On Tue, Jun 25, 2019 at 07:25:45PM +0000, Thomas Beaudry wrote:
> Hi Jakub,
> 
> Thanks for the link so i followed the troubleshooting and I notice i can't 
> reach the data provider mentioned in step 4 ("If the command is reaching the 
> NSS responder, does it get forwarded to the Data Provider?")
> 
> 
> If i look at my sssd_nss log i get with a timestamp that matches my id 
> <username> command:
> 
> (Tue Jun 25 15:14:16 2019) [sssd[nss]] [sss_parse_name_for_domains] (0x0200): 
> name 'root' matched without domain, user is root
> (Tue Jun 25 15:14:16 2019) [sssd[nss]] [sss_ncache_set_str] (0x0400): Adding 
> [NCE/USER/MYDOMAIN.ca/root] to negative cache permanently
> (Tue Jun 25 15:14:16 2019) [sssd[nss]] [sss_parse_name_for_domains] (0x0200): 
> name 'root' matched without domain, user is root
> (Tue Jun 25 15:14:16 2019) [sssd[nss]] [sss_ncache_set_str] (0x0400): Adding 
> [NCE/GROUP/MYDOMAIN.ca/root] to negative cache permanently
> (Tue Jun 25 15:14:16 2019) [sssd[nss]] [sss_dp_req_destructor] (0x0400): 
> Deleting request: [0x41eb90:[email protected]]
> (Tue Jun 25 15:14:41 2019) [sssd[nss]] [accept_fd_handler] (0x0400): Client 
> connected!
> (Tue Jun 25 15:14:41 2019) [sssd[nss]] [sss_cmd_get_version] (0x0200): 
> Received client version [1].
> (Tue Jun 25 15:14:41 2019) [sssd[nss]] [sss_cmd_get_version] (0x0200): 
> Offered version [1].
> (Tue Jun 25 15:14:41 2019) [sssd[nss]] [nss_cmd_getbynam] (0x0400): Running 
> command [17][SSS_NSS_GETPWNAM] with input [admin].
> (Tue Jun 25 15:14:41 2019) [sssd[nss]] [sss_parse_name_for_domains] (0x0200): 
> name 'admin' matched without domain, user is admin
> (Tue Jun 25 15:14:41 2019) [sssd[nss]] [nss_cmd_getbynam] (0x0100): 
> Requesting info for [admin] from [<ALL>]
> (Tue Jun 25 15:14:41 2019) [sssd[nss]] [nss_cmd_getpwnam_search] (0x0100): 
> Requesting info for [[email protected]]
> (Tue Jun 25 15:14:41 2019) [sssd[nss]] [get_dp_name_and_id] (0x0400): Not a 
> LOCAL view, continuing with provided values.
> (Tue Jun 25 15:14:41 2019) [sssd[nss]] [sss_dp_issue_request] (0x0400): 
> Issuing request for [0x41d420:1:[email protected]]
> (Tue Jun 25 15:14:41 2019) [sssd[nss]] [sss_dp_get_account_msg] (0x0400): 
> Creating request for [MYDOMAIN.ca][0x1001][FAST BE_REQ_USER][1][name=admin]

The request gets forwarded to the data provider here..

> (Tue Jun 25 15:14:41 2019) [sssd[nss]] [sss_dp_internal_get_send] (0x0400): 
> Entering request [0x41d420:1:[email protected]]
> (Tue Jun 25 15:14:41 2019) [sssd[nss]] [nss_cmd_getby_dp_callback] (0x0040): 
> Unable to get information from Data Provider
> Error: 1, 11, Fast reply - offline

..but the data provider replies immediately because it had switched to
the offline mode. For one reason or another, sssd_be couldn't reach any
of the configured or auto-discovered servers.

> (Tue Jun 25 15:14:41 2019) [sssd[nss]] [sss_dp_req_destructor] (0x0400): 
> Deleting request: [0x41d420:1:[email protected]]
> (Tue Jun 25 15:14:41 2019) [sssd[nss]] [client_recv] (0x0200): Client 
> disconnected!
> 
> 
> What would be the next step?

I would suggest looking at the sssd_MYDOMAIN.log files and look for
messages that contain strings like "marking server XYZ as NOT_WORKING"
or "Going offline". Then look for the request a little earlier, that's
what causes sssd to go offline.
_______________________________________________
sssd-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/[email protected]

Reply via email to