On 19.09.22 12:47, Sumit Bose wrote:
Am Mon, Sep 19, 2022 at 11:23:34AM +0200 schrieb Ronald Wimmer:
> On 19.09.22 10:41, Sumit Bose via FreeIPA-users wrote:
>> Am Mon, Sep 19, 2022 at 08:28:56AM +0200 schrieb Ronald Wimmer via
FreeIPA-users:
>>> On 14.09.22 19:23, Rob Crittenden wrote:
>>>> Ronald Wimmer via FreeIPA-users wrote:
>>>>> Hi,
>>>>>
>>>>> on one of our ipa servers kinit stopped working. kinit admin shows
an
>>>>> error:
>>>>>
>>>>> kinit: Connection reset by peer while getting default ccache
>>>>>
>>>>> Why? What could possibly be wrong? (the default ccache should be on
the
>>>>> same machine so why do I get a conn reset here?)
>>>>
>>>> This may provide some additional details:
>>>>
>>>> $ KRB5_TRACE=/dev/stdout kinit admin
>>>
>>> KRB5_TRACE=/dev/stdout kinit admin
>>> kinit: Connection refused while getting default ccache
>>
>> Hi,
>>
>> I guess this is a default setup where the sssd-kcm package is installed
>> and the default credential cache type is set to KCM. It looks like kinit
>> has issues connection to the KCM socket. KCM is socket activated, can
>> you check if systemd is handling the socket with
>>
>> systemctl status sssd-kcm.socket
>
> Thanks a lot. That hint helped!
>
> After upgrading IPA relevant OS packages I do always get an I/O error (SSSD
> couldn't load the configuration database [5]: Input/output error.) from
> SSSD.
>
> "dnf reinstall sssd-common" fixes the problem. But after another update
SSSD
> stops working again. (I do fix that with another reinstall...)
Hi,
do you, by chance, still have the SSSD versions before and after the
updates around?
I digged a little deeper. It has nothing todo with the updates but with
rebooting the machine.
After a reboot the directory /var/lib/sss/db is missing. So I do get a
"NOPERMISSION" error upon trying to start sssd. Doing a "dnf reinstall
sssd-common" fixes that.
sssd-common is 2.6.2-4.0.2.el8_6.1.x86_64
Cheers,
Ronald