On (08/01/15 09:31), Orion Poplawski wrote: >On 01/06/2015 11:32 PM, Jakub Hrozek wrote: >> On Tue, Jan 06, 2015 at 05:06:39PM -0700, Orion Poplawski wrote: >>> We're having some trouble with sssd on centos 7 under load on a VPS. 389ds >>> ldap server for id/auth. Part may be an issue with the VPS, but I'm trying >>> to track down all possible issues. >>> >>> Also, we realized that we were running in a bit of a bad state - the primary >>> ldap server was not available, but the backup was. >>> >>> Some logs: >>> >>> General question, is this bad?: >>> (Tue Jan 6 23:17:43 2015) [sssd[be[default]]] [sdap_get_users_done] >>> (0x0040): Failed to retrieve users >> >> This can be caused by many things, we neer more context..in general, the >> LDAP search has failed and SSSD would fall back to cached entries. > >Okay, appears to be a simple "unknown user" type of response: > >(Thu Jan 8 15:50:47 2015) [sssd[be[default]]] [be_get_account_info] (0x0100): >Got request for [4097][1][name=contracts-grants] >(Thu Jan 8 15:50:47 2015) [sssd[be[default]]] [sdap_get_users_done] (0x0040): >Failed to retrieve users > >contracts-grants is not in LDAP. You can filter request for non-LDAP users/groups in nss section of sssd.conf
man sssd.conf -> filter_users, filter_groups LS _______________________________________________ sssd-users mailing list [email protected] https://lists.fedorahosted.org/mailman/listinfo/sssd-users
