[SSSD] [PATCHES] Primary server support in SSSD

Pavel Březina pbrezina at redhat.com
Tue Jul 31 13:14:16 UTC 2012


On 31.7.2012 10:39, Jan Zelený wrote:
> Dne pondělí 30 července 2012 13:53:50, Pavel Březina napsal(a):
>> On 07/20/2012 02:04 PM, Jan Zelený wrote:
>>> Dne čtvrtek 19 července 2012 16:10:08, Stephen Gallagher napsal(a):
>>>> On Tue, 2012-07-17 at 11:21 +0200, Jan Zelený wrote:
>>>>> Dne středa 11 července 2012 13:34:33, Stephen Gallagher napsal(a):
>>>>>> On Thu, 2012-06-21 at 12:15 +0200, Jan Zelený wrote:
>>>>>>>> On Fri, 2012-06-08 at 12:56 +0200, Jan Zelený wrote:
>>>>>>>>> Hi everybody,
>>>>>>>>> I'm sending some patches which implement the primary server
>>>>>>>>> support as
>>>>>>>>> I
>>>>>>>>> see it. It it based on comment #6 in the related ticket
>>>>>>>>> https://fedorahosted.org/sssd/ticket/1128
>>>>>>>>>
>>>>>>>>>
>>>>>>>>> Patch #0001 basically adds the necessary support in failover code
>>>>>>>>> Patches #0002 - #0004 extend this support in each provider
>>>>>>>>> Patch #0005 documents the new concept in failover section in man
>>>>>>>>> pages
>>>>>>>>> Patches #0006 - #0008 add new options for each provider which
>>>>>>>>> utilize
>>>>>>>>> this
>>>>>>>>> concept.
>>>>>>>>>
>>>>>>>>>
>>>>>>>>> Just briefly about the approach. When adding a new server to the
>>>>>>>>> list
>>>>>>>>> of
>>>>>>>>> servers related to a service, each server can be marked either as
>>>>>>>>> primary
>>>>>>>>> or secondary.
>>>>>>>>>
>>>>>>>>> When selecting new server from failover list, the algorithm
>>>>>>>>> iterates
>>>>>>>>> over
>>>>>>>>> the list twice - first it tries to look for primary server and if
>>>>>>>>> none
>>>>>>>>> is
>>>>>>>>> found, it tries also secondary server.
>>>>>>>>>
>>>>>>>>> If a server is returned from failover, and it is not primary
>>>>>>>>> server, a
>>>>>>>>> timeout is set (currently hard-coded for 30 seconds) for primary
>>>>>>>>> server
>>>>>>>>> lookup. This timeout is rescheduled until a primary server is
>>>>>>>>> found.
>>>>>>>>> If a
>>>>>>>>> primary server (either working or neutral) is found after this
>>>>>>>>> timeout,
>>>>>>>>> status of the backend is reset, i.e. first all offline and then
>>>>>>>>> all
>>>>>>>>> online callbacks are called. This is done to interrupt connection
>>>>>>>>> to
>>>>>>>>> the
>>>>>>>>> secondary server in favor of new connection to a primary server.
>>>>>>>>
>>>>>>>> I think this is dangerous. I don't want us to force offline
>>>>>>>> operation
>>>>>>>> even momentarily.
>>>>>>>
>>>>>>> I changed the concept to re-connection, which is done instantly,
>>>>>>> without
>>>>>>> scheduling any events. Combined with the possibility to mark LDAP
>>>>>>> connections as "disconnecting", it is addressing the original issue of
>>>>>>> going offline and back online.
>>>>>>>
>>>>>>>>> I have just couple concerns about things which I have yet to
>>>>>>>>> inspect.
>>>>>>>>> First of all when connection to the old server is interrupted,
>>>>>>>>> what if
>>>>>>>>> an
>>>>>>>>> operation is currently in progress on this connection? I know
>>>>>>>>> ticket
>>>>>>>>> #1027 induces similar scenario. Maybe to kill two birds with one
>>>>>>>>> stone
>>>>>>>>> I
>>>>>>>>> could design an extension to immediately invoke callbacks of all
>>>>>>>>> operations running on existing connection. What do you think about
>>>>>>>>> that?
>>>>>>>>
>>>>>>>> Better behavior would be to allow existing communications to
>>>>>>>> complete,
>>>>>>>> and only direct new requests to the primary server. I think
>>>>>>>> interrupting
>>>>>>>> in-progress requests would be dangerous and unpredictable.
>>>>>>>
>>>>>>> Done, see the proposed concept of reconnection.
>>>>>>>
>>>>>>>>> My second concern is about port status timeout. After some time a
>>>>>>>>> port
>>>>>>>>> is
>>>>>>>>> marked as neutral if originally marked as not-working. That
>>>>>>>>> effectively
>>>>>>>>> leads to second attempt to primary server reconnection being
>>>>>>>>> successful
>>>>>>>>> even though the server is still not running. As a result, an
>>>>>>>>> unnecessary
>>>>>>>>> reconnection to secondary server is performed once some data are
>>>>>>>>> needed
>>>>>>>>> from the server.
>>>>>>>>
>>>>>>>> This is intentional behavior. It's done so that if we eventually
>>>>>>>> lose
>>>>>>>> connection to the current server, we'll be able to retry that one
>>>>>>>> again
>>>>>>>> while looping through the failover code. I'd suggest just resetting
>>>>>>>> the
>>>>>>>> port-neutralizer timeout when you make the primary reconnection
>>>>>>>> attempt
>>>>>>>> and it fails.
>>>>>>>
>>>>>>> I left it as it was. It is impossible for failover code to check if
>>>>>>> the
>>>>>>> port is online. Therefore this solution is probably the best we can
>>>>>>> do.>
>>>>>>>
>>>>>>>>> Thank you very much for your opinions on this
>>>>>>>>> Jan
>>>>>>>>
>>>>>>>> General comment: I don't think I like the term "secondary" here. I
>>>>>>>> think
>>>>>>>> we might want to use something more descriptive. Perhaps "backup"?
>>>>>>>> I'm
>>>>>>>> soliciting suggestions :)
>>>>>>>
>>>>>>> Backup seems as good as any. Should I rename all those config options
>>>>>>> or
>>>>>>> do you have any other ideas?
>>>>>>>
>>>>>>>> Patch 0001: Nack
>>>>>>>> See above concerns.
>>>>>>>
>>>>>>> Hopefully addressed.
>>>>>>>
>>>>>>>> Patch 0002: Nack
>>>>>>>>
>>>>>>>> Please add a comment explaining why secondary_urls gets promoted to
>>>>>>>> primary.
>>>>>>>
>>>>>>> Added DEBUG message, that's more useful I guess
>>>>>>>
>>>>>>>> Patch 0003: Ack
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>> Patch 0004: Nack
>>>>>>>>
>>>>>>>> Please add a comment explaining why secondary_urls gets promoted to
>>>>>>>> primary.
>>>>>>>
>>>>>>> Added DEBUG message, that's more useful I guess
>>>>>>>
>>>>>>>> Patch 0005: Nack
>>>>>>>>
>>>>>>>> Typos in manpage:
>>>>>>>> "For each failover-enabled config option two variants exists:"
>>>>>>>> should be
>>>>>>>> "For each failover-enabled config option, two variants exist:"
>>>>>>>> and
>>>>>>>> "it will replace current" should be "it will replace the current"
>>>>>>>
>>>>>>> Fixed
>>>>>>>
>>>>>>>> Patch 0006: Nack
>>>>>>>>
>>>>>>>> Typo in the manpage:
>>>>>>>> "If neither options is specified," should be "If neither option is
>>>>>>>> specified,"
>>>>>>>>
>>>>>>>> You removed the warning about missing ldap_uri. You should put it
>>>>>>>> back
>>>>>>>> in if both urls and secondary_urls are NULL.
>>>>>>>>
>>>>>>>> Please add the same config debug information that you used in the
>>>>>>>> IPA
>>>>>>>> provider (about promoting secondary servers to primary)
>>>>>>>
>>>>>>> Done
>>>>>>>
>>>>>>>> Patch 0007: Nack
>>>>>>>>
>>>>>>>> Same comment about the warning when the servers are unspecified.
>>>>>>>
>>>>>>> Done
>>>>>>
>>>>>> These patches look good by inspection, but due to divergence in the
>>>>>> codebase, they no longer apply atop the master. Please rebase them so I
>>>>>> can run some tests.
>>>>>>
>>>>>> Also, the AD provider probably needs modification as well to take
>>>>>> advantage of this new feature (sorry, it landed first).
>>>>>
>>>>> Rebased on top of current master. Those AD provider changes are included
>>>>> as
>>>>> well, I didn't have a chance to test them though.
>>>>
>>>> These patches don't apply cleanly. Patch 0010 fails with missing blobs.
>>>> Please submit rebased patches (or identify which other patches are
>>>> required).
>>>
>>> Here it is, rebased on top of current master (strange that many times
>>> rebase works while applying the patch doesn't). No additional patches
>>> required.
>>>
>>> Thanks
>>> Jan
>>
>> Nack.
>>
>> IPA and LDAP works. I didn't test AD because I don't have any AD server
>> available.
>
> I'll send you details about our testing AD environment.
>
>>
>> Kerberos backup servers don't seem to work. I think it is because you
>> are loading wrong option in krb5_init.c:103.
>
> You are right, fixed.
>
>> Manpage failover section:
>> - says that the primary server timeout is 60 seconds but you use 30
>> seconds in the code.
>> - "After this timeout SSSD will periodically try to reconnect to one of
>> *the* primary servers."?
>
> Both corrected.
>
>> data_provider_fo.c:452 You have two subsequent spaces in the debug message.
>
> Deleted
>
>> data_provider_fo.c:477 Can you put the DEBUG statement just on two lines
>> please? I found this little confusing.
>
> Done
>
>> data_provider_fo.c:538 You should check if new_subreq is not null. I
>> know it is not possible in the current code flow, but what if.
>
> That is too defensive for no gain I think. If someone will modify this code?
> I'm sure the modification will be better suited there.
>
>> fail_over.c:836 The commentary says: "Also cancel the primary server
>> reactivation event until the lookup is complete". Are you cancelling the
>> timer somewhere?
>
> No, the comment was left there from older version of the patch set. Removed
>

Nack.

>> sdap_service_init(), ad_servers_init(): You're allocating tmp_ctx on
>> mem_ctx instead of NULL.
>
> That was issue in the original code that was in place. Fixed

You left it in ad_servers_init().

>> krb5_common.c:623 Invalid debug message. At this point backup servers
>> aren't present.
>
> Good catch. Corrected.
>
>
> Sending corrected patches.

Works for IPA, LDAP, KRB5 and AD.

Backup KDC for GSSAPI is not functional. You need to add backup servers 
in sdap_gssapi_init().

When you provide unresolvable hostnames, it does not try next server 
(log and sssd.conf attached).


-------------- next part --------------
(Tue Jul 31 08:51:50:503936 2012) [sssd] [check_file] (0x0400): lstat for [/var/run/nscd/socket] failed: [2][No such file or directory].
ldb: unable to dlopen /usr/lib64/ldb/modules/ldb/memberof.la : /usr/lib64/ldb/modules/ldb/memberof.la: invalid ELF header
(Tue Jul 31 08:51:50:593609 2012) [sssd] [confdb_create_ldif] (0x0400): Processing config section [sssd]
(Tue Jul 31 08:51:50:593653 2012) [sssd] [confdb_create_ldif] (0x0400): Processing attribute [config_file_version]
(Tue Jul 31 08:51:50:593676 2012) [sssd] [confdb_create_ldif] (0x0400): Processing attribute [services]
(Tue Jul 31 08:51:50:593690 2012) [sssd] [confdb_create_ldif] (0x0400): Processing attribute [domains]
(Tue Jul 31 08:51:50:593704 2012) [sssd] [confdb_create_ldif] (0x0400): Processing attribute [debug_level]
(Tue Jul 31 08:51:50:593748 2012) [sssd] [confdb_create_ldif] (0x0400): Processing config section [nss]
(Tue Jul 31 08:51:50:593766 2012) [sssd] [confdb_create_ldif] (0x0400): Processing attribute [debug_level]
(Tue Jul 31 08:51:50:593781 2012) [sssd] [confdb_create_ldif] (0x0400): Processing config section [pam]
(Tue Jul 31 08:51:50:593795 2012) [sssd] [confdb_create_ldif] (0x0400): Processing attribute [debug_level]
(Tue Jul 31 08:51:50:593810 2012) [sssd] [confdb_create_ldif] (0x0400): Processing config section [domain/INVALID]
(Tue Jul 31 08:51:50:593830 2012) [sssd] [confdb_create_ldif] (0x0400): Processing attribute [debug_level]
(Tue Jul 31 08:51:50:593845 2012) [sssd] [confdb_create_ldif] (0x0400): Processing attribute [id_provider]
(Tue Jul 31 08:51:50:593876 2012) [sssd] [confdb_create_ldif] (0x0400): Processing attribute [ldap_uri]
(Tue Jul 31 08:51:50:593895 2012) [sssd] [confdb_create_ldif] (0x0400): Processing attribute [ldap_backup_uri]
(Tue Jul 31 08:51:50:593911 2012) [sssd] [confdb_create_ldif] (0x0400): Processing config section [domain/AD]
(Tue Jul 31 08:51:50:593928 2012) [sssd] [confdb_create_ldif] (0x0400): Processing attribute [debug_level]
(Tue Jul 31 08:51:50:593943 2012) [sssd] [confdb_create_ldif] (0x0400): Processing attribute [id_provider]
(Tue Jul 31 08:51:50:593957 2012) [sssd] [confdb_create_ldif] (0x0400): Processing attribute [ad_server]
(Tue Jul 31 08:51:50:593983 2012) [sssd] [confdb_create_ldif] (0x0400): Processing attribute [ad_backup_server]
(Tue Jul 31 08:51:50:593999 2012) [sssd] [confdb_create_ldif] (0x0400): Processing attribute [ad_domain]
(Tue Jul 31 08:51:50:594016 2012) [sssd] [confdb_create_ldif] (0x0400): Processing config section [domain/KRB]
(Tue Jul 31 08:51:50:594033 2012) [sssd] [confdb_create_ldif] (0x0400): Processing attribute [debug_level]
(Tue Jul 31 08:51:50:594049 2012) [sssd] [confdb_create_ldif] (0x0400): Processing attribute [id_provider]
(Tue Jul 31 08:51:50:594064 2012) [sssd] [confdb_create_ldif] (0x0400): Processing attribute [auth_provider]
(Tue Jul 31 08:51:50:594079 2012) [sssd] [confdb_create_ldif] (0x0400): Processing attribute [ldap_uri]
(Tue Jul 31 08:51:50:594095 2012) [sssd] [confdb_create_ldif] (0x0400): Processing attribute [ldap_backup_uri]
(Tue Jul 31 08:51:50:594112 2012) [sssd] [confdb_create_ldif] (0x0400): Processing attribute [krb5_server]
(Tue Jul 31 08:51:50:594127 2012) [sssd] [confdb_create_ldif] (0x0400): Processing attribute [krb5_backup_server]
(Tue Jul 31 08:51:50:594143 2012) [sssd] [confdb_create_ldif] (0x0400): Processing attribute [krb5_realm]
(Tue Jul 31 08:51:50:594161 2012) [sssd] [confdb_create_ldif] (0x0400): Processing config section [domain/LDAP]
(Tue Jul 31 08:51:50:594179 2012) [sssd] [confdb_create_ldif] (0x0400): Processing attribute [debug_level]
(Tue Jul 31 08:51:50:594195 2012) [sssd] [confdb_create_ldif] (0x0400): Processing attribute [id_provider]
(Tue Jul 31 08:51:50:594210 2012) [sssd] [confdb_create_ldif] (0x0400): Processing attribute [ldap_uri]
(Tue Jul 31 08:51:50:594225 2012) [sssd] [confdb_create_ldif] (0x0400): Processing attribute [ldap_backup_uri]
(Tue Jul 31 08:51:50:594243 2012) [sssd] [confdb_create_ldif] (0x0400): Processing attribute [ldap_sasl_mech]
(Tue Jul 31 08:51:50:594258 2012) [sssd] [confdb_create_ldif] (0x0400): Processing attribute [ldap_sasl_authid]
(Tue Jul 31 08:51:50:594282 2012) [sssd] [confdb_create_ldif] (0x0400): Processing attribute [ldap_sasl_realm]
(Tue Jul 31 08:51:50:594298 2012) [sssd] [confdb_create_ldif] (0x0400): Processing attribute [krb5_server]
(Tue Jul 31 08:51:50:594313 2012) [sssd] [confdb_create_ldif] (0x0400): Processing attribute [krb5_backup_server]
(Tue Jul 31 08:51:50:594331 2012) [sssd] [confdb_create_ldif] (0x0400): Processing config section [domain/IPA]
(Tue Jul 31 08:51:50:594348 2012) [sssd] [confdb_create_ldif] (0x0400): Processing attribute [debug_level]
(Tue Jul 31 08:51:50:594364 2012) [sssd] [confdb_create_ldif] (0x0400): Processing attribute [id_provider]
(Tue Jul 31 08:51:50:594379 2012) [sssd] [confdb_create_ldif] (0x0400): Processing attribute [ipa_domain]
(Tue Jul 31 08:51:50:594394 2012) [sssd] [confdb_create_ldif] (0x0400): Processing attribute [ipa_server]
(Tue Jul 31 08:51:50:594410 2012) [sssd] [confdb_create_ldif] (0x0400): Processing attribute [ipa_backup_server]
(Tue Jul 31 08:51:50:594426 2012) [sssd] [confdb_create_ldif] (0x0400): Processing attribute [ldap_tls_cacert]
(Tue Jul 31 08:51:50:594452 2012) [sssd] [confdb_init_db] (0x1000): LDIF file to import: 
dn: cn=config
version: 2

dn: cn=sssd,cn=config
cn: sssd
config_file_version: 2
services: nss, pam
domains: INVALID
debug_level: 0x0ff0

dn: cn=nss,cn=config
cn: nss
debug_level: 0x0ff0

dn: cn=pam,cn=config
cn: pam
debug_level: 0x0ff0

dn: cn=INVALID,cn=domain,cn=config
cn: INVALID
debug_level: 0x0ff0
id_provider: ldap
ldap_uri: ldap://a.example.com, ldap://b.example.com
ldap_backup_uri: ldap://c.example.com, ldap://d.example.com

dn: cn=AD,cn=domain,cn=config
cn: AD
debug_level: 0x0ff0
id_provider: ad
ad_server: ad1.example.com, ad2.example.com
ad_backup_server: ad3.example.com, ad4.example.com
ad_domain: sssd-ad.test

dn: cn=KRB,cn=domain,cn=config
cn: KRB
debug_level: 0x0ff0
id_provider: ldap
auth_provider: krb5
ldap_uri: ldap://vm-112.idm.lab.bos.redhat.com, ldap://vm-062.idm.lab.bos.redhat.com
ldap_backup_uri: ldap://vm-039.idm.lab.bos.redhat.com, ldap://vm-109.idm.lab.bos.redhat.com
krb5_server: vm-112.idm.lab.bos.redhat.com, vm-062.idm.lab.bos.redhat.com
krb5_backup_server: vm-039.idm.lab.bos.redhat.com, vm-109.idm.lab.bos.redhat.com
krb5_realm: IDM.LAB.BOS.REDHAT.COM

dn: cn=LDAP,cn=domain,cn=config
cn: LDAP
debug_level: 0x0ff0
id_provider: ldap
ldap_uri: ldaps://vm-112.idm.lab.bos.redhat.com, ldaps://vm-062.idm.lab.bos.redhat.com
ldap_backup_uri: ldaps://vm-039.idm.lab.bos.redhat.com, ldaps://vm-109.idm.lab.bos.redhat.com
ldap_sasl_mech: GSSAPI
ldap_sasl_authid: host/vm-139.idm.lab.bos.redhat.com
ldap_sasl_realm: IDM.LAB.BOS.REDHAT.COM
krb5_server: vm-112.idm.lab.bos.redhat.com, vm-062.idm.lab.bos.redhat.com
krb5_backup_server: vm-039.idm.lab.bos.redhat.com, vm-109.idm.lab.bos.redhat.com

dn: cn=IPA,cn=domain,cn=config
cn: IPA
debug_level: 0x0ff0
id_provider: ipa
ipa_domain: idm.lab.bos.redhat.com
ipa_server: vm-112.idm.lab.bos.redhat.com, vm-062.idm.lab.bos.redhat.com
ipa_backup_server: vm-039.idm.lab.bos.redhat.com, vm-109.idm.lab.bos.redhat.com
ldap_tls_cacert: /etc/ipa/ca.crt

(Tue Jul 31 08:51:50:609671 2012) [sssd] [confdb_get_domain_internal] (0x0400): No enumeration for [INVALID]!
(Tue Jul 31 08:51:50:610352 2012) [sssd] [ldb] (0x0400): server_sort:Unable to register control with rootdse!
(Tue Jul 31 08:51:50 2012) [sssd] [server_setup] (0x0400): CONFDB: /var/lib/sss/db/config.ldb
(Tue Jul 31 08:51:50 2012) [sssd] [sysdb_domain_init_internal] (0x0200): DB File for INVALID: /var/lib/sss/db/cache_INVALID.ldb
(Tue Jul 31 08:51:50 2012) [sssd] [ldb] (0x0400): asq: Unable to register control with rootdse!
(Tue Jul 31 08:51:50 2012) [sssd] [sbus_new_server] (0x0400): D-BUS Server listening on unix:path=/var/lib/sss/pipes/private/sbus-monitor,guid=179efe93831e2accd65092590001a03a
(Tue Jul 31 08:51:50 2012) [sssd] [sbus_add_watch] (0x2000): 0xdea6f0/0xdedd00 (10), R/- (enabled)
(Tue Jul 31 08:51:50 2012) [sssd] [start_service] (0x0100): Queueing service INVALID for startup
ldb: unable to dlopen /usr/lib64/ldb/modules/ldb/memberof.la : /usr/lib64/ldb/modules/ldb/memberof.la: neplatný hlavička ELF
(Tue Jul 31 08:51:50:778281 2012) [sssd[be[INVALID]]] [ldb] (0x0400): server_sort:Unable to register control with rootdse!
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [server_setup] (0x0400): CONFDB: /var/lib/sss/db/config.ldb
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [recreate_ares_channel] (0x0100): Initializing new c-ares channel
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [resolv_get_family_order] (0x1000): Lookup order: ipv4_first
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [fo_context_init] (0x0400): Created new fail over context, retry timeout is 30
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [confdb_get_domain_internal] (0x0400): No enumeration for [INVALID]!
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [sysdb_domain_init_internal] (0x0200): DB File for INVALID: /var/lib/sss/db/cache_INVALID.ldb
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [ldb] (0x0400): asq: Unable to register control with rootdse!
(Tue Jul 31 08:51:50 2012) [sssd] [sbus_server_init_new_connection] (0x0200): Entering.
(Tue Jul 31 08:51:50 2012) [sssd] [sbus_server_init_new_connection] (0x0200): Adding connection 0xdeeb30.
(Tue Jul 31 08:51:50 2012) [sssd] [sbus_init_connection] (0x0200): Adding connection DEEB30
(Tue Jul 31 08:51:50 2012) [sssd] [sbus_add_watch] (0x2000): 0xdef090/0xde5b10 (12), -/W (disabled)
(Tue Jul 31 08:51:50 2012) [sssd] [sbus_server_init_new_connection] (0x0200): Got a connection
(Tue Jul 31 08:51:50 2012) [sssd] [monitor_service_init] (0x0400): Initializing D-BUS Service
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [sbus_init_connection] (0x0200): Adding connection 25F6740
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [sbus_add_watch] (0x2000): 0x25f4830/0x25e0c70 (14), -/W (enabled)
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [monitor_common_send_id] (0x0100): Sending ID: (%BE_INVALID,1)
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [sbus_add_timeout] (0x2000): 0x25e12d0
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [create_socket_symlink] (0x1000): Symlinking the dbus path /var/lib/sss/pipes/private/sbus-dp_INVALID.19089 to a link /var/lib/sss/pipes/private/sbus-dp_INVALID
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [sbus_new_server] (0x0400): D-BUS Server listening on unix:path=/var/lib/sss/pipes/private/sbus-dp_INVALID.19089,guid=8f2931f21ea959d6458deaac0001a03a
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [sbus_add_watch] (0x2000): 0x25f7a70/0x25f76e0 (15), R/- (enabled)
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [load_backend_module] (0x1000): Loading backend [ldap] with path [/usr/lib64/sssd/libsss_ldap.so].
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [dp_get_options] (0x0400): Option ldap_uri has value ldap://a.example.com, ldap://b.example.com
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [dp_get_options] (0x0400): Option ldap_backup_uri has value ldap://c.example.com, ldap://d.example.com
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [dp_get_options] (0x0400): Option ldap_search_base has no value 
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [dp_get_options] (0x0400): Option ldap_default_bind_dn has no value 
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [dp_get_options] (0x0400): Option ldap_default_authtok_type has value password
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [dp_get_options] (0x0400): Option ldap_default_authtok has no binary value.
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [dp_get_options] (0x0400): Option ldap_search_timeout has value 6
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [dp_get_options] (0x0400): Option ldap_network_timeout has value 6
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [dp_get_options] (0x0400): Option ldap_opt_timeout has value 6
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [dp_get_options] (0x0400): Option ldap_tls_reqcert has value hard
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [dp_get_options] (0x0400): Option ldap_user_search_base has no value 
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [dp_get_options] (0x0400): Option ldap_user_search_scope has value sub
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [dp_get_options] (0x0400): Option ldap_user_search_filter has no value 
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [dp_get_options] (0x0400): Option ldap_group_search_base has no value 
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [dp_get_options] (0x0400): Option ldap_group_search_scope has value sub
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [dp_get_options] (0x0400): Option ldap_group_search_filter has no value 
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [dp_get_options] (0x0400): Option ldap_service_search_base has no value 
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [dp_get_options] (0x0400): Option ldap_sudo_search_base has no value 
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [dp_get_options] (0x0400): Option ldap_sudo_full_refresh_interval has value 21600
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [dp_get_options] (0x0400): Option ldap_sudo_smart_refresh_interval has value 900
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [dp_get_options] (0x0400): Option ldap_sudo_use_host_filter is TRUE
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [dp_get_options] (0x0400): Option ldap_sudo_hostnames has no value 
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [dp_get_options] (0x0400): Option ldap_sudo_ip has no value 
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [dp_get_options] (0x0400): Option ldap_sudo_include_netgroups is TRUE
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [dp_get_options] (0x0400): Option ldap_sudo_include_regexp is TRUE
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [dp_get_options] (0x0400): Option ldap_autofs_search_base has no value 
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [dp_get_options] (0x0400): Option ldap_schema has value rfc2307
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [dp_get_options] (0x0400): Option ldap_offline_timeout has value 60
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [dp_get_options] (0x0400): Option ldap_force_upper_case_realm is FALSE
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [dp_get_options] (0x0400): Option ldap_enumeration_refresh_timeout has value 300
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [dp_get_options] (0x0400): Option ldap_purge_cache_timeout has value 10800
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [dp_get_options] (0x0400): Option ldap_tls_cacert has no value 
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [dp_get_options] (0x0400): Option ldap_tls_cacertdir has no value 
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [dp_get_options] (0x0400): Option ldap_tls_cert has no value 
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [dp_get_options] (0x0400): Option ldap_tls_key has no value 
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [dp_get_options] (0x0400): Option ldap_tls_cipher_suite has no value 
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [dp_get_options] (0x0400): Option ldap_id_use_start_tls is FALSE
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [dp_get_options] (0x0400): Option ldap_id_mapping is FALSE
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [dp_get_options] (0x0400): Option ldap_sasl_mech has no value 
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [dp_get_options] (0x0400): Option ldap_sasl_authid has no value 
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [dp_get_options] (0x0400): Option ldap_sasl_realm has no value 
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [dp_get_options] (0x0400): Option ldap_sasl_minssf has value -1
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [dp_get_options] (0x0400): Option ldap_krb5_keytab has no value 
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [dp_get_options] (0x0400): Option ldap_krb5_init_creds is TRUE
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [dp_get_options] (0x0400): Option krb5_server has no value 
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [dp_get_options] (0x0400): Option krb5_backup_server has no value 
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [dp_get_options] (0x0400): Option krb5_realm has no value 
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [dp_get_options] (0x0400): Option krb5_canonicalize is TRUE
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [dp_get_options] (0x0400): Option ldap_pwd_policy has value none
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [dp_get_options] (0x0400): Option ldap_referrals is TRUE
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [dp_get_options] (0x0400): Option account_cache_expiration has value 0
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [dp_get_options] (0x0400): Option ldap_dns_service_name has value ldap
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [dp_get_options] (0x0400): Option ldap_krb5_ticket_lifetime has value 86400
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [dp_get_options] (0x0400): Option ldap_access_filter has no value 
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [dp_get_options] (0x0400): Option ldap_netgroup_search_base has no value 
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [dp_get_options] (0x0400): Option ldap_group_nesting_level has value 2
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [dp_get_options] (0x0400): Option ldap_deref has no value 
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [dp_get_options] (0x0400): Option ldap_account_expire_policy has no value 
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [dp_get_options] (0x0400): Option ldap_access_order has value filter
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [dp_get_options] (0x0400): Option ldap_chpass_uri has no value 
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [dp_get_options] (0x0400): Option ldap_chpass_backup_uri has no value 
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [dp_get_options] (0x0400): Option ldap_chpass_dns_service_name has no value 
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [dp_get_options] (0x0400): Option ldap_chpass_update_last_change is FALSE
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [dp_get_options] (0x0400): Option ldap_enumeration_search_timeout has value 60
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [dp_get_options] (0x0400): Option ldap_auth_disable_tls_never_use_in_production is FALSE
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [dp_get_options] (0x0400): Option ldap_page_size has value 1000
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [dp_get_options] (0x0400): Option ldap_deref_threshold has value 10
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [dp_get_options] (0x0400): Option ldap_sasl_canonicalize is FALSE
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [dp_get_options] (0x0400): Option ldap_connection_expire_timeout has value 900
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [dp_get_options] (0x0400): Option ldap_disable_paging is FALSE
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [dp_get_options] (0x0400): Option ldap_idmap_range_min has value 100001
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [dp_get_options] (0x0400): Option ldap_idmap_range_max has value 2000100000
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [dp_get_options] (0x0400): Option ldap_idmap_range_size has value 200000
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [dp_get_options] (0x0400): Option ldap_idmap_autorid_compat is FALSE
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [dp_get_options] (0x0400): Option ldap_idmap_default_domain has no value 
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [dp_get_options] (0x0400): Option ldap_idmap_default_domain_sid has no value 
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [dp_get_options] (0x0400): Option ldap_groups_use_matching_rule_in_chain is FALSE
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [dp_get_options] (0x0400): Option ldap_initgroups_use_matching_rule_in_chain is TRUE
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [ldap_get_options] (0x0200): Search base not set, trying to discover it later when connecting to the LDAP server.
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [sdap_get_map] (0x0400): Option ldap_entry_usn has no value 
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [sdap_get_map] (0x0400): Option ldap_rootdse_last_usn has no value 
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [sdap_get_map] (0x0400): Option ldap_user_object_class has value posixAccount
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [sdap_get_map] (0x0400): Option ldap_user_name has value uid
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [sdap_get_map] (0x0400): Option ldap_user_pwd has value userPassword
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [sdap_get_map] (0x0400): Option ldap_user_uid_number has value uidNumber
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [sdap_get_map] (0x0400): Option ldap_user_gid_number has value gidNumber
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [sdap_get_map] (0x0400): Option ldap_user_gecos has value gecos
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [sdap_get_map] (0x0400): Option ldap_user_home_directory has value homeDirectory
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [sdap_get_map] (0x0400): Option ldap_user_shell has value loginShell
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [sdap_get_map] (0x0400): Option ldap_user_principal has value krbPrincipalName
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [sdap_get_map] (0x0400): Option ldap_user_fullname has value cn
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [sdap_get_map] (0x0400): Option ldap_user_member_of has no value 
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [sdap_get_map] (0x0400): Option ldap_user_uuid has no value 
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [sdap_get_map] (0x0400): Option ldap_user_objectsid has no value 
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [sdap_get_map] (0x0400): Option ldap_user_primary_group has no value 
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [sdap_get_map] (0x0400): Option ldap_user_modify_timestamp has value modifyTimestamp
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [sdap_get_map] (0x0400): Option ldap_user_entry_usn has no value 
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [sdap_get_map] (0x0400): Option ldap_user_shadow_last_change has value shadowLastChange
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [sdap_get_map] (0x0400): Option ldap_user_shadow_min has value shadowMin
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [sdap_get_map] (0x0400): Option ldap_user_shadow_max has value shadowMax
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [sdap_get_map] (0x0400): Option ldap_user_shadow_warning has value shadowWarning
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [sdap_get_map] (0x0400): Option ldap_user_shadow_inactive has value shadowInactive
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [sdap_get_map] (0x0400): Option ldap_user_shadow_expire has value shadowExpire
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [sdap_get_map] (0x0400): Option ldap_user_shadow_flag has value shadowFlag
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [sdap_get_map] (0x0400): Option ldap_user_krb_last_pwd_change has value krbLastPwdChange
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [sdap_get_map] (0x0400): Option ldap_user_krb_password_expiration has value krbPasswordExpiration
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [sdap_get_map] (0x0400): Option ldap_pwd_attribute has value pwdAttribute
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [sdap_get_map] (0x0400): Option ldap_user_authorized_service has value authorizedService
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [sdap_get_map] (0x0400): Option ldap_user_ad_account_expires has value accountExpires
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [sdap_get_map] (0x0400): Option ldap_user_ad_user_account_control has value userAccountControl
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [sdap_get_map] (0x0400): Option ldap_ns_account_lock has value nsAccountLock
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [sdap_get_map] (0x0400): Option ldap_user_authorized_host has value host
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [sdap_get_map] (0x0400): Option ldap_user_nds_login_disabled has value loginDisabled
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [sdap_get_map] (0x0400): Option ldap_user_nds_login_expiration_time has value loginExpirationTime
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [sdap_get_map] (0x0400): Option ldap_user_nds_login_allowed_time_map has value loginAllowedTimeMap
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [sdap_get_map] (0x0400): Option ldap_user_ssh_public_key has no value 
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [sdap_get_map] (0x0400): Option ldap_group_object_class has value posixGroup
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [sdap_get_map] (0x0400): Option ldap_group_name has value cn
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [sdap_get_map] (0x0400): Option ldap_group_pwd has value userPassword
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [sdap_get_map] (0x0400): Option ldap_group_gid_number has value gidNumber
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [sdap_get_map] (0x0400): Option ldap_group_member has value memberuid
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [sdap_get_map] (0x0400): Option ldap_group_uuid has no value 
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [sdap_get_map] (0x0400): Option ldap_group_objectsid has no value 
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [sdap_get_map] (0x0400): Option ldap_group_modify_timestamp has value modifyTimestamp
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [sdap_get_map] (0x0400): Option ldap_group_entry_usn has no value 
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [sdap_get_map] (0x0400): Option ldap_netgroup_object_class has value nisNetgroup
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [sdap_get_map] (0x0400): Option ldap_netgroup_name has value cn
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [sdap_get_map] (0x0400): Option ldap_netgroup_member has value memberNisNetgroup
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [sdap_get_map] (0x0400): Option ldap_netgroup_triple has value nisNetgroupTriple
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [sdap_get_map] (0x0400): Option ldap_netgroup_uuid has value nsUniqueId
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [sdap_get_map] (0x0400): Option ldap_netgroup_modify_timestamp has value modifyTimestamp
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [sdap_get_map] (0x0400): Option ldap_service_object_class has value ipService
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [sdap_get_map] (0x0400): Option ldap_service_name has value cn
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [sdap_get_map] (0x0400): Option ldap_service_port has value ipServicePort
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [sdap_get_map] (0x0400): Option ldap_service_proto has value ipServiceProtocol
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [sdap_get_map] (0x0400): Option ldap_service_entry_usn has no value 
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [krb5_try_kdcip] (0x0100): No KDC found in configuration, trying legacy option
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [sssm_ldap_id_init] (0x1000): Service name for discovery set to ldap
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [fo_new_service] (0x0400): Creating new service 'LDAP'
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [sdap_urls_init] (0x0400): Added URI ldap://a.example.com
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [fo_add_server] (0x0080): Adding new server 'a.example.com', to service 'LDAP'
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [sdap_urls_init] (0x0400): Added URI ldap://b.example.com
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [fo_add_server] (0x0080): Adding new server 'b.example.com', to service 'LDAP'
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [sdap_urls_init] (0x0400): Added URI ldap://c.example.com
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [fo_add_server] (0x0080): Adding new server 'c.example.com', to service 'LDAP'
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [sdap_urls_init] (0x0400): Added URI ldap://d.example.com
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [fo_add_server] (0x0080): Adding new server 'd.example.com', to service 'LDAP'
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [ldap_id_cleanup_set_timer] (0x0400): Scheduling next cleanup at 1343739120.797267
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [be_process_init] (0x2000): ID backend target successfully loaded from provider [ldap].
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [load_backend_module] (0x0200): no module name found in confdb, using [ldap].
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [load_backend_module] (0x1000): Backend [ldap] already loaded.
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [sssm_ldap_id_init] (0x2000): Re-using sdap_id_ctx for this provider
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [be_process_init] (0x2000): AUTH backend target successfully loaded from provider [ldap].
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [load_backend_module] (0x0200): no module name found in confdb, using [permit].
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [be_process_init] (0x2000): ACCESS backend target successfully loaded from provider [permit].
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [load_backend_module] (0x0200): no module name found in confdb, using [ldap].
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [load_backend_module] (0x1000): Backend [ldap] already loaded.
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [sssm_ldap_id_init] (0x2000): Re-using sdap_id_ctx for this provider
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [be_process_init] (0x2000): CHPASS backend target successfully loaded from provider [ldap].
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [load_backend_module] (0x0200): no module name found in confdb, using [ldap].
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [load_backend_module] (0x1000): Backend [ldap] already loaded.
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [sssm_ldap_sudo_init] (0x0080): Sudo init handler called but SSSD is built without sudo support, ignoring
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [be_process_init] (0x2000): SUDO backend target successfully loaded from provider [ldap].
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [load_backend_module] (0x0200): no module name found in confdb, using [ldap].
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [load_backend_module] (0x1000): Backend [ldap] already loaded.
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [sssm_ldap_autofs_init] (0x0080): Autofs init handler called but SSSD is built without autofs support, ignoring
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [be_process_init] (0x2000): autofs backend target successfully loaded from provider [ldap].
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [load_backend_module] (0x0200): no module name found in confdb, using [ldap].
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [load_backend_module] (0x1000): Backend [ldap] already loaded.
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [be_process_init] (0x0020): No selinux module provided for [INVALID] !!
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [load_backend_module] (0x0200): no module name found in confdb, using [ldap].
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [load_backend_module] (0x1000): Backend [ldap] already loaded.
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [be_process_init] (0x0020): No host info module provided for [INVALID] !!
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [be_process_init] (0x0020): Subdomains are not supported for [INVALID] !!
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [main] (0x0400): Backend provider (INVALID) started!
(Tue Jul 31 08:51:50 2012) [sssd] [client_registration] (0x0100): Received ID registration: (%BE_INVALID,1)
(Tue Jul 31 08:51:50 2012) [sssd] [mark_service_as_started] (0x0200): Marking INVALID as started.
(Tue Jul 31 08:51:50 2012) [sssd] [mark_service_as_started] (0x0100): Now starting services!
(Tue Jul 31 08:51:50 2012) [sssd] [start_service] (0x0100): Queueing service nss for startup
(Tue Jul 31 08:51:50 2012) [sssd] [start_service] (0x0100): Queueing service pam for startup
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [sbus_remove_timeout] (0x2000): 0x25e12d0
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [id_callback] (0x0100): Got id ack and version (1) from Monitor
ldb: unable to dlopen /usr/lib64/ldb/modules/ldb/memberof.la : /usr/lib64/ldb/modules/ldb/memberof.la: neplatný hlavička ELF
ldb: unable to dlopen /usr/lib64/ldb/modules/ldb/memberof.la : /usr/lib64/ldb/modules/ldb/memberof.la: neplatný hlavička ELF
(Tue Jul 31 08:51:50:825574 2012) [sssd[pam]] [ldb] (0x0400): server_sort:Unable to register control with rootdse!
(Tue Jul 31 08:51:50:827720 2012) [sssd[nss]] [ldb] (0x0400): server_sort:Unable to register control with rootdse!
(Tue Jul 31 08:51:50 2012) [sssd[pam]] [server_setup] (0x0400): CONFDB: /var/lib/sss/db/config.ldb
(Tue Jul 31 08:51:50 2012) [sssd[pam]] [confdb_get_domain_internal] (0x0400): No enumeration for [INVALID]!
(Tue Jul 31 08:51:50 2012) [sssd] [sbus_server_init_new_connection] (0x0200): Entering.
(Tue Jul 31 08:51:50 2012) [sssd] [sbus_server_init_new_connection] (0x0200): Adding connection 0xdef350.
(Tue Jul 31 08:51:50 2012) [sssd] [sbus_init_connection] (0x0200): Adding connection DEF350
(Tue Jul 31 08:51:50 2012) [sssd] [sbus_add_watch] (0x2000): 0xded440/0xdee0d0 (13), -/W (disabled)
(Tue Jul 31 08:51:50 2012) [sssd] [sbus_server_init_new_connection] (0x0200): Got a connection
(Tue Jul 31 08:51:50 2012) [sssd] [monitor_service_init] (0x0400): Initializing D-BUS Service
(Tue Jul 31 08:51:50 2012) [sssd[nss]] [server_setup] (0x0400): CONFDB: /var/lib/sss/db/config.ldb
(Tue Jul 31 08:51:50 2012) [sssd[nss]] [confdb_get_domain_internal] (0x0400): No enumeration for [INVALID]!
(Tue Jul 31 08:51:50 2012) [sssd] [sbus_server_init_new_connection] (0x0200): Entering.
(Tue Jul 31 08:51:50 2012) [sssd] [sbus_server_init_new_connection] (0x0200): Adding connection 0xdf0ec0.
(Tue Jul 31 08:51:50 2012) [sssd] [sbus_init_connection] (0x0200): Adding connection DF0EC0
(Tue Jul 31 08:51:50 2012) [sssd] [sbus_add_watch] (0x2000): 0xdf13c0/0xde95b0 (14), -/W (disabled)
(Tue Jul 31 08:51:50 2012) [sssd] [sbus_server_init_new_connection] (0x0200): Got a connection
(Tue Jul 31 08:51:50 2012) [sssd] [monitor_service_init] (0x0400): Initializing D-BUS Service
(Tue Jul 31 08:51:50 2012) [sssd[pam]] [sbus_init_connection] (0x0200): Adding connection C0B440
(Tue Jul 31 08:51:50 2012) [sssd[pam]] [sbus_add_watch] (0x2000): 0xc0b7d0/0xc0a9f0 (12), -/W (enabled)
(Tue Jul 31 08:51:50 2012) [sssd[pam]] [monitor_common_send_id] (0x0100): Sending ID: (pam,1)
(Tue Jul 31 08:51:50 2012) [sssd[pam]] [sbus_add_timeout] (0x2000): 0xc0a520
(Tue Jul 31 08:51:50 2012) [sssd[nss]] [sbus_init_connection] (0x0200): Adding connection 20F0E90
(Tue Jul 31 08:51:50 2012) [sssd[nss]] [sbus_add_watch] (0x2000): 0x20f23f0/0x20ed850 (12), -/W (enabled)
(Tue Jul 31 08:51:50 2012) [sssd[nss]] [monitor_common_send_id] (0x0100): Sending ID: (nss,1)
(Tue Jul 31 08:51:50 2012) [sssd[nss]] [sbus_add_timeout] (0x2000): 0x20f3040
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [sbus_server_init_new_connection] (0x0200): Entering.
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [sbus_server_init_new_connection] (0x0200): Adding connection 0x25ffdf0.
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [sbus_init_connection] (0x0200): Adding connection 25FFDF0
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [sbus_add_watch] (0x2000): 0x2601810/0x25e1280 (16), -/W (disabled)
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [sbus_server_init_new_connection] (0x0200): Got a connection
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [be_client_init] (0x0100): Set-up Backend ID timeout [0x2602210]
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [sbus_server_init_new_connection] (0x0200): Entering.
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [sbus_server_init_new_connection] (0x0200): Adding connection 0x2600c00.
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [sbus_init_connection] (0x0200): Adding connection 2600C00
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [sbus_add_watch] (0x2000): 0x26066b0/0x2602360 (17), -/W (disabled)
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [sbus_server_init_new_connection] (0x0200): Got a connection
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [be_client_init] (0x0100): Set-up Backend ID timeout [0x2606920]
(Tue Jul 31 08:51:50 2012) [sssd[nss]] [sbus_init_connection] (0x0200): Adding connection 20F1DA0
(Tue Jul 31 08:51:50 2012) [sssd[nss]] [sbus_add_watch] (0x2000): 0x20f44f0/0x20f24d0 (13), -/W (enabled)
(Tue Jul 31 08:51:50 2012) [sssd[nss]] [dp_common_send_id] (0x0100): Sending ID to DP: (1,NSS)
(Tue Jul 31 08:51:50 2012) [sssd[nss]] [sbus_add_timeout] (0x2000): 0x20f4980
(Tue Jul 31 08:51:50 2012) [sssd[pam]] [sbus_init_connection] (0x0200): Adding connection C0B630
(Tue Jul 31 08:51:50 2012) [sssd[pam]] [sbus_add_watch] (0x2000): 0xc09f30/0xc06fd0 (13), -/W (enabled)
(Tue Jul 31 08:51:50 2012) [sssd[pam]] [dp_common_send_id] (0x0100): Sending ID to DP: (1,PAM)
(Tue Jul 31 08:51:50 2012) [sssd[pam]] [sbus_add_timeout] (0x2000): 0xc0d2d0
(Tue Jul 31 08:51:50 2012) [sssd[pam]] [sysdb_domain_init_internal] (0x0200): DB File for INVALID: /var/lib/sss/db/cache_INVALID.ldb
(Tue Jul 31 08:51:50 2012) [sssd[pam]] [ldb] (0x0400): asq: Unable to register control with rootdse!
(Tue Jul 31 08:51:50 2012) [sssd[pam]] [sss_process_init] (0x0400): Responder Initialization complete
(Tue Jul 31 08:51:50 2012) [sssd[pam]] [sss_parse_name_for_domains] (0x0200): name 'root' matched without domain, user is root
(Tue Jul 31 08:51:50 2012) [sssd[pam]] [sss_ncache_set_str] (0x0400): Adding [NCE/USER/INVALID/root] to negative cache permanently
(Tue Jul 31 08:51:50 2012) [sssd[pam]] [sss_parse_name_for_domains] (0x0200): name 'root' matched without domain, user is root
(Tue Jul 31 08:51:50 2012) [sssd[pam]] [sss_ncache_set_str] (0x0400): Adding [NCE/GROUP/INVALID/root] to negative cache permanently
(Tue Jul 31 08:51:50 2012) [sssd[pam]] [responder_set_fd_limit] (0x0100): Maximum file descriptors set to [8192]
(Tue Jul 31 08:51:50 2012) [sssd[nss]] [sysdb_domain_init_internal] (0x0200): DB File for INVALID: /var/lib/sss/db/cache_INVALID.ldb
(Tue Jul 31 08:51:50 2012) [sssd[nss]] [ldb] (0x0400): asq: Unable to register control with rootdse!
(Tue Jul 31 08:51:50 2012) [sssd[nss]] [sss_process_init] (0x0400): Responder Initialization complete
(Tue Jul 31 08:51:50 2012) [sssd[nss]] [sss_parse_name_for_domains] (0x0200): name 'root' matched without domain, user is root
(Tue Jul 31 08:51:50 2012) [sssd[nss]] [sss_ncache_set_str] (0x0400): Adding [NCE/USER/INVALID/root] to negative cache permanently
(Tue Jul 31 08:51:50 2012) [sssd[nss]] [sss_parse_name_for_domains] (0x0200): name 'root' matched without domain, user is root
(Tue Jul 31 08:51:50 2012) [sssd[nss]] [sss_ncache_set_str] (0x0400): Adding [NCE/GROUP/INVALID/root] to negative cache permanently
(Tue Jul 31 08:51:50 2012) [sssd[nss]] [nss_get_etc_shells] (0x0400): Found shell /bin/sh in /etc/shells
(Tue Jul 31 08:51:50 2012) [sssd[nss]] [nss_get_etc_shells] (0x0400): Found shell /bin/bash in /etc/shells
(Tue Jul 31 08:51:50 2012) [sssd[nss]] [nss_get_etc_shells] (0x0400): Found shell /sbin/nologin in /etc/shells
(Tue Jul 31 08:51:50 2012) [sssd] [client_registration] (0x0100): Received ID registration: (pam,1)
(Tue Jul 31 08:51:50 2012) [sssd] [mark_service_as_started] (0x0200): Marking pam as started.
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [client_registration] (0x0100): Cancel DP ID timeout [0x2602210]
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [client_registration] (0x0100): Added Frontend client [PAM]
(Tue Jul 31 08:51:50 2012) [sssd[pam]] [sbus_remove_timeout] (0x2000): 0xc0a520
(Tue Jul 31 08:51:50 2012) [sssd[pam]] [id_callback] (0x0100): Got id ack and version (1) from Monitor
(Tue Jul 31 08:51:50 2012) [sssd[pam]] [sbus_remove_timeout] (0x2000): 0xc0d2d0
(Tue Jul 31 08:51:50 2012) [sssd[pam]] [dp_id_callback] (0x0100): Got id ack and version (1) from DP
(Tue Jul 31 08:51:50 2012) [sssd[nss]] [responder_set_fd_limit] (0x0100): Maximum file descriptors set to [8192]
(Tue Jul 31 08:51:50 2012) [sssd[nss]] [nss_process_init] (0x0400): NSS Initialization complete
(Tue Jul 31 08:51:50 2012) [sssd] [client_registration] (0x0100): Received ID registration: (nss,1)
(Tue Jul 31 08:51:50 2012) [sssd] [mark_service_as_started] (0x0200): Marking nss as started.
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [client_registration] (0x0100): Cancel DP ID timeout [0x2606920]
(Tue Jul 31 08:51:50 2012) [sssd[be[INVALID]]] [client_registration] (0x0100): Added Frontend client [NSS]
(Tue Jul 31 08:51:50 2012) [sssd[nss]] [sbus_remove_timeout] (0x2000): 0x20f3040
(Tue Jul 31 08:51:50 2012) [sssd[nss]] [id_callback] (0x0100): Got id ack and version (1) from Monitor
(Tue Jul 31 08:51:50 2012) [sssd[nss]] [sbus_remove_timeout] (0x2000): 0x20f4980
(Tue Jul 31 08:51:50 2012) [sssd[nss]] [dp_id_callback] (0x0100): Got id ack and version (1) from DP
(Tue Jul 31 08:51:55 2012) [sssd] [services_startup_timeout] (0x0400): Handling timeout
(Tue Jul 31 08:52:00 2012) [sssd] [service_send_ping] (0x0100): Pinging INVALID
(Tue Jul 31 08:52:00 2012) [sssd] [sbus_add_timeout] (0x2000): 0xdec2b0
(Tue Jul 31 08:52:00 2012) [sssd] [service_send_ping] (0x0100): Pinging nss
(Tue Jul 31 08:52:00 2012) [sssd] [sbus_add_timeout] (0x2000): 0xde8be0
(Tue Jul 31 08:52:00 2012) [sssd] [service_send_ping] (0x0100): Pinging pam
(Tue Jul 31 08:52:00 2012) [sssd] [sbus_add_timeout] (0x2000): 0xdda340
(Tue Jul 31 08:52:00 2012) [sssd] [sbus_remove_timeout] (0x2000): 0xdec2b0
(Tue Jul 31 08:52:00 2012) [sssd] [ping_check] (0x0100): Service INVALID replied to ping
(Tue Jul 31 08:52:00 2012) [sssd] [sbus_remove_timeout] (0x2000): 0xdda340
(Tue Jul 31 08:52:00 2012) [sssd] [ping_check] (0x0100): Service pam replied to ping
(Tue Jul 31 08:52:00 2012) [sssd] [sbus_remove_timeout] (0x2000): 0xde8be0
(Tue Jul 31 08:52:00 2012) [sssd] [ping_check] (0x0100): Service nss replied to ping
(Tue Jul 31 08:52:00 2012) [sssd[be[INVALID]]] [sysdb_search_users] (0x2000): Search users with filter: (&(objectclass=user)(&(!(dataExpireTimestamp=0))(dataExpireTimestamp<=1343739120)(!(lastLogin=*))))
(Tue Jul 31 08:52:00 2012) [sssd[be[INVALID]]] [sysdb_search_users] (0x2000): No such entry
(Tue Jul 31 08:52:00 2012) [sssd[be[INVALID]]] [sysdb_search_groups] (0x2000): Search groups with filter: (&(objectclass=group)(&(!(dataExpireTimestamp=0))(dataExpireTimestamp<=1343739120)))
(Tue Jul 31 08:52:00 2012) [sssd[be[INVALID]]] [sysdb_search_groups] (0x2000): No such entry
(Tue Jul 31 08:52:00 2012) [sssd[be[INVALID]]] [ldap_id_cleanup_set_timer] (0x0400): Scheduling next cleanup at 1343749920.798692
(Tue Jul 31 08:52:05 2012) [sssd] [message_type] (0x0200): netlink Message type: 24
(Tue Jul 31 08:52:05 2012) [sssd] [route_msg_handler] (0x2000): Discarding multicast route message
(Tue Jul 31 08:52:10 2012) [sssd] [service_send_ping] (0x0100): Pinging INVALID
(Tue Jul 31 08:52:10 2012) [sssd] [sbus_add_timeout] (0x2000): 0xde8bb0
(Tue Jul 31 08:52:10 2012) [sssd] [service_send_ping] (0x0100): Pinging nss
(Tue Jul 31 08:52:10 2012) [sssd] [sbus_add_timeout] (0x2000): 0xde5e00
(Tue Jul 31 08:52:10 2012) [sssd] [service_send_ping] (0x0100): Pinging pam
(Tue Jul 31 08:52:10 2012) [sssd] [sbus_add_timeout] (0x2000): 0xdf15a0
(Tue Jul 31 08:52:10 2012) [sssd] [sbus_remove_timeout] (0x2000): 0xdf15a0
(Tue Jul 31 08:52:10 2012) [sssd] [ping_check] (0x0100): Service pam replied to ping
(Tue Jul 31 08:52:10 2012) [sssd] [sbus_remove_timeout] (0x2000): 0xde8bb0
(Tue Jul 31 08:52:10 2012) [sssd] [ping_check] (0x0100): Service INVALID replied to ping
(Tue Jul 31 08:52:10 2012) [sssd] [sbus_remove_timeout] (0x2000): 0xde5e00
(Tue Jul 31 08:52:10 2012) [sssd] [ping_check] (0x0100): Service nss replied to ping
(Tue Jul 31 08:52:17 2012) [sssd] [message_type] (0x0200): netlink Message type: 20
(Tue Jul 31 08:52:17 2012) [sssd] [addr_msg_debug_print] (0x1000): netlink addr message: iface idx 2 addr 2620:52:0:104c:21a:4aff:fe10:4e22 flags 0x0 ()
(Tue Jul 31 08:52:17 2012) [sssd] [network_status_change_cb] (0x2000): A networking status change detected signaling providers to reset offline status
(Tue Jul 31 08:52:17 2012) [sssd] [sbus_add_timeout] (0x2000): 0xdf15a0
(Tue Jul 31 08:52:17 2012) [sssd[be[INVALID]]] [check_if_online] (0x2000): Backend is already online, nothing to do.
(Tue Jul 31 08:52:17 2012) [sssd] [message_type] (0x0200): netlink Message type: 20
(Tue Jul 31 08:52:17 2012) [sssd] [addr_msg_debug_print] (0x1000): netlink addr message: iface idx 2 addr fec0:0:a10:4c00:21a:4aff:fe10:4e22 flags 0x0 ()
(Tue Jul 31 08:52:17 2012) [sssd] [network_status_change_cb] (0x2000): A networking status change detected signaling providers to reset offline status
(Tue Jul 31 08:52:17 2012) [sssd] [sbus_add_timeout] (0x2000): 0xdda340
(Tue Jul 31 08:52:17 2012) [sssd[be[INVALID]]] [check_if_online] (0x2000): Backend is already online, nothing to do.
(Tue Jul 31 08:52:17 2012) [sssd] [sbus_remove_timeout] (0x2000): 0xdf15a0
(Tue Jul 31 08:52:17 2012) [sssd] [sbus_remove_timeout] (0x2000): 0xdda340
(Tue Jul 31 08:52:18 2012) [sssd] [message_type] (0x0200): netlink Message type: 24
(Tue Jul 31 08:52:18 2012) [sssd] [route_msg_handler] (0x2000): Discarding multicast route message
(Tue Jul 31 08:52:20 2012) [sssd] [service_send_ping] (0x0100): Pinging INVALID
(Tue Jul 31 08:52:20 2012) [sssd] [sbus_add_timeout] (0x2000): 0xde9610
(Tue Jul 31 08:52:20 2012) [sssd] [service_send_ping] (0x0100): Pinging nss
(Tue Jul 31 08:52:20 2012) [sssd] [sbus_add_timeout] (0x2000): 0xdea490
(Tue Jul 31 08:52:20 2012) [sssd] [service_send_ping] (0x0100): Pinging pam
(Tue Jul 31 08:52:20 2012) [sssd] [sbus_add_timeout] (0x2000): 0xdec2b0
(Tue Jul 31 08:52:20 2012) [sssd] [sbus_remove_timeout] (0x2000): 0xde9610
(Tue Jul 31 08:52:20 2012) [sssd] [ping_check] (0x0100): Service INVALID replied to ping
(Tue Jul 31 08:52:20 2012) [sssd] [sbus_remove_timeout] (0x2000): 0xdec2b0
(Tue Jul 31 08:52:20 2012) [sssd] [ping_check] (0x0100): Service pam replied to ping
(Tue Jul 31 08:52:20 2012) [sssd] [sbus_remove_timeout] (0x2000): 0xdea490
(Tue Jul 31 08:52:20 2012) [sssd] [ping_check] (0x0100): Service nss replied to ping
(Tue Jul 31 08:52:21 2012) [sssd] [message_type] (0x0200): netlink Message type: 20
(Tue Jul 31 08:52:21 2012) [sssd] [addr_msg_debug_print] (0x1000): netlink addr message: iface idx 2 addr fed0:dead:beef:0:21a:4aff:fe10:4e22 flags 0x0 ()
(Tue Jul 31 08:52:21 2012) [sssd] [network_status_change_cb] (0x2000): A networking status change detected signaling providers to reset offline status
(Tue Jul 31 08:52:21 2012) [sssd] [sbus_add_timeout] (0x2000): 0xde9610
(Tue Jul 31 08:52:21 2012) [sssd[be[INVALID]]] [check_if_online] (0x2000): Backend is already online, nothing to do.
(Tue Jul 31 08:52:21 2012) [sssd] [sbus_remove_timeout] (0x2000): 0xde9610
(Tue Jul 31 08:52:23 2012) [sssd] [message_type] (0x0200): netlink Message type: 20
(Tue Jul 31 08:52:23 2012) [sssd] [addr_msg_debug_print] (0x1000): netlink addr message: iface idx 2 addr fed0:babe:baab:0:21a:4aff:fe10:4e22 flags 0x0 ()
(Tue Jul 31 08:52:23 2012) [sssd] [network_status_change_cb] (0x2000): A networking status change detected signaling providers to reset offline status
(Tue Jul 31 08:52:23 2012) [sssd] [sbus_add_timeout] (0x2000): 0xdda340
(Tue Jul 31 08:52:23 2012) [sssd[be[INVALID]]] [check_if_online] (0x2000): Backend is already online, nothing to do.
(Tue Jul 31 08:52:23 2012) [sssd] [sbus_remove_timeout] (0x2000): 0xdda340
(Tue Jul 31 08:52:30 2012) [sssd] [service_send_ping] (0x0100): Pinging INVALID
(Tue Jul 31 08:52:30 2012) [sssd] [sbus_add_timeout] (0x2000): 0xdda340
(Tue Jul 31 08:52:30 2012) [sssd] [service_send_ping] (0x0100): Pinging nss
(Tue Jul 31 08:52:30 2012) [sssd] [sbus_add_timeout] (0x2000): 0xde9610
(Tue Jul 31 08:52:30 2012) [sssd] [service_send_ping] (0x0100): Pinging pam
(Tue Jul 31 08:52:30 2012) [sssd] [sbus_add_timeout] (0x2000): 0xde5e00
(Tue Jul 31 08:52:30 2012) [sssd] [sbus_remove_timeout] (0x2000): 0xdda340
(Tue Jul 31 08:52:30 2012) [sssd] [ping_check] (0x0100): Service INVALID replied to ping
(Tue Jul 31 08:52:30 2012) [sssd] [sbus_remove_timeout] (0x2000): 0xde9610
(Tue Jul 31 08:52:30 2012) [sssd] [ping_check] (0x0100): Service nss replied to ping
(Tue Jul 31 08:52:30 2012) [sssd] [sbus_remove_timeout] (0x2000): 0xde5e00
(Tue Jul 31 08:52:30 2012) [sssd] [ping_check] (0x0100): Service pam replied to ping
(Tue Jul 31 08:52:33 2012) [sssd[nss]] [accept_fd_handler] (0x0400): Client connected!
(Tue Jul 31 08:52:33 2012) [sssd[nss]] [sss_cmd_get_version] (0x0200): Received client version [1].
(Tue Jul 31 08:52:33 2012) [sssd[nss]] [sss_cmd_get_version] (0x0200): Offered version [1].
(Tue Jul 31 08:52:33 2012) [sssd[nss]] [sss_parse_name_for_domains] (0x0200): name 'user-1' matched without domain, user is user-1
(Tue Jul 31 08:52:33 2012) [sssd[nss]] [nss_cmd_getpwnam] (0x0100): Requesting info for [user-1] from [<ALL>]
(Tue Jul 31 08:52:33 2012) [sssd[nss]] [sss_dp_issue_request] (0x0400): Issuing request for [0x43ad63:domains at INVALID]
(Tue Jul 31 08:52:33 2012) [sssd[nss]] [sss_dp_get_domains_msg] (0x0400): Sending get domains request for [INVALID][not forced][]
(Tue Jul 31 08:52:33 2012) [sssd[nss]] [sbus_add_timeout] (0x2000): 0x20f1390
(Tue Jul 31 08:52:33 2012) [sssd[be[INVALID]]] [be_get_subdomains] (0x0400): Got get subdomains [not forced][]
(Tue Jul 31 08:52:33 2012) [sssd[be[INVALID]]] [be_get_subdomains] (0x0100): Undefined backend target.
(Tue Jul 31 08:52:33 2012) [sssd[be[INVALID]]] [be_get_subdomains] (0x1000): Request processed. Returned 3,19,Subdomains back end target is not configured
(Tue Jul 31 08:52:33 2012) [sssd[nss]] [sss_dp_internal_get_send] (0x0400): Entering request [0x43ad63:domains at INVALID]
(Tue Jul 31 08:52:33 2012) [sssd[nss]] [sbus_remove_timeout] (0x2000): 0x20f1390
(Tue Jul 31 08:52:33 2012) [sssd[nss]] [sss_dp_get_reply] (0x1000): Got reply from Data Provider - DP error code: 3 errno: 19 error message: Subdomains back end target is not configured
(Tue Jul 31 08:52:33 2012) [sssd[nss]] [sss_parse_name_for_domains] (0x0200): name 'user-1' matched without domain, user is user-1
(Tue Jul 31 08:52:33 2012) [sssd[nss]] [nss_cmd_getpwnam_cb] (0x0400): Requesting info for [user-1] from [<ALL>]
(Tue Jul 31 08:52:33 2012) [sssd[nss]] [sss_ncache_check_str] (0x2000): Checking negative cache for [NCE/USER/INVALID/user-1]
(Tue Jul 31 08:52:33 2012) [sssd[nss]] [nss_cmd_getpwnam_search] (0x0100): Requesting info for [user-1 at INVALID]
(Tue Jul 31 08:52:33 2012) [sssd[nss]] [sss_dp_issue_request] (0x0400): Issuing request for [0x438b31:1:user-1 at INVALID]
(Tue Jul 31 08:52:33 2012) [sssd[nss]] [sss_dp_get_account_msg] (0x0400): Creating request for [INVALID][4097][1][name=user-1]
(Tue Jul 31 08:52:33 2012) [sssd[nss]] [sbus_add_timeout] (0x2000): 0x20f3040
(Tue Jul 31 08:52:33 2012) [sssd[be[INVALID]]] [be_get_account_info] (0x0100): Got request for [4097][1][name=user-1]
(Tue Jul 31 08:52:33 2012) [sssd[be[INVALID]]] [fo_resolve_service_send] (0x0100): Trying to resolve service 'LDAP'
(Tue Jul 31 08:52:33 2012) [sssd[be[INVALID]]] [get_server_status] (0x1000): Status of server 'a.example.com' is 'name not resolved'
(Tue Jul 31 08:52:33 2012) [sssd[be[INVALID]]] [get_port_status] (0x1000): Port status of port 389 for server 'a.example.com' is 'neutral'
(Tue Jul 31 08:52:33 2012) [sssd[be[INVALID]]] [fo_resolve_service_activate_timeout] (0x2000): Resolve timeout set to 10 seconds
(Tue Jul 31 08:52:33 2012) [sssd[be[INVALID]]] [get_server_status] (0x1000): Status of server 'a.example.com' is 'name not resolved'
(Tue Jul 31 08:52:33 2012) [sssd[be[INVALID]]] [resolv_gethostbyname_step] (0x2000): Querying files
(Tue Jul 31 08:52:33 2012) [sssd[be[INVALID]]] [resolv_gethostbyname_files_send] (0x0100): Trying to resolve A record of 'a.example.com' in files
(Tue Jul 31 08:52:33 2012) [sssd[be[INVALID]]] [set_server_common_status] (0x0100): Marking server 'a.example.com' as 'resolving name'
(Tue Jul 31 08:52:33 2012) [sssd[be[INVALID]]] [resolv_gethostbyname_step] (0x2000): Querying files
(Tue Jul 31 08:52:33 2012) [sssd[be[INVALID]]] [resolv_gethostbyname_files_send] (0x0100): Trying to resolve AAAA record of 'a.example.com' in files
(Tue Jul 31 08:52:33 2012) [sssd[be[INVALID]]] [resolv_gethostbyname_next] (0x0200): No more address families to retry
(Tue Jul 31 08:52:33 2012) [sssd[be[INVALID]]] [resolv_gethostbyname_step] (0x2000): Querying DNS
(Tue Jul 31 08:52:33 2012) [sssd[be[INVALID]]] [resolv_gethostbyname_dns_query] (0x0100): Trying to resolve A record of 'a.example.com' in DNS
(Tue Jul 31 08:52:33 2012) [sssd[be[INVALID]]] [schedule_request_timeout] (0x2000): Scheduling a timeout of 5 seconds
(Tue Jul 31 08:52:33 2012) [sssd[be[INVALID]]] [schedule_timeout_watcher] (0x2000): Scheduling DNS timeout watcher
(Tue Jul 31 08:52:33 2012) [sssd[nss]] [sss_dp_internal_get_send] (0x0400): Entering request [0x438b31:1:user-1 at INVALID]
(Tue Jul 31 08:52:33 2012) [sssd[nss]] [sss_dp_req_destructor] (0x0400): Deleting request: [0x43ad63:domains at INVALID]
(Tue Jul 31 08:52:33 2012) [sssd[be[INVALID]]] [request_watch_destructor] (0x0400): Deleting request watch
(Tue Jul 31 08:52:33 2012) [sssd[be[INVALID]]] [resolv_gethostbyname_step] (0x2000): Querying DNS
(Tue Jul 31 08:52:33 2012) [sssd[be[INVALID]]] [resolv_gethostbyname_dns_query] (0x0100): Trying to resolve AAAA record of 'a.example.com' in DNS
(Tue Jul 31 08:52:33 2012) [sssd[be[INVALID]]] [schedule_request_timeout] (0x2000): Scheduling a timeout of 5 seconds
(Tue Jul 31 08:52:33 2012) [sssd[be[INVALID]]] [schedule_timeout_watcher] (0x2000): Scheduling DNS timeout watcher
(Tue Jul 31 08:52:33 2012) [sssd[be[INVALID]]] [request_watch_destructor] (0x0400): Deleting request watch
(Tue Jul 31 08:52:33 2012) [sssd[be[INVALID]]] [resolv_gethostbyname_next] (0x0200): No more address families to retry
(Tue Jul 31 08:52:33 2012) [sssd[be[INVALID]]] [resolv_gethostbyname_next] (0x0100): No more hosts databases to retry
(Tue Jul 31 08:52:33 2012) [sssd[be[INVALID]]] [fo_resolve_service_done] (0x0020): Failed to resolve server 'a.example.com': Domain name not found
(Tue Jul 31 08:52:33 2012) [sssd[be[INVALID]]] [set_server_common_status] (0x0100): Marking server 'a.example.com' as 'not working'
(Tue Jul 31 08:52:33 2012) [sssd[be[INVALID]]] [be_resolve_server_done] (0x1000): Server resolution failed: 5
(Tue Jul 31 08:52:33 2012) [sssd[be[INVALID]]] [sdap_id_op_connect_done] (0x0020): Failed to connect, going offline (5 [Chyba vstupu/výstupu])
(Tue Jul 31 08:52:33 2012) [sssd[be[INVALID]]] [be_mark_offline] (0x2000): Going offline!
(Tue Jul 31 08:52:33 2012) [sssd[be[INVALID]]] [be_run_offline_cb] (0x0080): Going offline. Running callbacks.
(Tue Jul 31 08:52:33 2012) [sssd[be[INVALID]]] [acctinfo_callback] (0x0100): Request processed. Returned 1,11,Offline
(Tue Jul 31 08:52:33 2012) [sssd[nss]] [sbus_remove_timeout] (0x2000): 0x20f3040
(Tue Jul 31 08:52:33 2012) [sssd[nss]] [sss_dp_get_reply] (0x1000): Got reply from Data Provider - DP error code: 1 errno: 11 error message: Offline
(Tue Jul 31 08:52:33 2012) [sssd[nss]] [nss_cmd_getpwnam_dp_callback] (0x0040): Unable to get information from Data Provider
Error: 1, 11, Offline
Will try to return what we have in cache
(Tue Jul 31 08:52:33 2012) [sssd[nss]] [sss_dp_req_destructor] (0x0400): Deleting request: [0x438b31:1:user-1 at INVALID]
(Tue Jul 31 08:52:33 2012) [sssd[nss]] [client_recv] (0x0200): Client disconnected!
(Tue Jul 31 08:52:33 2012) [sssd[nss]] [client_destructor] (0x2000): Terminated client [0x20f3cf0][19]
(Tue Jul 31 08:52:37 2012) [sssd] [monitor_quit] (0x2000): Received shutdown command
(Tue Jul 31 08:52:37 2012) [sssd] [monitor_quit] (0x0010): Monitor received Přerušení (SIGINT): terminating children
(Tue Jul 31 08:52:37 2012) [sssd] [monitor_quit] (0x0020): Terminating [pam][19091]
(Tue Jul 31 08:52:37 2012) [sssd[be[INVALID]]] [sbus_remove_watch] (0x2000): 0x2601810/0x2600180
(Tue Jul 31 08:52:37 2012) [sssd[be[INVALID]]] [sbus_remove_watch] (0x2000): 0x2601810/0x25e1280
(Tue Jul 31 08:52:37 2012) [sssd[be[INVALID]]] [sbus_dispatch] (0x0080): Connection is not open for dispatching.
(Tue Jul 31 08:52:37 2012) [sssd[be[INVALID]]] [be_client_destructor] (0x0400): Removed PAM client
(Tue Jul 31 08:52:37 2012) [sssd] [monitor_quit] (0x0020): Child [pam] exited gracefully
(Tue Jul 31 08:52:37 2012) [sssd] [monitor_quit] (0x0020): Terminating [nss][19090]
(Tue Jul 31 08:52:37 2012) [sssd[be[INVALID]]] [sbus_remove_watch] (0x2000): 0x26066b0/0x26023b0
(Tue Jul 31 08:52:37 2012) [sssd[be[INVALID]]] [sbus_remove_watch] (0x2000): 0x26066b0/0x2602360
(Tue Jul 31 08:52:37 2012) [sssd[be[INVALID]]] [sbus_dispatch] (0x0080): Connection is not open for dispatching.
(Tue Jul 31 08:52:37 2012) [sssd[be[INVALID]]] [be_client_destructor] (0x0400): Removed NSS client
(Tue Jul 31 08:52:37 2012) [sssd] [monitor_quit] (0x0020): Child [nss] exited gracefully
(Tue Jul 31 08:52:37 2012) [sssd] [monitor_quit] (0x0020): Terminating [INVALID][19089]
(Tue Jul 31 08:52:37 2012) [sssd[be[INVALID]]] [sbus_remove_watch] (0x2000): 0x25f7a70/0x25f76e0
(Tue Jul 31 08:52:37 2012) [sssd] [monitor_quit] (0x0020): Child [INVALID] exited gracefully
(Tue Jul 31 08:52:37 2012) [sssd] [sbus_remove_watch] (0x2000): 0xdea6f0/0xdedd00
-------------- next part --------------
[sssd]
config_file_version = 2
services = nss, pam
domains = INVALID
debug_level = 0x0ff0

[nss]
debug_level = 0x0ff0

[pam]
debug_level = 0x0ff0

[domain/INVALID]
debug_level = 0x0ff0
id_provider = ldap
ldap_uri = ldap://a.example.com, ldap://b.example.com
ldap_backup_uri = ldap://c.example.com, ldap://d.example.com


More information about the sssd-devel mailing list