Confirmed - the default timeout for idle LDAP connections is set 900 seconds on AD based ldap servers - so we should be able to close the connection after some time if nothing else is needed (just to conserve resources, if not for anything else....).

Ondrej

On 10/06/2011 05:56 PM, Ondrej Valousek wrote:
On 09/27/2011 04:13 PM, Jakub Hrozek wrote:
What debug_level do you run with? Cau you raise it to 9 so that we see
more info? 
I am here again with debug log 7:
Note that the errors begin 15 minutes after successfully connecting to the LDAP server for the first time. Just a matter of interest, how long are we keeping the ldap connection to the server? Is it possible to limit it somehow?

(Thu Oct  6 17:10:01 2011) [sssd[be[default]]] [sdap_get_generic_done] (6): Search result: Success(0), (null)
(Thu Oct  6 17:10:01 2011) [sssd[be[default]]] [save_rfc2307bis_user_memberships] (7): Save parent groups to sysdb
(Thu Oct  6 17:10:01 2011) [sssd[be[default]]] [sysdb_search_groups] (6): Search groups with filter: (&(objectclass=group)(member=name=kiranr,cn=users,cn=default,cn=sysdb))
(Thu Oct  6 17:10:01 2011) [sssd[be[default]]] [sysdb_search_groups] (6): Error: 2 (No such file or directory)
(Thu Oct  6 17:10:01 2011) [sssd[be[default]]] [save_rfc2307bis_user_memberships] (6): User [kiranr] is not a direct member of any groups
(Thu Oct  6 17:10:01 2011) [sssd[be[default]]] [acctinfo_callback] (4): Request processed. Returned 0,0,Success
(Thu Oct  6 17:25:30 2011) [sssd[be[default]]] [sdap_process_result] (4): ldap_result gave -1, something bad happend!
(Thu Oct  6 17:26:40 2011) [sssd[be[default]]] [be_get_account_info] (4): Got request for [4099][1][name=webserv]
(Thu Oct  6 17:26:40 2011) [sssd[be[default]]] [fo_resolve_service_send] (4): Trying to resolve service 'LDAP'
(Thu Oct  6 17:26:40 2011) [sssd[be[default]]] [get_server_status] (7): Status of server 'dcpra1.dublin.ad.s3group.com' is 'working'
(Thu Oct  6 17:26:40 2011) [sssd[be[default]]] [get_port_status] (7): Port status of port 389 for server 'dcpra1.dublin.ad.s3group.com' is 'working'
(Thu Oct  6 17:26:40 2011) [sssd[be[default]]] [resolve_srv_send] (6): The status of SRV lookup is resolved
(Thu Oct  6 17:26:40 2011) [sssd[be[default]]] [get_server_status] (7): Status of server 'dcpra1.dublin.ad.s3group.com' is 'working'
(Thu Oct  6 17:26:40 2011) [sssd[be[default]]] [be_resolve_server_done] (4): Found address for server dcpra1.dublin.ad.s3group.com: [192.168.60.203]
(Thu Oct  6 17:26:40 2011) [sssd[be[default]]] [sdap_uri_callback] (6): Constructed uri 'ldap://dcpra1.dublin.ad.s3group.com:389'
(Thu Oct  6 17:26:40 2011) [sssd[be[default]]] [sdap_get_generic_send] (6): calling ldap_search_ext with [(objectclass=*)][].
(Thu Oct  6 17:26:40 2011) [sssd[be[default]]] [sdap_get_generic_send] (7): Requesting attrs: [*]
(Thu Oct  6 17:26:40 2011) [sssd[be[default]]] [sdap_get_generic_send] (7): Requesting attrs: [altServer]
(Thu Oct  6 17:26:40 2011) [sssd[be[default]]] [sdap_get_generic_send] (7): Requesting attrs: [namingContexts]
(Thu Oct  6 17:26:40 2011) [sssd[be[default]]] [sdap_get_generic_send] (7): Requesting attrs: [supportedControl]
(Thu Oct  6 17:26:40 2011) [sssd[be[default]]] [sdap_get_generic_send] (7): Requesting attrs: [supportedExtension]
(Thu Oct  6 17:26:40 2011) [sssd[be[default]]] [sdap_get_generic_send] (7): Requesting attrs: [supportedFeatures]
(Thu Oct  6 17:26:40 2011) [sssd[be[default]]] [sdap_get_generic_send] (7): Requesting attrs: [supportedLDAPVersion]
(Thu Oct  6 17:26:40 2011) [sssd[be[default]]] [sdap_get_generic_send] (7): Requesting attrs: [supportedSASLMechanisms]
(Thu Oct  6 17:26:40 2011) [sssd[be[default]]] [sdap_get_generic_send] (7): Requesting attrs: [defaultNamingContext]
(Thu Oct  6 17:26:40 2011) [sssd[be[default]]] [sdap_get_generic_send] (7): Requesting attrs: [lastUSN]
(Thu Oct  6 17:26:40 2011) [sssd[be[default]]] [sdap_get_generic_send] (7): Requesting attrs: [highestCommittedUSN]
(Thu Oct  6 17:26:40 2011) [sssd[be[default]]] [sdap_get_generic_done] (6): Search result: Success(0), (null)
(Thu Oct  6 17:26:40 2011) [sssd[be[default]]] [sdap_kinit_send] (6): Attempting kinit ((null), draco$@DUBLIN.AD.S3GROUP.COM, DUBLIN.AD.S3GROUP.COM, 86400)
(Thu Oct  6 17:26:40 2011) [sssd[be[default]]] [sdap_kinit_next_kdc] (7): Resolving next KDC for service KERBEROS
(Thu Oct  6 17:26:40 2011) [sssd[be[default]]] [fo_resolve_service_send] (4): Trying to resolve service 'KERBEROS'
(Thu Oct  6 17:26:40 2011) [sssd[be[default]]] [get_port_status] (7): Port status of port 0 for server '(no name)' is 'not working'
(Thu Oct  6 17:26:40 2011) [sssd[be[default]]] [get_port_status] (4): Reseting the status of port 0 for server '(no name)'
(Thu Oct  6 17:26:40 2011) [sssd[be[default]]] [resolve_srv_send] (6): The status of SRV lookup is not resolved
(Thu Oct  6 17:26:40 2011) [sssd[be[default]]] [fo_set_port_status] (4): Marking port 389 of server 'dcpra1.dublin.ad.s3group.com' as 'not working'
(Thu Oct  6 17:26:40 2011) [sssd[be[default]]] [fo_resolve_service_send] (4): Trying to resolve service 'LDAP'
(Thu Oct  6 17:26:40 2011) [sssd[be[default]]] [get_server_status] (7): Status of server 'dcpra1.dublin.ad.s3group.com' is 'working'
(Thu Oct  6 17:26:40 2011) [sssd[be[default]]] [get_port_status] (7): Port status of port 389 for server 'dcpra1.dublin.ad.s3group.com' is 'not working'
(Thu Oct  6 17:26:40 2011) [sssd[be[default]]] [get_server_status] (7): Status of server 'dcpra1.dublin.ad.s3group.com' is 'working'
(Thu Oct  6 17:26:40 2011) [sssd[be[default]]] [get_port_status] (7): Port status of port 389 for server 'dcpra1.dublin.ad.s3group.com' is 'not working'
(Thu Oct  6 17:26:40 2011) [sssd[be[default]]] [fo_resolve_service_send] (1): No available servers for service 'LDAP'
(Thu Oct  6 17:26:40 2011) [sssd[be[default]]] [sdap_id_op_connect_done] (1): Failed to connect, going offline (5 [Input/output error])
(Thu Oct  6 17:26:40 2011) [sssd[be[default]]] [be_run_offline_cb] (3): Going offline. Running callbacks.
(Thu Oct  6 17:26:40 2011) [sssd[be[default]]] [acctinfo_callback] (4): Request processed. Returned 1,11,Offline

_______________________________________________ sssd-devel mailing list sssd-devel@lists.fedorahosted.org https://fedorahosted.org/mailman/listinfo/sssd-devel