon,dc=hk"
> [20/Dec/2022:08:52:32.211568960 +0800] conn=4 op=14000 RESULT err=0
> tag=103 nentries=0 wtime=0.000025634 optime=0.002676202 etime=0.002699217
> csn=63a10750000000040000
> [20/Dec/2022:08:52:32.231157156 +0800] conn=2894 fd=124 slot=124
> connection from 10.99.16.212 to 10.100.0.213
> [20/Dec/2022:08:52:32.232013797 +0800] conn=2894 op=0 BIND dn=""
> method=sasl version=3 mech=GSSAPI
> [20/Dec/2022:08:52:32.234288495 +0800] conn=2894 op=0 RESULT err=14 tag=97
> nentries=0 wtime=0.000150079 optime=0.002278046 etime=0.002426942, SASL
> bind in progress
> [20/Dec/2022:08:52:32.235513263 +0800] conn=2894 op=1 BIND dn=""
> method=sasl version=3 mech=GSSAPI
> [20/Dec/2022:08:52:32.236845298 +0800] conn=2894 op=1 RESULT err=14 tag=97
> nentries=0 wtime=0.000037369 optime=0.001335839 etime=0.001371806, SASL
> bind in progress
> [20/Dec/2022:08:52:32.237928434 +0800] conn=2894 op=2 BIND dn=""
> method=sasl version=3 mech=GSSAPI
> [20/Dec/2022:08:52:32.238454184 +0800] conn=2894 op=2 RESULT err=0 tag=97
> nentries=0 wtime=0.000043487 optime=0.000527945 etime=0.000570516
> dn="krbprincipalname=ldap/wocfreeipa-rep.wingon...@wingon.hk
> ,cn=services,cn=accounts,dc=wingon,dc=hk"
> [20/Dec/2022:08:52:32.239497939 +0800] conn=2894 op=3 SRCH base="" scope=0
> filter="(objectClass=*)" attrs="supportedControl supportedExtension"
> [20/Dec/2022:08:52:32.240756122 +0800] conn=2894 op=3 RESULT err=0 tag=101
> nentries=1 wtime=0.000097432 optime=0.001259187 etime=0.001355087
> [20/Dec/2022:08:52:32.241878758 +0800] conn=2894 op=4 SRCH base="" scope=0
> filter="(objectClass=*)" attrs="supportedControl supportedExtension"
> [20/Dec/2022:08:52:32.243259798 +0800] conn=2894 op=4 RESULT err=0 tag=101
> nentries=1 wtime=0.000074483 optime=0.001382703 etime=0.001455708
> [20/Dec/2022:08:52:32.244444126 +0800] conn=2894 op=5 EXT
> oid="2.16.840.1.113730.3.5.12" name="replication-multimaster-extop"
> [20/Dec/2022:08:52:32.244844812 +0800] conn=2894 op=5 RESULT err=0 tag=120
> nentries=0 wtime=0.000064757 optime=0.000409643 etime=0.000473545
> [20/Dec/2022:08:52:32.249159483 +0800] conn=2894 op=6 EXT
> oid="2.16.840.1.113730.3.5.5" name="replication-multimaster-extop"
> [20/Dec/2022:08:52:32.250374739 +0800] conn=2894 op=6 RESULT err=0 tag=120
> nentries=0 wtime=0.000049054 optime=0.001218454 etime=0.001265266
> [20/Dec/2022:08:52:41.889724553 +0800] conn=5 op=14444 SRCH
> base="dc=wingon,dc=hk" scope=2
> filter="(&(|(objectClass=krbprincipalaux)(objectClass=krbprincipal)(objectClass=ipakrbprincipal))(|(ipaKrbPrincipalAlias=
> ad...@wingon.hk)(krbPrincipalName:caseIgnoreIA5Match:=ad...@wingon.hk)))"
> attrs="krbPrincipalName krbCanonicalName krbUPEnabled krbPrincipalKey
> krbTicketPolicyReference krbPrincipalExpiration krbPasswordExpiration
> krbPwdPolicyReference krbPrincipalType krbPwdHistory krbLastPwdChange
> krbPrincipalAliases krbLastSuccessfulAuth krbLastFailedAuth
> krbLoginFailedCount krbPrincipalAuthInd krbExtraData krbLastAdminUnlock
> krbObjectReferences krbTicketFlags krbMaxTicketLife krbMaxRenewableAge uid
> nsAccountLock passwordHistory ipaKrbAuthzData ipaUserAuthType
> ipatokenRadiusConfigLink krbAuthIndMaxT..."
> [20/Dec/2022:08:52:41.890119744 +0800] conn=5 op=14444 RESULT err=0
> tag=101 nentries=1 wtime=0.000160221 optime=0.000399400 etime=0.000557213
> [20/Dec/2022:08:52:41.890244009 +0800] conn=5 op=14445 SRCH base="cn=
> WINGON.HK,cn=kerberos,dc=wingon,dc=hk" scope=0
> filter="(objectClass=krbticketpolicyaux)" attrs="krbMaxTicketLife
> krbMaxRenewableAge krbTicketFlags krbAuthIndMaxTicketLife
> krbAuthIndMaxRenewableAge"
> [20/Dec/2022:08:52:41.890324635 +0800] conn=5 op=14445 RESULT err=0
> tag=101 nentries=1 wtime=0.000103005 optime=0.000081280 etime=0.000183062
> [20/Dec/2022:08:52:41.890417311 +0800] conn=5 op=14446 SRCH
> base="dc=wingon,dc=hk" scope=2
> filter="(&(|(objectClass=krbprincipalaux)(objectClass=krbprincipal)(objectClass=ipakrbprincipal))(|(ipaKrbPrincipalAlias=krbtgt/
> wingon...@wingon.hk)(krbPrincipalName:caseIgnoreIA5Match:=krbtgt/
> wingon...@wingon.hk)))" attrs="krbPrincipalName krbCanonicalName
> krbUPEnabled krbPrincipalKey krbTicketPolicyReference
> krbPrincipalExpiration krbPasswordExpiration krbPwdPolicyReference
> krbPrincipalType krbPwdHistory krbLastPwdChange krbPrincipalAliases
> krbLastSuccessfulAuth krbLastFailedAuth krbLoginFailedCount
> krbPrincipalAuthInd krbExtraData krbLastAdminUnlock krbObjectReferences
> krbTicketFlags krbMaxTicketLife krbMaxRenewableAge uid nsAccountLock
> passwordHistory ipaKrbAuthzData ipaUserAuthType ipatokenRadiusConfigLink
> krbAuthIndMaxT..."
> [20/Dec/2022:08:52:41.890647152 +0800] conn=5 op=14446 RESULT err=0
> tag=101 nentries=1 wtime=0.000081474 optime=0.000231296 etime=0.000311348
> [20/Dec/2022:08:52:41.890804201 +0800] conn=5 op=14447 SRCH
> base="cn=global_policy,cn=WINGON.HK,cn=kerberos,dc=wingon,dc=hk" scope=0
> filter="(objectClass=*)" attrs="krbMaxPwdLife krbMinPwdLife
> krbPwdMinDiffChars krbPwdMinLength krbPwdHistoryLength krbPwdMaxFailure
> krbPwdFailureCountInterval krbPwdLockoutDuration ipaPwdMaxRepeat
> ipaPwdMaxSequence ipaPwdDictCheck ipaPwdUserCheck"
> [20/Dec/2022:08:52:41.890881404 +0800] conn=5 op=14447 RESULT err=0
> tag=101 nentries=1 wtime=0.000143403 optime=0.000078113 etime=0.000220491
> [20/Dec/2022:08:52:42.636723558 +0800] conn=5 op=14449 SRCH
> base="dc=wingon,dc=hk" scope=2
> filter="(&(|(objectClass=krbprincipalaux)(objectClass=krbprincipal)(objectClass=ipakrbprincipal))(|(ipaKrbPrincipalAlias=
> ad...@wingon.hk)(krbPrincipalName:caseIgnoreIA5Match:=ad...@wingon.hk)))"
> attrs="krbPrincipalName krbCanonicalName krbUPEnabled krbPrincipalKey
> krbTicketPolicyReference krbPrincipalExpiration krbPasswordExpiration
> krbPwdPolicyReference krbPrincipalType krbPwdHistory krbLastPwdChange
> krbPrincipalAliases krbLastSuccessfulAuth krbLastFailedAuth
> krbLoginFailedCount krbPrincipalAuthInd krbExtraData krbLastAdminUnlock
> krbObjectReferences krbTicketFlags krbMaxTicketLife krbMaxRenewableAge uid
> nsAccountLock passwordHistory ipaKrbAuthzData ipaUserAuthType
> ipatokenRadiusConfigLink krbAuthIndMaxT..."
> [20/Dec/2022:08:52:42.637112855 +0800] conn=5 op=14449 RESULT err=0
> tag=101 nentries=1 wtime=0.000169636 optime=0.000392788 etime=0.000560196
> [20/Dec/2022:08:52:42.637273602 +0800] conn=5 op=14450 SRCH base="cn=
> WINGON.HK,cn=kerberos,dc=wingon,dc=hk" scope=0
> filter="(objectClass=krbticketpolicyaux)" attrs="krbMaxTicketLife
> krbMaxRenewableAge krbTicketFlags krbAuthIndMaxTicketLife
> krbAuthIndMaxRenewableAge"
> [20/Dec/2022:08:52:42.637392989 +0800] conn=5 op=14450 RESULT err=0
> tag=101 nentries=1 wtime=0.000057304 optime=0.000121591 etime=0.000176898
> [20/Dec/2022:08:52:42.637564989 +0800] conn=5 op=14451 SRCH
> base="dc=wingon,dc=hk" scope=2
> filter="(&(|(objectClass=krbprincipalaux)(objectClass=krbprincipal)(objectClass=ipakrbprincipal))(|(ipaKrbPrincipalAlias=krbtgt/
> wingon...@wingon.hk)(krbPrincipalName:caseIgnoreIA5Match:=krbtgt/
> wingon...@wingon.hk)))" attrs="krbPrincipalName krbCanonicalName
> krbUPEnabled krbPrincipalKey krbTicketPolicyReference
> krbPrincipalExpiration krbPasswordExpiration krbPwdPolicyReference
> krbPrincipalType krbPwdHistory krbLastPwdChange krbPrincipalAliases
> krbLastSuccessfulAuth krbLastFailedAuth krbLoginFailedCount
> krbPrincipalAuthInd krbExtraData krbLastAdminUnlock krbObjectReferences
> krbTicketFlags krbMaxTicketLife krbMaxRenewableAge uid nsAccountLock
> passwordHistory ipaKrbAuthzData ipaUserAuthType ipatokenRadiusConfigLink
> krbAuthIndMaxT..."
> [20/Dec/2022:08:52:42.637820305 +0800] conn=5 op=14451 RESULT err=0
> tag=101 nentries=1 wtime=0.000081079 optime=0.000257073 etime=0.000336411
> [20/Dec/2022:08:52:42.638067947 +0800] conn=5 op=14452 SRCH
> base="cn=global_policy,cn=WINGON.HK,cn=kerberos,dc=wingon,dc=hk" scope=0
> filter="(objectClass=*)" attrs="krbMaxPwdLife krbMinPwdLife
> krbPwdMinDiffChars krbPwdMinLength krbPwdHistoryLength krbPwdMaxFailure
> krbPwdFailureCountInterval krbPwdLockoutDuration ipaPwdMaxRepeat
> ipaPwdMaxSequence ipaPwdDictCheck ipaPwdUserCheck"
> [20/Dec/2022:08:52:42.638154921 +0800] conn=5 op=14452 RESULT err=0
> tag=101 nentries=1 wtime=0.000059305 optime=0.000088255 etime=0.000146268
> [20/Dec/2022:08:52:42.638626346 +0800] conn=5 op=14453 SRCH
> base="uid=admin,cn=users,cn=accounts,dc=wingon,dc=hk" scope=0
> filter="(objectClass=*)" attrs="objectClass uid cn fqdn gidNumber
> krbPrincipalName krbCanonicalName krbTicketPolicyReference
> krbPrincipalExpiration krbPasswordExpiration krbPwdPolicyReference
> krbPrincipalType krbLastPwdChange krbPrincipalAliases krbLastSuccessfulAuth
> krbLastFailedAuth krbLoginFailedCount krbLastAdminUnlock krbTicketFlags
> ipaNTSecurityIdentifier ipaNTLogonScript ipaNTProfilePath
> ipaNTHomeDirectory ipaNTHomeDirectoryDrive"
> [20/Dec/2022:08:52:42.639725669 +0800] conn=5 op=14453 RESULT err=0
> tag=101 nentries=1 wtime=0.000080443 optime=0.001101205 etime=0.001179279
> [20/Dec/2022:08:52:42.640187185 +0800] conn=5 op=14454 MOD
> dn="uid=admin,cn=users,cn=accounts,dc=wingon,dc=hk"
> [20/Dec/2022:08:52:42.642756394 +0800] conn=5 op=14454 RESULT err=0
> tag=103 nentries=0 wtime=0.000046214 optime=0.002569881 etime=0.002613811
> csn=63a1075a000000040000
> [20/Dec/2022:08:52:49.488094006 +0800] conn=5 op=14455 SRCH
> base="dc=wingon,dc=hk" scope=2
> filter="(&(|(objectClass=krbprincipalaux)(objectClass=krbprincipal)(objectClass=ipakrbprincipal))(|(ipaKrbPrincipalAlias=krbtgt/
> wingon...@wingon.hk)(krbPrincipalName:caseIgnoreIA5Match:=krbtgt/
> wingon...@wingon.hk)))" attrs="krbPrincipalName krbCanonicalName
> krbUPEnabled krbPrincipalKey krbTicketPolicyReference
> krbPrincipalExpiration krbPasswordExpiration krbPwdPolicyReference
> krbPrincipalType krbPwdHistory krbLastPwdChange krbPrincipalAliases
> krbLastSuccessfulAuth krbLastFailedAuth krbLoginFailedCount
> krbPrincipalAuthInd krbExtraData krbLastAdminUnlock krbObjectReferences
> krbTicketFlags krbMaxTicketLife krbMaxRenewableAge uid nsAccountLock
> passwordHistory ipaKrbAuthzData ipaUserAuthType ipatokenRadiusConfigLink
> krbAuthIndMaxT..."
> [20/Dec/2022:08:52:49.488470833 +0800] conn=5 op=14455 RESULT err=0
> tag=101 nentries=1 wtime=0.000157093 optime=0.000380307 etime=0.000535171
> [20/Dec/2022:08:52:49.488907989 +0800] conn=5 op=14456 SRCH
> base="dc=wingon,dc=hk" scope=2
> filter="(&(|(objectClass=krbprincipalaux)(objectClass=krbprincipal)(objectClass=ipakrbprincipal))(|(ipaKrbPrincipalAlias=HTTP/
> wocfreeipa.wingon...@wingon.hk)(krbPrincipalName:caseIgnoreIA5Match:=HTTP/
> wocfreeipa.wingon...@wingon.hk)))" attrs="krbPrincipalName
> krbCanonicalName krbUPEnabled krbPrincipalKey krbTicketPolicyReference
> krbPrincipalExpiration krbPasswordExpiration krbPwdPolicyReference
> krbPrincipalType krbPwdHistory krbLastPwdChange krbPrincipalAliases
> krbLastSuccessfulAuth krbLastFailedAuth krbLoginFailedCount
> krbPrincipalAuthInd krbExtraData krbLastAdminUnlock krbObjectReferences
> krbTicketFlags krbMaxTicketLife krbMaxRenewableAge uid nsAccountLock
> passwordHistory ipaKrbAuthzData ipaUserAuthType ipatokenRadiusConfigLink
> krbAuthIndMaxT..."
> [20/Dec/2022:08:52:49.489168159 +0800] conn=5 op=14456 RESULT err=0
> tag=101 nentries=1 wtime=0.000071892 optime=0.000261987 etime=0.000332048
> [20/Dec/2022:08:52:49.489291527 +0800] conn=5 op=14457 SRCH base="cn=
> WINGON.HK,cn=kerberos,dc=wingon,dc=hk" scope=0
> filter="(objectClass=krbticketpolicyaux)" attrs="krbMaxTicketLife
> krbMaxRenewableAge krbTicketFlags krbAuthIndMaxTicketLife
> krbAuthIndMaxRenewableAge"
> [20/Dec/2022:08:52:49.489368891 +0800] conn=5 op=14457 RESULT err=0
> tag=101 nentries=1 wtime=0.000020002 optime=0.000078100 etime=0.000096852
> [20/Dec/2022:08:52:49.489551000 +0800] conn=5 op=14458 SRCH
> base="dc=wingon,dc=hk" scope=2
> filter="(&(|(objectClass=krbprincipalaux)(objectClass=krbprincipal)(objectClass=ipakrbprincipal))(|(ipaKrbPrincipalAlias=
> ad...@wingon.hk)(krbPrincipalName:caseIgnoreIA5Match:=ad...@wingon.hk)))"
> attrs="krbPrincipalName krbCanonicalName krbUPEnabled krbPrincipalKey
> krbTicketPolicyReference krbPrincipalExpiration krbPasswordExpiration
> krbPwdPolicyReference krbPrincipalType krbPwdHistory krbLastPwdChange
> krbPrincipalAliases krbLastSuccessfulAuth krbLastFailedAuth
> krbLoginFailedCount krbPrincipalAuthInd krbExtraData krbLastAdminUnlock
> krbObjectReferences krbTicketFlags krbMaxTicketLife krbMaxRenewableAge uid
> nsAccountLock passwordHistory ipaKrbAuthzData ipaUserAuthType
> ipatokenRadiusConfigLink krbAuthIndMaxT..."
> [20/Dec/2022:08:52:49.489784444 +0800] conn=5 op=14458 RESULT err=0
> tag=101 nentries=1 wtime=0.000050301 optime=0.000234939 etime=0.000283911
> [20/Dec/2022:08:52:49.489907838 +0800] conn=5 op=14459 SRCH base="cn=
> WINGON.HK,cn=kerberos,dc=wingon,dc=hk" scope=0
> filter="(objectClass=krbticketpolicyaux)" attrs="krbMaxTicketLife
> krbMaxRenewableAge krbTicketFlags krbAuthIndMaxTicketLife
> krbAuthIndMaxRenewableAge"
> [20/Dec/2022:08:52:49.489966334 +0800] conn=5 op=14459 RESULT err=0
> tag=101 nentries=1 wtime=0.000018656 optime=0.000059311 etime=0.000076873
> [20/Dec/2022:08:52:49.490140654 +0800] conn=5 op=14460 SRCH
> base="dc=wingon,dc=hk" scope=2
> filter="(&(|(objectClass=krbprincipalaux)(objectClass=krbprincipal)(objectClass=ipakrbprincipal))(|(ipaKrbPrincipalAlias=
> ad...@wingon.hk)(krbPrincipalName:caseIgnoreIA5Match:=ad...@wingon.hk)))"
> attrs="krbPrincipalName krbCanonicalName krbUPEnabled krbPrincipalKey
> krbTicketPolicyReference krbPrincipalExpiration krbPasswordExpiration
> krbPwdPolicyReference krbPrincipalType krbPwdHistory krbLastPwdChange
> krbPrincipalAliases krbLastSuccessfulAuth krbLastFailedAuth
> krbLoginFailedCount krbPrincipalAuthInd krbExtraData krbLastAdminUnlock
> krbObjectReferences krbTicketFlags krbMaxTicketLife krbMaxRenewableAge uid
> nsAccountLock passwordHistory ipaKrbAuthzData ipaUserAuthType
> ipatokenRadiusConfigLink krbAuthIndMaxT..."
> [20/Dec/2022:08:52:49.490385645 +0800] conn=5 op=14460 RESULT err=0
> tag=101 nentries=1 wtime=0.000054201 optime=0.000246462 etime=0.000298996
> [20/Dec/2022:08:52:49.490509791 +0800] conn=5 op=14461 SRCH base="cn=
> WINGON.HK,cn=kerberos,dc=wingon,dc=hk" scope=0
> filter="(objectClass=krbticketpolicyaux)" attrs="krbMaxTicketLife
> krbMaxRenewableAge krbTicketFlags krbAuthIndMaxTicketLife
> krbAuthIndMaxRenewableAge"
> [20/Dec/2022:08:52:49.490567976 +0800] conn=5 op=14461 RESULT err=0
> tag=101 nentries=1 wtime=0.000018766 optime=0.000059023 etime=0.000076742
> [20/Dec/2022:08:52:49.502954845 +0800] conn=2891 op=8 SRCH
> base="cn=accounts,dc=wingon,dc=hk" scope=2
> filter="(&(ipaNTSecurityIdentifier=S-1-5-21-1621352465-573684049-3234178885-500)(|(objectClass=ipaUserGroup)(objectClass=posixGroup))(cn=*))"
> attrs="objectClass posixgroup cn userPassword gidNumber member ipaUniqueID
> ipaNTSecurityIdentifier modifyTimestamp entryusn ipaExternalMember"
> [20/Dec/2022:08:52:49.503266323 +0800] conn=2891 op=8 RESULT err=0 tag=101
> nentries=0 wtime=0.000119232 optime=0.000313682 etime=0.000431068
> [20/Dec/2022:08:52:49.503619808 +0800] conn=2891 op=9 SRCH
> base="cn=accounts,dc=wingon,dc=hk" scope=2
> filter="(&(ipaNTSecurityIdentifier=S-1-5-21-1621352465-573684049-3234178885-500)(objectClass=posixAccount)(uid=*)(ipaNTSecurityIdentifier=*))"
> attrs="objectClass uid userPassword uidNumber gidNumber gecos homeDirectory
> loginShell krbPrincipalName cn memberOf ipaUniqueID ipaNTSecurityIdentifier
> modifyTimestamp entryusn shadowLastChange shadowMin shadowMax shadowWarning
> shadowInactive shadowExpire shadowFlag krbLastPwdChange
> krbPasswordExpiration pwdattribute authorizedService accountexpires
> useraccountcontrol nsAccountLock host logindisabled loginexpirationtime
> loginallowedtimemap ipaSshPubKey ipaUserAuthType usercertificate;binary
> mail"
> [20/Dec/2022:08:52:49.504338874 +0800] conn=2891 op=9 RESULT err=0 tag=101
> nentries=1 wtime=0.000087825 optime=0.000720696 etime=0.000806775
> [20/Dec/2022:08:52:49.506016991 +0800] conn=2891 op=10 SRCH
> base="cn=Default Trust View,cn=views,cn=accounts,dc=wingon,dc=hk" scope=2
> filter="(&(objectClass=ipaOverrideAnchor)(ipaAnchorUUID=:IPA:wingon.hk:ac4db316-6556-11ed-aade-0050568cee48))"
> attrs=ALL
> [20/Dec/2022:08:52:49.506233036 +0800] conn=2891 op=10 RESULT err=0
> tag=101 nentries=0 wtime=0.001656902 optime=0.000216580 etime=0.001872020
> [20/Dec/2022:08:52:49.524857089 +0800] conn=2895 fd=125 slot=125
> connection from 10.100.0.213 to 10.100.0.213
> [20/Dec/2022:08:52:49.526453626 +0800] conn=5 op=14462 SRCH
> base="dc=wingon,dc=hk" scope=2
> filter="(&(|(objectClass=krbprincipalaux)(objectClass=krbprincipal)(objectClass=ipakrbprincipal))(|(ipaKrbPrincipalAlias=krbtgt/
> wingon...@wingon.hk)(krbPrincipalName:caseIgnoreIA5Match:=krbtgt/
> wingon...@wingon.hk)))" attrs="krbPrincipalName krbCanonicalName
> krbUPEnabled krbPrincipalKey krbTicketPolicyReference
> krbPrincipalExpiration krbPasswordExpiration krbPwdPolicyReference
> krbPrincipalType krbPwdHistory krbLastPwdChange krbPrincipalAliases
> krbLastSuccessfulAuth krbLastFailedAuth krbLoginFailedCount
> krbPrincipalAuthInd krbExtraData krbLastAdminUnlock krbObjectReferences
> krbTicketFlags krbMaxTicketLife krbMaxRenewableAge uid nsAccountLock
> passwordHistory ipaKrbAuthzData ipaUserAuthType ipatokenRadiusConfigLink
> krbAuthIndMaxT..."
> [20/Dec/2022:08:52:49.526704890 +0800] conn=5 op=14462 RESULT err=0
> tag=101 nentries=1 wtime=0.035436543 optime=0.000253370 etime=0.035688066
> [20/Dec/2022:08:52:49.527116018 +0800] conn=5 op=14463 SRCH
> base="dc=wingon,dc=hk" scope=2
> filter="(&(|(objectClass=krbprincipalaux)(objectClass=krbprincipal)(objectClass=ipakrbprincipal))(|(ipaKrbPrincipalAlias=ldap/
> wocfreeipa.wingon...@wingon.hk)(krbPrincipalName:caseIgnoreIA5Match:=ldap/
> wocfreeipa.wingon...@wingon.hk)))" attrs="krbPrincipalName
> krbCanonicalName krbUPEnabled krbPrincipalKey krbTicketPolicyReference
> krbPrincipalExpiration krbPasswordExpiration krbPwdPolicyReference
> krbPrincipalType krbPwdHistory krbLastPwdChange krbPrincipalAliases
> krbLastSuccessfulAuth krbLastFailedAuth krbLoginFailedCount
> krbPrincipalAuthInd krbExtraData krbLastAdminUnlock krbObjectReferences
> krbTicketFlags krbMaxTicketLife krbMaxRenewableAge uid nsAccountLock
> passwordHistory ipaKrbAuthzData ipaUserAuthType ipatokenRadiusConfigLink
> krbAuthIndMaxT..."
> [20/Dec/2022:08:52:49.527385120 +0800] conn=5 op=14463 RESULT err=0
> tag=101 nentries=1 wtime=0.000059414 optime=0.000270825 etime=0.000328165
> [20/Dec/2022:08:52:49.527514613 +0800] conn=5 op=14464 SRCH base="cn=
> WINGON.HK,cn=kerberos,dc=wingon,dc=hk" scope=0
> filter="(objectClass=krbticketpolicyaux)" attrs="krbMaxTicketLife
> krbMaxRenewableAge krbTicketFlags krbAuthIndMaxTicketLife
> krbAuthIndMaxRenewableAge"
> [20/Dec/2022:08:52:49.527577322 +0800] conn=5 op=14464 RESULT err=0
> tag=101 nentries=1 wtime=0.000020653 optime=0.000063723 etime=0.000083249
> [20/Dec/2022:08:52:49.527677215 +0800] conn=5 op=14465 SRCH
> base="dc=wingon,dc=hk" scope=2
> filter="(&(|(objectClass=krbprincipalaux)(objectClass=krbprincipal)(objectClass=ipakrbprincipal))(|(ipaKrbPrincipalAlias=HTTP/
> wocfreeipa.wingon...@wingon.hk)(krbPrincipalName:caseIgnoreIA5Match:=HTTP/
> wocfreeipa.wingon...@wingon.hk)))" attrs="krbPrincipalName
> krbCanonicalName krbUPEnabled krbPrincipalKey krbTicketPolicyReference
> krbPrincipalExpiration krbPasswordExpiration krbPwdPolicyReference
> krbPrincipalType krbPwdHistory krbLastPwdChange krbPrincipalAliases
> krbLastSuccessfulAuth krbLastFailedAuth krbLoginFailedCount
> krbPrincipalAuthInd krbExtraData krbLastAdminUnlock krbObjectReferences
> krbTicketFlags krbMaxTicketLife krbMaxRenewableAge uid nsAccountLock
> passwordHistory ipaKrbAuthzData ipaUserAuthType ipatokenRadiusConfigLink
> krbAuthIndMaxT..."
> [20/Dec/2022:08:52:49.527885167 +0800] conn=5 op=14465 RESULT err=0
> tag=101 nentries=1 wtime=0.000044833 optime=0.000209291 etime=0.000252701
> [20/Dec/2022:08:52:49.527998710 +0800] conn=5 op=14466 SRCH base="cn=
> WINGON.HK,cn=kerberos,dc=wingon,dc=hk" scope=0
> filter="(objectClass=krbticketpolicyaux)" attrs="krbMaxTicketLife
> krbMaxRenewableAge krbTicketFlags krbAuthIndMaxTicketLife
> krbAuthIndMaxRenewableAge"
> [20/Dec/2022:08:52:49.528055668 +0800] conn=5 op=14466 RESULT err=0
> tag=101 nentries=1 wtime=0.000018253 optime=0.000057676 etime=0.000074875
> [20/Dec/2022:08:52:49.528225172 +0800] conn=5 op=14467 SRCH
> base="dc=wingon,dc=hk" scope=2
> filter="(&(|(objectClass=krbprincipalaux)(objectClass=krbprincipal)(objectClass=ipakrbprincipal))(|(ipaKrbPrincipalAlias=ldap/
> wocfreeipa.wingon...@wingon.hk)(krbPrincipalName:caseIgnoreIA5Match:=ldap/
> wocfreeipa.wingon...@wingon.hk)))" attrs="krbPrincipalName
> krbCanonicalName krbUPEnabled krbPrincipalKey krbTicketPolicyReference
> krbPrincipalExpiration krbPasswordExpiration krbPwdPolicyReference
> krbPrincipalType krbPwdHistory krbLastPwdChange krbPrincipalAliases
> krbLastSuccessfulAuth krbLastFailedAuth krbLoginFailedCount
> krbPrincipalAuthInd krbExtraData krbLastAdminUnlock krbObjectReferences
> krbTicketFlags krbMaxTicketLife krbMaxRenewableAge uid nsAccountLock
> passwordHistory ipaKrbAuthzData ipaUserAuthType ipatokenRadiusConfigLink
> krbAuthIndMaxT..."
> [20/Dec/2022:08:52:49.528452770 +0800] conn=5 op=14467 RESULT err=0
> tag=101 nentries=1 wtime=0.000047130 optime=0.000228796 etime=0.000274314
> [20/Dec/2022:08:52:49.528582893 +0800] conn=5 op=14468 SRCH base="cn=
> WINGON.HK,cn=kerberos,dc=wingon,dc=hk" scope=0
> filter="(objectClass=krbticketpolicyaux)" attrs="krbMaxTicketLife
> krbMaxRenewableAge krbTicketFlags krbAuthIndMaxTicketLife
> krbAuthIndMaxRenewableAge"
> [20/Dec/2022:08:52:49.528657241 +0800] conn=5 op=14468 RESULT err=0
> tag=101 nentries=1 wtime=0.000021675 optime=0.000075366 etime=0.000095870
> [20/Dec/2022:08:52:49.528737699 +0800] conn=5 op=14469 SRCH
> base="dc=wingon,dc=hk" scope=2
> filter="(&(objectClass=ipaKrb5DelegationACL)(memberPrincipal=HTTP/
> wocfreeipa.wingon...@wingon.hk))" attrs="objectClass memberPrincipal"
> [20/Dec/2022:08:52:49.528946342 +0800] conn=5 op=14469 RESULT err=0
> tag=101 nentries=1 wtime=0.000023138 optime=0.000209311 etime=0.000231098
> [20/Dec/2022:08:52:49.529144680 +0800] conn=5 op=14470 SRCH
> base="dc=wingon,dc=hk" scope=2
> filter="(&(|(objectClass=krbprincipalaux)(objectClass=krbprincipal)(objectClass=ipakrbprincipal))(|(ipaKrbPrincipalAlias=
> ad...@wingon.hk)(krbPrincipalName:caseIgnoreIA5Match:=ad...@wingon.hk)))"
> attrs="krbPrincipalName krbCanonicalName krbUPEnabled krbPrincipalKey
> krbTicketPolicyReference krbPrincipalExpiration krbPasswordExpiration
> krbPwdPolicyReference krbPrincipalType krbPwdHistory krbLastPwdChange
> krbPrincipalAliases krbLastSuccessfulAuth krbLastFailedAuth
> krbLoginFailedCount krbPrincipalAuthInd krbExtraData krbLastAdminUnlock
> krbObjectReferences krbTicketFlags krbMaxTicketLife krbMaxRenewableAge uid
> nsAccountLock passwordHistory ipaKrbAuthzData ipaUserAuthType
> ipatokenRadiusConfigLink krbAuthIndMaxT..."
> [20/Dec/2022:08:52:49.529395979 +0800] conn=5 op=14470 RESULT err=0
> tag=101 nentries=1 wtime=0.000050806 optime=0.000252739 etime=0.000301948
> [20/Dec/2022:08:52:49.529520417 +0800] conn=5 op=14471 SRCH base="cn=
> WINGON.HK,cn=kerberos,dc=wingon,dc=hk" scope=0
> filter="(objectClass=krbticketpolicyaux)" attrs="krbMaxTicketLife
> krbMaxRenewableAge krbTicketFlags krbAuthIndMaxTicketLife
> krbAuthIndMaxRenewableAge"
> [20/Dec/2022:08:52:49.529578243 +0800] conn=5 op=14471 RESULT err=0
> tag=101 nentries=1 wtime=0.000019205 optime=0.000058676 etime=0.000076783
> [20/Dec/2022:08:52:49.529678150 +0800] conn=5 op=14472 SRCH
> base="dc=wingon,dc=hk" scope=2
> filter="(&(|(objectClass=krbprincipalaux)(objectClass=krbprincipal)(objectClass=ipakrbprincipal))(|(ipaKrbPrincipalAlias=
> ad...@wingon.hk)(krbPrincipalName:caseIgnoreIA5Match:=ad...@wingon.hk)))"
> attrs="krbPrincipalName krbCanonicalName krbUPEnabled krbPrincipalKey
> krbTicketPolicyReference krbPrincipalExpiration krbPasswordExpiration
> krbPwdPolicyReference krbPrincipalType krbPwdHistory krbLastPwdChange
> krbPrincipalAliases krbLastSuccessfulAuth krbLastFailedAuth
> krbLoginFailedCount krbPrincipalAuthInd krbExtraData krbLastAdminUnlock
> krbObjectReferences krbTicketFlags krbMaxTicketLife krbMaxRenewableAge uid
> nsAccountLock passwordHistory ipaKrbAuthzData ipaUserAuthType
> ipatokenRadiusConfigLink krbAuthIndMaxT..."
> [20/Dec/2022:08:52:49.529889528 +0800] conn=5 op=14472 RESULT err=0
> tag=101 nentries=1 wtime=0.000044447 optime=0.000212677 etime=0.000255851
> [20/Dec/2022:08:52:49.530005152 +0800] conn=5 op=14473 SRCH base="cn=
> WINGON.HK,cn=kerberos,dc=wingon,dc=hk" scope=0
> filter="(objectClass=krbticketpolicyaux)" attrs="krbMaxTicketLife
> krbMaxRenewableAge krbTicketFlags krbAuthIndMaxTicketLife
> krbAuthIndMaxRenewableAge"
> [20/Dec/2022:08:52:49.530060858 +0800] conn=5 op=14473 RESULT err=0
> tag=101 nentries=1 wtime=0.000017671 optime=0.000056385 etime=0.000072954
> [20/Dec/2022:08:52:49.530199859 +0800] conn=5 op=14474 SRCH
> base="dc=wingon,dc=hk" scope=2
> filter="(&(|(objectClass=krbprincipalaux)(objectClass=krbprincipal)(objectClass=ipakrbprincipal))(|(ipaKrbPrincipalAlias=
> ad...@wingon.hk)(krbPrincipalName:caseIgnoreIA5Match:=ad...@wingon.hk)))"
> attrs="krbPrincipalName krbCanonicalName krbUPEnabled krbPrincipalKey
> krbTicketPolicyReference krbPrincipalExpiration krbPasswordExpiration
> krbPwdPolicyReference krbPrincipalType krbPwdHistory krbLastPwdChange
> krbPrincipalAliases krbLastSuccessfulAuth krbLastFailedAuth
> krbLoginFailedCount krbPrincipalAuthInd krbExtraData krbLastAdminUnlock
> krbObjectReferences krbTicketFlags krbMaxTicketLife krbMaxRenewableAge uid
> nsAccountLock passwordHistory ipaKrbAuthzData ipaUserAuthType
> ipatokenRadiusConfigLink krbAuthIndMaxT..."
> [20/Dec/2022:08:52:49.530428986 +0800] conn=5 op=14474 RESULT err=0
> tag=101 nentries=1 wtime=0.000044995 optime=0.000230426 etime=0.000274012
> [20/Dec/2022:08:52:49.530549346 +0800] conn=5 op=14475 SRCH base="cn=
> WINGON.HK,cn=kerberos,dc=wingon,dc=hk" scope=0
> filter="(objectClass=krbticketpolicyaux)" attrs="krbMaxTicketLife
> krbMaxRenewableAge krbTicketFlags krbAuthIndMaxTicketLife
> krbAuthIndMaxRenewableAge"
> [20/Dec/2022:08:52:49.530606840 +0800] conn=5 op=14475 RESULT err=0
> tag=101 nentries=1 wtime=0.000018279 optime=0.000058130 etime=0.000075356
> [20/Dec/2022:08:52:49.532758492 +0800] conn=2895 op=0 BIND dn=""
> method=sasl version=3 mech=GSS-SPNEGO
> [20/Dec/2022:08:52:49.534731861 +0800] conn=2895 op=0 RESULT err=0 tag=97
> nentries=0 wtime=0.000153862 optime=0.001976947 etime=0.002129681
> dn="uid=admin,cn=users,cn=accounts,dc=wingon,dc=hk"
> [20/Dec/2022:08:52:49.712276555 +0800] conn=2895 op=1 UNBIND
> [20/Dec/2022:08:52:49.712315443 +0800] conn=2895 op=1 fd=125 closed error
> - U1
> [20/Dec/2022:08:52:50.054092304 +0800] conn=2896 fd=125 slot=125
> connection from 10.100.0.213 to 10.100.0.213
> [20/Dec/2022:08:52:50.056611957 +0800] conn=2896 op=0 BIND dn=""
> method=sasl version=3 mech=GSS-SPNEGO
> [20/Dec/2022:08:52:50.058603263 +0800] conn=2896 op=0 RESULT err=0 tag=97
> nentries=0 wtime=0.000214021 optime=0.002000265 etime=0.002213084
> dn="uid=admin,cn=users,cn=accounts,dc=wingon,dc=hk"
> [20/Dec/2022:08:52:50.061270916 +0800] conn=2896 op=1 SRCH
> base="cn=ipaconfig,cn=etc,dc=wingon,dc=hk" scope=0 filter="(objectClass=*)"
> attrs=ALL
> [20/Dec/2022:08:52:50.061915250 +0800] conn=2896 op=1 RESULT err=0 tag=101
> nentries=1 wtime=0.000148286 optime=0.000645753 etime=0.000791691
> [20/Dec/2022:08:52:50.062877341 +0800] conn=2896 op=2 SRCH
> base="cn=masters,cn=ipa,cn=etc,dc=wingon,dc=hk" scope=2
> filter="(&(objectClass=ipaConfigObject)(cn=CA))" attrs=ALL
> [20/Dec/2022:08:52:50.063452183 +0800] conn=2896 op=2 RESULT err=0 tag=101
> nentries=1 wtime=0.000069136 optime=0.000575594 etime=0.000642941
> [20/Dec/2022:08:52:50.081855339 +0800] conn=19 op=5318 SRCH
> base="cn=1,ou=certificateRepository,ou=ca,o=ipaca" scope=0
> filter="(objectClass=*)" attrs=ALL
> [20/Dec/2022:08:52:50.082050056 +0800] conn=19 op=5318 RESULT err=0
> tag=101 nentries=1 wtime=0.000079328 optime=0.000196505 etime=0.000273764
> [20/Dec/2022:08:52:50.095406104 +0800] conn=2896 op=3 EXT
> oid="1.3.6.1.4.1.4203.1.11.3" name="whoami-plugin"
> [20/Dec/2022:08:52:50.095474423 +0800] conn=2896 op=3 RESULT err=0 tag=120
> nentries=0 wtime=0.000087708 optime=0.000084261 etime=0.000170131
> [20/Dec/2022:08:52:50.095683671 +0800] conn=2896 op=4 SRCH
> base="cn=retrieve certificate,cn=virtual operations,cn=etc,dc=wingon,dc=hk"
> scope=0 filter="(objectClass=*)" attrs="objectClass"
> [20/Dec/2022:08:52:50.096598124 +0800] conn=2896 op=4 RESULT err=0 tag=101
> nentries=1 wtime=0.000063023 optime=0.000914785 etime=0.000976007 -
> entryLevelRights: vadn
> [20/Dec/2022:08:52:50.098460393 +0800] conn=2896 op=5 SRCH
> base="cn=cas,cn=ca,dc=wingon,dc=hk" scope=2
> filter="(&(cn=ipa)(objectClass=ipaca))" attrs=""
> [20/Dec/2022:08:52:50.098819481 +0800] conn=2896 op=5 RESULT err=0 tag=101
> nentries=1 wtime=0.000088228 optime=0.000360094 etime=0.000446755
> [20/Dec/2022:08:52:50.099423444 +0800] conn=2896 op=6 SRCH
> base="cn=ipa,cn=cas,cn=ca,dc=wingon,dc=hk" scope=0 filter="(objectClass=*)"
> attrs="ipaCaIssuerDN cn ipaCaId ipaCaSubjectDN description"
> [20/Dec/2022:08:52:50.099679002 +0800] conn=2896 op=6 RESULT err=0 tag=101
> nentries=1 wtime=0.000082454 optime=0.000257939 etime=0.000338566
> [20/Dec/2022:08:52:50.101141986 +0800] conn=2896 op=7 SRCH
> base="cn=masters,cn=ipa,cn=etc,dc=wingon,dc=hk" scope=2
> filter="(&(&(objectClass=ipaConfigObject)(cn=CA))(|(ipaConfigString=enabledService)(ipaConfigString=hiddenService)))"
> attrs="ipaConfigString"
> [20/Dec/2022:08:52:50.101621396 +0800] conn=2896 op=7 RESULT err=0 tag=101
> nentries=1 wtime=0.000089009 optime=0.000480845 etime=0.000568114
> [20/Dec/2022:08:52:50.117215381 +0800] conn=2896 op=8 UNBIND
> [20/Dec/2022:08:52:50.117237108 +0800] conn=2896 op=8 fd=125 closed error
> - U1
> [20/Dec/2022:08:53:32.266556934 +0800] conn=2894 op=7 UNBIND
> [20/Dec/2022:08:53:32.266593638 +0800] conn=2894 op=7 fd=124 closed error
> - U1
>
> thanks,
> Junhou
> _______________________________________________
> FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
> To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org
> Fedora Code of Conduct:
> https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
> https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org
> Do not reply to spam, report it:
> https://pagure.io/fedora-infrastructure/new_issue
>

_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue