Re: [Freeipa-users] CRON: Authentication service cannot retrieve authentication info

2015-04-16 Thread Thomas Lau
I think the semi-online status cause SSSD confused about what to do and causing it to timeout. So that means no fix for now. On Thu, Apr 16, 2015 at 11:10 AM, Dmitri Pal d...@redhat.com wrote: On 04/15/2015 10:17 PM, Thomas Lau wrote: Hi, I just checked with developer, there is no

Re: [Freeipa-users] CRON: Authentication service cannot retrieve authentication info

2015-04-16 Thread Dmitri Pal
On 04/16/2015 06:40 AM, Thomas Lau wrote: I think the semi-online status cause SSSD confused about what to do and causing it to timeout. So that means no fix for now. Not for right now. Please try to capture logs, If you mange to reproduce the issue and provide logs we would be able to see

Re: [Freeipa-users] CRON: Authentication service cannot retrieve authentication info

2015-04-16 Thread Jakub Hrozek
On Thu, Apr 16, 2015 at 09:01:23AM -0400, Dmitri Pal wrote: On 04/16/2015 06:40 AM, Thomas Lau wrote: I think the semi-online status cause SSSD confused about what to do and causing it to timeout. So that means no fix for now. Not for right now. Please try to capture logs, If you mange to

Re: [Freeipa-users] CRON: Authentication service cannot retrieve authentication info

2015-04-15 Thread Dmitri Pal
On 04/15/2015 10:17 PM, Thomas Lau wrote: Hi, I just checked with developer, there is no authentication related code in the program, we could treat it as normal cron job. is that possible to make sssd less contact with FreeIPA? for example, refresh all user info every 5 minutes, else use cache

Re: [Freeipa-users] CRON: Authentication service cannot retrieve authentication info

2015-04-14 Thread Dmitri Pal
On 04/13/2015 10:41 PM, Thomas Lau wrote: Hi, It's an in-house program which runs on one kerberos user. You need to look what this program is doing. I suspect it is doing some sort of kinit itself and does not rely on the PAM stack, i.e it bypasses SSSD in the given scenario. Can this be the

Re: [Freeipa-users] CRON: Authentication service cannot retrieve authentication info

2015-04-13 Thread Thomas Lau
Hi, It's an in-house program which runs on one kerberos user. On Tue, Apr 14, 2015 at 5:34 AM, Dmitri Pal d...@redhat.com wrote: On 04/13/2015 08:23 AM, Thomas Lau wrote: Hi, These problem appear randomly, sometime it still work even under heavy packet loss, some times would be like this.

Re: [Freeipa-users] CRON: Authentication service cannot retrieve authentication info

2015-04-13 Thread Jakub Hrozek
On Mon, Apr 13, 2015 at 01:15:09PM +0800, Thomas Lau wrote: Hi all, We have cronjob which running on a FreeIPA LDAP user; When connection between IPA server and client having heavy packet loss, following error would occur: CRON[20637]: Authentication service cannot retrieve authentication

Re: [Freeipa-users] CRON: Authentication service cannot retrieve authentication info

2015-04-13 Thread Thomas Lau
Hi, These problem appear randomly, sometime it still work even under heavy packet loss, some times would be like this. So its hard to catch. On Apr 13, 2015 3:22 PM, Jakub Hrozek jhro...@redhat.com wrote: On Mon, Apr 13, 2015 at 01:15:09PM +0800, Thomas Lau wrote: Hi all, We have cronjob

[Freeipa-users] CRON: Authentication service cannot retrieve authentication info

2015-04-12 Thread Thomas Lau
Hi all, We have cronjob which running on a FreeIPA LDAP user; When connection between IPA server and client having heavy packet loss, following error would occur: CRON[20637]: Authentication service cannot retrieve authentication info I have cache credentials and store password if offline