this group has 275o members. There are some other groups as well, which are
bigger than this as well. But so far I have seen issue with this group only. It
is possible same issue exist for other groups as well.
Thanks,
Sanjay Agrawal
On Monday, January 4, 2021, 12:28:01 PM EST, Alexey Tikhonov
<[email protected]> wrote:
Could you please tell the number of members in 'group1187' ?
On Mon, Jan 4, 2021 at 4:53 PM Sanjay Agrawal <[email protected]> wrote:
yes do not have this setting. I have tested with "ignore_group_members=True"
and it helps with it. But it breaks the interface for getgrnam/gid, where it
does not return any member. We have lots of application using this interface to
check group memberships.
Thanks,
Sanjay Agrawal
On Monday, January 4, 2021, 10:08:38 AM EST, Alexey Tikhonov
<[email protected]> wrote:
Hi,
On Tue, Dec 22, 2020 at 9:51 PM Sanjay Agrawal <[email protected]> wrote:
We are noticing that sometimes sssd take very long to resolve some queries.
They are happens when sssd_be is 100% during that interval. SO with debug_level
9 I tried to capture but I am see that no log update in sssd_be. Following is
sample output from sssd_be log during this time interval. SO it is stuck in
save_group ? The group in question here is very large group.
(2020-12-21 13:33:37:929203): [be[mydomain]] [sysdb_ldb_msg_difference]
(0x2000): Replaced/extended attr [member] of entry
[name=group1187@mydomain,cn=groups,cn=mydomain,cn=sysdb]
(2020-12-21 13:33:38:018075): [be[mydomain]] [sysdb_set_entry_attr] (0x0200):
Entry [name=group1187@mydomain,cn=groups,cn=mydomain,cn=sysdb] has set [cache,
ts_cache] attrs.
(2020-12-21 13:33:38:018253): [be[mydomain]] [sdap_save_groups] (0x4000): Group
4 members processed!
--
(2020-12-21 14:18:13:015516): [be[mydomain]] [sysdb_ldb_msg_difference]
(0x2000): Replaced/extended attr [orig_member] of entry
[name=group1187@mydomain,cn=groups,cn=mydomain,cn=sysdb]
(2020-12-21 14:18:13:040536): [be[mydomain]] [sysdb_set_entry_attr] (0x0200):
Entry [name=group1187@mydomain,cn=groups,cn=mydomain,cn=sysdb] has set [cache,
ts_cache] attrs.
(2020-12-21 14:18:13:040796): [be[mydomain]] [sdap_save_groups] (0x4000): Group
0 processed!
--
(2020-12-21 14:18:13:102591): [be[mydomain]] [sysdb_ldb_msg_difference]
(0x2000): Replaced/extended attr [member] of entry
[name=group1187@mydomain,cn=groups,cn=mydomain,cn=sysdb]
(2020-12-21 14:18:18:782683): [be[mydomain]] [sysdb_set_entry_attr] (0x0200):
Entry [name=group1187@mydomain,cn=groups,cn=mydomain,cn=sysdb] has set [cache,
ts_cache] attrs.
what is the value of `ignore_group_members` option in sssd.conf for this
domain?Could you please try if using `ignore_group_members = True` improves the
situation?
(2020-12-21 14:18:18:783006): [be[mydomain]] [sdap_save_groups] (0x4000): Group
0 members processed!
--
(2020-12-21 14:23:13:013189): [be[mydomain]] [sysdb_ldb_msg_difference]
(0x2000): Replaced/extended attr [orig_member] of entry
[name=group1187@mydomain,cn=groups,cn=mydomain,cn=sysdb]
(2020-12-21 14:23:13:037017): [be[mydomain]] [sysdb_set_entry_attr] (0x0200):
Entry [name=group1187@mydomain,cn=groups,cn=mydomain,cn=sysdb] has set [cache,
ts_cache] attrs.
(2020-12-21 14:23:13:037266): [be[mydomain]] [sdap_save_groups] (0x4000): Group
0 processed!
--
(2020-12-21 14:23:13:098968): [be[mydomain]] [sysdb_ldb_msg_difference]
(0x2000): Replaced/extended attr [member] of entry
[name=group1187@mydomain,cn=groups,cn=mydomain,cn=sysdb]
(2020-12-21 14:23:13:765062): [be[mydomain]] [sysdb_set_entry_attr] (0x0200):
Entry [name=group1187@mydomain,cn=groups,cn=mydomain,cn=sysdb] has set [cache,
ts_cache] attrs.
(2020-12-21 14:23:13:765277): [be[mydomain]] [sdap_save_groups] (0x4000): Group
0 members processed!
--
(2020-12-21 15:16:01:151526): [be[mydomain]] [sysdb_ldb_msg_difference]
(0x2000): Replaced/extended attr [member] of entry
[name=group1187@mydomain,cn=groups,cn=mydomain,cn=sysdb]
(2020-12-21 15:16:07:549879): [be[mydomain]] [sysdb_set_entry_attr] (0x0200):
Entry [name=group1187@mydomain,cn=groups,cn=mydomain,cn=sysdb] has set [cache,
ts_cache] attrs.
(2020-12-21 15:16:07:550229): [be[mydomain]] [sdap_save_groups] (0x4000): Group
0 members processed!
--
(2020-12-21 16:06:04:098209): [be[mydomain]] [sysdb_ldb_msg_difference]
(0x2000): Replaced/extended attr [member] of entry
[name=group1187@mydomain,cn=groups,cn=mydomain,cn=sysdb]
(2020-12-21 16:06:09:528503): [be[mydomain]] [sysdb_set_entry_attr] (0x0200):
Entry [name=group1187@mydomain,cn=groups,cn=mydomain,cn=sysdb] has set [cache,
ts_cache] attrs.
(2020-12-21 16:06:09:528813): [be[mydomain]] [sdap_save_groups] (0x4000): Group
0 members processed!
--
(2020-12-21 16:38:13:017447): [be[mydomain]] [sysdb_ldb_msg_difference]
(0x2000): Replaced/extended attr [orig_member] of entry
[name=group1187@mydomain,cn=groups,cn=mydomain,cn=sysdb]
(2020-12-21 16:38:13:043604): [be[mydomain]] [sysdb_set_entry_attr] (0x0200):
Entry [name=group1187@mydomain,cn=groups,cn=mydomain,cn=sysdb] has set [cache,
ts_cache] attrs.
(2020-12-21 16:38:13:043817): [be[mydomain]] [sdap_save_groups] (0x4000): Group
2 processed!
--
(2020-12-21 16:38:13:133200): [be[mydomain]] [sysdb_ldb_msg_difference]
(0x2000): Replaced/extended attr [member] of entry
[name=group1187@mydomain,cn=groups,cn=mydomain,cn=sysdb]
(2020-12-21 16:38:16:725696): [be[mydomain]] [sysdb_set_entry_attr] (0x0200):
Entry [name=group1187@mydomain,cn=groups,cn=mydomain,cn=sysdb] has set [cache,
ts_cache] attrs.
(2020-12-21 16:38:16:726140): [be[mydomain]] [sdap_save_groups] (0x4000): Group
2 members processed!
--
(2020-12-21 17:26:22:880163): [be[mydomain]] [sysdb_ldb_msg_difference]
(0x2000): Replaced/extended attr [member] of entry
[name=group1187@mydomain,cn=groups,cn=mydomain,cn=sysdb]
(2020-12-21 17:26:29:093140): [be[mydomain]] [sysdb_set_entry_attr] (0x0200):
Entry [name=group1187@mydomain,cn=groups,cn=mydomain,cn=sysdb] has set [cache,
ts_cache] attrs.
(2020-12-21 17:26:29:093619): [be[mydomain]] [sdap_save_groups] (0x4000): Group
0 members processed!
Any help is really appreciated.
Thanks,Sanjay Agrawal_______________________________________________
sssd-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/[email protected]
_______________________________________________
sssd-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/[email protected]
_______________________________________________
sssd-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/[email protected]
_______________________________________________
sssd-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/[email protected]
_______________________________________________
sssd-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/[email protected]
