sssd-users November 2017

sssd-users@lists.fedorahosted.org

22 participants
22 discussions

Weird SSSD shutdown
by Lachlan Musicman 02 Nov '17

02 Nov '17

Last night sssd shutdown on one of my servers. I had updated the IPA server earlier in the day - but only patches to 4.5.0, nothing major. The error I saw this AM was: (Wed Nov 1 17:08:22 2017) [sssd[be[unix.domain.com]]] [orderly_shutdown] (0x0010): SIGTERM: killing children (Wed Nov 1 17:08:50 2017) [sssd[be[unix.domain.com]]] [sysdb_domain_cache_connect] (0x0010): DB version too old [0.18], expected [0.19] for domain unix.domain.com! (Wed Nov 1 17:08:50 2017) [sssd[be[unix.domain.com]]] [be_process_init] (0x0010): Unable to initialize domain (Wed Nov 1 17:08:50 2017) [sssd[be[unix.domain.com]]] [main] (0x0010): Could not initialize backend [1432158275] None of the other servers that use sssd/ipa were affected? Would appreciate any insight into what happened. I guess the questions I'd ask are: - error is obv - db version. Is it that obv? - that said, why only one server and not all of them? - Should I expect the others to fail soon? - why now? I've updated ipa and sssd numerous times without seeing this error that I know of. Cheers L. ------ "The antidote to apocalypticism is *apocalyptic civics*. Apocalyptic civics is the insistence that we cannot ignore the truth, nor should we panic about it. It is a shared consciousness that our institutions have failed and our ecosystem is collapsing, yet we are still here — and we are creative agents who can shape our destinies. Apocalyptic civics is the conviction that the only way out is through, and the only way through is together. " *Greg Bloom* @greggish https://twitter.com/greggish/status/873177525903609857

3 6

keytab retrieval for user into several servers
by Hampus Lundqvist 02 Nov '17

02 Nov '17

Hi I'm looking for a solution where I can get retrieve one users keytab to several ipa-clients. Tried with ipa-getkeytab first, but previous keytab seems to become invalid. (running ipa-client 3.x from RHEL6 and ipa-server 4.5 (rhel7)). Does anyone have a suggestion on how we accomplish this, without introducing scp of the keytab file between hosts? BR Hampus

2 1

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

sssd-users November 2017