[SSSD] signals and sssd?

Stephen Gallagher sgallagh at redhat.com
Tue Nov 2 14:31:46 UTC 2010


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 11/02/2010 10:17 AM, Dmitri Pal wrote:
> Jeff Schroeder wrote:
>> On Tue, Nov 2, 2010 at 7:04 AM, Moritz Baumann
>> <moritz.baumann at inf.ethz.ch> wrote:
>>   
>>>> I filed a ticket: https://fedorahosted.org/sssd/ticket/665
>>>>       
>>> as stated in the ticket HUP appears only to rotate the log.
>>>
>>> a) this should be documented.
>>>     
> Right.
> 
>>> b) there should be a signal causing sssd to reread its configuration.
>>> On a server having no users/groups during service sssd restart might be
>>> undesirable.
>>>     
> 
> I think there was an attempt to implement this.
> I found this ticket.
> https://fedorahosted.org/sssd/ticket/13
> Are you saying it is not working?
> 

This ticket was implemented early on, but as the SSSD grew in
complexity, we removed this functionality because it was causing issues.

There's some ongoing discussion about how to properly handle this going
forward, but it's a complicated problem. Most notably because each
different data provider backend has to be able to reload its own
configuration, and this can't necessarily be done live in some cases.

One suggestion that's been proposed is that on reload, we have the
monitor reload its configuration and then just kill and restart all of
the responders and providers. This would accomplish the goal, but it
would also interrupt any requests that are occurring at the same time.

Making the SSSD reload all its configurations without interrupting
in-progress requests is a fairly complicated undertaking. And no matter
what, we still have to be able to account for the [sssd] section
changing values for the "services" and "domains" entries, which will
force a shutdown and/or startup of some of the helper processes anyway.

- -- 
Stephen Gallagher
RHCE 804006346421761

Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAkzQINIACgkQeiVVYja6o6PblwCdHLAjGQ2vPWvbeJSyCIu8wzXS
a8oAoJzfnvc0NQQ0MCtIP01mkx3QMlws
=O9Fj
-----END PGP SIGNATURE-----



More information about the sssd-devel mailing list