On 05/13/16 14:45, Lukas Slebodnik wrote:
> On (12/05/16 15:35), Harald Dunkel wrote:
>> On 05/12/16 13:48, Lukas Slebodnik wrote:
> 
>>> I would like to fix it but I do not know what to fix.
>>>
>>> Is there anything interesting/suspicious in syslog/journald
>>> from the same time?
>>>
>>
>> "journalctl -u sssd" says
>>
> It is not helpful either.
> We asked to find *ANYTHING* interesting/suspicious in syslog/journald
> So it needn't be related to sssd.
> 

Understood. Below is the complete journalctl and syslog from reboot
till sssd being marked as failed by systemd. The only problems I see
in between are the authentication failures and "user unknown" error
messages. The log files on the ipa servers don't show any signs
of a problem either (esp. krb5kdc.log, the slapd log files, and
kernel.log of the ipa1 server).

> It can be realted to swapping, out of entropy, disk needs to spin up,
> high load, DNS not responding, whatever
> 
> But it's task for you to find out what trigger the problem.
> We do not have an access to problematic machines.
> 

Does it really matter *why* this host is slow or why ipa1 didn't
answer? My point is that sssd should be sufficiently stable to
startup even when its slow "somehow" and when the first ipa server
it tried appears to be unreachable. Looking at the log files I
have the impression that ipa2 works as expected, and yet sssd on
the client went Guru for some reason it didn't write into the log
file.

> So try to find a reason which trigger the problem and provide
> reasonable reproducer.
>

I'd love to give you more information, but this is a production
system. Rebooting the host to find some way to reproduce the
problem is painful for a lot of people.

Since the client runs Jessie I will try to backport Timo's freeipa
4.3.1 packages for Debian/Ubuntu. sssd is already up-to-date.
ipa1 and ipa2 are running Centos 7 and freeipa 4.2; hopefully
thats OK. And I am setting up additional servers ipa3 and ipa4
to improve availability.


Regards
Harri

-- Logs begin at Sat 2016-05-07 01:00:34 CEST, end at Fri 2016-05-13 20:14:51 
CEST. --
May 12 06:01:57 srvvm01.ac.example.com systemd-journal[24]: Runtime journal is 
using 8.0M (max allowed 3.1G, trying to leave 4.0G free of 31.4G available → 
current limit 3.1G).
May 12 06:01:57 srvvm01.ac.example.com systemd-journal[24]: Runtime journal is 
using 8.0M (max allowed 3.1G, trying to leave 4.0G free of 31.4G available → 
current limit 3.1G).
May 12 06:01:57 srvvm01.ac.example.com systemd-journal[24]: Journal started
May 12 06:01:57 srvvm01.ac.example.com systemd[1]: Mounted Debug File System.
May 12 06:01:57 srvvm01.ac.example.com systemd[1]: Mounted Huge Pages File 
System.
May 12 06:01:57 srvvm01.ac.example.com systemd[1]: Mounted POSIX Message Queue 
File System.
May 12 06:01:57 srvvm01.ac.example.com systemd[1]: Started Remount Root and 
Kernel File Systems.
May 12 06:01:57 srvvm01.ac.example.com systemd[1]: Started Various fixups to 
make systemd work better on Debian.
May 12 06:01:57 srvvm01.ac.example.com systemd[1]: Starting Load/Save Random 
Seed...
May 12 06:01:57 srvvm01.ac.example.com systemd[1]: Starting Local File Systems 
(Pre).
May 12 06:01:57 srvvm01.ac.example.com systemd[1]: Reached target Local File 
Systems (Pre).
May 12 06:01:57 srvvm01.ac.example.com systemd[1]: Starting Local File Systems.
May 12 06:01:57 srvvm01.ac.example.com systemd[1]: Reached target Local File 
Systems.
May 12 06:01:57 srvvm01.ac.example.com systemd[1]: Starting Remote File Systems.
May 12 06:01:57 srvvm01.ac.example.com systemd[1]: Started Trigger Flushing of 
Journal to Persistent Storage.
May 12 06:02:06 srvvm01.ac.example.com systemd-journal[24]: Permanent journal 
is using 2.4G (max allowed 2.0G, trying to leave 4.0G free of 2.1T available → 
current limit 2.4G).
May 12 06:02:14 srvvm01.ac.example.com systemd-journal[24]: Time spent on 
flushing to /var is 8.301385s for 16 entries.
May 12 06:01:59 srvvm01.ac.example.com logger[65]: 
/etc/resolvconf/update-libc.d/sendmail (dynamic) update_resolv:
May 12 06:01:59 srvvm01.ac.example.com logger[66]: 
/etc/resolvconf/update-libc.d/sendmail (dynamic) update_sendmail:
May 12 06:02:15 srvvm01.ac.example.com logger[94]: 
/etc/network/if-up.d/sendmail (dynamic) update_interface: lo up
May 12 06:02:15 srvvm01.ac.example.com logger[95]: 
/etc/network/if-up.d/sendmail (dynamic) update_sendmail: lo up
May 12 06:02:15 srvvm01.ac.example.com logger[132]: 
/etc/resolvconf/update-libc.d/sendmail (dynamic) update_resolv:
May 12 06:02:15 srvvm01.ac.example.com logger[133]: 
/etc/resolvconf/update-libc.d/sendmail (dynamic) update_sendmail:
May 12 06:02:15 srvvm01.ac.example.com logger[145]: 
/etc/network/if-up.d/sendmail (dynamic) update_interface: eth0 up
May 12 06:02:15 srvvm01.ac.example.com logger[146]: 
/etc/network/if-up.d/sendmail (dynamic) update_provider: eth0 up ac.example.com.
May 12 06:02:15 srvvm01.ac.example.com logger[147]: 
/etc/network/if-up.d/sendmail (dynamic) update_host: eth0 up ac.example.com. 
10.19.96.11
May 12 06:02:15 srvvm01.ac.example.com logger[148]: 
/etc/network/if-up.d/sendmail (dynamic) update_sendmail: eth0 up 
ac.example.com. 10.19.96.11
May 12 06:02:15 srvvm01.ac.example.com logger[164]: 
/etc/network/if-up.d/sendmail (dynamic) update_interface: --all up
May 12 06:02:35 srvvm01.ac.example.com logger[165]: 
/etc/network/if-up.d/sendmail (dynamic) update_sendmail: --all up
May 12 06:01:57 srvvm01.ac.example.com systemd[1]: Started Copy rules generated 
while the root was ro.
May 12 06:01:58 srvvm01.ac.example.com systemd[1]: Started LSB: ebtables 
ruleset management.
May 12 06:01:58 srvvm01.ac.example.com systemd[1]: Started LSB: IPv6 Recursive 
DNS Server discovery.
May 12 06:01:58 srvvm01.ac.example.com systemd[1]: Started LSB: Tune IDE hard 
disks.
May 12 06:02:03 srvvm01.ac.example.com systemd[1]: Started Load/Save Random 
Seed.
May 12 06:02:03 srvvm01.ac.example.com systemd[1]: Starting LSB: Raise network 
interfaces....
May 12 06:02:16 srvvm01.ac.example.com systemd[1]: Started Create Volatile 
Files and Directories.
May 12 06:02:16 srvvm01.ac.example.com systemd[1]: Starting Update UTMP about 
System Boot/Shutdown...
May 12 06:02:19 srvvm01.ac.example.com systemd[1]: Started Update UTMP about 
System Boot/Shutdown.
May 12 06:02:35 srvvm01.ac.example.com systemd[1]: Started LSB: Raise network 
interfaces..
May 12 06:02:35 srvvm01.ac.example.com systemd[1]: Starting Network.
May 12 06:02:41 srvvm01.ac.example.com anacron[178]: Anacron 2.3 started on 
2016-05-12
May 12 06:02:42 srvvm01.ac.example.com hdparm[21]: Setting parameters of disc: 
(none).
May 12 06:02:42 srvvm01.ac.example.com rdnssd[29]: Starting IPv6 Recursive DNS 
Server discovery Daemon: rdnssd.
May 12 06:02:42 srvvm01.ac.example.com networking[67]: Configuring network 
interfaces...done.
May 12 06:02:46 srvvm01.ac.example.com cron[179]: (CRON) INFO (pidfile fd = 3)
May 12 06:02:48 srvvm01.ac.example.com anacron[178]: Normal exit (0 jobs run)
May 12 06:02:49 srvvm01.ac.example.com logger[220]: /etc/init.d/sendmail start
May 12 06:02:51 srvvm01.ac.example.com cron[179]: (dreger) ORPHAN (no passwd 
entry)
May 12 06:02:51 srvvm01.ac.example.com cron[179]: (adminteam) ORPHAN (no passwd 
entry)
May 12 06:02:51 srvvm01.ac.example.com cron[179]: (CRON) INFO (Running @reboot 
jobs)
May 12 06:02:59 srvvm01.ac.example.com ntpd[219]: ntpd 4.2.6p5@1.2349-o Wed Oct 
28 20:16:08 UTC 2015 (1)
May 12 06:02:59 srvvm01.ac.example.com lldpd[235]: created chroot directory 
/var/run/lldpd
May 12 06:02:59 srvvm01.ac.example.com lldpd[235]: /etc/localtime copied to 
chroot
May 12 06:02:59 srvvm01.ac.example.com lldpd[235]: protocol LLDP enabled
May 12 06:02:59 srvvm01.ac.example.com lldpd[235]: protocol CDPv1 disabled
May 12 06:02:59 srvvm01.ac.example.com lldpd[235]: protocol CDPv2 disabled
May 12 06:02:59 srvvm01.ac.example.com lldpd[235]: protocol SONMP disabled
May 12 06:02:59 srvvm01.ac.example.com lldpd[235]: protocol EDP disabled
May 12 06:02:59 srvvm01.ac.example.com lldpd[235]: protocol FDP disabled
May 12 06:02:59 srvvm01.ac.example.com lldpd[235]: libevent 2.0.21-stable 
initialized with epoll method
May 12 06:03:00 srvvm01.ac.example.com ntpd[236]: proto: precision = 0.101 usec
May 12 06:03:00 srvvm01.ac.example.com ntp[186]: Starting NTP server: ntpd.
May 12 06:03:00 srvvm01.ac.example.com systemd[1]: Starting Certificate 
monitoring and PKI enrollment...
May 12 06:03:00 srvvm01.ac.example.com systemd[1]: Starting System Logging 
Service...
May 12 06:03:00 srvvm01.ac.example.com systemd[1]: Starting Clam AntiVirus 
userspace daemon...
May 12 06:03:00 srvvm01.ac.example.com systemd[1]: Started Clam AntiVirus 
userspace daemon.
May 12 06:03:00 srvvm01.ac.example.com systemd[1]: Starting LSB: ClamAV virus 
milter...
May 12 06:03:00 srvvm01.ac.example.com systemd[1]: Started LLDP daemon.
May 12 06:03:00 srvvm01.ac.example.com systemd[1]: Started /etc/rc.local 
Compatibility.
May 12 06:03:00 srvvm01.ac.example.com systemd[1]: Started LSB: Start NTP 
daemon.
May 12 06:03:00 srvvm01.ac.example.com systemd[1]: Started LSB: start Samba 
daemons for the AD DC.
May 12 06:03:00 srvvm01.ac.example.com systemd[1]: Started LSB: start Samba 
NetBIOS nameserver (nmbd).
May 12 06:03:00 srvvm01.ac.example.com systemd[1]: Starting Dovecot IMAP/POP3 
email server...
May 12 06:03:00 srvvm01.ac.example.com systemd[1]: Started Dovecot IMAP/POP3 
email server.
May 12 06:03:00 srvvm01.ac.example.com systemd[1]: Starting LSB: start Samba 
SMB/CIFS daemon (smbd)...
May 12 06:03:00 srvvm01.ac.example.com systemd[1]: Started LSB: start Samba 
SMB/CIFS daemon (smbd).
May 12 06:03:06 srvvm01.ac.example.com ntpd[236]: Listen and drop on 0 
v4wildcard 0.0.0.0 UDP 123
May 12 06:03:06 srvvm01.ac.example.com ntpd[236]: Listen and drop on 1 
v6wildcard :: UDP 123
May 12 06:03:06 srvvm01.ac.example.com ntpd[236]: Listen normally on 2 lo 
127.0.0.1 UDP 123
May 12 06:03:06 srvvm01.ac.example.com ntpd[236]: Listen normally on 3 eth0 
10.19.96.11 UDP 123
May 12 06:03:06 srvvm01.ac.example.com ntpd[236]: Listen normally on 4 lo ::1 
UDP 123
May 12 06:03:06 srvvm01.ac.example.com ntpd[236]: Listen normally on 5 eth0 
fe80::220:8cff:fe8a:5183 UDP 123
May 12 06:03:06 srvvm01.ac.example.com ntpd[236]: peers refreshed
May 12 06:03:06 srvvm01.ac.example.com ntpd[236]: Listening on routing socket 
on fd #22 for interface updates
May 12 06:03:06 srvvm01.ac.example.com ntpd[236]: authreadkeys: file 
/etc/ntp/keys: No such file or directory
May 12 06:03:09 srvvm01.ac.example.com lldpcli[234]: cannot find configuration 
file/directory /etc/lldpd.conf
May 12 06:03:09 srvvm01.ac.example.com lldpcli[234]: unknown command from 
argument 1: `#`
May 12 06:03:09 srvvm01.ac.example.com lldpcli[234]: an error occurred while 
executing last command
May 12 06:03:09 srvvm01.ac.example.com lldpcli[234]: unknown command from 
argument 1: `#`
May 12 06:03:09 srvvm01.ac.example.com lldpcli[234]: an error occurred while 
executing last command
May 12 06:03:09 srvvm01.ac.example.com lldpcli[234]: lldpd should resume 
operations
May 12 06:03:10 srvvm01.ac.example.com systemd[1]: Started System Logging 
Service.
May 12 06:03:11 srvvm01.ac.example.com sendmail[194]: Starting Mail Transport 
Agent (MTA): sendmailMakefile:290: warning: overriding recipe for target 
'/etc/aliases.news.db'
May 12 06:03:14 srvvm01.ac.example.com sendmail[194]: Makefile:287: warning: 
ignoring old recipe for target '/etc/aliases.news.db'
May 12 06:03:14 srvvm01.ac.example.com sendmail[194]: Makefile:344: warning: 
overriding recipe for target '/etc/aliases.news'
May 12 06:03:14 srvvm01.ac.example.com sendmail[194]: Makefile:287: warning: 
ignoring old recipe for target '/etc/aliases.news'
May 12 06:03:13 srvvm01.ac.example.com systemd[1]: Started Zabbix Agent.
May 12 06:03:14 srvvm01.ac.example.com sshd[183]: Server listening on 0.0.0.0 
port 22.
May 12 06:03:14 srvvm01.ac.example.com sshd[183]: Server listening on :: port 
22.
May 12 06:03:15 srvvm01.ac.example.com dovecot[241]: master: Dovecot v2.2.18 
starting up for imap, pop3 (core dumps disabled)
May 12 06:03:15 srvvm01.ac.example.com sssd[373]: Starting up
May 12 06:03:16 srvvm01.ac.example.com dovecot[241]: Warning: fd limit (ulimit 
-n) is lower than required under max. load (1024 < 3000), because of 
default_client_limit
May 12 06:03:18 srvvm01.ac.example.com clamav-milter[372]: +++ Started at Thu 
May 12 06:03:18 2016
May 12 06:03:20 srvvm01.ac.example.com clamd[239]: Received 1 file 
descriptor(s) from systemd.
May 12 06:03:20 srvvm01.ac.example.com clamd[239]: clamd daemon 0.99 (OS: 
linux-gnu, ARCH: x86_64, CPU: x86_64)
May 12 06:03:20 srvvm01.ac.example.com clamd[239]: Running as user clamav (UID 
111, GID 143)
May 12 06:03:20 srvvm01.ac.example.com clamd[239]: Log file size limited to 
4294967295bytes.
May 12 06:03:20 srvvm01.ac.example.com clamd[239]: Reading databases from 
/var/lib/clamav
May 12 06:03:20 srvvm01.ac.example.com clamd[239]: Not loading PUA signatures.
May 12 06:03:20 srvvm01.ac.example.com clamd[239]: Bytecode: Security mode set 
to "TrustSigned".
May 12 06:03:18 srvvm01.ac.example.com systemd[1]: Started LSB: ClamAV virus 
milter.
May 12 06:03:20 srvvm01.ac.example.com systemd[1]: Started LSB: INN news server.
May 12 06:03:20 srvvm01.ac.example.com freshclam[180]: ClamAV update process 
started at Thu May 12 06:03:20 2016
May 12 06:03:20 srvvm01.ac.example.com freshclam[180]: WARNING: Your ClamAV 
installation is OUTDATED!
May 12 06:03:20 srvvm01.ac.example.com freshclam[180]: WARNING: Local version: 
0.99 Recommended version: 0.99.2
May 12 06:03:20 srvvm01.ac.example.com freshclam[180]: DON'T PANIC! Read 
http://www.clamav.net/support/faq
May 12 06:03:20 srvvm01.ac.example.com clamav-milter[240]: Starting Sendmail 
milter plugin for ClamAV: clamav-milter.
May 12 06:03:20 srvvm01.ac.example.com inn2[189]: Starting news server: innd.
May 12 06:03:20 srvvm01.ac.example.com innd[415]: SERVER descriptors 1023
May 12 06:03:20 srvvm01.ac.example.com innd[415]: SERVER outgoing 1010
May 12 06:03:20 srvvm01.ac.example.com innd[415]: SERVER ccsetup control:12
May 12 06:03:20 srvvm01.ac.example.com innd[415]: SERVER lcsetup localconn:14
May 12 06:03:21 srvvm01.ac.example.com freshclam[180]: main.cvd is up to date 
(version: 57, sigs: 4218790, f-level: 60, builder: amishhammer)
May 12 06:03:21 srvvm01.ac.example.com freshclam[180]: daily.cld is up to date 
(version: 21529, sigs: 139560, f-level: 63, builder: neo)
May 12 06:03:21 srvvm01.ac.example.com freshclam[180]: bytecode.cld is up to 
date (version: 277, sigs: 47, f-level: 63, builder: neo)
May 12 06:03:21 srvvm01.ac.example.com sssd[be[417]: Starting up
May 12 06:03:22 srvvm01.ac.example.com innd[415]: SERVER rcsetup remconn:15
May 12 06:03:22 srvvm01.ac.example.com innd[415]: SERVER rcsetup remconn:17
May 12 06:03:22 srvvm01.ac.example.com innd[415]: controlchan! spawned 
controlchan!:21:proc:425
May 12 06:03:23 srvvm01.ac.example.com innd[415]: SERVER perl filtering enabled
May 12 06:03:23 srvvm01.ac.example.com innd[415]: SERVER starting
May 12 06:03:23 srvvm01.ac.example.com dovecot[392]: imap-login: Disconnected 
(disconnected before auth was ready, waited 2 secs): user=<>, 
rip=10.19.102.238, lip=10.19.96.11, TLS handshaking: Disconnected, 
session=<gR9OPZ0yBACsE2bu>
May 12 06:03:23 srvvm01.ac.example.com dovecot[392]: imap-login: Disconnected 
(disconnected before auth was ready, waited 2 secs): user=<>, 
rip=10.19.102.238, lip=10.19.96.11, TLS handshaking: Disconnected, 
session=<1jpOPZ0yBQCsE2bu>
May 12 06:03:26 srvvm01.ac.example.com sssd[438]: Starting up
May 12 06:03:26 srvvm01.ac.example.com sssd[440]: Starting up
May 12 06:03:26 srvvm01.ac.example.com sssd[437]: Starting up
May 12 06:03:25 srvvm01.ac.example.com systemd[1]: Started Certificate 
monitoring and PKI enrollment.
May 12 06:03:26 srvvm01.ac.example.com sssd[439]: Starting up
May 12 06:03:29 srvvm01.ac.example.com sssd[441]: Starting up
May 12 06:03:37 srvvm01.ac.example.com ipa-submit[445]: GSSAPI client step 1
May 12 06:03:37 srvvm01.ac.example.com ipa-submit[445]: GSSAPI client step 1
May 12 06:03:37 srvvm01.ac.example.com ipa-submit[445]: GSSAPI client step 1
May 12 06:03:37 srvvm01.ac.example.com ipa-submit[445]: GSSAPI client step 1
May 12 06:03:37 srvvm01.ac.example.com ipa-submit[445]: GSSAPI client step 2
May 12 06:03:39 srvvm01.ac.example.com sssd_be[417]: GSSAPI client step 1
May 12 06:03:39 srvvm01.ac.example.com sssd_be[417]: GSSAPI client step 1
May 12 06:03:39 srvvm01.ac.example.com sssd_be[417]: GSSAPI client step 1
May 12 06:03:39 srvvm01.ac.example.com sssd_be[417]: GSSAPI client step 2
May 12 06:03:42 srvvm01.ac.example.com dovecot[392]: imap-login: Disconnected 
(no auth attempts in 19 secs): user=<>, rip=10.0.142.199, lip=10.19.96.11, TLS 
handshaking: SSL_accept() syscall failed: Connection reset by peer, 
session=<9T14Pp0yjwAFkY7H>
May 12 06:03:42 srvvm01.ac.example.com dovecot[392]: imap-login: Disconnected 
(no auth attempts in 19 secs): user=<>, rip=10.0.142.199, lip=10.19.96.11, TLS 
handshaking, session=<50d4Pp0yjgAFkY7H>
May 12 06:03:42 srvvm01.ac.example.com dovecot[392]: imap-login: Disconnected 
(no auth attempts in 21 secs): user=<>, rip=10.0.142.199, lip=10.19.96.11, TLS 
handshaking: SSL_accept() syscall failed: Connection reset by peer, 
session=<HU94Pp0yjQAFkY7H>
May 12 06:03:42 srvvm01.ac.example.com dovecot[392]: imap-login: Disconnected 
(no auth attempts in 21 secs): user=<>, rip=10.0.142.199, lip=10.19.96.11, TLS 
handshaking: SSL_accept() syscall failed: Connection reset by peer, 
session=<zGZ4Pp0yjAAFkY7H>
May 12 06:03:47 srvvm01.ac.example.com controlchan[425]: starting
May 12 06:03:56 srvvm01.ac.example.com sshd[485]: Connection closed by 
10.19.96.127 [preauth]
May 12 06:03:57 srvvm01.ac.example.com clamd[239]: Loaded 4353011 signatures.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: TCP: No tcp AF_INET/AF_INET6 
SOCK_STREAM socket received from systemd.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: LOCAL: Received AF_UNIX 
SOCK_STREAM socket from systemd.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: Limits: Global size limit 
set to 104857600 bytes.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: Limits: File size limit set 
to 26214400 bytes.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: Limits: Recursion level 
limit set to 16.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: Limits: Files limit set to 
10000.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: Limits: MaxEmbeddedPE limit 
set to 10485760 bytes.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: Limits: MaxHTMLNormalize 
limit set to 10485760 bytes.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: Limits: MaxHTMLNoTags limit 
set to 2097152 bytes.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: Limits: MaxScriptNormalize 
limit set to 5242880 bytes.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: Limits: MaxZipTypeRcg limit 
set to 1048576 bytes.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: Limits: MaxPartitions limit 
set to 50.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: Limits: MaxIconsPE limit set 
to 100.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: Limits: PCREMatchLimit limit 
set to 10000.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: Limits: PCRERecMatchLimit 
limit set to 5000.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: Limits: PCREMaxFileSize 
limit set to 26214400.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: Archive support enabled.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: Algorithmic detection 
enabled.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: Portable Executable support 
enabled.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: ELF support enabled.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: Mail files support enabled.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: OLE2 support enabled.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: PDF support enabled.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: SWF support enabled.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: HTML support enabled.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: Self checking every 3600 
seconds.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: Limits: Global size limit 
set to 104857600 bytes.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: Limits: File size limit set 
to 26214400 bytes.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: Limits: Recursion level 
limit set to 16.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: Limits: Files limit set to 
10000.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: Limits: MaxEmbeddedPE limit 
set to 10485760 bytes.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: Limits: MaxHTMLNormalize 
limit set to 10485760 bytes.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: Limits: MaxHTMLNoTags limit 
set to 2097152 bytes.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: Limits: MaxScriptNormalize 
limit set to 5242880 bytes.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: Limits: MaxZipTypeRcg limit 
set to 1048576 bytes.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: Limits: MaxPartitions limit 
set to 50.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: Limits: MaxIconsPE limit set 
to 100.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: Limits: PCREMatchLimit limit 
set to 10000.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: Limits: PCRERecMatchLimit 
limit set to 5000.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: Limits: PCREMaxFileSize 
limit set to 26214400.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: Archive support enabled.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: Algorithmic detection 
enabled.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: Portable Executable support 
enabled.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: ELF support enabled.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: Mail files support enabled.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: OLE2 support enabled.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: PDF support enabled.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: SWF support enabled.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: HTML support enabled.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: Self checking every 3600 
seconds.
May 12 06:04:05 srvvm01.ac.example.com systemd[1]: sssd.service start operation 
timed out. Terminating.
May 12 06:04:05 srvvm01.ac.example.com sssd[438]: Shutting down
May 12 06:04:05 srvvm01.ac.example.com sssd[437]: Shutting down
May 12 06:04:05 srvvm01.ac.example.com sssd[be[417]: Shutting down
May 12 06:04:05 srvvm01.ac.example.com sssd[439]: Shutting down
May 12 06:04:05 srvvm01.ac.example.com auth[490]: pam_unix(dovecot:auth): check 
pass; user unknown
May 12 06:04:05 srvvm01.ac.example.com auth[490]: pam_unix(dovecot:auth): 
authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=user1 
rhost=10.0.142.199
May 12 06:04:05 srvvm01.ac.example.com auth[449]: pam_unix(dovecot:auth): check 
pass; user unknown
May 12 06:04:05 srvvm01.ac.example.com auth[429]: pam_unix(dovecot:auth): check 
pass; user unknown
May 12 06:04:05 srvvm01.ac.example.com auth[449]: pam_unix(dovecot:auth): 
authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=user2 
rhost=10.19.97.188
May 12 06:04:05 srvvm01.ac.example.com auth[429]: pam_unix(dovecot:auth): 
authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=user3 
rhost=10.19.97.179
May 12 06:04:05 srvvm01.ac.example.com auth[490]: pam_sss(dovecot:auth): 
Request to sssd failed. Bad address
May 12 06:04:05 srvvm01.ac.example.com auth[449]: pam_sss(dovecot:auth): 
Request to sssd failed. Bad address
May 12 06:04:05 srvvm01.ac.example.com sssd[441]: Shutting down
May 12 06:04:05 srvvm01.ac.example.com auth[429]: pam_sss(dovecot:auth): 
Request to sssd failed. Bad address
May 12 06:04:05 srvvm01.ac.example.com sssd[440]: Shutting down
May 12 06:04:05 srvvm01.ac.example.com sshd[482]: Invalid user user4 from 
10.19.96.197
May 12 06:04:06 srvvm01.ac.example.com auth[478]: pam_unix(dovecot:auth): check 
pass; user unknown
May 12 06:04:06 srvvm01.ac.example.com auth[475]: pam_unix(dovecot:auth): check 
pass; user unknown
May 12 06:04:06 srvvm01.ac.example.com auth[474]: pam_unix(dovecot:auth): check 
pass; user unknown
May 12 06:04:06 srvvm01.ac.example.com auth[473]: pam_unix(dovecot:auth): check 
pass; user unknown
May 12 06:04:06 srvvm01.ac.example.com auth[427]: pam_unix(dovecot:auth): check 
pass; user unknown
May 12 06:04:06 srvvm01.ac.example.com auth[444]: pam_unix(dovecot:auth): check 
pass; user unknown
May 12 06:04:06 srvvm01.ac.example.com auth[433]: pam_unix(dovecot:auth): check 
pass; user unknown
May 12 06:04:06 srvvm01.ac.example.com auth[430]: pam_unix(dovecot:auth): check 
pass; user unknown
May 12 06:04:06 srvvm01.ac.example.com auth[430]: pam_unix(dovecot:auth): 
authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=user5 
rhost=10.19.97.177
May 12 06:04:06 srvvm01.ac.example.com auth[428]: pam_unix(dovecot:auth): check 
pass; user unknown
May 12 06:04:06 srvvm01.ac.example.com auth[448]: pam_unix(dovecot:auth): check 
pass; user unknown
May 12 06:04:06 srvvm01.ac.example.com auth[431]: pam_unix(dovecot:auth): check 
pass; user unknown
May 12 06:04:06 srvvm01.ac.example.com auth[432]: pam_unix(dovecot:auth): check 
pass; user unknown
May 12 06:04:06 srvvm01.ac.example.com auth[477]: pam_unix(dovecot:auth): check 
pass; user unknown
May 12 06:04:06 srvvm01.ac.example.com sendmail[389]: alias database 
/etc/mail/aliases.user rebuilt by root
May 12 06:04:06 srvvm01.ac.example.com auth[426]: pam_unix(dovecot:auth): check 
pass; user unknown
May 12 06:04:06 srvvm01.ac.example.com auth[484]: pam_unix(dovecot:auth): check 
pass; user unknown
May 12 06:04:06 srvvm01.ac.example.com auth[489]: pam_unix(dovecot:auth): check 
pass; user unknown
May 12 06:04:06 srvvm01.ac.example.com auth[488]: pam_unix(dovecot:auth): check 
pass; user unknown
May 12 06:04:06 srvvm01.ac.example.com auth[487]: pam_unix(dovecot:auth): check 
pass; user unknown
May 12 06:04:06 srvvm01.ac.example.com sshd[482]: input_userauth_request: 
invalid user user5 [preauth]
May 12 06:04:06 srvvm01.ac.example.com auth[478]: pam_unix(dovecot:auth): 
authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=user6 
rhost=10.19.98.10
May 12 06:04:06 srvvm01.ac.example.com auth[475]: pam_unix(dovecot:auth): 
authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=user5 
rhost=10.19.97.186
May 12 06:04:06 srvvm01.ac.example.com auth[474]: pam_unix(dovecot:auth): 
authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=user6 
rhost=10.19.98.10
May 12 06:04:06 srvvm01.ac.example.com auth[473]: pam_unix(dovecot:auth): 
authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=user6 
rhost=10.19.98.10
May 12 06:04:06 srvvm01.ac.example.com auth[427]: pam_unix(dovecot:auth): 
authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=user7 
rhost=10.19.98.158
May 12 06:04:06 srvvm01.ac.example.com auth[444]: pam_unix(dovecot:auth): 
authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=user8 
rhost=10.19.97.141
May 12 06:04:06 srvvm01.ac.example.com auth[433]: pam_unix(dovecot:auth): 
authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=user9 
rhost=10.19.102.239
May 12 06:04:06 srvvm01.ac.example.com auth[436]: pam_unix(dovecot:auth): check 
pass; user unknown
May 12 06:04:06 srvvm01.ac.example.com auth[430]: pam_sss(dovecot:auth): 
Request to sssd failed. Connection refused
May 12 06:04:06 srvvm01.ac.example.com auth[428]: pam_unix(dovecot:auth): 
authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=user11 
rhost=10.19.97.13
May 12 06:04:06 srvvm01.ac.example.com auth[448]: pam_unix(dovecot:auth): 
authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=user12 
rhost=10.19.102.240
May 12 06:04:06 srvvm01.ac.example.com auth[431]: pam_unix(dovecot:auth): 
authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=user13 
rhost=10.19.97.159
May 12 06:04:06 srvvm01.ac.example.com auth[432]: pam_unix(dovecot:auth): 
authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=user14 
rhost=10.19.97.90
May 12 06:04:06 srvvm01.ac.example.com auth[478]: pam_sss(dovecot:auth): 
Request to sssd failed. Connection refused
May 12 06:04:06 srvvm01.ac.example.com auth[475]: pam_sss(dovecot:auth): 
Request to sssd failed. Connection refused
May 12 06:04:06 srvvm01.ac.example.com auth[474]: pam_sss(dovecot:auth): 
Request to sssd failed. Connection refused
May 12 06:04:06 srvvm01.ac.example.com auth[473]: pam_sss(dovecot:auth): 
Request to sssd failed. Connection refused
May 12 06:04:06 srvvm01.ac.example.com auth[427]: pam_sss(dovecot:auth): 
Request to sssd failed. Connection refused
May 12 06:04:06 srvvm01.ac.example.com auth[444]: pam_sss(dovecot:auth): 
Request to sssd failed. Connection refused
May 12 06:04:06 srvvm01.ac.example.com auth[433]: pam_sss(dovecot:auth): 
Request to sssd failed. Connection refused
May 12 06:04:06 srvvm01.ac.example.com auth[436]: pam_unix(dovecot:auth): 
authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=user15 
rhost=10.19.102.238
May 12 06:04:06 srvvm01.ac.example.com auth[428]: pam_sss(dovecot:auth): 
Request to sssd failed. Connection refused
May 12 06:04:06 srvvm01.ac.example.com auth[448]: pam_sss(dovecot:auth): 
Request to sssd failed. Connection refused
May 12 06:04:06 srvvm01.ac.example.com auth[431]: pam_sss(dovecot:auth): 
Request to sssd failed. Connection refused
May 12 06:04:06 srvvm01.ac.example.com auth[432]: pam_sss(dovecot:auth): 
Request to sssd failed. Connection refused
May 12 06:04:06 srvvm01.ac.example.com auth[477]: pam_sss(dovecot:auth): 
Request to sssd failed. Connection refused
May 12 06:04:06 srvvm01.ac.example.com auth[426]: pam_sss(dovecot:auth): 
Request to sssd failed. Connection refused
May 12 06:04:06 srvvm01.ac.example.com auth[484]: pam_sss(dovecot:auth): 
Request to sssd failed. Connection refused
May 12 06:04:06 srvvm01.ac.example.com auth[489]: pam_sss(dovecot:auth): 
Request to sssd failed. Connection refused
May 12 06:04:06 srvvm01.ac.example.com auth[488]: pam_sss(dovecot:auth): 
Request to sssd failed. Connection refused
May 12 06:04:06 srvvm01.ac.example.com auth[487]: pam_sss(dovecot:auth): 
Request to sssd failed. Connection refused
May 12 06:04:06 srvvm01.ac.example.com auth[436]: pam_sss(dovecot:auth): 
Request to sssd failed. Connection refused
May 12 06:04:06 srvvm01.ac.example.com sendmail[389]: /etc/mail/aliases.user: 
917 aliases, longest 569 bytes, 19796 bytes total
May 12 06:04:05 srvvm01.ac.example.com systemd[1]: Failed to start System 
Security Services Daemon.
May 12 06:04:05 srvvm01.ac.example.com systemd[1]: Unit sssd.service entered 
failed state.
May 12 06:04:05 srvvm01.ac.example.com systemd[1]: Starting User and Group Name 
Lookups.
May 12 06:04:05 srvvm01.ac.example.com systemd[1]: Reached target User and 
Group Name Lookups.
May 12 06:04:05 srvvm01.ac.example.com systemd[1]: Starting Login Service...
May 12 06:04:05 srvvm01.ac.example.com systemd[1]: Starting Permit User 
Sessions...
May 12 06:04:05 srvvm01.ac.example.com systemd[1]: Started Permit User Sessions.
May 12 06:04:05 srvvm01.ac.example.com systemd[1]: Started Getty on tty1.
May 12 06:04:05 srvvm01.ac.example.com systemd[1]: Starting Container Getty on 
/dev/pts/3...
May 12 06:04:05 srvvm01.ac.example.com systemd[1]: Started Container Getty on 
/dev/pts/3.
May 12 06:04:05 srvvm01.ac.example.com systemd[1]: Starting Container Getty on 
/dev/pts/2...
May 12 06:04:06 srvvm01.ac.example.com systemd-logind[492]: New seat seat0.
May 12 06:04:06 srvvm01.ac.example.com systemd[1]: Started Login Service.
May 12 06:04:06 srvvm01.ac.example.com sshd[482]: Failed none for invalid user 
user5 from 10.19.96.197 port 36750 ssh2
May 12 06:04:06 srvvm01.ac.example.com sshd[482]: Failed password for invalid 
user user5 from 10.19.96.197 port 36750 ssh2
May 12 06:04:06 srvvm01.ac.example.com sshd[482]: Failed password for invalid 
user user5 from 10.19.96.197 port 36750 ssh2
May 12 05:55:58 srvvm01 systemd[1]: Stopping System Logging Service...
May 12 05:55:59 srvvm01 kernel: [1020200.459525] bonding: bond1: link status 
definitely up for interface eth4, 1000 Mbps full duplex
May 12 05:56:00 srvvm01 kernel: [1020200.816246] igb 0000:81:00.0 eth2: igb: 
eth2 NIC Link is Down
May 12 05:56:00 srvvm01 kernel: [1020200.843263] igb 0000:81:00.1 eth3: igb: 
eth3 NIC Link is Down
May 12 05:56:00 srvvm01 kernel: [1020200.859487] bonding: bond1: link status 
definitely down for interface eth2, disabling it
May 12 05:56:03 srvvm01 kernel: [1020204.243953] igb 0000:81:00.2 eth4: igb: 
eth4 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX/TX
May 12 05:56:03 srvvm01 kernel: [1020204.256836] bonding: bond1: link status 
definitely up for interface eth4, 1000 Mbps full duplex
May 12 05:56:06 srvvm01 kernel: [1020207.139979] br0: port 12(veth7RLOHG) 
entered disabled state
May 12 05:56:12 srvvm01 rsyslogd: [origin software="rsyslogd" swVersion="8.4.2" 
x-pid="218" x-info="http://www.rsyslog.com";] exiting on signal 15.
May 12 06:03:10 srvvm01 rsyslogd: [origin software="rsyslogd" swVersion="8.4.2" 
x-pid="238" x-info="http://www.rsyslog.com";] start
May 12 06:03:10 srvvm01 systemd[1]: Mounted Debug File System.
May 12 06:03:10 srvvm01 systemd[1]: Mounted Huge Pages File System.
May 12 06:03:10 srvvm01 rsyslogd-2039: Could not open output pipe 
'/dev/xconsole': No such file or directory [try http://www.rsyslog.com/e/2039 ]
May 12 06:03:10 srvvm01 systemd[1]: Mounted POSIX Message Queue File System.
May 12 06:03:10 srvvm01 systemd[1]: Started Remount Root and Kernel File 
Systems.
May 12 06:03:10 srvvm01 systemd[1]: Started Various fixups to make systemd work 
better on Debian.
May 12 06:03:10 srvvm01 systemd[1]: Starting Load/Save Random Seed...
May 12 06:03:10 srvvm01 systemd[1]: Starting Local File Systems (Pre).
May 12 06:03:10 srvvm01 systemd[1]: Reached target Local File Systems (Pre).
May 12 06:03:10 srvvm01 systemd[1]: Starting Local File Systems.
May 12 06:03:10 srvvm01 systemd[1]: Reached target Local File Systems.
May 12 06:03:10 srvvm01 systemd[1]: Starting Remote File Systems.
May 12 06:03:10 srvvm01 rsyslogd-2007: action 'action 19' suspended, next retry 
is Thu May 12 06:03:40 2016 [try http://www.rsyslog.com/e/2007 ]
May 12 06:03:10 srvvm01 systemd[1]: Started Trigger Flushing of Journal to 
Persistent Storage.
May 12 06:03:10 srvvm01 logger[65]: /etc/resolvconf/update-libc.d/sendmail 
(dynamic) update_resolv:
May 12 06:03:10 srvvm01 logger[66]: /etc/resolvconf/update-libc.d/sendmail 
(dynamic) update_sendmail:
May 12 06:03:10 srvvm01 logger[94]: /etc/network/if-up.d/sendmail (dynamic) 
update_interface: lo up
May 12 06:03:10 srvvm01 logger[95]: /etc/network/if-up.d/sendmail (dynamic) 
update_sendmail: lo up
May 12 06:03:10 srvvm01 logger[132]: /etc/resolvconf/update-libc.d/sendmail 
(dynamic) update_resolv:
May 12 06:03:10 srvvm01 logger[133]: /etc/resolvconf/update-libc.d/sendmail 
(dynamic) update_sendmail:
May 12 06:03:10 srvvm01 logger[145]: /etc/network/if-up.d/sendmail (dynamic) 
update_interface: eth0 up
May 12 06:03:10 srvvm01 logger[146]: /etc/network/if-up.d/sendmail (dynamic) 
update_provider: eth0 up ac.example.com.
May 12 06:03:10 srvvm01 logger[147]: /etc/network/if-up.d/sendmail (dynamic) 
update_host: eth0 up ac.example.com. 10.19.96.11
May 12 06:03:10 srvvm01 logger[148]: /etc/network/if-up.d/sendmail (dynamic) 
update_sendmail: eth0 up ac.example.com. 10.19.96.11
May 12 06:03:10 srvvm01 logger[164]: /etc/network/if-up.d/sendmail (dynamic) 
update_interface: --all up
May 12 06:03:10 srvvm01 logger[165]: /etc/network/if-up.d/sendmail (dynamic) 
update_sendmail: --all up
May 12 06:03:10 srvvm01 systemd[1]: Started Copy rules generated while the root 
was ro.
May 12 06:03:10 srvvm01 systemd[1]: Started LSB: ebtables ruleset management.
May 12 06:03:10 srvvm01 systemd[1]: Started LSB: IPv6 Recursive DNS Server 
discovery.
May 12 06:03:10 srvvm01 systemd[1]: Started LSB: Tune IDE hard disks.
May 12 06:03:10 srvvm01 systemd[1]: Started Load/Save Random Seed.
May 12 06:03:10 srvvm01 systemd[1]: Starting LSB: Raise network interfaces....
May 12 06:03:10 srvvm01 systemd[1]: Started Create Volatile Files and 
Directories.
May 12 06:03:10 srvvm01 systemd[1]: Starting Update UTMP about System 
Boot/Shutdown...
May 12 06:03:10 srvvm01 systemd[1]: Started Update UTMP about System 
Boot/Shutdown.
May 12 06:03:10 srvvm01 systemd[1]: Started LSB: Raise network interfaces..
May 12 06:03:10 srvvm01 systemd[1]: Starting Network.
May 12 06:03:10 srvvm01 anacron[178]: Anacron 2.3 started on 2016-05-12
May 12 06:03:10 srvvm01 hdparm[21]: Setting parameters of disc: (none).
May 12 06:03:10 srvvm01 rdnssd[29]: Starting IPv6 Recursive DNS Server 
discovery Daemon: rdnssd.
May 12 06:03:10 srvvm01 networking[67]: Configuring network interfaces...done.
May 12 06:03:10 srvvm01 cron[179]: (CRON) INFO (pidfile fd = 3)
May 12 06:03:10 srvvm01 anacron[178]: Normal exit (0 jobs run)
May 12 06:03:10 srvvm01 logger[220]: /etc/init.d/sendmail start
May 12 06:03:10 srvvm01 cron[179]: (dreger) ORPHAN (no passwd entry)
May 12 06:03:10 srvvm01 cron[179]: (adminteam) ORPHAN (no passwd entry)
May 12 06:03:10 srvvm01 cron[179]: (CRON) INFO (Running @reboot jobs)
May 12 06:03:10 srvvm01 ntpd[219]: ntpd 4.2.6p5@1.2349-o Wed Oct 28 20:16:08 
UTC 2015 (1)
May 12 06:03:10 srvvm01 lldpd[235]: created chroot directory /var/run/lldpd
May 12 06:03:10 srvvm01 lldpd[235]: /etc/localtime copied to chroot
May 12 06:03:10 srvvm01 lldpd[235]: protocol LLDP enabled
May 12 06:03:10 srvvm01 lldpd[235]: protocol CDPv1 disabled
May 12 06:03:10 srvvm01 lldpd[235]: protocol CDPv2 disabled
May 12 06:03:10 srvvm01 lldpd[235]: protocol SONMP disabled
May 12 06:03:10 srvvm01 lldpd[235]: protocol EDP disabled
May 12 06:03:10 srvvm01 lldpd[235]: protocol FDP disabled
May 12 06:03:10 srvvm01 lldpd[235]: libevent 2.0.21-stable initialized with 
epoll method
May 12 06:03:10 srvvm01 ntpd[236]: proto: precision = 0.101 usec
May 12 06:03:10 srvvm01 ntp[186]: Starting NTP server: ntpd.
May 12 06:03:10 srvvm01 systemd[1]: Starting Certificate monitoring and PKI 
enrollment...
May 12 06:03:10 srvvm01 systemd[1]: Starting System Logging Service...
May 12 06:03:10 srvvm01 systemd[1]: Starting Clam AntiVirus userspace daemon...
May 12 06:03:10 srvvm01 systemd[1]: Started Clam AntiVirus userspace daemon.
May 12 06:03:10 srvvm01 systemd[1]: Starting LSB: ClamAV virus milter...
May 12 06:03:10 srvvm01 systemd[1]: Started LLDP daemon.
May 12 06:03:10 srvvm01 systemd[1]: Started /etc/rc.local Compatibility.
May 12 06:03:10 srvvm01 systemd[1]: Started LSB: Start NTP daemon.
May 12 06:03:10 srvvm01 systemd[1]: Started LSB: start Samba daemons for the AD 
DC.
May 12 06:03:10 srvvm01 systemd[1]: Started LSB: start Samba NetBIOS nameserver 
(nmbd).
May 12 06:03:10 srvvm01 systemd[1]: Starting Dovecot IMAP/POP3 email server...
May 12 06:03:10 srvvm01 systemd[1]: Started Dovecot IMAP/POP3 email server.
May 12 06:03:10 srvvm01 systemd[1]: Starting LSB: start Samba SMB/CIFS daemon 
(smbd)...
May 12 06:03:10 srvvm01 systemd[1]: Started LSB: start Samba SMB/CIFS daemon 
(smbd).
May 12 06:03:10 srvvm01 ntpd[236]: Listen and drop on 0 v4wildcard 0.0.0.0 UDP 
123
May 12 06:03:10 srvvm01 ntpd[236]: Listen and drop on 1 v6wildcard :: UDP 123
May 12 06:03:10 srvvm01 ntpd[236]: Listen normally on 2 lo 127.0.0.1 UDP 123
May 12 06:03:10 srvvm01 ntpd[236]: Listen normally on 3 eth0 10.19.96.11 UDP 123
May 12 06:03:11 srvvm01 ntpd[236]: Listen normally on 4 lo ::1 UDP 123
May 12 06:03:11 srvvm01 ntpd[236]: Listen normally on 5 eth0 
fe80::220:8cff:fe8a:5183 UDP 123
May 12 06:03:11 srvvm01 ntpd[236]: peers refreshed
May 12 06:03:11 srvvm01 ntpd[236]: Listening on routing socket on fd #22 for 
interface updates
May 12 06:03:11 srvvm01 ntpd[236]: authreadkeys: file /etc/ntp/keys: No such 
file or directory
May 12 06:03:11 srvvm01 lldpcli[234]: cannot find configuration file/directory 
/etc/lldpd.conf
May 12 06:03:11 srvvm01 lldpcli[234]: unknown command from argument 1: `#`
May 12 06:03:11 srvvm01 lldpcli[234]: an error occurred while executing last 
command
May 12 06:03:11 srvvm01 lldpcli[234]: unknown command from argument 1: `#`
May 12 06:03:11 srvvm01 lldpcli[234]: an error occurred while executing last 
command
May 12 06:03:11 srvvm01 lldpcli[234]: lldpd should resume operations
May 12 06:03:11 srvvm01 systemd[1]: Started System Logging Service.
May 12 06:03:11 srvvm01 sendmail[194]: Starting Mail Transport Agent (MTA): 
sendmailMakefile:290: warning: overriding recipe for target 
'/etc/aliases.news.db'
May 12 06:03:14 srvvm01 sendmail[194]: Makefile:287: warning: ignoring old 
recipe for target '/etc/aliases.news.db'
May 12 06:03:14 srvvm01 sendmail[194]: Makefile:344: warning: overriding recipe 
for target '/etc/aliases.news'
May 12 06:03:14 srvvm01 sendmail[194]: Makefile:287: warning: ignoring old 
recipe for target '/etc/aliases.news'
May 12 06:03:14 srvvm01 systemd[1]: Started Zabbix Agent.
May 12 06:03:16 srvvm01 dovecot: master: Dovecot v2.2.18 starting up for imap, 
pop3 (core dumps disabled)
May 12 06:03:16 srvvm01 sssd: Starting up
May 12 06:03:16 srvvm01 dovecot[241]: Warning: fd limit (ulimit -n) is lower 
than required under max. load (1024 < 3000), because of default_client_limit
May 12 06:03:18 srvvm01 clamav-milter[372]: +++ Started at Thu May 12 06:03:18 
2016
May 12 06:03:20 srvvm01 clamd[239]: Received 1 file descriptor(s) from systemd.
May 12 06:03:20 srvvm01 clamd[239]: clamd daemon 0.99 (OS: linux-gnu, ARCH: 
x86_64, CPU: x86_64)
May 12 06:03:20 srvvm01 clamd[239]: Running as user clamav (UID 111, GID 143)
May 12 06:03:20 srvvm01 clamd[239]: Log file size limited to 4294967295bytes.
May 12 06:03:20 srvvm01 clamd[239]: Reading databases from /var/lib/clamav
May 12 06:03:20 srvvm01 clamd[239]: Not loading PUA signatures.
May 12 06:03:20 srvvm01 clamd[239]: Bytecode: Security mode set to 
"TrustSigned".
May 12 06:03:20 srvvm01 systemd[1]: Started LSB: ClamAV virus milter.
May 12 06:03:20 srvvm01 systemd[1]: Started LSB: INN news server.
May 12 06:03:20 srvvm01 freshclam[180]: ClamAV update process started at Thu 
May 12 06:03:20 2016
May 12 06:03:20 srvvm01 freshclam[180]: WARNING: Your ClamAV installation is 
OUTDATED!
May 12 06:03:20 srvvm01 freshclam[180]: WARNING: Local version: 0.99 
Recommended version: 0.99.2
May 12 06:03:20 srvvm01 freshclam[180]: DON'T PANIC! Read 
http://www.clamav.net/support/faq
May 12 06:03:20 srvvm01 clamav-milter[240]: Starting Sendmail milter plugin for 
ClamAV: clamav-milter.
May 12 06:03:20 srvvm01 inn2[189]: Starting news server: innd.
May 12 06:03:20 srvvm01 innd: SERVER descriptors 1023
May 12 06:03:21 srvvm01 innd: SERVER outgoing 1010
May 12 06:03:21 srvvm01 innd: SERVER ccsetup control:12
May 12 06:03:21 srvvm01 innd: SERVER lcsetup localconn:14
May 12 06:03:21 srvvm01 freshclam[180]: main.cvd is up to date (version: 57, 
sigs: 4218790, f-level: 60, builder: amishhammer)
May 12 06:03:21 srvvm01 freshclam[180]: daily.cld is up to date (version: 
21529, sigs: 139560, f-level: 63, builder: neo)
May 12 06:03:21 srvvm01 freshclam[180]: bytecode.cld is up to date (version: 
277, sigs: 47, f-level: 63, builder: neo)
May 12 06:03:21 srvvm01 sssd[be[example.com]]: Starting up
May 12 06:03:22 srvvm01 innd: SERVER rcsetup remconn:15
May 12 06:03:22 srvvm01 innd: SERVER rcsetup remconn:17
May 12 06:03:22 srvvm01 innd: controlchan! spawned controlchan!:21:proc:425
May 12 06:03:23 srvvm01 innd: SERVER perl filtering enabled
May 12 06:03:25 srvvm01 innd: SERVER starting
May 12 06:03:25 srvvm01 dovecot: imap-login: Disconnected (disconnected before 
auth was ready, waited 2 secs): user=<>, rip=10.19.102.238, lip=10.19.96.11, 
TLS handshaking: Disconnected, session=<gR9OPZ0yBACsE2bu>
May 12 06:03:26 srvvm01 dovecot: imap-login: Disconnected (disconnected before 
auth was ready, waited 2 secs): user=<>, rip=10.19.102.238, lip=10.19.96.11, 
TLS handshaking: Disconnected, session=<1jpOPZ0yBQCsE2bu>
May 12 06:03:26 srvvm01 sssd[sudo]: Starting up
May 12 06:03:26 srvvm01 sssd[ssh]: Starting up
May 12 06:03:26 srvvm01 sssd[nss]: Starting up
May 12 06:03:26 srvvm01 systemd[1]: Started Certificate monitoring and PKI 
enrollment.
May 12 06:03:26 srvvm01 sssd[pam]: Starting up
May 12 06:03:29 srvvm01 sssd[pac]: Starting up
May 12 06:03:42 srvvm01 dovecot: imap-login: Disconnected (no auth attempts in 
19 secs): user=<>, rip=10.0.142.199, lip=10.19.96.11, TLS handshaking: 
SSL_accept() syscall failed: Connection reset by peer, 
session=<9T14Pp0yjwAFkY7H>
May 12 06:03:42 srvvm01 dovecot: imap-login: Disconnected (no auth attempts in 
19 secs): user=<>, rip=10.0.142.199, lip=10.19.96.11, TLS handshaking, 
session=<50d4Pp0yjgAFkY7H>
May 12 06:03:42 srvvm01 dovecot: imap-login: Disconnected (no auth attempts in 
21 secs): user=<>, rip=10.0.142.199, lip=10.19.96.11, TLS handshaking: 
SSL_accept() syscall failed: Connection reset by peer, 
session=<HU94Pp0yjQAFkY7H>
May 12 06:03:42 srvvm01 dovecot: imap-login: Disconnected (no auth attempts in 
21 secs): user=<>, rip=10.0.142.199, lip=10.19.96.11, TLS handshaking: 
SSL_accept() syscall failed: Connection reset by peer, 
session=<zGZ4Pp0yjAAFkY7H>
May 12 06:03:47 srvvm01 controlchan[425]: starting
May 12 06:03:57 srvvm01 clamd[239]: Loaded 4353011 signatures.
May 12 06:04:04 srvvm01 clamd[239]: TCP: No tcp AF_INET/AF_INET6 SOCK_STREAM 
socket received from systemd.
May 12 06:04:04 srvvm01 clamd[239]: LOCAL: Received AF_UNIX SOCK_STREAM socket 
from systemd.
May 12 06:04:04 srvvm01 clamd[239]: Limits: Global size limit set to 104857600 
bytes.
May 12 06:04:04 srvvm01 clamd[239]: Limits: File size limit set to 26214400 
bytes.
May 12 06:04:04 srvvm01 clamd[239]: Limits: Recursion level limit set to 16.
May 12 06:04:04 srvvm01 clamd[239]: Limits: Files limit set to 10000.
May 12 06:04:04 srvvm01 clamd[239]: Limits: MaxEmbeddedPE limit set to 10485760 
bytes.
May 12 06:04:04 srvvm01 clamd[239]: Limits: MaxHTMLNormalize limit set to 
10485760 bytes.
May 12 06:04:04 srvvm01 clamd[239]: Limits: MaxHTMLNoTags limit set to 2097152 
bytes.
May 12 06:04:04 srvvm01 clamd[239]: Limits: MaxScriptNormalize limit set to 
5242880 bytes.
May 12 06:04:04 srvvm01 clamd[239]: Limits: MaxZipTypeRcg limit set to 1048576 
bytes.
May 12 06:04:04 srvvm01 clamd[239]: Limits: MaxPartitions limit set to 50.
May 12 06:04:04 srvvm01 clamd[239]: Limits: MaxIconsPE limit set to 100.
May 12 06:04:04 srvvm01 clamd[239]: Limits: PCREMatchLimit limit set to 10000.
May 12 06:04:04 srvvm01 clamd[239]: Limits: PCRERecMatchLimit limit set to 5000.
May 12 06:04:04 srvvm01 clamd[239]: Limits: PCREMaxFileSize limit set to 
26214400.
May 12 06:04:04 srvvm01 clamd[239]: Archive support enabled.
May 12 06:04:04 srvvm01 clamd[239]: Algorithmic detection enabled.
May 12 06:04:04 srvvm01 clamd[239]: Portable Executable support enabled.
May 12 06:04:04 srvvm01 clamd[239]: ELF support enabled.
May 12 06:04:04 srvvm01 clamd[239]: Mail files support enabled.
May 12 06:04:04 srvvm01 clamd[239]: OLE2 support enabled.
May 12 06:04:04 srvvm01 clamd[239]: PDF support enabled.
May 12 06:04:04 srvvm01 clamd[239]: SWF support enabled.
May 12 06:04:04 srvvm01 clamd[239]: HTML support enabled.
May 12 06:04:04 srvvm01 clamd[239]: Self checking every 3600 seconds.
May 12 06:04:04 srvvm01 clamd[239]: Limits: Global size limit set to 104857600 
bytes.
May 12 06:04:04 srvvm01 clamd[239]: Limits: File size limit set to 26214400 
bytes.
May 12 06:04:04 srvvm01 clamd[239]: Limits: Recursion level limit set to 16.
May 12 06:04:04 srvvm01 clamd[239]: Limits: Files limit set to 10000.
May 12 06:04:04 srvvm01 clamd[239]: Limits: MaxEmbeddedPE limit set to 10485760 
bytes.
May 12 06:04:04 srvvm01 clamd[239]: Limits: MaxHTMLNormalize limit set to 
10485760 bytes.
May 12 06:04:04 srvvm01 clamd[239]: Limits: MaxHTMLNoTags limit set to 2097152 
bytes.
May 12 06:04:04 srvvm01 clamd[239]: Limits: MaxScriptNormalize limit set to 
5242880 bytes.
May 12 06:04:04 srvvm01 clamd[239]: Limits: MaxZipTypeRcg limit set to 1048576 
bytes.
May 12 06:04:04 srvvm01 clamd[239]: Limits: MaxPartitions limit set to 50.
May 12 06:04:04 srvvm01 clamd[239]: Limits: MaxIconsPE limit set to 100.
May 12 06:04:04 srvvm01 clamd[239]: Limits: PCREMatchLimit limit set to 10000.
May 12 06:04:04 srvvm01 clamd[239]: Limits: PCRERecMatchLimit limit set to 5000.
May 12 06:04:04 srvvm01 clamd[239]: Limits: PCREMaxFileSize limit set to 
26214400.
May 12 06:04:04 srvvm01 clamd[239]: Archive support enabled.
May 12 06:04:04 srvvm01 clamd[239]: Algorithmic detection enabled.
May 12 06:04:04 srvvm01 clamd[239]: Portable Executable support enabled.
May 12 06:04:04 srvvm01 clamd[239]: ELF support enabled.
May 12 06:04:04 srvvm01 clamd[239]: Mail files support enabled.
May 12 06:04:04 srvvm01 clamd[239]: OLE2 support enabled.
May 12 06:04:04 srvvm01 clamd[239]: PDF support enabled.
May 12 06:04:04 srvvm01 clamd[239]: SWF support enabled.
May 12 06:04:04 srvvm01 clamd[239]: HTML support enabled.
May 12 06:04:04 srvvm01 clamd[239]: Self checking every 3600 seconds.
May 12 06:04:05 srvvm01 systemd[1]: sssd.service start operation timed out. 
Terminating.
May 12 06:04:05 srvvm01 sssd[sudo]: Shutting down
May 12 06:04:05 srvvm01 sssd[nss]: Shutting down
May 12 06:04:05 srvvm01 sssd[be[example.com]]: Shutting down
May 12 06:04:05 srvvm01 sssd[pam]: Shutting down
May 12 06:04:06 srvvm01 sssd[pac]: Shutting down
May 12 06:04:06 srvvm01 sssd[ssh]: Shutting down
May 12 06:04:06 srvvm01 sendmail[389]: alias database /etc/mail/aliases.user 
rebuilt by root
May 12 06:04:06 srvvm01 sendmail[389]: /etc/mail/aliases.user: 917 aliases, 
longest 569 bytes, 19796 bytes total
May 12 06:04:06 srvvm01 systemd[1]: Failed to start System Security Services 
Daemon.
May 12 06:04:06 srvvm01 systemd[1]: Unit sssd.service entered failed state.
May 12 06:04:06 srvvm01 systemd[1]: Starting User and Group Name Lookups.
May 12 06:04:06 srvvm01 systemd[1]: Reached target User and Group Name Lookups.
May 12 06:04:06 srvvm01 systemd[1]: Starting Login Service...
May 12 06:04:06 srvvm01 systemd[1]: Starting Permit User Sessions...
May 12 06:04:06 srvvm01 systemd[1]: Started Permit User Sessions.
May 12 06:04:06 srvvm01 systemd[1]: Started Getty on tty1.
May 12 06:04:06 srvvm01 systemd[1]: Starting Container Getty on /dev/pts/3...
May 12 06:04:06 srvvm01 systemd[1]: Started Container Getty on /dev/pts/3.
May 12 06:04:06 srvvm01 systemd[1]: Starting Container Getty on /dev/pts/2...
May 12 06:04:06 srvvm01 systemd[1]: Started Login Service.
May 12 06:04:06 srvvm01 sendmail[389]: alias database /etc/mail/aliases rebuilt 
by root
May 12 06:04:06 srvvm01 sendmail[389]: /etc/mail/aliases: 214 aliases, longest 
435 bytes, 11818 bytes total
May 12 06:04:09 srvvm01 sendmail[389]: alias database /etc/aliases.news rebuilt 
by root
May 12 06:04:09 srvvm01 dovecot: imap-login: Disconnected (auth failed, 1 
attempts in 9 secs): user=<user1>, method=PLAIN, rip=10.0.142.199, 
lip=10.19.96.11, TLS, session=<UaF/P50yoAAFkY7H>
May 12 06:04:09 srvvm01 sendmail[389]: /etc/aliases.news: 235 aliases, longest 
115 bytes, 27926 bytes total
May 12 06:04:09 srvvm01 sendmail[513]: alias database /etc/mail/aliases.user 
rebuilt by root
May 12 06:04:09 srvvm01 sendmail[513]: /etc/mail/aliases.user: 917 aliases, 
longest 569 bytes, 19796 bytes total
May 12 06:04:09 srvvm01 sendmail[513]: alias database /etc/mail/aliases rebuilt 
by root
May 12 06:04:09 srvvm01 sendmail[513]: /etc/mail/aliases: 214 aliases, longest 
435 bytes, 11818 bytes total

Attachment: signature.asc
Description: OpenPGP digital signature

-- 
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project

Reply via email to