[SSSD] strange request to my ldapserver.

Dmitri Pal dpal at redhat.com
Tue Jun 22 17:25:57 UTC 2010


Eric Doutreleau wrote:
> well i have configured my client with the following config
>
> [domain/default]
>
> ldap_id_use_start_tls = False
> ldap_tls_reqcert = never
> cache_credentials = True
> ldap_search_base = dc=int-evry,dc=fr
> ldap_user_search_base = ou=People,dc=int-evry,dc=fr
> ldap_group_search_base = ou=Group,ou=System,dc=int-evry,dc=fr
> #ldap_group_search_base = ou=Groups,dc=int-evry,dc=fr
> chpass_provider = none
> id_provider = ldap
> auth_provider = ldap
> debug_level = 3
> min_id = 1
> ldap_uri = ldap://ldap2.int-evry.fr/ , ldap://ldap1.int-evry.fr/ , 
> ldap://ldap3.int-evry.fr/
> ldap_schema = rfc2307
> access_provider = ldap
> ldap_access_filter = IntEPersInetServ=*unix-int*
> ldap_default_bind_dn = cn=mcibind,ou=System,dc=int-evry,dc=fr
> ldap_default_authtok_type = password
> ldap_default_authtok = xxxxxx
> enumerate = True
> create_homedir = False
>
>
> and i got tons of request like that on my server
>
> Jun 22 17:46:47 ldapsync2 slapd[9126]: conn=3940 op=23279627 SRCH 
> attr=cn nisNet
> groupTriple memberNisNetgroup
> Jun 22 17:46:47 ldapsync2 slapd[9126]: conn=3940 op=23279627 SEARCH 
> RESULT tag=1
> 01 err=0 nentries=0 text=
> Jun 22 17:46:47 ldapsync2 slapd[9126]: conn=3940 op=23279628 SRCH 
> base="dc=int-e
> vry,dc=fr" scope=2 deref=0 filter="(&(objectClass=nisNetgroup)(cn=\29))"
> Jun 22 17:46:47 ldapsync2 slapd[9126]: conn=3940 op=23279628 SRCH 
> attr=cn nisNet
> groupTriple memberNisNetgroup
> what are this request for?
>
>   

I suspect it is generated by the NIS netgroups plugin.
Are you using netgroups in IPA?
Did you configure nss_ldap to get netgroups (sssd does not support
netgroups yet)?


> there so much request that at the end i got a lot of message like that 
> on the sssd_default.log file
>
> (Tue Jun 22 18:09:22 2010) [sssd[be[default]]] [sdap_process_result] 
> (2): ERROR: LDAP connection is not connected!
> (Tue Jun 22 18:09:22 2010) [sssd[be[default]]] [sdap_process_result] 
> (2): ERROR: LDAP connection is not connected!
>
>
> when i type id
> i got the messages
> $ id
> uid=14517 gid=145 groupes=145,146,1000000,1000008
>
> does someone how to solve that problem?
> _______________________________________________
> sssd-devel mailing list
> sssd-devel at lists.fedorahosted.org
> https://fedorahosted.org/mailman/listinfo/sssd-devel
>   


-- 
Thank you,
Dmitri Pal

Engineering Manager IPA project,
Red Hat Inc.


-------------------------------
Looking to carve out IT costs?
www.redhat.com/carveoutcosts/




More information about the sssd-devel mailing list