users unable to log in when root partition is full

[Gidon]

Hi.

We have been using sssd for quite a while to join our servers to active directory.
However when root partition (using installation default partition scheme) fills up, active
directory users are not able to login, and we are forced to use local users to login and
clear the partition.

Obviously Ideally, we shouldn't reach this situation at all, but mistakes \ issues
happen, and when it does administrative users (from active directory) should still be able
to login and resolve the issue.
Therefor I am in search of a solution that will allow active directory users to still be
able to login in when the system partition is full. 

I found this thread https://bugzilla.redhat.com/show_bug.cgi?id=849538#c16 (that also
points to https://github.com/SSSD/sssd/issues/2254)
and the recommended solution is to put /var/lib/sss on a  separate partition, which I
have. However, even then the issue persists. 

Any other suggestions?

[Alexey Tikhonov]

Hi,


On Tue, Jul 7, 2020 at 12:45 PM Gidon <gidikremer(a)gmail.com&gt; wrote:

>  Hi.
>
>  We have been using sssd for quite a while to join our servers to active
>  directory.
>  However when root partition (using installation default partition scheme)
>  fills up, active directory users are not able to login, and we are forced
>  to use local users to login and clear the partition.
>
>  Obviously Ideally, we shouldn't reach this situation at all, but mistakes
>  \ issues happen, and when it does administrative users (from active
>  directory) should still be able to login and resolve the issue.
>  Therefor I am in search of a solution that will allow active directory
>  users to still be able to login in when the system partition is full.
>
>  I found this thread https://bugzilla.redhat.com/show_bug.cgi?id=849538#c16
>  (that also points to https://github.com/SSSD/sssd/issues/2254)
>  and the recommended solution is to put /var/lib/sss on a  separate
>  partition, which I have. However, even then the issue persists.
>  
Do you mean to say that login fails despite partition that contains
"/var/lib/sss" still have free space?



>  Any other suggestions?
>  _______________________________________________
>  sssd-users mailing list -- sssd-users(a)lists.fedorahosted.org
>  To unsubscribe send an email to sssd-users-leave(a)lists.fedorahosted.org
>  Fedora Code of Conduct:
>  https://docs.fedoraproject.org/en-US/project/code-of-conduct/
>  List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
>  List Archives:
>  https://lists.fedorahosted.org/archives/list/[e-mail]...
>

[Alexey Tikhonov]

On Wed, Jul 15, 2020 at 5:58 PM Alexey Tikhonov <atikhono(a)redhat.com&gt; wrote:
>  Hi,
>
>
>  On Tue, Jul 7, 2020 at 12:45 PM Gidon <gidikremer(a)gmail.com&gt; wrote:
> >
> > Hi.
> >
> > We have been using sssd for quite a while to join our servers to active directory.
> > However when root partition (using installation default partition scheme) fills up,
> active directory users are not able to login, and we are forced to use local users to
> login and clear the partition.
> >
> > Obviously Ideally, we shouldn't reach this situation at all, but mistakes \
> issues happen, and when it does administrative users (from active directory) should still
> be able to login and resolve the issue.
> > Therefor I am in search of a solution that will allow active directory users to still
> be able to login in when the system partition is full.
> >
> > I found this thread https://bugzilla.redhat.com/show_bug.cgi?id=849538#c16 (that also
> points to https://github.com/SSSD/sssd/issues/2254)
> > and the recommended solution is to put /var/lib/sss on a  separate partition, which I
> have. However, even then the issue persists.
>
>
>  Do you mean to say that login fails despite partition that contains
> "/var/lib/sss" still have free space?
>  
I wonder if you hit something similar to
https://bugzilla.redhat.com/show_bug.cgi?id=1853261

[Gregory Carter]

For my diskless workstations I use a ramdisk device which I remount for
sssd data files.

Well, that and sssd doesn't like nfs mounts.

On Tue, Jul 7, 2020, 3:45 AM Gidon <gidikremer(a)gmail.com&gt; wrote:

>  Hi.
>
>  We have been using sssd for quite a while to join our servers to active
>  directory.
>  However when root partition (using installation default partition scheme)
>  fills up, active directory users are not able to login, and we are forced
>  to use local users to login and clear the partition.
>
>  Obviously Ideally, we shouldn't reach this situation at all, but mistakes
>  \ issues happen, and when it does administrative users (from active
>  directory) should still be able to login and resolve the issue.
>  Therefor I am in search of a solution that will allow active directory
>  users to still be able to login in when the system partition is full.
>
>  I found this thread https://bugzilla.redhat.com/show_bug.cgi?id=849538#c16
>  (that also points to https://github.com/SSSD/sssd/issues/2254)
>  and the recommended solution is to put /var/lib/sss on a  separate
>  partition, which I have. However, even then the issue persists.
>
>  Any other suggestions?
>  _______________________________________________
>  sssd-users mailing list -- sssd-users(a)lists.fedorahosted.org
>  To unsubscribe send an email to sssd-users-leave(a)lists.fedorahosted.org
>  Fedora Code of Conduct:
>  https://docs.fedoraproject.org/en-US/project/code-of-conduct/
>  List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
>  List Archives:
>  https://lists.fedorahosted.org/archives/list/[e-mail]...
>

[Patrick Goetz]

On 7/23/20 1:00 AM, Gregory Carter wrote:
>  Well, that and sssd doesn't like nfs mounts.
>   
Wait, what? We use SSSD with NFS mounts all the time and haven't had any 
problems. In fact I use autofs to mount AD-authenticated users' home 
directories. What issues have you seen?