Hi,
I just had a weird situation: one of my servers suddenly no longer
allowed me to log in (pam auth via sssd).
Looking in the log for sssd, I had this message once every minute:
[sssd[pam]] [pam_dp_reconnect_init] (0): Could not reconnect to LDAP
provider.
Also, "getent passwd" no longer showed any ldap users.
Everything seemed correct, also the ldap servers, so I just restarted
the sssd daemon and all was well again.
Shouldn't the retry options of sssd just do that?
I have this as sssd config (obfuscated a bit):
[sssd]
config_file_version = 2
reconnection_retries = 3
sbus_timeout = 30
services = nss, pam
domains = LDAP
[nss]
filter_groups = root
filter_users = root,ldap,named,avahi,haldaemon,messagebus,dbus,vcsa,ntp
reconnection_retries = 3
[pam]
reconnection_retries = 3
[domain/LDAP]
id_provider = ldap
auth_provider = ldap
access_provider = ldap
ldap_access_filter = memberOf=xxxx
ldap_uri = ldap://host1, ldap://host2
ldap_search_base = xxxxx
ldap_tls_reqcert = demand
ldap_tls_cacertdir = /etc/openldap/cacerts
ldap_search_timeout = 5
cache_credentials = true
enumerate = true
entry_cache_timeout = 5400
Any tips on how to prevent needing to restart sssd?
Franky