Login fails for sssd authenticated users

This document (7018679) is provided subject to the disclaimer at the end of this document.

Environment

SUSE Linux Enterprise Server 12 Service Pack 2 (SLES 12 SP2)
SUSE Linux Enterprise Server 12 Service Pack 1 (SLES 12 SP1)
SUSE Linux Enterprise Server 11 Service Pack 4 (SLES 11 SP4)

Situation

Login to sssd authenticated accounts does not work.
The following messages can be found in /var/log/sssd/sssd_default.log:

(Wed Mar 1 19:58:03 2017) [sssd[be[default]]] [ldb] (0x0010): ltdb: tdb(/var/lib/sss/db/cache_default.ldb): tdb_rec_read bad magic 0x58454154 at offset=5316144
(Wed Mar 1 19:58:03 2017) [sssd[be[default]]] [ldb] (0x0010): ltdb: tdb(/var/lib/sss/db/cache_default.ldb): tdb_rec_read bad magic 0x40003200 at offset=5306184
(Wed Mar 1 19:58:03 2017) [sssd[be[default]]] [sdap_idmap_init] (0x0010): Could not read ID mappings from the cache: [Input/output error]
(Wed Mar 1 19:58:03 2017) [sssd[be[default]]] [load_backend_module] (0x0010): Error (5) in module (ldap) initialization (sssm_ldap_id_init)!
(Wed Mar 1 19:58:03 2017) [sssd[be[default]]] [be_process_init] (0x0010): fatal error initializing data providers
(Wed Mar 1 19:58:03 2017) [sssd[be[default]]] [main] (0x0010): Could not initialize backend [5]

Resolution

Stop the sssd service
delete the local cache files: rm /var/lib/sss/db/*
Restart the service

Cause

The local cache files got corrupted and need to be recreated.

Disclaimer

This Support Knowledgebase provides a valuable tool for SUSE customers and parties interested in our products and solutions to acquire information, ideas and learn from one another. Materials are provided for informational, personal or non-commercial use within your organization and are presented "AS IS" WITHOUT WARRANTY OF ANY KIND.