Am Mon, Sep 19, 2022 at 11:23:34AM +0200 schrieb Ronald Wimmer:
On 19.09.22 10:41, Sumit Bose via FreeIPA-users wrote:
> Am Mon, Sep 19, 2022 at 08:28:56AM +0200 schrieb Ronald Wimmer via FreeIPA-users:
> > On 14.09.22 19:23, Rob Crittenden wrote:
> > > Ronald Wimmer via FreeIPA-users wrote:
> > > > Hi,
> > > >
> > > > on one of our ipa servers kinit stopped working. kinit admin shows
an
> > > > error:
> > > >
> > > > kinit: Connection reset by peer while getting default ccache
> > > >
> > > > Why? What could possibly be wrong? (the default ccache should be on
the
> > > > same machine so why do I get a conn reset here?)
> > >
> > > This may provide some additional details:
> > >
> > > $ KRB5_TRACE=/dev/stdout kinit admin
> >
> > KRB5_TRACE=/dev/stdout kinit admin
> > kinit: Connection refused while getting default ccache
>
> Hi,
>
> I guess this is a default setup where the sssd-kcm package is installed
> and the default credential cache type is set to KCM. It looks like kinit
> has issues connection to the KCM socket. KCM is socket activated, can
> you check if systemd is handling the socket with
>
> systemctl status sssd-kcm.socket
Thanks a lot. That hint helped!
After upgrading IPA relevant OS packages I do always get an I/O error (SSSD
couldn't load the configuration database [5]: Input/output error.) from
SSSD.
"dnf reinstall sssd-common" fixes the problem. But after another update SSSD
stops working again. (I do fix that with another reinstall...)
Hi,
do you, by chance, still have the SSSD versions before and after the
updates around?
bye,
Sumit
Cheers,
Ronald