Summary: A fix for Red Hat server with login problems and GSSAPI errors in the /var/log/messages
Date: Around 2014
Refactor: 16 January 2025: Checked links and formatting.

If you experience the following errors in the /var/log/messages logfile:

sssd_be: GSSAPI Error: Unspecified GSS failure.  Minor code may provide more information (Server not found in Kerberos database)
sssd_be: GSSAPI Error: An invalid name was supplied (Success)

As well as long login times and failed login times, and after a successful logon the following message:

cannot find name for group ID XXXXX

Disable this line (if present) in the /etc/sssd/sssd.conf:

ldap_disable_referrals = true

and put this line in the config file:

ldap_referrals = false

https://access.redhat.com/solutions/65936 (Red Hat login required)