Bug 1327211

Summary: sssd_be Out of memory
Product: [Fedora] Fedora Reporter: Chad DeNike <chad>
Component: sssdAssignee: Jakub Hrozek <jhrozek>
Status: CLOSED CURRENTRELEASE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: medium Docs Contact:
Priority: unspecified    
Version: 23CC: abokovoy, chad, jhrozek, lslebodn, mkosek, pbrezina, rharwood, sbose, ssorce
Target Milestone: ---   
Target Release: ---   
Hardware: x86_64   
OS: Linux   
Whiteboard:
Fixed In Version: sssd-1.13.4-2.fc23 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2016-07-08 09:25:07 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:

Description Chad DeNike 2016-04-14 13:10:20 UTC 
Description of problem:  I have 3 Fedora 23 KDE hosts exhibiting the same behavior.  They are all part of a FreeIPA domain (ipa-server-3.0.0-47).  I get an Out of memory error on the sssd_be process randomly and the sssd_be process is killed.  When this happens you can no longer login host.


Version-Release number of selected component (if applicable):
sssd-1.13.3-6.fc23.x86_64
sssd-krb5-common-1.13.3-6.fc23.x86_64
sssd-proxy-1.13.3-6.fc23.x86_64
sssd-common-1.13.3-6.fc23.x86_64
sssd-ad-1.13.3-6.fc23.x86_64
sssd-ldap-1.13.3-6.fc23.x86_64
sssd-common-pac-1.13.3-6.fc23.x86_64
sssd-krb5-1.13.3-6.fc23.x86_64
python3-sssdconfig-1.13.3-6.fc23.noarch
python-sssdconfig-1.13.3-6.fc23.noarch
sssd-ipa-1.13.3-6.fc23.x86_64
sssd-client-1.13.3-6.fc23.x86_64

How reproducible:
Login to host.  Lock screen.  When trying to log back in cannot login with password.  Sometimes it works and sometime it doesn't, once the Out of memory condition happens you can no longer login.

Steps to Reproduce:
1.
2.
3.

Actual results:
Cannot login

Expected results:
Login

Additional info:


dmesg produces the following output:

[253813.677582] [28894]     0 28894    66306       51      75       3      200             0 sssd
[253813.677583] [28895]     0 28895  4807394  2974089    9315      22  1732515             0 sssd_be
[253813.677585] [28896]     0 28896    67742       61      83       4      166             0 sssd_nss
[253813.677586] [28897]     0 28897    61008       39      72       3      166             0 sssd_sudo
[253813.677587] [28898]     0 28898    62123       41      75       4      177             0 sssd_pam
[253813.677588] [28899]     0 28899    61006       40      71       3      164             0 sssd_ssh
[253813.677589] [28900]     0 28900    68523       39      84       3      259             0 sssd_pac
[253813.677591] Out of memory: Kill process 28895 (sssd_be) score 739 or sacrifice child
[253813.677594] Killed process 28895 (sssd_be) total-vm:19229576kB, anon-rss:11894380kB, file-rss:1976kB
Comment 1 Jakub Hrozek 2016-04-14 15:44:12 UTC 
We fixed several memory leaks in sssd in the 1.13.4 release that was out just today. Also some leaks in libtevent were fixed in libtevent 0.9.28, so can you please try sssd 1.13.4 when Lukas packages it and also libtevent 0.9.28?
Comment 2 Lukas Slebodnik 2016-04-15 07:00:05 UTC 
sssd-1.13.4-1.fc23 is already in updates-testing
You can update packages with following command
    dnf --enablerepo=updates-testing update sssd
Comment 3 Chad DeNike 2016-04-15 14:46:09 UTC 
The update doesn't seem to be available.

[root@punisher ~]# dnf --enablerepo=updates-testing update sssd
Dependencies resolved.
Nothing to do.
Complete!
[root@punisher ~]# dnf --enablerepo=updates-testing upgrade sssd
Last metadata expiration check: 0:01:14 ago on Fri Apr 15 10:42:30 2016.
Dependencies resolved.
Nothing to do.
Complete!
[root@punisher ~]# dnf --enablerepo=updates-testing install sssd
Last metadata expiration check: 0:01:29 ago on Fri Apr 15 10:42:30 2016.
Package sssd-1.13.3-6.fc23.x86_64 is already installed, skipping.
Dependencies resolved.
Nothing to do.
Complete!
Comment 4 Lukas Slebodnik 2016-04-15 14:57:55 UTC 
I'm sorry I built packages in koji[1] but I forgot to push updates to fedora.
I have just pushed packages to updates-testing[2]
It will take some time(usually a day) until they will be in rpm repositories.
Then you will be able to update packages from updates-testing.
    dnf --enablerepo=updates-testing update sssd

[1] http://koji.fedoraproject.org/koji/buildinfo?buildID=754415
[2] https://bodhi.fedoraproject.org/updates/FEDORA-2016-fcc7d9a72d