Bug 1060380
| Summary: | sssd_nss segfaulting sssd-1.9.2-129 | ||
|---|---|---|---|
| Product: | Red Hat Enterprise Linux 6 | Reporter: | hgraham |
| Component: | sssd | Assignee: | Jakub Hrozek <jhrozek> |
| Status: | CLOSED UPSTREAM | QA Contact: | Kaushik Banerjee <kbanerje> |
| Severity: | high | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | 6.5 | CC: | ddas, grajaiya, hgraham, jgalipea, lslebodn, mkosek, pbrezina, preichl |
| Target Milestone: | rc | Keywords: | Reopened |
| Target Release: | --- | ||
| Hardware: | x86_64 | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | Bug Fix | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2014-05-15 11:54:21 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | |||
| Bug Blocks: | 1061410 | ||
|
Description
hgraham
2014-02-01 00:11:22 UTC
The customer said this began occurring after the server was patched on the 26th to the latest version of sssd. Jan 26 09:08:25 Updated: sssd-1.9.2-129.el6_5.4.x86_64 According to log files and coredump, it looks like sssd_nss crashed at the same time when sssd_be was forced to restart because it did not respond to the main sssd process. I can see that enumeration is enabled and it can be root cause why sssd_be is not responsive. (sssd_be was restarted 50 times per 30 hours and sssd_nss crashed 8 times). Even if we solve crash in sss_nss sssd will not return correct response. I would suggest either to turn off enumeration or increase default value of option "timeout" from 10 seconds to 20 seconds Lukas, would that be the "timeout" option under the [domain/default] section of the configuration or under the [nss] ? (In reply to hgraham from comment #5) > Lukas, would that be the "timeout" option under the [domain/default] section > of the configuration or under the [nss] ? Under [domain] (In reply to hgraham from comment #5) > Lukas, would that be the "timeout" option under the [domain/default] section > of the configuration or under the [nss] ? I should have been more concrete in the previous comment They should put "timeout = 20" into [domain/default] section. I think 15 seconds can be also sufficient and I would not recommend to use higher value then 20 seconds. Henry, do you know if the workaround helped the customer? Upstream ticket: https://fedorahosted.org/sssd/ticket/2245 Ping, any news? nothing yet Jakub, I asked the customer again if the workarounds worked. thanks Quality Engineering Management has reviewed and declined this request. You may appeal this decision by reopening this request. The customer case is closed. Since the problem was caused by enumeration taking too long which we track already in several other bugzillas, I'm going to close this BZ as UPSTREAM. We need to solve the enumeration performance rather than put band-aids all around. Upstream ticket: https://fedorahosted.org/sssd/ticket/1729 |