<p dir="ltr">I am using rsyslog RELP (reliable event log processing) to steal away logs over syslog-tcp with fifo buffer to store them in a central database, so journalctl is the only local log on the box. The /var/log/sssd/* files are mostly empty. The only info in there is about an explicit kerberos setting not being set and having to use a different directives value for kerberos. </p>
<p dir="ltr">Either way, the logs dont have much to go on. I will check my database for any of the logs I can find, but I think I did already and I dont think there was other info in there.</p>
<p dir="ltr">I'll also see what I can do with the link you sent.</p>
<p dir="ltr">Thanks.</p>
<div class="gmail_quote">On Aug 14, 2015 4:20 AM, "Jakub Hrozek" <<a href="mailto:jhrozek@redhat.com">jhrozek@redhat.com</a>> wrote:<br type="attribution"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">On Thu, Aug 13, 2015 at 05:11:41PM -0400, Brendan Kearney wrote:<br>
> On 08/13/2015 03:45 AM, Jakub Hrozek wrote:<br>
> >On Wed, Aug 12, 2015 at 09:48:38PM -0400, Brendan Kearney wrote:<br>
> >>i have a fedora 20 install on a desktop that is working and autofs will read<br>
> >>the auto.master from ldap and i can mount the shares specified in<br>
> >>auto.shares listed.<br>
> >><br>
> >>i have a fedora 20 install on a laptop that will not work and cannot read<br>
> >>the auto.master from ldap.<br>
> >><br>
> >>i have done everything i can think of to make the 2 as "apples to apples"<br>
> >>identical as i can, but still cannot get autofs to read the auto.master from<br>
> >>ldap.<br>
> >><br>
> >>[root@laptop ~]# automount -fd -vvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvv<br>
> >>Starting automounter version 5.0.7-42.fc20, master map auto.master<br>
> >>using kernel protocol version 5.02<br>
> >>lookup_nss_read_master: reading master sss auto.master<br>
> >>parse_init: parse(sun): init gathered global options: (null)<br>
> >>spawn_mount: mtab link detected, passing -n to mount<br>
> >>spawn_umount: mtab link detected, passing -n to mount<br>
> >>setautomntent: lookup(sss): setautomntent: No such file or directory<br>
> >>lookup_nss_read_master: auto.master not found, replacing '.' with '_'<br>
> >>parse_init: parse(sun): init gathered global options: (null)<br>
> >>spawn_mount: mtab link detected, passing -n to mount<br>
> >>spawn_umount: mtab link detected, passing -n to mount<br>
> >>setautomntent: lookup(sss): setautomntent: No such file or directory<br>
> >This message just means that there are no more maps in the table.<br>
> ><br>
> >>no mounts in table<br>
> >>^Cautofs stopped<br>
> >><br>
> >>i believe i am hung up by the setautomntent: no such file or directory line.<br>
> >>the configs are pretty much copied from the working desktop. any help is<br>
> >>appreciated.<br>
> >><br>
> >>*sssd.conf**:*<br>
> >>[sssd]<br>
> >>domains = <a href="http://bpk2.com" rel="noreferrer" target="_blank">bpk2.com</a><br>
> >>services = nss, pam, sudo, autofs<br>
> >>config_file_version = 2<br>
> >>#debug_level = 4<br>
> >><br>
> >>[nss]<br>
> >>filter_groups = root<br>
> >>filter_users = root<br>
> >><br>
> >>[pam]<br>
> >><br>
> >>[sudo]<br>
> >><br>
> >>[autofs]<br>
> >><br>
> >>[domain/<a href="http://bpk2.com" rel="noreferrer" target="_blank">bpk2.com</a>]<br>
> >>#debug_level = 4<br>
> >>id_provider = ldap<br>
> >>ldap_schema = rfc2307bis<br>
> >>ldap_uri = _srv_,ldap://<a href="http://ldap1.bpk2.com" rel="noreferrer" target="_blank">ldap1.bpk2.com</a>,ldap://<a href="http://ldap2.bpk2.com" rel="noreferrer" target="_blank">ldap2.bpk2.com</a><br>
> >>ldap_search_base = dc=bpk2,dc=com<br>
> >>ldap_sasl_mech = GSSAPI<br>
> >>ldap_sasl_authid = host/<a href="http://laptop.bpk2.com" rel="noreferrer" target="_blank">laptop.bpk2.com</a><br>
> >>ldap_sasl_realm = <a href="http://BPK2.COM" rel="noreferrer" target="_blank">BPK2.COM</a><br>
> >><br>
> >>auth_provider = krb5<br>
> >>krb5_server = _srv_,<a href="http://kerberos.bpk2.com" rel="noreferrer" target="_blank">kerberos.bpk2.com</a><br>
> >>krb5_realm = <a href="http://BPK2.COM" rel="noreferrer" target="_blank">BPK2.COM</a><br>
> >>krb5_renewable_lifetime = 7d<br>
> >>krb5_lifetime = 24h<br>
> >>krb5_renew_interval = 1h<br>
> >>krb5_store_password_if_offline = true<br>
> >>cache_credentials = true<br>
> >><br>
> >>sudo_provider = ldap<br>
> >>ldap_sudo_search_base = ou=SUDO Groups,ou=Roles,dc=bpk2,dc=com<br>
> >><br>
> >>autofs_provider = ldap<br>
> >>ldap_autofs_search_base = cn=autofs,ou=Daemons,dc=bpk2,dc=com<br>
> >>ldap_autofs_map_object_class = automountMap<br>
> >>ldap_autofs_entry_object_class = automount<br>
> >>ldap_autofs_map_name = automountMapName<br>
> >>ldap_autofs_entry_key = automountKey<br>
> >>ldap_autofs_entry_value = automountInformation<br>
> >><br>
> >>#min_id = 1000<br>
> >>#max_id = 2000<br>
> >>enumerate = false<br>
> >The config looks OK..<br>
> ><br>
> >>*autofs_ldap_auth.conf**:*<br>
> >You don't need this config file unless you're also using the ldap direct<br>
> >integration.<br>
> ><br>
> >I would suggest to debug like this:<br>
> > - stop automounter<br>
> > - enable verbose (7+) debug_level in the autofs and domain sections<br>
> > - start sssd<br>
> > - run 'date' to pair the timestamp in the logs with the system clock<br>
> > - start automounter -m on the foreground<br>
> > - run date again to know the timestamp of request end<br>
> > - check out autofs responder and domain logs<br>
> >_______________________________________________<br>
> >sssd-users mailing list<br>
> ><a href="mailto:sssd-users@lists.fedorahosted.org">sssd-users@lists.fedorahosted.org</a><br>
> ><a href="https://lists.fedorahosted.org/mailman/listinfo/sssd-users" rel="noreferrer" target="_blank">https://lists.fedorahosted.org/mailman/listinfo/sssd-users</a><br>
> [root@laptop ~]# date<br>
> Thu Aug 13 17:06:07 EDT 2015<br>
> [root@laptop ~]# automount -m<br>
><br>
> autofs dump map information<br>
> ===========================<br>
><br>
> global options: none configured<br>
> no master map entries found<br>
><br>
> [root@laptop ~]# date<br>
> Thu Aug 13 17:06:22 EDT 2015<br>
><br>
> [root@laptop ~]# journalctl -u autofs<br>
> ...<br>
> Aug 13 17:05:12 laptop systemd[1]: Stopped Automounts filesystems on demand.<br>
><br>
> [root@laptop ~]# journalctl -u sssd<br>
~~~~~~~~~~~~~~~~~~<br>
<br>
The useful info would be in /var/log/sssd/*.log. We don't really log too<br>
much to journald by default (although it's possible to configure<br>
journald to be used for debug messages as well).<br>
<br>
See <a href="https://fedorahosted.org/sssd/wiki/Troubleshooting" rel="noreferrer" target="_blank">https://fedorahosted.org/sssd/wiki/Troubleshooting</a> for more details<br>
on getting the logs.<br>
_______________________________________________<br>
sssd-users mailing list<br>
<a href="mailto:sssd-users@lists.fedorahosted.org">sssd-users@lists.fedorahosted.org</a><br>
<a href="https://lists.fedorahosted.org/mailman/listinfo/sssd-users" rel="noreferrer" target="_blank">https://lists.fedorahosted.org/mailman/listinfo/sssd-users</a><br>
</blockquote></div>