<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<div class="moz-cite-prefix">On 08/14/2015 08:24 AM, brendan kearney
wrote:<br>
</div>
<blockquote
cite="mid:CAARxGtgyJ5Q_Cid-Hwwm+1r0e0whprs9kXtLL=udFA1HXAVoYQ@mail.gmail.com"
type="cite">
<p dir="ltr">I am using rsyslog RELP (reliable event log
processing) to steal away logs over syslog-tcp with fifo buffer
to store them in a central database, so journalctl is the only
local log on the box. The /var/log/sssd/* files are mostly
empty. The only info in there is about an explicit kerberos
setting not being set and having to use a different directives
value for kerberos. </p>
<p dir="ltr">Either way, the logs dont have much to go on. </p>
</blockquote>
<br>
You need to raise debug level for the logs to have more info.<br>
<br>
<blockquote
cite="mid:CAARxGtgyJ5Q_Cid-Hwwm+1r0e0whprs9kXtLL=udFA1HXAVoYQ@mail.gmail.com"
type="cite">
<p dir="ltr">I will check my database for any of the logs I can
find, but I think I did already and I dont think there was other
info in there.</p>
<p dir="ltr">I'll also see what I can do with the link you sent.</p>
<p dir="ltr">Thanks.</p>
<div class="gmail_quote">On Aug 14, 2015 4:20 AM, "Jakub Hrozek"
<<a moz-do-not-send="true" href="mailto:jhrozek@redhat.com">jhrozek@redhat.com</a>>
wrote:<br type="attribution">
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">On Thu, Aug
13, 2015 at 05:11:41PM -0400, Brendan Kearney wrote:<br>
> On 08/13/2015 03:45 AM, Jakub Hrozek wrote:<br>
> >On Wed, Aug 12, 2015 at 09:48:38PM -0400, Brendan
Kearney wrote:<br>
> >>i have a fedora 20 install on a desktop that is
working and autofs will read<br>
> >>the auto.master from ldap and i can mount the
shares specified in<br>
> >>auto.shares listed.<br>
> >><br>
> >>i have a fedora 20 install on a laptop that will
not work and cannot read<br>
> >>the auto.master from ldap.<br>
> >><br>
> >>i have done everything i can think of to make the
2 as "apples to apples"<br>
> >>identical as i can, but still cannot get autofs
to read the auto.master from<br>
> >>ldap.<br>
> >><br>
> >>[root@laptop ~]# automount -fd
-vvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvv<br>
> >>Starting automounter version 5.0.7-42.fc20,
master map auto.master<br>
> >>using kernel protocol version 5.02<br>
> >>lookup_nss_read_master: reading master sss
auto.master<br>
> >>parse_init: parse(sun): init gathered global
options: (null)<br>
> >>spawn_mount: mtab link detected, passing -n to
mount<br>
> >>spawn_umount: mtab link detected, passing -n to
mount<br>
> >>setautomntent: lookup(sss): setautomntent: No
such file or directory<br>
> >>lookup_nss_read_master: auto.master not found,
replacing '.' with '_'<br>
> >>parse_init: parse(sun): init gathered global
options: (null)<br>
> >>spawn_mount: mtab link detected, passing -n to
mount<br>
> >>spawn_umount: mtab link detected, passing -n to
mount<br>
> >>setautomntent: lookup(sss): setautomntent: No
such file or directory<br>
> >This message just means that there are no more maps
in the table.<br>
> ><br>
> >>no mounts in table<br>
> >>^Cautofs stopped<br>
> >><br>
> >>i believe i am hung up by the setautomntent: no
such file or directory line.<br>
> >>the configs are pretty much copied from the
working desktop. any help is<br>
> >>appreciated.<br>
> >><br>
> >>*sssd.conf**:*<br>
> >>[sssd]<br>
> >>domains = <a moz-do-not-send="true"
href="http://bpk2.com" rel="noreferrer" target="_blank">bpk2.com</a><br>
> >>services = nss, pam, sudo, autofs<br>
> >>config_file_version = 2<br>
> >>#debug_level = 4<br>
> >><br>
> >>[nss]<br>
> >>filter_groups = root<br>
> >>filter_users = root<br>
> >><br>
> >>[pam]<br>
> >><br>
> >>[sudo]<br>
> >><br>
> >>[autofs]<br>
> >><br>
> >>[domain/<a moz-do-not-send="true"
href="http://bpk2.com" rel="noreferrer" target="_blank">bpk2.com</a>]<br>
> >>#debug_level = 4<br>
> >>id_provider = ldap<br>
> >>ldap_schema = rfc2307bis<br>
> >>ldap_uri = _srv_,<a class="moz-txt-link-freetext" href="ldap://">ldap://</a><a moz-do-not-send="true"
href="http://ldap1.bpk2.com" rel="noreferrer"
target="_blank">ldap1.bpk2.com</a>,<a class="moz-txt-link-freetext" href="ldap://">ldap://</a><a
moz-do-not-send="true" href="http://ldap2.bpk2.com"
rel="noreferrer" target="_blank">ldap2.bpk2.com</a><br>
> >>ldap_search_base = dc=bpk2,dc=com<br>
> >>ldap_sasl_mech = GSSAPI<br>
> >>ldap_sasl_authid = host/<a moz-do-not-send="true"
href="http://laptop.bpk2.com" rel="noreferrer"
target="_blank">laptop.bpk2.com</a><br>
> >>ldap_sasl_realm = <a moz-do-not-send="true"
href="http://BPK2.COM" rel="noreferrer" target="_blank">BPK2.COM</a><br>
> >><br>
> >>auth_provider = krb5<br>
> >>krb5_server = _srv_,<a moz-do-not-send="true"
href="http://kerberos.bpk2.com" rel="noreferrer"
target="_blank">kerberos.bpk2.com</a><br>
> >>krb5_realm = <a moz-do-not-send="true"
href="http://BPK2.COM" rel="noreferrer" target="_blank">BPK2.COM</a><br>
> >>krb5_renewable_lifetime = 7d<br>
> >>krb5_lifetime = 24h<br>
> >>krb5_renew_interval = 1h<br>
> >>krb5_store_password_if_offline = true<br>
> >>cache_credentials = true<br>
> >><br>
> >>sudo_provider = ldap<br>
> >>ldap_sudo_search_base = ou=SUDO
Groups,ou=Roles,dc=bpk2,dc=com<br>
> >><br>
> >>autofs_provider = ldap<br>
> >>ldap_autofs_search_base =
cn=autofs,ou=Daemons,dc=bpk2,dc=com<br>
> >>ldap_autofs_map_object_class = automountMap<br>
> >>ldap_autofs_entry_object_class = automount<br>
> >>ldap_autofs_map_name = automountMapName<br>
> >>ldap_autofs_entry_key = automountKey<br>
> >>ldap_autofs_entry_value = automountInformation<br>
> >><br>
> >>#min_id = 1000<br>
> >>#max_id = 2000<br>
> >>enumerate = false<br>
> >The config looks OK..<br>
> ><br>
> >>*autofs_ldap_auth.conf**:*<br>
> >You don't need this config file unless you're also
using the ldap direct<br>
> >integration.<br>
> ><br>
> >I would suggest to debug like this:<br>
> > - stop automounter<br>
> > - enable verbose (7+) debug_level in the autofs
and domain sections<br>
> > - start sssd<br>
> > - run 'date' to pair the timestamp in the logs
with the system clock<br>
> > - start automounter -m on the foreground<br>
> > - run date again to know the timestamp of
request end<br>
> > - check out autofs responder and domain logs<br>
> >_______________________________________________<br>
> >sssd-users mailing list<br>
> ><a moz-do-not-send="true"
href="mailto:sssd-users@lists.fedorahosted.org">sssd-users@lists.fedorahosted.org</a><br>
> ><a moz-do-not-send="true"
href="https://lists.fedorahosted.org/mailman/listinfo/sssd-users"
rel="noreferrer" target="_blank">https://lists.fedorahosted.org/mailman/listinfo/sssd-users</a><br>
> [root@laptop ~]# date<br>
> Thu Aug 13 17:06:07 EDT 2015<br>
> [root@laptop ~]# automount -m<br>
><br>
> autofs dump map information<br>
> ===========================<br>
><br>
> global options: none configured<br>
> no master map entries found<br>
><br>
> [root@laptop ~]# date<br>
> Thu Aug 13 17:06:22 EDT 2015<br>
><br>
> [root@laptop ~]# journalctl -u autofs<br>
> ...<br>
> Aug 13 17:05:12 laptop systemd[1]: Stopped Automounts
filesystems on demand.<br>
><br>
> [root@laptop ~]# journalctl -u sssd<br>
~~~~~~~~~~~~~~~~~~<br>
<br>
The useful info would be in /var/log/sssd/*.log. We don't
really log too<br>
much to journald by default (although it's possible to
configure<br>
journald to be used for debug messages as well).<br>
<br>
See <a moz-do-not-send="true"
href="https://fedorahosted.org/sssd/wiki/Troubleshooting"
rel="noreferrer" target="_blank">https://fedorahosted.org/sssd/wiki/Troubleshooting</a>
for more details<br>
on getting the logs.<br>
_______________________________________________<br>
sssd-users mailing list<br>
<a moz-do-not-send="true"
href="mailto:sssd-users@lists.fedorahosted.org">sssd-users@lists.fedorahosted.org</a><br>
<a moz-do-not-send="true"
href="https://lists.fedorahosted.org/mailman/listinfo/sssd-users"
rel="noreferrer" target="_blank">https://lists.fedorahosted.org/mailman/listinfo/sssd-users</a><br>
</blockquote>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
sssd-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:sssd-users@lists.fedorahosted.org">sssd-users@lists.fedorahosted.org</a>
<a class="moz-txt-link-freetext" href="https://lists.fedorahosted.org/mailman/listinfo/sssd-users">https://lists.fedorahosted.org/mailman/listinfo/sssd-users</a>
</pre>
</blockquote>
<br>
<br>
<pre class="moz-signature" cols="72">--
Thank you,
Dmitri Pal
Engineering Director, Identity Management and Platform Security
Red Hat, Inc.</pre>
</body>
</html>