On Tue, Nov 03, 2015 at 10:25:26AM +0000, Ondrej Valousek wrote:
Hard to say - looks like sssd performed new SRV lookup for ldap
services in AD and ended up this way:
(Mon Nov 2 15:00:04 2015) [sssd[be[default]]] [resolve_srv_done] (0x0400): SRV lookup
did not return any new server.
..this message sounds like sssd was already having trouble, is this the
first time there was the 'not working' message after "server_setup" ?
(Mon Nov 2 15:00:04 2015) [sssd[be[default]]] [set_srv_data_status]
(0x0100): Marking SRV lookup of service 'AD' as 'not resolved'
(Mon Nov 2 15:00:04 2015) [sssd[be[default]]] [be_resolve_server_process] (0x0080):
Couldn't resolve server (SRV lookup meta-server), resolver returned (1432158231)
Here it really looks resolver related, was there anything even before in
the logs?
(Mon Nov 2 15:00:04 2015) [sssd[be[default]]]
[be_resolve_server_process] (0x1000): Trying with the next one!
(Mon Nov 2 15:00:04 2015) [sssd[be[default]]] [fo_resolve_service_send] (0x0100): Trying
to resolve service 'AD'
(Mon Nov 2 15:00:04 2015) [sssd[be[default]]] [get_server_status] (0x1000): Status of
server 'myserver.example.com' is 'working'
(Mon Nov 2 15:00:04 2015) [sssd[be[default]]] [fo_resolve_service_activate_timeout]
(0x2000): Resolve timeout set to 6 seconds
(Mon Nov 2 15:00:04 2015) [sssd[be[default]]] [resolve_srv_send] (0x0200): The status of
SRV lookup is not resolved
(Mon Nov 2 15:00:04 2015) [sssd[be[default]]] [fo_set_port_status] (0x0100): Marking
port 0 of server '(no name)' as 'not working'
(Mon Nov 2 15:00:04 2015) [sssd[be[default]]] [be_resolve_server_process] (0x0080):
Couldn't resolve server (
myserver.example.com), resolver returned (5)
I am guessing that as a part of SRV discovery it wants to refresh status of all ldap
servers - pick up a wrong one (behind a firewall) - SRV discovery times as it does not get
any reply from that wrong ldap server -> sssd goes offline.
I mean - this is a known bug (bug report is already filed in), what I am wondering is why
is it complaining about DNS - does not make any sense to me.
Ondrej
-----Original Message-----
From: sssd-users-bounces(a)lists.fedorahosted.org
[mailto:sssd-users-bounces@lists.fedorahosted.org] On Behalf Of Jakub Hrozek
Sent: 02 November 2015 17:57
To: sssd-users(a)lists.fedorahosted.org
Subject: Re: [SSSD-users] sssd going offline because of DNS errors?
On Mon, Nov 02, 2015 at 01:21:32PM +0000, Ondrej Valousek wrote:
> Hi List,
>
> I have a problem with sssd going randomly offline because of the following errors:
>
> (Mon Nov 2 12:33:52 2015) [sssd[be[default]]] [fo_resolve_service_send] (0x0100):
Trying to resolve service 'AD'
> (Mon Nov 2 12:33:52 2015) [sssd[be[default]]] [resolve_srv_send]
> (0x0200): The status of SRV lookup is not resolved (Mon Nov 2 12:33:52 2015)
[sssd[be[default]]] [fo_set_port_status] (0x0100): Marking port 0 of server '(no
name)' as 'not working'
~~~~~~~~~~~~~~~~~ Is there any context around that would tell
why did sssd go offline?
> (Mon Nov 2 12:33:52 2015) [sssd[be[default]]]
> [be_resolve_server_process] (0x0080): Couldn't resolve server
> (
myserver.example.com), resolver returned (5) <repeat the above 4
> lines multiple times>
>
> (Mon Nov 2 12:33:52 2015) [sssd[be[default]]]
> [be_resolve_server_process] (0x0040): Failed to find a server after 10
> attempts (Mon Nov 2 12:33:52 2015) [sssd[be[default]]] [be_ptask_enable] (0x0080):
Task [Check if online (periodic)]: already enabled (Mon Nov 2 12:33:52 2015)
[sssd[be[default]]] [be_run_offline_cb] (0x0080): Going offline. Running callbacks.
>
> It happens only from time to time - I am pretty sure my DNS is working correctly so
not sure what could be the problem.
> What does it mean "resolver returned (5)"?
The older parts of SSSD use errno codes for everything. In this case the the resolver
returned EIO, which it internally uses to signal that "no more servers are
available". I would first look into why sssd is marking servers as offline.
_______________________________________________
sssd-users mailing list
sssd-users(a)lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/sssd-users
-----
The information contained in this e-mail and in any attachments is confidential and is
designated solely for the attention of the intended recipient(s). If you are not an
intended recipient, you must not use, disclose, copy, distribute or retain this e-mail or
any part thereof. If you have received this e-mail in error, please notify the sender by
return e-mail and delete all copies of this e-mail from your computer system(s). Please
direct any additional queries to: communications(a)s3group.com. Thank You. Silicon and
Software Systems Limited (S3 Group). Registered in Ireland no. 378073. Registered Office:
South County Business Park, Leopardstown, Dublin 18.
_______________________________________________
sssd-users mailing list
sssd-users(a)lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/sssd-users