On Wed, Apr 09, 2014 at 11:16:41AM +0200, Angel Bosch wrote:
> The problem is enumeration.
>
> I would say you have a lot of users in your LDAP. sssd_be was
> fetching
> informations from LDAP (reason of high CPU usage). It took very long
> time
> and sssd_be diddn't have a time to reply with "pong" to main process.
> Therefore sssd_be was restarted.
>
> You can try to increase timeout from default value 10 seconds to 15
> or 20.
> Please do not use very big value, because it can have negative
> consequences
> for other processes.
>
ok, finally got it working.
now I see lot of errors like this:
(Wed Apr 9 11:13:18 2014) [sssd[be[xxx.net]]] [sdap_save_grpmem] (0x0040): Failed to
save user maquines
(Wed Apr 9 11:13:18 2014) [sssd[be[xxx.net]]] [sdap_save_groups] (0x0040): Failed to
store group 5 members.
Is this all the logs say even with a high log level? I think the code is not
particularly verbose, unfortunately.
Pavel R. will send a patch to include more debug messages at least in
master, though..