[SSSD-users] sssd troubles under load

Lukas Slebodnik lslebodn at redhat.com
Thu Jan 8 17:18:26 UTC 2015


On (08/01/15 09:31), Orion Poplawski wrote:
>On 01/06/2015 11:32 PM, Jakub Hrozek wrote:
>> On Tue, Jan 06, 2015 at 05:06:39PM -0700, Orion Poplawski wrote:
>>> We're having some trouble with sssd on centos 7 under load on a VPS. 389ds
>>> ldap server for id/auth.  Part may be an issue with the VPS, but I'm trying
>>> to track down all possible issues.
>>>
>>> Also, we realized that we were running in a bit of a bad state - the primary
>>> ldap server was not available, but the backup was.
>>>
>>>  Some logs:
>>>
>>> General question, is this bad?:
>>> (Tue Jan  6 23:17:43 2015) [sssd[be[default]]] [sdap_get_users_done]
>>> (0x0040): Failed to retrieve users
>> 
>> This can be caused by many things, we neer more context..in general, the
>> LDAP search has failed and SSSD would fall back to cached entries.
>
>Okay, appears to be a simple "unknown user" type of response:
>
>(Thu Jan  8 15:50:47 2015) [sssd[be[default]]] [be_get_account_info] (0x0100):
>Got request for [4097][1][name=contracts-grants]
>(Thu Jan  8 15:50:47 2015) [sssd[be[default]]] [sdap_get_users_done] (0x0040):
>Failed to retrieve users
>
>contracts-grants is not in LDAP.
You can filter request for non-LDAP users/groups in nss section of sssd.conf

man sssd.conf -> filter_users, filter_groups

LS


More information about the sssd-users mailing list