SSSD Problem after update

[Ronald Wimmer]

Today I updated all packages on one of our IPA servers. Unfortunately, 
SSSD stopped working:

[sssd] [main] (0x0010): SSSD couldn't load the configuration database.

[sssd] [ldb] (0x0020): Unable to open tdb '/var/lib/sss/db/config.ldb': 
Permission denied

[sssd] [ldb] (0x0020): Failed to connect to '/var/lib/sss/db/config.ldb' 
with backend 'tdb': Unable to open tdb '/var/lib/sss/db/config.ldb': 
Permission denied

[sssd] [confdb_init] (0x0010): Unable to open config database 
[/var/lib/sss/db/config.ldb]

[sssd] [confdb_setup] (0x0010): The confdb initialization failed [5]: 
Input/output error

[sssd] [load_configuration] (0x0010): Unable to setup ConfDB [5]: 
Input/output error

I noticed that owner and group of config.ldb are changed to sssd when I 
try to restart the sssd.service. On all remaining IPA servers this 
particular file belongs to root.

I will revert to the snapshot I made before updating packages in order 
to make that IPA server work again properly.

Cheers,
Ronald

[Sumit Bose]

Am Mon, May 23, 2022 at 08:48:46AM +0200 schrieb Ronald Wimmer via FreeIPA-users:
> Today I updated all packages on one of our IPA servers. Unfortunately, SSSD
> stopped working:

Hi,

to which package version did you update?

bye,
Sumit
> [sssd] [main] (0x0010): SSSD couldn't load the configuration database.
>
> [sssd] [ldb] (0x0020): Unable to open tdb '/var/lib/sss/db/config.ldb':
> Permission denied
>
> [sssd] [ldb] (0x0020): Failed to connect to '/var/lib/sss/db/config.ldb'
> with backend 'tdb': Unable to open tdb '/var/lib/sss/db/config.ldb':
> Permission denied
>
> [sssd] [confdb_init] (0x0010): Unable to open config database
> [/var/lib/sss/db/config.ldb]
>
> [sssd] [confdb_setup] (0x0010): The confdb initialization failed [5]:
> Input/output error
>
> [sssd] [load_configuration] (0x0010): Unable to setup ConfDB [5]:
> Input/output error
>
> I noticed that owner and group of config.ldb are changed to sssd when I try
> to restart the sssd.service. On all remaining IPA servers this particular
> file belongs to root.
>
> I will revert to the snapshot I made before updating packages in order to
> make that IPA server work again properly.
>
> Cheers,
> Ronald
> _______________________________________________
> FreeIPA-users mailing list -- [e-mail]
> To unsubscribe send an email to [e-mail]
> Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives: https://lists.fedorahosted.org/archives/list/[e-mail]...
> Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure

[Ronald Wimmer]

On 24.05.22 11:29, Sumit Bose wrote:
> Am Mon, May 23, 2022 at 08:48:46AM +0200 schrieb Ronald Wimmer via FreeIPA-users:
> > Today I updated all packages on one of our IPA servers. Unfortunately, SSSD
> > stopped working:
>
> Hi,
>
> to which package version did you update?

From 2.5.2 to 2.6.2.

[Ronald Wimmer]

On 24.05.22 23:50, Ronald Wimmer via FreeIPA-users wrote:
> On 24.05.22 11:29, Sumit Bose wrote:
> > Am Mon, May 23, 2022 at 08:48:46AM +0200 schrieb Ronald Wimmer via 
> > FreeIPA-users:
> > > Today I updated all packages on one of our IPA servers. 
> > > Unfortunately, SSSD
> > > stopped working:
> >
> > Hi,
> >
> > to which package version did you update?
>
> From 2.5.2 to 2.6.2.

To be a little more specific: 2.6.2-4.0.1.el8_6

[Ronald Wimmer]

On 24.05.22 23:51, Ronald Wimmer via FreeIPA-users wrote:
> On 24.05.22 23:50, Ronald Wimmer via FreeIPA-users wrote:
> > On 24.05.22 11:29, Sumit Bose wrote:
> > > Am Mon, May 23, 2022 at 08:48:46AM +0200 schrieb Ronald Wimmer via 
> > > FreeIPA-users:
> > > > Today I updated all packages on one of our IPA servers. 
> > > > Unfortunately, SSSD
> > > > stopped working:
> > >
> > > Hi,
> > >
> > > to which package version did you update?
> >
> > From 2.5.2 to 2.6.2.
>
> To be a little more specific: 2.6.2-4.0.1.el8_6

yum reinstall sssd-common

solved the problem.

https://access.redhat.com/solutions/3209411

[Ronald Wimmer]

On 08.06.22 12:27, Ronald Wimmer via FreeIPA-users wrote:
> On 24.05.22 23:51, Ronald Wimmer via FreeIPA-users wrote:
> > On 24.05.22 23:50, Ronald Wimmer via FreeIPA-users wrote:
> > > On 24.05.22 11:29, Sumit Bose wrote:
> > > > Am Mon, May 23, 2022 at 08:48:46AM +0200 schrieb Ronald Wimmer via 
> > > > FreeIPA-users:
> > > > > Today I updated all packages on one of our IPA servers. 
> > > > > Unfortunately, SSSD
> > > > > stopped working:
> > > >
> > > > Hi,
> > > >
> > > > to which package version did you update?
> > >
> > > From 2.5.2 to 2.6.2.
> >
> > To be a little more specific: 2.6.2-4.0.1.el8_6
>
> yum reinstall sssd-common
>
> solved the problem.
>
> https://access.redhat.com/solutions/3209411

We are still seeing this issue once in a while when updating sssd 
packages. Interestingly, it does not occur on every IPA server.

Any ideas how to fix the issue permanently?

Cheers,
Ron

[Ronald Wimmer]

On 05.07.22 18:37, Ronald Wimmer via FreeIPA-users wrote:
> On 08.06.22 12:27, Ronald Wimmer via FreeIPA-users wrote:
> > On 24.05.22 23:51, Ronald Wimmer via FreeIPA-users wrote:
> > > On 24.05.22 23:50, Ronald Wimmer via FreeIPA-users wrote:
> > > > On 24.05.22 11:29, Sumit Bose wrote:
> > > > > Am Mon, May 23, 2022 at 08:48:46AM +0200 schrieb Ronald Wimmer via 
> > > > > FreeIPA-users:
> > > > > > Today I updated all packages on one of our IPA servers. 
> > > > > > Unfortunately, SSSD
> > > > > > stopped working:
> > > > >
> > > > > Hi,
> > > > >
> > > > > to which package version did you update?
> > > >
> > > > From 2.5.2 to 2.6.2.
> > >
> > > To be a little more specific: 2.6.2-4.0.1.el8_6
> >
> > yum reinstall sssd-common
> >
> > solved the problem.
> >
> > https://access.redhat.com/solutions/3209411
>
> We are still seeing this issue once in a while when updating sssd 
> packages. Interestingly, it does not occur on every IPA server.
>
> Any ideas how to fix the issue permanently?

Remark: We were updating sssd-common from 2.6.2-4.0.1 to 2.6.2-4.0.2