----- Oorspronkelijk bericht -----
Verzonden: Donderdag 16 april 2015 17:19:01
Onderwerp: Re: [SSSD-users] FreeIPA/SSSD LDAP cross-forest trust slow queries
On Thu, Apr 16, 2015 at 05:07:53PM +0200, Bobby Prins wrote:
> (Thu Apr 16 15:51:08 2015) [sssd[be[unix.example.corp]]] [ldb] (0x4000): cancel ldb
transaction (nesting: 2)
> (Thu Apr 16 15:51:08 2015) [sssd[be[unix.example.corp]]] [sysdb_set_entry_attr]
(0x0080): ldb_modify failed: [Attribute or value exists]
> (Thu Apr 16 15:51:08 2015) [sssd[be[unix.example.corp]]] [sysdb_set_entry_attr]
(0x0040): Error: 17 (File exists)
> (Thu Apr 16 15:51:08 2015) [sssd[be[unix.example.corp]]] [sysdb_store_group]
(0x1000): sysdb_set_group_attr failed.
> (Thu Apr 16 15:51:08 2015) [sssd[be[unix.example.corp]]] [sysdb_store_group]
(0x0400): Error: 17 (File exists)
> (Thu Apr 16 15:51:08 2015) [sssd[be[unix.example.corp]]] [sdap_store_group_with_gid]
(0x0040): Could not store group PUB_R(a)example.corp
> (Thu Apr 16 15:51:08 2015) [sssd[be[unix.example.corp]]] [sdap_save_group] (0x0080):
Could not store group with GID: [File exists]
> (Thu Apr 16 15:51:08 2015) [sssd[be[unix.example.corp]]] [sdap_save_group] (0x0080):
Failed to save group [PUB_R(a)example.corp]: [File exists]
> (Thu Apr 16 15:51:08 2015) [sssd[be[unix.example.corp]]] [sdap_save_groups] (0x0040):
Failed to store group 0. Ignoring.
> (Thu Apr 16 15:51:08 2015) [sssd[be[unix.example.corp]]] [ldb] (0x4000): commit ldb
transaction (nesting: 1)
> (Thu Apr 16 15:51:08 2015) [sssd[be[unix.example.corp]]] [ldb] (0x4000): commit ldb
transaction (nesting: 0)
> (Thu Apr 16 15:51:08 2015) [sssd[be[unix.example.corp]]] [sdap_id_op_destroy]
(0x4000): releasing operation connection
> (Thu Apr 16 15:51:08 2015) [sssd[be[unix.example.corp]]] [sdap_id_op_done] (0x4000):
releasing operation connection
This sounds like another bug that Lukas fixed the other day, could you
try his test packages?
https://copr.fedoraproject.org/coprs/lslebodn/sssd-1-12-latest/ Wow, thanks for your
reply. I tested the packages and the errors don't occur anymore. This speeds up
logging in (SSH) using an AD account from ~15 seconds (every time) to 'a couple of
seconds' at most.