50.3. Gathering troubleshooting data for AD UPN authentication issues

Procedure

1. Open the /usr/share/ipa/smb.conf.empty configuration file in a text editor.

2. Add the following contents to the file.

   [global]
   log level = 10

3. Save and close the /usr/share/ipa/smb.conf.empty file.
4. Open the /etc/ipa/server.conf configuration file in a text editor. If you do not have that file, create one.

5. Add the following contents to the file.

   [global]
   debug = True

6. Save and close the /etc/ipa/server.conf file.

7. Restart the Apache webserver service to apply the configuration changes:

   [root@server ~]# systemctl restart httpd

8. Retrieve trust information from your AD domain:

   [root@server ~]# ipa trust-fetch-domains <ad.example.com>

9. Review the debugging output and troubleshooting information in the following log files:

   • /var/log/httpd/error_log
   • /var/log/samba/log.*