problema inserimento in active directory server 2022 sssd

[gianse2000]

ubuntu 24.04
non riesco ad inserire il pc in dominio.
il servizo sssd mostra il seguente errore:
systemctl status sssd
× sssd.service - System Security Services Daemon
Loaded: loaded (/usr/lib/systemd/system/sssd.service; disabled; preset: enabled)
Active: failed (Result: exit-code) since Sun 2026-04-05 17:56:12 CEST; 1min 56s ago
Process: 2759 ExecStart=/usr/sbin/sssd -i ${DEBUG_LOGGER} (code=exited, status=3)
Main PID: 2759 (code=exited, status=3)
CPU: 52ms

apr 05 17:56:12 ubuntu-jZUsVWjS.proxmox.chimica.unipd.it systemd[1]: Starting sssd.service - System Security Services Daemon...
apr 05 17:56:12 ubuntu-jZUsVWjS.proxmox.chimica.unipd.it sssd[2759]: Starting up
apr 05 17:56:12 ubuntu-jZUsVWjS.proxmox.chimica.unipd.it systemd[1]: sssd.service: Main process exited, code=exited, status=3/NOTIMPLEMENTED
apr 05 17:56:12 ubuntu-jZUsVWjS.proxmox.chimica.unipd.it systemd[1]: sssd.service: Failed with result 'exit-code'.
apr 05 17:56:12 ubuntu-jZUsVWjS.proxmox.chimica.unipd.it systemd[1]: Failed to start sssd.service - System Security Services Daemon.

i log /var/log/sssd/sssd.log:
* [sssd] [confdb_ensure_files_domain] (0x0100): The implicit files domain is disabled
* [sssd] [confdb_expand_app_domains] (0x2000): PROXMOX.CHIMICA.UNIPD.IT is not an app domain
* [sssd] [confdb_init_domain_pwd_expire] (0x1000): pwd_expiration_warning is -1
* [sssd] [server_setup] (0x0080): Failed setting process group: Operation not permitted[1]. We might leak processes in case of failure
* [sssd] [become_user] (0x0200): Trying to become user [0][0].
* [sssd] [become_user] (0x0200): Already user [0].
* [sssd] [ldb] (0x0400): server_sort:Unable to register control with rootdse!
* (2026-04-05 17:56:12): [sssd] [server_setup] (0x0400): CONFDB: /var/lib/sss/db/config.ldb
* (2026-04-05 17:56:12): [sssd] [confdb_init_domain_pwd_expire] (0x1000): pwd_expiration_warning is -1
* (2026-04-05 17:56:12): [sssd] [sysdb_ldb_connect] (0x4000): No ldb module path set in env
* (2026-04-05 17:56:12): [sssd] [sss_names_init_from_args] (0x0100): Using re [^(((?P<domain>[^\\]+)\\(?P<name>.+))|((?P<name>.+)@(?P<domain>[^@]+))|((?P<
name>[^@\\]+)))$].
* (2026-04-05 17:56:12): [sssd] [sss_fqnames_init] (0x0100): Using fq format [%1$s@%2$s].
* (2026-04-05 17:56:12): [sssd] [sysdb_domain_init_internal] (0x0200): DB File for PROXMOX.CHIMICA.UNIPD.IT: /var/lib/sss/db/cache_PROXMOX.CHIMICA.UNIPD.I
T.ldb
* (2026-04-05 17:56:12): [sssd] [sysdb_domain_init_internal] (0x0200): Timestamp file for PROXMOX.CHIMICA.UNIPD.IT: /var/lib/sss/db/timestamps_PROXMOX.CHI
MICA.UNIPD.IT.ldb
* (2026-04-05 17:56:12): [sssd] [sysdb_ldb_connect] (0x4000): No ldb module path set in env
* (2026-04-05 17:56:12): [sssd] [ldb] (0x0400): asq: Unable to register control with rootdse!
* (2026-04-05 17:56:12): [sssd] [sysdb_ldb_connect] (0x4000): No ldb module path set in env
* (2026-04-05 17:56:12): [sssd] [monitor_cleanup] (0x0010): Error removing pidfile! (2 [File o directory non esistente])
********************** BACKTRACE DUMP ENDS HERE *********************************

file di configurazione:

krb5.conf
[libdefaults]
default_realm = PROXMOX.CHIMICA.UNIPD.IT
dns_lookup_realm = false
dns_lookup_kdc = true
rdns = false

[realms]
PROXMOX.CHIMICA.UNIPD.IT = {
admin_server = win-iebmipoejgg.proxmox.chimica.unipd.it
kpasswd_server = win-iebmipoejgg.proxmox.chimica.unipd.it
kdc = win-iebmipoejgg.proxmox.chimica.unipd.it
default_domain = proxmox.chimica.unipd.it
}

[domain_realm]
.proxmox.chimica.unipd.it = PROXMOX.CHIMICA.UNIPD.IT
proxmox.chimica.unipd.it = PROXMOX.CHIMICA.UNIPD.IT

[logging]
default = SYSLOG

sssd.conf
[sssd]
domains = PROXMOX.CHIMICA.UNIPD.IT
config_file_version = 2
services = nss, pam

[domain/PROXMOX.CHIMICA.UNIPD.IT]
#override_realm_join = false
id_provider = ad
access_provider = ad
ad_gpo_access_control = disabled
sudo_provider = none
ldap_id_mapping = true
#no gssapi_krb5_spnego = False
default_shell = /bin/bash
krb5_store_password_if_offline = True
cache_credentials = True
krb5_server = win-iebmipoejgg.proxmox.chimica.unipd.it
krb5_realm = PROXMOX.CHIMICA.UNIPD.IT
fallback_homedir = /home/%d/%u
#fallback_homedir = /local/linux/home/%u@%d
default_shell = /bin/bash
#skel_dir = /etc/skel
ad_domain = proxmox.chimica.unipd.it
ad_server = win-iebmipoejgg.proxmox.chimica.unipd.it
use_fully_qualified_names = True
ldap_schema = ad
ldap_opt_timeout = 300
enumerate = true
ldap_idmap_range_min = 1000000
ldap_idmpa_range_max = 1999999
ldap_idmap_range_size = 999999
dyndns_update = true
enumerate = true

[gianse2000]

1- per problemi di velocita' di comicazione delle vm ospitate sui nodi che non comunicano con il mondo esterno (solo uno dei nodi svolge tale funzione in quanto si usa snat) e' necessario imposta MTU della rete EVPN a 1430.
quindi l'interfaccia di rete della vm ubuntu deve essere impostata con un MTU di 1400.
2- in sssd.conf il nome del dominio deve essere il lettere minuscole (a differenza del parametro realm che deve essere in lettere maiuscole).