SSSD Configuration Fails when Binding LDAP/Kerberos from FreeIPA

UPDATE: Opened a Jira ticket here: Jira

Hello,

Has anyone successfully bound SCALE 25.04.1 to FreeIPA?

I got past one bug (forum, Jira), but I’m still having issues binding to FreeIPA.

It seems that either something is failing to make any config files for SSSD or it is creating them with the wrong permissions.

Error in /var/log/sssd/sssd.log:

[sssd] [sss_ini_call_validators] (0x0020): [rule/allowed_sections]: Section [domain/] is not allowed. Check for typos.
[sssd] [sss_confdb_create_ldif] (0x0020): Attribute 'domains' has empty value, ignoring
[sssd] [confdb_ldif_from_ini_file] (0x0010): Could not create LDIF for confdb
[sssd] [confdb_init_db] (0x0020): Cannot convert INI to LDIF [22]: [Invalid argument]
[sssd] [confdb_setup] (0x0010): ConfDB initialization has failed [22]: Invalid argument
[sssd] [load_configuration] (0x0010): Unable to setup ConfDB [22]: Invalid argument
[sssd] [main] (0x0010): SSSD couldn't load the configuration database [22]: Invalid argument

Error from web UI:

Traceback (most recent call last):
  File "/usr/lib/python3/dist-packages/middlewared/job.py", line 515, in run
    await self.future
  File "/usr/lib/python3/dist-packages/middlewared/job.py", line 560, in __run_body
    rv = await self.method(*args)
         ^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/lib/python3/dist-packages/middlewared/schema/processor.py", line 48, in nf
    res = await f(*args, **kwargs)
          ^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/lib/python3/dist-packages/middlewared/schema/processor.py", line 174, in nf
    return await func(*args, **kwargs)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/lib/python3/dist-packages/middlewared/plugins/ldap.py", line 682, in do_update
    await self.__start(job, ds_type)
  File "/usr/lib/python3/dist-packages/middlewared/plugins/ldap.py", line 947, in __start
    raise err
  File "/usr/lib/python3/dist-packages/middlewared/plugins/ldap.py", line 926, in __start
    dom_join_resp = await job.wrap(await self.middleware.call(
                    ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/lib/python3/dist-packages/middlewared/job.py", line 736, in wrap
    return await subjob.wait(raise_error=True)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/lib/python3/dist-packages/middlewared/job.py", line 463, in wait
    raise self.exc_info[1]
  File "/usr/lib/python3/dist-packages/middlewared/job.py", line 515, in run
    await self.future
  File "/usr/lib/python3/dist-packages/middlewared/job.py", line 562, in __run_body
    rv = await self.middleware.run_in_thread(self.method, *args)
         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/lib/python3/dist-packages/middlewared/main.py", line 622, in run_in_thread
    return await self.run_in_executor(io_thread_pool_executor, method, *args, **kwargs)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/lib/python3/dist-packages/middlewared/main.py", line 619, in run_in_executor
    return await loop.run_in_executor(pool, functools.partial(method, *args, **kwargs))
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/lib/python3.11/concurrent/futures/thread.py", line 58, in run
    result = self.fn(*self.args, **self.kwargs)
             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/lib/python3/dist-packages/middlewared/utils/directoryservices/krb5.py", line 341, in check_ticket
    return fn(*args, **kwargs)
           ^^^^^^^^^^^^^^^^^^^
  File "/usr/lib/python3/dist-packages/middlewared/plugins/directoryservices_/join.py", line 244, in join_domain
    do_join_fn(job, ds_type, domain)
  File "/usr/lib/python3/dist-packages/middlewared/utils/directoryservices/krb5.py", line 341, in check_ticket
    return fn(*args, **kwargs)
           ^^^^^^^^^^^^^^^^^^^
  File "/usr/lib/python3/dist-packages/middlewared/plugins/directoryservices_/ipa_join_mixin.py", line 561, in _ipa_join
    self._ipa_activate()
  File "/usr/lib/python3/dist-packages/middlewared/plugins/directoryservices_/ipa_join_mixin.py", line 139, in _ipa_activate
    self.middleware.call_sync('service.start', 'sssd', {'silent': False})
  File "/usr/lib/python3/dist-packages/middlewared/main.py", line 1025, in call_sync
    return self.run_coroutine(methodobj(*prepared_call.args))
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/lib/python3/dist-packages/middlewared/main.py", line 1065, in run_coroutine
    return fut.result()
           ^^^^^^^^^^^^
  File "/usr/lib/python3.11/concurrent/futures/_base.py", line 449, in result
    return self.__get_result()
           ^^^^^^^^^^^^^^^^^^^
  File "/usr/lib/python3.11/concurrent/futures/_base.py", line 401, in __get_result
    raise self._exception
  File "/usr/lib/python3/dist-packages/middlewared/schema/processor.py", line 174, in nf
    return await func(*args, **kwargs)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/lib/python3/dist-packages/middlewared/schema/processor.py", line 48, in nf
    res = await f(*args, **kwargs)
          ^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/lib/python3/dist-packages/middlewared/plugins/service.py", line 207, in start
    raise CallError(await service_object.failure_logs() or 'Service not running after start')
middlewared.service_exception.CallError: [EFAULT] Jun 02 19:57:08 systemd[1]: sssd.service - System Security Services Daemon was skipped because no trigger condition checks were met.
Jun 02 20:27:35 systemd[1]: sssd.service - System Security Services Daemon was skipped because no trigger condition checks were met.
Jun 03 19:51:56 systemd[1]: Starting sssd.service - System Security Services Daemon...
Jun 03 19:51:56 sssd[34775]: SSSD couldn't load the configuration database [22]: Invalid argument
Jun 03 19:51:56 systemd[1]: sssd.service: Main process exited, code=exited, status=4/NOPERMISSION
Jun 03 19:51:56 systemd[1]: sssd.service: Failed with result 'exit-code'.
Jun 03 19:51:56 systemd[1]: Failed to start sssd.service - System Security Services Daemon.
Jun 03 19:52:08 systemd[1]: Starting sssd.service - System Security Services Daemon...
Jun 03 19:52:08 sssd[34790]: SSSD couldn't load the configuration database [22]: Invalid argument
Jun 03 19:52:08 systemd[1]: sssd.service: Main process exited, code=exited, status=4/NOPERMISSION
Jun 03 19:52:08 systemd[1]: sssd.service: Failed with result 'exit-code'.
Jun 03 19:52:08 systemd[1]: Failed to start sssd.service - System Security Services Daemon.
Jun 03 20:03:49 systemd[1]: sssd.service - System Security Services Daemon was skipped because no trigger condition checks were met.
Jun 03 20:51:20 systemd[1]: sssd.service - System Security Services Daemon was skipped because no trigger condition checks were met.
Jun 04 11:00:40 systemd[1]: Starting sssd.service - System Security Services Daemon...
Jun 04 11:00:40 sssd[23552]: SSSD couldn't load the configuration database [22]: Invalid argument
Jun 04 11:00:40 systemd[1]: sssd.service: Main process exited, code=exited, status=4/NOPERMISSION
Jun 04 11:00:40 systemd[1]: sssd.service: Failed with result 'exit-code'.
Jun 04 11:00:40 systemd[1]: Failed to start sssd.service - System Security Services Daemon.