Hi,

I am sorry, I did captured it but forget to send.

.

Apart from SSSD issue of being went in Offline mode. I have few other concern:

1. I have explicitly defined below values in sssd, though SSSD is taking the other values. 

My Values:

ldap_sudo_smart_refresh_interval = 60
ldap_enumeration_refresh_timeout = 60
ldap_purge_cache_timeout = 60


SSSD Domain Logs:

(Fri Sep 18 13:49:33 2015) [sssd[be[klikpay.int]]] [dp_get_options] (0x0400): Option ldap_sudo_smart_refresh_interval has value 900
(Fri Sep 18 13:49:33 2015) [sssd[be[klikpay.int]]] [dp_get_options] (0x0400): Option ldap_enumeration_refresh_timeout has value 300
(Fri Sep 18 13:49:33 2015) [sssd[be[klikpay.int]]] [dp_get_options] (0x0400): Option ldap_purge_cache_timeout has value 3600


Logs related to sssd Offline Mode:

(Fri Sep 18 13:49:46 2015) [sssd[be[klikpay.int]]] [fo_resolve_service_send] (0x0100): Trying to resolve service 'IPA'
(Fri Sep 18 13:49:46 2015) [sssd[be[klikpay.int]]] [get_server_status] (0x1000): Status of server 'ipa-inf-prd-ng2-01.klikpay.int' is 'name resolved'
(Fri Sep 18 13:49:46 2015) [sssd[be[klikpay.int]]] [get_port_status] (0x1000): Port status of port 389 for server 'ipa-inf-prd-ng2-01.klikpay.int' is 'not working'
(Fri Sep 18 13:49:46 2015) [sssd[be[klikpay.int]]] [get_server_status] (0x1000): Status of server 'ipa-inf-prd-ng2-02.klikpay.int' is 'name resolved'
(Fri Sep 18 13:49:46 2015) [sssd[be[klikpay.int]]] [get_port_status] (0x1000): Port status of port 389 for server 'ipa-inf-prd-ng2-02.klikpay.int' is 'not working'
(Fri Sep 18 13:49:46 2015) [sssd[be[klikpay.int]]] [get_server_status] (0x1000): Status of server 'ipa-inf-prd-ng2-01.klikpay.int' is 'name resolved'
(Fri Sep 18 13:49:46 2015) [sssd[be[klikpay.int]]] [get_port_status] (0x1000): Port status of port 0 for server 'ipa-inf-prd-ng2-01.klikpay.int' is 'not working'
(Fri Sep 18 13:49:46 2015) [sssd[be[klikpay.int]]] [fo_resolve_service_send] (0x0020): No available servers for service 'IPA'
(Fri Sep 18 13:49:46 2015) [sssd[be[klikpay.int]]] [be_resolve_server_done] (0x1000): Server resolution failed: 5
(Fri Sep 18 13:49:46 2015) [sssd[be[klikpay.int]]] [sdap_id_op_connect_done] (0x0020): Failed to connect, going offline (5 [Input/output error])
(Fri Sep 18 13:49:46 2015) [sssd[be[klikpay.int]]] [be_ptask_create] (0x0400): Periodic task [Check if online (periodic)] was created
(Fri Sep 18 13:49:46 2015) [sssd[be[klikpay.int]]] [be_ptask_schedule] (0x0400): Task [Check if online (periodic)]: scheduling task 88 seconds from now [1442564474]
(Fri Sep 18 13:49:46 2015) [sssd[be[klikpay.int]]] [be_run_offline_cb] (0x0080): Going offline. Running callbacks.
(Fri Sep 18 13:49:46 2015) [sssd[be[klikpay.int]]] [ipa_subdomains_get_conn_done] (0x0080): No IPA server is available, cannot get the subdomain list while offline
(Fri Sep 18 13:49:46 2015) [sssd[be[klikpay.int]]] [get_subdomains_callback] (0x0400): Backend returned: (1, 11, <NULL>) [Provider is Offline (Have exhausted maximum number of retries for service)]
(Fri Sep 18 13:49:46 2015) [sssd[be[klikpay.int]]] [sdap_sudo_periodical_first_refresh_done] (0x0040): Periodical full refresh of sudo rules failed [dp_error: 1] ([11]: Resource temporarily unavailable)
(Fri Sep 18 13:49:46 2015) [sssd[be[klikpay.int]]] [sdap_sudo_periodical_first_refresh_done] (0x0400): Data provider is offline. Scheduling another full refresh in 2 minutes.
(Fri Sep 18 13:49:46 2015) [sssd[be[klikpay.int]]] [sdap_sudo_schedule_refresh] (0x0400): Full refresh scheduled at: 1442564506
(Fri Sep 18 13:49:46 2015) [sssd[be[klikpay.int]]] [fo_resolve_service_send] (0x0100): Trying to resolve service 'IPA'
(Fri Sep 18 13:49:46 2015) [sssd[be[klikpay.int]]] [get_server_status] (0x1000): Status of server 'ipa-inf-prd-ng2-01.klikpay.int' is 'name resolved'
(Fri Sep 18 13:49:46 2015) [sssd[be[klikpay.int]]] [get_port_status] (0x1000): Port status of port 389 for server 'ipa-inf-prd-ng2-01.klikpay.int' is 'not working'
(Fri Sep 18 13:49:46 2015) [sssd[be[klikpay.int]]] [get_server_status] (0x1000): Status of server 'ipa-inf-prd-ng2-02.klikpay.int' is 'name resolved'
(Fri Sep 18 13:49:46 2015) [sssd[be[klikpay.int]]] [get_port_status] (0x1000): Port status of port 389 for server 'ipa-inf-prd-ng2-02.klikpay.int' is 'not working'
(Fri Sep 18 13:49:46 2015) [sssd[be[klikpay.int]]] [get_server_status] (0x1000): Status of server 'ipa-inf-prd-ng2-01.klikpay.int' is 'name resolved'
(Fri Sep 18 13:49:46 2015) [sssd[be[klikpay.int]]] [get_port_status] (0x1000): Port status of port 0 for server 'ipa-inf-prd-ng2-01.klikpay.int' is 'not working'
(Fri Sep 18 13:49:46 2015) [sssd[be[klikpay.int]]] [fo_resolve_service_send] (0x0020): No available servers for service 'IPA'
(Fri Sep 18 13:49:46 2015) [sssd[be[klikpay.int]]] [be_resolve_server_done] (0x1000): Server resolution failed: 5
(Fri Sep 18 13:49:46 2015) [sssd[be[klikpay.int]]] [sdap_id_op_connect_done] (0x0020): Failed to connect, going offline (5 [Input/output error])
(Fri Sep 18 13:49:46 2015) [sssd[be[klikpay.int]]] [be_ptask_enable] (0x0080): Task [Check if online (periodic)]: already enabled
(Fri Sep 18 13:49:46 2015) [sssd[be[klikpay.int]]] [be_run_offline_cb] (0x0080): Going offline. Running callbacks.
(Fri Sep 18 13:49:46 2015) [sssd[be[klikpay.int]]] [ipa_subdomains_get_conn_done] (0x0080): No IPA server is available, cannot get the subdomain list while offline
(Fri Sep 18 13:49:46 2015) [sssd[be[klikpay.int]]] [get_subdomains_callback] (0x0400): Backend returned: (1, 11, <NULL>) [Provider is Offline (Have exhausted maximum number of retries for service)]
(Fri Sep 18 13:49:46 2015) [sssd[be[klikpay.int]]] [fo_resolve_service_send] (0x0100): Trying to resolve service 'IPA'
(Fri Sep 18 13:49:46 2015) [sssd[be[klikpay.int]]] [get_server_status] (0x1000): Status of server 'ipa-inf-prd-ng2-01.klikpay.int' is 'name resolved'
(Fri Sep 18 13:49:46 2015) [sssd[be[klikpay.int]]] [get_port_status] (0x1000): Port status of port 389 for server 'ipa-inf-prd-ng2-01.klikpay.int' is 'not working'
(Fri Sep 18 13:49:46 2015) [sssd[be[klikpay.int]]] [get_server_status] (0x1000): Status of server 'ipa-inf-prd-ng2-02.klikpay.int' is 'name resolved'
(Fri Sep 18 13:49:46 2015) [sssd[be[klikpay.int]]] [get_port_status] (0x1000): Port status of port 389 for server 'ipa-inf-prd-ng2-02.klikpay.int' is 'not working'
(Fri Sep 18 13:49:46 2015) [sssd[be[klikpay.int]]] [get_server_status] (0x1000): Status of server 'ipa-inf-prd-ng2-01.klikpay.int' is 'name resolved'
(Fri Sep 18 13:49:46 2015) [sssd[be[klikpay.int]]] [get_port_status] (0x1000): Port status of port 0 for server 'ipa-inf-prd-ng2-01.klikpay.int' is 'not working'
(Fri Sep 18 13:49:46 2015) [sssd[be[klikpay.int]]] [fo_resolve_service_send] (0x0020): No available servers for service 'IPA'
(Fri Sep 18 13:49:46 2015) [sssd[be[klikpay.int]]] [be_resolve_server_done] (0x1000): Server resolution failed: 5
(Fri Sep 18 13:49:46 2015) [sssd[be[klikpay.int]]] [sdap_id_op_connect_done] (0x0020): Failed to connect, going offline (5 [Input/output error])
(Fri Sep 18 13:49:46 2015) [sssd[be[klikpay.int]]] [be_ptask_enable] (0x0080): Task [Check if online (periodic)]: already enabled
(Fri Sep 18 13:49:46 2015) [sssd[be[klikpay.int]]] [be_run_offline_cb] (0x0080): Going offline. Running callbacks.
(Fri Sep 18 13:49:46 2015) [sssd[be[klikpay.int]]] [ipa_subdomains_get_conn_done] (0x0080): No IPA server is available, cannot get the subdomain list while offline
(Fri Sep 18 13:49:46 2015) [sssd[be[klikpay.int]]] [get_subdomains_callback] (0x0400): Backend returned: (1, 11, <NULL>) [Provider is Offline (Have exhausted maximum number of retries for service)]



I have sent full logs to you in  a separate email, if that helps.

Best Regards,
__________________________________________
Yogesh Sharma
Email: yks0000@gmail.com | Web: www.initd.in 

RHCE, VCE-CIA, RACKSPACE CLOUD U Certified

      

On Fri, Sep 18, 2015 at 3:13 PM, Lukas Slebodnik <lslebodn@redhat.com> wrote:
On (18/09/15 14:23), Yogesh Sharma wrote:
>Hi Jakub,
>
>As per this URL, https://fedorahosted.org/sssd/wiki/Troubleshooting
>
>I am getting below error (Point 4) in sssd_nss.log.
>
>(Fri Sep 18 13:33:53 2015) [sssd[nss]] [accept_fd_handler] (0x0400): Client
>connected!
>(Fri Sep 18 13:33:53 2015) [sssd[nss]] [sss_cmd_get_version] (0x0200):
>Received client version [1].
>(Fri Sep 18 13:33:53 2015) [sssd[nss]] [sss_cmd_get_version] (0x0200):
>Offered version [1].
>(Fri Sep 18 13:33:53 2015) [sssd[nss]] [nss_cmd_getbynam] (0x0400): Running
>command [17] with input [ys7673].
>(Fri Sep 18 13:33:53 2015) [sssd[nss]] [sss_parse_name_for_domains]
>(0x0200): name 'ys7673' matched without domain, user is ys7673
>(Fri Sep 18 13:33:53 2015) [sssd[nss]] [nss_cmd_getbynam] (0x0100):
>Requesting info for [ys7673] from [<ALL>]
>(Fri Sep 18 13:33:53 2015) [sssd[nss]] [nss_cmd_getpwnam_search] (0x0100):
>Requesting info for [ys7673@klikpay.int]
>(Fri Sep 18 13:33:53 2015) [sssd[nss]] [sss_dp_issue_request] (0x0400):
>Issuing request for [0x41c240:1:ys7673@klikpay.int]
>(Fri Sep 18 13:33:53 2015) [sssd[nss]] [sss_dp_get_account_msg] (0x0400):
>Creating request for [klikpay.int][4097][1][name=ys7673]
>(Fri Sep 18 13:33:53 2015) [sssd[nss]] [sss_dp_internal_get_send] (0x0400):
>Entering request [0x41c240:1:ys7673@klikpay.int]
>(Fri Sep 18 13:33:53 2015) [sssd[nss]] [sss_dp_get_reply] (0x1000): Got
>reply from Data Provider - DP error code: 1 errno: 11 error message: Fast
>reply - offline
SSSD was in offline mode and therefore it did not try to contact LDAP server.
It would be good to see a log file from domain why sssd went to offline.

LS
_______________________________________________
sssd-users mailing list
sssd-users@lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/sssd-users