Hi Michael,
On 11/22/18 2:55 PM, Michael Ströder wrote:
On 11/22/18 2:23 PM, Harald Dunkel wrote:
> I am not sure if waiting for the interface solves the problem. It
> should wait for DNS to succeed, shouldn't it?
> [..]
> I would prefer if the backend waits for DNS a little bit longer, of course.
Hmm, from my understanding the backend should be available after DNS
resolving works again.
Does the backend stay dead after /etc/resolv.conf being corrected?
Yes. I have to restart sssd to make it work. If I don't, then sssd_nss
complains
:
(Thu Nov 22 10:24:00 2018) [sssd[nss]] [sss_dp_get_reply] (0x0010): The Data Provider
returned an error [org.freedesktop.sssd.Error.DataProvider.Offline]
(Thu Nov 22 10:24:00 2018) [sssd[nss]] [sss_dp_get_reply] (0x0010): The Data Provider
returned an error [org.freedesktop.sssd.Error.DataProvider.Offline]
(Thu Nov 22 10:24:00 2018) [sssd[nss]] [sss_dp_get_reply] (0x0010): The Data Provider
returned an error [org.freedesktop.sssd.Error.DataProvider.Offline]
:
(Thu Nov 22 10:51:06 2018) [sssd[nss]] [sss_dp_get_reply] (0x0010): The Data Provider
returned an error [org.freedesktop.sssd.Error.DataProvider.Offline]
(Thu Nov 22 10:51:06 2018) [sssd[nss]] [sss_dp_get_reply] (0x0010): The Data Provider
returned an error [org.freedesktop.sssd.Error.DataProvider.Offline]
(Thu Nov 22 10:52:01 2018) [sssd[nss]] [sss_dp_get_reply] (0x0010): The Data Provider
returned an error [org.freedesktop.sssd.Error.DataProvider.Offline]
(Thu Nov 22 10:52:01 2018) [sssd[nss]] [sss_dp_get_reply] (0x0010): The Data Provider
returned an error [org.freedesktop.sssd.Error.DataProvider.Offline]
:
> Surely systemctl status sssd should not say "running",
while the
> backend is dead.
Not sure about that. The NSS and PAM responders serve cached data from
the local DB even in the case all backends are marked dead. Of course
this does not help you if there's no cached data available yet.
I understand that the local database is an important part of sssd,
but it should be possible to separate accessing the network services
from providing cached data.
IMHO the startup procedure should not say "success", hiding the problem
until the cached data expires.
Not to mention that there was no cached data in my case, because sssd
never ran before.
Regards
Harri