On Thu, Dec 06, 2012 at 11:37:41AM -0500, Qing Chang wrote:
On 05/12/2012 2:58 PM, Dmitri Pal wrote:
>On 12/05/2012 02:00 PM, Qing Chang wrote:
>>On 05/12/2012 12:59 PM, Simo Sorce wrote:
>>>On Wed, 2012-12-05 at 11:31 -0500, Qing Chang wrote:
>>>
>>>I see this:
>>>
>>>>First failed "getent passwd shassan" triggers:
>>>>(Wed Dec 5 10:45:05 2012) [sssd[nss]] [nss_cmd_getpwnam_dp_callback]
>>>>(0x0040): Unable to get
>>>>information from Data Provider
>>>>Error: 1, 11, Fast reply - offline
>>>>Will try to return what we have in cache
>>>but later on you report only logs after 10:45:05.
>>>
>>>It would be useful to see what happened in the provider immediately
>>>before the error was returned. In particular I would like to see what
>>>error caused the provider to go offline and if it mentions removing the
>>>user in any way.
>>the problem is we don't know when the loss of memory happened and it
>>appears to
>>me that nothing is logged about it. If you don't mind, I can send in
>>more logs.
>>>>(Wed Dec 5 10:45:48 2012) [sssd[be[sri.utoronto.ca]]]
>>>>[sdap_save_user] (0x0400): Storing info for
>>>>user shassan
>>>>(Wed Dec 5 10:45:48 2012) [sssd[be[sri.utoronto.ca]]]
>>>>[sysdb_search_user_by_name] (0x0400): No such
>>>>entry
>>>>(Wed Dec 5 10:45:48 2012) [sssd[be[sri.utoronto.ca]]]
>>>>[sysdb_add_user] (0x0400): Error: 17 (File
>>>>exists)
>>>>(Wed Dec 5 10:45:48 2012) [sssd[be[sri.utoronto.ca]]]
>>>>[sysdb_store_user] (0x0080): A user with the
>>>>same UID [54184] was removed from the cache
>>>>(Wed Dec 5 10:45:48 2012) [sssd[be[sri.utoronto.ca]]]
>>>>[sysdb_search_user_by_uid] (0x0400): No such
>>>>entry
>>>This is interesting, do you have duplicated UIDs in your directory by
>>>chance ?
>>That was also what I was wondering about, but that's her id, it is
>>unique.
>Can you compare the LDAP entry of this user to couple other users that
>are OK, use SSSD regularly and do not have an issue?
>May be there is something else in the user entry that would shed the light.
there is nothing different after comparing with a few accounts. The cmd line I used
is this:
ldapsearch -LL -x -D 'cn=Directory Manager' -W -b
'dc=sri,dc=utoronto,dc=ca' '(uid=shassan)'
Could there be still something not showing by this cmd?
The term "uid" is kind of overloaded here. We're looking for non-unique
UID numbers, not the uid LDAP attributes, which store the name.
Something like this might show the offender:
ldapsearch -LL -x -D 'cn=Directory Manager' -W -b
'dc=sri,dc=utoronto,dc=ca' '(uidNumber=54184)'