On Tue, Jun 25, 2019 at 07:25:45PM +0000, Thomas Beaudry wrote:
Hi Jakub,
Thanks for the link so i followed the troubleshooting and I notice i can't reach the
data provider mentioned in step 4 ("If the command is reaching the NSS responder,
does it get forwarded to the Data Provider?")
If i look at my sssd_nss log i get with a timestamp that matches my id <username>
command:
(Tue Jun 25 15:14:16 2019) [sssd[nss]] [sss_parse_name_for_domains] (0x0200): name
'root' matched without domain, user is root
(Tue Jun 25 15:14:16 2019) [sssd[nss]] [sss_ncache_set_str] (0x0400): Adding
[NCE/USER/MYDOMAIN.ca/root] to negative cache permanently
(Tue Jun 25 15:14:16 2019) [sssd[nss]] [sss_parse_name_for_domains] (0x0200): name
'root' matched without domain, user is root
(Tue Jun 25 15:14:16 2019) [sssd[nss]] [sss_ncache_set_str] (0x0400): Adding
[NCE/GROUP/MYDOMAIN.ca/root] to negative cache permanently
(Tue Jun 25 15:14:16 2019) [sssd[nss]] [sss_dp_req_destructor] (0x0400): Deleting
request: [0x41eb90:domains@MYDOMAIN.ca]
(Tue Jun 25 15:14:41 2019) [sssd[nss]] [accept_fd_handler] (0x0400): Client connected!
(Tue Jun 25 15:14:41 2019) [sssd[nss]] [sss_cmd_get_version] (0x0200): Received client
version [1].
(Tue Jun 25 15:14:41 2019) [sssd[nss]] [sss_cmd_get_version] (0x0200): Offered version
[1].
(Tue Jun 25 15:14:41 2019) [sssd[nss]] [nss_cmd_getbynam] (0x0400): Running command
[17][SSS_NSS_GETPWNAM] with input [admin].
(Tue Jun 25 15:14:41 2019) [sssd[nss]] [sss_parse_name_for_domains] (0x0200): name
'admin' matched without domain, user is admin
(Tue Jun 25 15:14:41 2019) [sssd[nss]] [nss_cmd_getbynam] (0x0100): Requesting info for
[admin] from [<ALL>]
(Tue Jun 25 15:14:41 2019) [sssd[nss]] [nss_cmd_getpwnam_search] (0x0100): Requesting
info for [admin(a)MYDOMAIN.ca]
(Tue Jun 25 15:14:41 2019) [sssd[nss]] [get_dp_name_and_id] (0x0400): Not a LOCAL view,
continuing with provided values.
(Tue Jun 25 15:14:41 2019) [sssd[nss]] [sss_dp_issue_request] (0x0400): Issuing request
for [0x41d420:1:admin@MYDOMAIN.ca]
(Tue Jun 25 15:14:41 2019) [sssd[nss]] [sss_dp_get_account_msg] (0x0400): Creating
request for [MYDOMAIN.ca][0x1001][FAST BE_REQ_USER][1][name=admin]
The request gets forwarded to the data provider here..
(Tue Jun 25 15:14:41 2019) [sssd[nss]] [sss_dp_internal_get_send]
(0x0400): Entering request [0x41d420:1:admin@MYDOMAIN.ca]
(Tue Jun 25 15:14:41 2019) [sssd[nss]] [nss_cmd_getby_dp_callback] (0x0040): Unable to
get information from Data Provider
Error: 1, 11, Fast reply - offline
..but the data provider replies immediately because it had switched to
the offline mode. For one reason or another, sssd_be couldn't reach any
of the configured or auto-discovered servers.
(Tue Jun 25 15:14:41 2019) [sssd[nss]] [sss_dp_req_destructor]
(0x0400): Deleting request: [0x41d420:1:admin@MYDOMAIN.ca]
(Tue Jun 25 15:14:41 2019) [sssd[nss]] [client_recv] (0x0200): Client disconnected!
What would be the next step?
I would suggest looking at the sssd_MYDOMAIN.log files and look for
messages that contain strings like "marking server XYZ as NOT_WORKING"
or "Going offline". Then look for the request a little earlier, that's
what causes sssd to go offline.