On Thu, Dec 06, 2012 at 01:49:14PM -0500, Qing Chang wrote: > > On 06/12/2012 12:12 PM, Jakub Hrozek wrote: > >On Thu, Dec 06, 2012 at 11:37:41AM -0500, Qing Chang wrote: > >>On 05/12/2012 2:58 PM, Dmitri Pal wrote: > >>>On 12/05/2012 02:00 PM, Qing Chang wrote: > >>>>On 05/12/2012 12:59 PM, Simo Sorce wrote: > >>>>>On Wed, 2012-12-05 at 11:31 -0500, Qing Chang wrote: > >>>>> > >>>>>I see this: > >>>>> > >>>>>>First failed "getent passwd shassan" triggers: > >>>>>>(Wed Dec 5 10:45:05 2012) [sssd[nss]] [nss_cmd_getpwnam_dp_callback] > >>>>>>(0x0040): Unable to get > >>>>>>information from Data Provider > >>>>>>Error: 1, 11, Fast reply - offline > >>>>>>Will try to return what we have in cache > >>>>>but later on you report only logs after 10:45:05. > >>>>> > >>>>>It would be useful to see what happened in the provider immediately > >>>>>before the error was returned. In particular I would like to see what > >>>>>error caused the provider to go offline and if it mentions removing the > >>>>>user in any way. > >>>>the problem is we don't know when the loss of memory happened and it > >>>>appears to > >>>>me that nothing is logged about it. If you don't mind, I can send in > >>>>more logs. > >>>>>>(Wed Dec 5 10:45:48 2012) [sssd[be[sri.utoronto.ca]]] > >>>>>>[sdap_save_user] (0x0400): Storing info for > >>>>>>user shassan > >>>>>>(Wed Dec 5 10:45:48 2012) [sssd[be[sri.utoronto.ca]]] > >>>>>>[sysdb_search_user_by_name] (0x0400): No such > >>>>>>entry > >>>>>>(Wed Dec 5 10:45:48 2012) [sssd[be[sri.utoronto.ca]]] > >>>>>>[sysdb_add_user] (0x0400): Error: 17 (File > >>>>>>exists) > >>>>>>(Wed Dec 5 10:45:48 2012) [sssd[be[sri.utoronto.ca]]] > >>>>>>[sysdb_store_user] (0x0080): A user with the > >>>>>>same UID [54184] was removed from the cache > >>>>>>(Wed Dec 5 10:45:48 2012) [sssd[be[sri.utoronto.ca]]] > >>>>>>[sysdb_search_user_by_uid] (0x0400): No such > >>>>>>entry > >>>>>This is interesting, do you have duplicated UIDs in your directory by > >>>>>chance ? > >>>>That was also what I was wondering about, but that's her id, it is > >>>>unique. > >>>Can you compare the LDAP entry of this user to couple other users that > >>>are OK, use SSSD regularly and do not have an issue? > >>>May be there is something else in the user entry that would shed the light. > >>there is nothing different after comparing with a few accounts. The cmd > >>line I used > >>is this: > >>ldapsearch -LL -x -D 'cn=Directory Manager' -W -b > >>'dc=sri,dc=utoronto,dc=ca' '(uid=shassan)' > >> > >>Could there be still something not showing by this cmd? > >The term "uid" is kind of overloaded here. We're looking for non-unique > >UID numbers, not the uid LDAP attributes, which store the name. > > > >Something like this might show the offender: > >ldapsearch -LL -x -D 'cn=Directory Manager' -W -b 'dc=sri,dc=utoronto,dc=ca' > >'(uidNumber=54184)' > Thanks Jakub, there is a conflict uidNumber indeed. > > What I tried was "getent passwd 54184", it gave me just one entry which got > me to believe > that it is unique... >
Right, the getent functions stop at first match. Does your setup work fine after removing the duplicate UID? _______________________________________________ sssd-devel mailing list [email protected] https://lists.fedorahosted.org/mailman/listinfo/sssd-devel
