Confirmed - the default timeout for idle LDAP connections is set 900 seconds on AD based
ldap servers - so we should be able to close the
connection after some time if nothing else is needed (just to conserve resources, if not
for anything else....).
Ondrej
On 10/06/2011 05:56 PM, Ondrej Valousek wrote:
On 09/27/2011 04:13 PM, Jakub Hrozek wrote:
> What debug_level do you run with? Cau you raise it to 9 so that we see
> more info?
I am here again with debug log 7:
Note that the errors begin 15 minutes after successfully connecting to the LDAP server
for the first time. Just a matter of interest, how
long are we keeping the ldap connection to the server? Is it possible to limit it
somehow?
(Thu Oct 6 17:10:01 2011) [sssd[be[default]]] [sdap_get_generic_done] (6): Search
result: Success(0), (null)
(Thu Oct 6 17:10:01 2011) [sssd[be[default]]] [save_rfc2307bis_user_memberships] (7):
Save parent groups to sysdb
(Thu Oct 6 17:10:01 2011) [sssd[be[default]]] [sysdb_search_groups] (6): Search groups
with filter:
(&(objectclass=group)(member=name=kiranr,cn=users,cn=default,cn=sysdb))
(Thu Oct 6 17:10:01 2011) [sssd[be[default]]] [sysdb_search_groups] (6): Error: 2 (No
such file or directory)
(Thu Oct 6 17:10:01 2011) [sssd[be[default]]] [save_rfc2307bis_user_memberships] (6):
User [kiranr] is not a direct member of any groups
(Thu Oct 6 *17:10:01* 2011) [sssd[be[default]]] [acctinfo_callback] (4): Request
processed. Returned 0,0,Success
(Thu Oct 6 *17:25:30* 2011) [sssd[be[default]]] [sdap_process_result] (4): ldap_result
gave -1, something bad happend!
(Thu Oct 6 17:26:40 2011) [sssd[be[default]]] [be_get_account_info] (4): Got request for
[4099][1][name=webserv]
(Thu Oct 6 17:26:40 2011) [sssd[be[default]]] [fo_resolve_service_send] (4): Trying to
resolve service 'LDAP'
(Thu Oct 6 17:26:40 2011) [sssd[be[default]]] [get_server_status] (7): Status of server
'dcpra1.dublin.ad.s3group.com' is 'working'
(Thu Oct 6 17:26:40 2011) [sssd[be[default]]] [get_port_status] (7): Port status of port
389 for server 'dcpra1.dublin.ad.s3group.com' is
'working'
(Thu Oct 6 17:26:40 2011) [sssd[be[default]]] [resolve_srv_send] (6): The status of SRV
lookup is resolved
(Thu Oct 6 17:26:40 2011) [sssd[be[default]]] [get_server_status] (7): Status of server
'dcpra1.dublin.ad.s3group.com' is 'working'
(Thu Oct 6 17:26:40 2011) [sssd[be[default]]] [be_resolve_server_done] (4): Found
address for server
dcpra1.dublin.ad.s3group.com:
[192.168.60.203]
(Thu Oct 6 17:26:40 2011) [sssd[be[default]]] [sdap_uri_callback] (6): Constructed uri
'ldap://dcpra1.dublin.ad.s3group.com:389'
(Thu Oct 6 17:26:40 2011) [sssd[be[default]]] [sdap_get_generic_send] (6): calling
ldap_search_ext with [(objectclass=*)][].
(Thu Oct 6 17:26:40 2011) [sssd[be[default]]] [sdap_get_generic_send] (7): Requesting
attrs: [*]
(Thu Oct 6 17:26:40 2011) [sssd[be[default]]] [sdap_get_generic_send] (7): Requesting
attrs: [altServer]
(Thu Oct 6 17:26:40 2011) [sssd[be[default]]] [sdap_get_generic_send] (7): Requesting
attrs: [namingContexts]
(Thu Oct 6 17:26:40 2011) [sssd[be[default]]] [sdap_get_generic_send] (7): Requesting
attrs: [supportedControl]
(Thu Oct 6 17:26:40 2011) [sssd[be[default]]] [sdap_get_generic_send] (7): Requesting
attrs: [supportedExtension]
(Thu Oct 6 17:26:40 2011) [sssd[be[default]]] [sdap_get_generic_send] (7): Requesting
attrs: [supportedFeatures]
(Thu Oct 6 17:26:40 2011) [sssd[be[default]]] [sdap_get_generic_send] (7): Requesting
attrs: [supportedLDAPVersion]
(Thu Oct 6 17:26:40 2011) [sssd[be[default]]] [sdap_get_generic_send] (7): Requesting
attrs: [supportedSASLMechanisms]
(Thu Oct 6 17:26:40 2011) [sssd[be[default]]] [sdap_get_generic_send] (7): Requesting
attrs: [defaultNamingContext]
(Thu Oct 6 17:26:40 2011) [sssd[be[default]]] [sdap_get_generic_send] (7): Requesting
attrs: [lastUSN]
(Thu Oct 6 17:26:40 2011) [sssd[be[default]]] [sdap_get_generic_send] (7): Requesting
attrs: [highestCommittedUSN]
(Thu Oct 6 17:26:40 2011) [sssd[be[default]]] [sdap_get_generic_done] (6): Search
result: Success(0), (null)
(Thu Oct 6 17:26:40 2011) [sssd[be[default]]] [sdap_kinit_send] (6): Attempting kinit
((null), draco$(a)DUBLIN.AD.S3GROUP.COM,
DUBLIN.AD.S3GROUP.COM, 86400)
(Thu Oct 6 17:26:40 2011) [sssd[be[default]]] [sdap_kinit_next_kdc] (7): Resolving next
KDC for service KERBEROS
(Thu Oct 6 17:26:40 2011) [sssd[be[default]]] [fo_resolve_service_send] (4): Trying to
resolve service 'KERBEROS'
(Thu Oct 6 17:26:40 2011) [sssd[be[default]]] [get_port_status] (7): Port status of port
0 for server '(no name)' is 'not working'
(Thu Oct 6 17:26:40 2011) [sssd[be[default]]] [get_port_status] (4): Reseting the status
of port 0 for server '(no name)'
(Thu Oct 6 17:26:40 2011) [sssd[be[default]]] [resolve_srv_send] (6): The status of SRV
lookup is not resolved
(Thu Oct 6 17:26:40 2011) [sssd[be[default]]] [fo_set_port_status] (4): Marking port 389
of server 'dcpra1.dublin.ad.s3group.com' as 'not
working'
(Thu Oct 6 17:26:40 2011) [sssd[be[default]]] [fo_resolve_service_send] (4): Trying to
resolve service 'LDAP'
(Thu Oct 6 17:26:40 2011) [sssd[be[default]]] [get_server_status] (7): Status of server
'dcpra1.dublin.ad.s3group.com' is 'working'
(Thu Oct 6 17:26:40 2011) [sssd[be[default]]] [get_port_status] (7): Port status of port
389 for server 'dcpra1.dublin.ad.s3group.com' is
'not working'
(Thu Oct 6 17:26:40 2011) [sssd[be[default]]] [get_server_status] (7): Status of server
'dcpra1.dublin.ad.s3group.com' is 'working'
(Thu Oct 6 17:26:40 2011) [sssd[be[default]]] [get_port_status] (7): Port status of port
389 for server 'dcpra1.dublin.ad.s3group.com' is
'not working'
(Thu Oct 6 17:26:40 2011) [sssd[be[default]]] [fo_resolve_service_send] (1): No
available servers for service 'LDAP'
(Thu Oct 6 17:26:40 2011) [sssd[be[default]]] [sdap_id_op_connect_done] (1): Failed to
connect, going offline (5 [Input/output error])
(Thu Oct 6 17:26:40 2011) [sssd[be[default]]] [be_run_offline_cb] (3): Going offline.
Running callbacks.
(Thu Oct 6 17:26:40 2011) [sssd[be[default]]] [acctinfo_callback] (4): Request
processed. Returned 1,11,Offline
_______________________________________________
sssd-devel mailing list
sssd-devel(a)lists.fedorahosted.org
https://fedorahosted.org/mailman/listinfo/sssd-devel