[SSSD-users] caching question? (switching servers)

Jakub Hrozek jhrozek at redhat.com
Tue Jun 23 13:48:05 UTC 2015


On Tue, Jun 23, 2015 at 06:42:02AM -0700, Janelle wrote:
> Hello,
> 
> My first post here.  I have an issue with having occasional failures of LDAP
> servers being used by SSSD. What happens is that when a new server is stood
> up to replace the failed servers, users can't seem to login until SSSD is
> restarted. Some users can, and it is hard to tell which can and can't.  I
> understand this is a caching setting or has something to do with caching,
> but I don't fully understand why sssd can't just keep running. Prior to this
> we used nslcd and never had these issues.  Is this a known issue or am I
> missing something in the setup?

Do the new servers have a different address? One possible reason is that
SSSD would keep the old connection (or remain offline) until you cycle
it.

Would signaling sssd to switch to offline and online instead of
restarting it work equally?

pkill -USR1 sssd # Go offline
pkill -USR2 sssd # Go back online


More information about the sssd-users mailing list