[SSSD] strange request to my ldapserver.

Stephen Gallagher sgallagh at redhat.com
Tue Jun 22 17:30:36 UTC 2010


On 06/22/2010 12:23 PM, Eric Doutreleau wrote:
> well i have configured my client with the following config
>
> [domain/default]
>
> ldap_id_use_start_tls = False
> ldap_tls_reqcert = never
> cache_credentials = True
> ldap_search_base = dc=int-evry,dc=fr
> ldap_user_search_base = ou=People,dc=int-evry,dc=fr
> ldap_group_search_base = ou=Group,ou=System,dc=int-evry,dc=fr
> #ldap_group_search_base = ou=Groups,dc=int-evry,dc=fr
> chpass_provider = none
> id_provider = ldap
> auth_provider = ldap
> debug_level = 3
> min_id = 1
> ldap_uri = ldap://ldap2.int-evry.fr/ , ldap://ldap1.int-evry.fr/ ,
> ldap://ldap3.int-evry.fr/
> ldap_schema = rfc2307
> access_provider = ldap
> ldap_access_filter = IntEPersInetServ=*unix-int*
> ldap_default_bind_dn = cn=mcibind,ou=System,dc=int-evry,dc=fr
> ldap_default_authtok_type = password
> ldap_default_authtok = xxxxxx
> enumerate = True
> create_homedir = False
>
>
> and i got tons of request like that on my server
>
> Jun 22 17:46:47 ldapsync2 slapd[9126]: conn=3940 op=23279627 SRCH
> attr=cn nisNet
> groupTriple memberNisNetgroup
> Jun 22 17:46:47 ldapsync2 slapd[9126]: conn=3940 op=23279627 SEARCH
> RESULT tag=1
> 01 err=0 nentries=0 text=
> Jun 22 17:46:47 ldapsync2 slapd[9126]: conn=3940 op=23279628 SRCH
> base="dc=int-e
> vry,dc=fr" scope=2 deref=0 filter="(&(objectClass=nisNetgroup)(cn=\29))"
> Jun 22 17:46:47 ldapsync2 slapd[9126]: conn=3940 op=23279628 SRCH
> attr=cn nisNet
> groupTriple memberNisNetgroup
> what are this request for?

This is for netgroups. SSSD doesn't handle this, it must be coming from 
somewhere else. Check /etc/nsswitch.conf for a line like:

netgroup: files ldap

Remove 'ldap' if you're not using netgroups.

>
> there so much request that at the end i got a lot of message like that
> on the sssd_default.log file
>
> (Tue Jun 22 18:09:22 2010) [sssd[be[default]]] [sdap_process_result]
> (2): ERROR: LDAP connection is not connected!
> (Tue Jun 22 18:09:22 2010) [sssd[be[default]]] [sdap_process_result]
> (2): ERROR: LDAP connection is not connected!
>

You were hitting https://bugzilla.redhat.com/show_bug.cgi?id=591873

It's fixed in sssd-1.2.1 (available in updates-testing now).

-- 
Stephen Gallagher
RHCE 804006346421761

Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/



More information about the sssd-devel mailing list