On (09/04/14 10:40), Angel Bosch wrote:
> I'm sorry, but no. If you started with an empty cache this
indicates
> that multiple LDAP users have the same value in the UID attribute,
> which
> is bad, because it should be unique. Maybe you have to choose a more
> specific search base?.
>
ok, I've fixed duplication problems. It was just some miscreated users. No more
messages regarding duplicated uid.
I've removed /var/lib/sss/db and restarted sssd.
Now I can see sssd_be process eating 100% cpu non-stop and I get 3 errors every 2 minutes
in domain log:
(Wed Apr 9 10:23:58 2014) [sssd[be[xxx.net]]] [fo_add_server] (0x0080): Adding new server
'xxx.net', to service 'LDAP'
(Wed Apr 9 10:23:58 2014) [sssd[be[xxx.net]]] [be_process_init] (0x0080): No SUDO module
provided for [
xxx.xxx.net] !!
(Wed Apr 9 10:23:58 2014) [sssd[be[xxx.net]]] [get_single_value_as_string] (0x0080): More
than one value found.
I understand that first message is just informative. Second one is about sudo module that
I don't use, so I guess there's no worry about that either. But last message is
strange and I'm not sure if I should worry about that one.
I also get this on /var/log/messages
Apr 9 12:17:57 ostra sssd: Starting up
Apr 9 12:17:58 ostra sssd[be[xxx.net]]: Starting up
Apr 9 12:17:58 ostra sssd[nss]: Starting up
Apr 9 12:17:58 ostra sssd[pam]: Starting up
Apr 9 12:19:58 ostra sssd[be[xxx.net]]: Starting up
Apr 9 12:21:58 ostra sssd[be[xxx.net]]: Starting up
Apr 9 12:23:58 ostra sssd[be[xxx.net]]: Starting up
Apr 9 12:25:58 ostra sssd[be[xxx.net]]: Starting up
Apr 9 12:27:58 ostra sssd[be[xxx.net]]: Starting up
Apr 9 12:29:58 ostra sssd[be[xxx.net]]: Starting up
Apr 9 12:31:58 ostra sssd[be[xxx.net]]: Starting up
Apr 9 12:33:58 ostra sssd[be[xxx.net]]: Starting up
Apr 9 12:35:58 ostra sssd[be[xxx.net]]: Starting up
Apr 9 12:37:58 ostra sssd[be[xxx.net]]: Starting up
How long should it take sssd_be to be started?
abosch
The problem is enumeration.
I would say you have a lot of users in your LDAP. sssd_be was fetching
informations from LDAP (reason of high CPU usage). It took very long time
and sssd_be diddn't have a time to reply with "pong" to main process.
Therefore sssd_be was restarted.
You can try to increase timeout from default value 10 seconds to 15 or 20.
Please do not use very big value, because it can have negative consequences
for other processes.
LS