On Jun 24, 2013, at 2:52 PM, Stephen Gallagher wrote:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 06/24/2013 08:23 AM, Steve Traylen wrote:
>
> Hi
>
> sssd-1.9.2-82.7.el6_4
>
> I've a few Error messages that I'd like to understand , if you have
> some comments that would be great.
>
>
> * sssd_CERN.log
>
> sssd[be[CERN]]] [sysdb_search_user_by_uid] (0x0400): No such entry
> sssd[be[CERN]]] [sysdb_delete_group] (0x0400): Error: 2 (No such
> file or directory)
>
Safe to ignore. 0x400 is informational only. The fact that it says
"Error" is incorrect. It's basically just a check to ensure that the
object must be removed from the cache. If it's not there previously,
then failing to remove it is non-fatal.
> * sssd_nss.log (Mon Jun 24 06:40:26 2013) [sssd[nss]]
> [sbus_dispatch] (0x4000): dbus conn: FC3020 (Mon Jun 24 06:40:26
> 2013) [sssd[nss]] [sbus_dispatch] (0x4000): Dispatching. (Mon Jun
> 24 06:40:26 2013) [sssd[nss]] [sbus_remove_timeout] (0x2000):
> 0xc5eff0 (Mon Jun 24 06:40:26 2013) [sssd[nss]]
> [nss_cmd_getpwuid_dp_callback] (0x0040): Unable to get information
> from Data Provider Error: 3, 5, (null) Will try to return what we
> have in cache (Mon Jun 24 06:40:26 2013) [sssd[nss]]
> [sss_dp_req_destructor] (0x0400): Deleting request:
> [0x430590:1:-1@CERN] (Mon Jun 24 06:40:26 2013) [sssd[nss]]
> [reset_idle_timer] (0x4000): Idle timer re-set for client
> [0xd85a00][20]
>
>
> * sssd_nss.log (Mon Jun 24 09:52:18 2013) [sssd[nss]]
> [sss_dp_get_reply] (0x1000): Got reply from Data Provider - DP
> error code: 1 errno: 11 error message: Fast reply - offline (Mon
> Jun 24 09:52:18 2013) [sssd[nss]] [nss_cmd_getpwnam_dp_callback]
> (0x0040): Unable to get information from Data Provider Error: 1,
> 11, Fast reply - offline Will try to return what we have in cache
>
These errors mean that for some reason, the data provider was unable
to return fresh information from LDAP. This could be do to
disconnected operation, a bug in the data provider process or many
other things. What it's telling you is that it will use the cached
information until it can contact LDAP again.
For connections to LDAP I do see some timeouts as below.
One thing I note is it says 6 seconds for a timeout but the time stamps do not suggest
anything like that.
(Tue Jun 25 04:20:35 2013) [sssd[be[CERN]]] [be_resolve_server_process] (0x0200): Found
address for server 137.138.145.178: [137.138.145.1
78] TTL 7200
(Tue Jun 25 04:20:35 2013) [sssd[be[CERN]]] [sdap_uri_callback] (0x0400): Constructed uri
'ldap://137.138.145.178:389'
(Tue Jun 25 04:20:35 2013) [sssd[be[CERN]]] [sss_ldap_init_send] (0x4000): Using file
descriptor [23] for LDAP connection.
(Tue Jun 25 04:20:35 2013) [sssd[be[CERN]]] [sss_ldap_init_send] (0x0400): Setting 6
seconds timeout for connecting
(Tue Jun 25 04:20:35 2013) [sssd[be[CERN]]] [sdap_get_generic_done] (0x0100):
sdap_get_generic_ext_recv failed [110]: Connection timed out
(Tue Jun 25 04:20:35 2013) [sssd[be[CERN]]] [sdap_id_op_done] (0x4000): advising for
connection retry #1
(Tue Jun 25 04:20:35 2013) [sssd[be[CERN]]] [sdap_id_op_done] (0x4000): releasing
operation connection
(Tue Jun 25 04:20:35 2013) [sssd[be[CERN]]] [sdap_id_op_connect_step] (0x4000): waiting
for connection to complete
(Tue Jun 25 04:20:35 2013) [sssd[be[CERN]]] [sdap_get_generic_done] (0x0100):
sdap_get_generic_ext_recv failed [110]: Connection timed out
(Tue Jun 25 04:20:35 2013) [sssd[be[CERN]]] [sdap_id_op_done] (0x4000): advising for
connection retry #1
(Tue Jun 25 04:20:35 2013) [sssd[be[CERN]]] [sdap_id_op_done] (0x4000): releasing
operation connection
(Tue Jun 25 04:20:35 2013) [sssd[be[CERN]]] [sdap_id_op_connect_step] (0x4000): waiting
for connection to complete
(Tue Jun 25 04:20:35 2013) [sssd[be[CERN]]] [sdap_get_generic_done] (0x0100):
sdap_get_generic_ext_recv failed [110]: Connection timed out
> * sssd_pam.log (Mon Jun 24 09:52:18 2013) [sssd[pam]]
> [sss_dp_get_reply] (0x1000): Got reply from Data Provider - DP
> error code: 1 errno: 11 error message: Offline (Mon Jun 24 09:52:18
> 2013) [sssd[pam]] [pam_check_user_dp_callback] (0x0040): Unable to
> get information from Data Provider Error: 1, 11, Offline (Mon Jun
> 24 09:52:18 2013) [sssd[pam]] [pam_check_user_search] (0x0100):
> Requesting info for [XXXXXXX@CERN]
>
"Offline" means that the Data Provider (sssd_be) has determined that
it cannot reach LDAP right now (or it's still in the two minute
waiting period between retries) and it's just telling the SSSD to go
straight to the cache.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.13 (GNU/Linux)
Comment: Using GnuPG with Thunderbird -
http://www.enigmail.net/
iEYEARECAAYFAlHIQQYACgkQeiVVYja6o6OGzgCgmydshbdOvLrq4mjIlk2LE4P9
EjsAn1KzQRba4MesnRuqw2szccWRPnOs
=XupT
-----END PGP SIGNATURE-----