Bug 708352

Summary: SSSD's async resolver only tries the first nameserver in /etc/resolv.conf
Product: Red Hat Enterprise Linux 6 Reporter: RHEL Program Management <pm-rhel>
Component: sssdAssignee: Stephen Gallagher <sgallagh>
Status: CLOSED ERRATA QA Contact: Chandrasekar Kannan <ckannan>
Severity: urgent Docs Contact:
Priority: urgent    
Version: 6.1CC: benl, dpal, grajaiya, jgalipea, jwest, kbanerje, pm-eus, prc, sgallagh, tcapek
Target Milestone: rcKeywords: ZStream
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: sssd-1.5.1-34.el6_1.1 Doc Type: Bug Fix
Doc Text:
When the first DNS entry defined in the /etc/resolv.conf file was unreachable, the sssd utility failed to try to connect to any subsequent DNS server to resolve the SRV record. This caused sssd to permanently operate in offline mode. This bug has been fixed and sssd is now able to connect to an alternate server if the primary server is down.
Story Points: ---
Clone Of: Environment:
Last Closed: 2011-06-02 17:36:48 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 703624, 748835    
Bug Blocks:    

Description RHEL Program Management 2011-05-27 11:43:32 UTC
This bug has been copied from bug #703624 and has been proposed
to be backported to 6.1 z-stream (EUS).

Comment 4 Kaushik Banerjee 2011-05-30 06:59:56 UTC
1. Tested with 2 unreachable nameservers at the beginning in /etc/resolv.conf.
2. Enable debug logs and restart SSSD.
3. Enumeration and auth works fine.
# time ssh -l puser1 localhost
puser1@localhost's password: 
Last login: Mon May 30 06:40:45 2011 from localhost
Could not chdir to home directory /export/puser1: No such file or directory
-sh-4.1$ logout
Connection to localhost closed.

real	0m24.577s
user	0m0.004s
sys	0m0.023s

Comment 6 Kaushik Banerjee 2011-05-30 07:06:22 UTC
Verified in version:
# rpm -qi sssd | head
Name        : sssd                         Relocations: (not relocatable)
Version     : 1.5.1                             Vendor: Red Hat, Inc.
Release     : 34.el6_1.1                    Build Date: Fri 27 May 2011 06:04:19 PM IST
Install Date: Mon 30 May 2011 05:58:13 AM IST      Build Host: x86-012.build.bos.redhat.com
Group       : Applications/System           Source RPM: sssd-1.5.1-34.el6_1.1.src.rpm
Size        : 3463155                          License: GPLv3+
Signature   : (none)
Packager    : Red Hat, Inc. <http://bugzilla.redhat.com/bugzilla>
URL         : http://fedorahosted.org/sssd/
Summary     : System Security Services Daemon

Comment 7 Tomas Capek 2011-06-01 09:45:15 UTC
    Technical note added. If any revisions are required, please edit the "Technical Notes" field
    accordingly. All revisions will be proofread by the Engineering Content Services team.
    
    New Contents:
When the first DNS entry defined in the /etc/resolv.conf file was unreachable, the sssd utility failed to try to connect to any subsequent SRV record. This caused sssd to permanently operate in offline mode. This bug has been fixed and sssd is now able to connect to an alternate server if the primary server is down.

Comment 8 Stephen Gallagher 2011-06-01 11:50:37 UTC
(In reply to comment #7)
>     Technical note added. If any revisions are required, please edit the
> "Technical Notes" field
>     accordingly. All revisions will be proofread by the Engineering Content
> Services team.
> 
>     New Contents:
> When the first DNS entry defined in the /etc/resolv.conf file was unreachable,
> the sssd utility failed to try to connect to any subsequent SRV record. This
> caused sssd to permanently operate in offline mode. This bug has been fixed and
> sssd is now able to connect to an alternate server if the primary server is
> down.

"failed to try to connect to any subsequent SRV record" should be replaced by "failed to try to connect to any subsequent DNS server to resolve the SRV record"

Comment 9 Tomas Capek 2011-06-01 12:00:08 UTC
    Technical note updated. If any revisions are required, please edit the "Technical Notes" field
    accordingly. All revisions will be proofread by the Engineering Content Services team.
    
    Diffed Contents:
@@ -1 +1 @@
-When the first DNS entry defined in the /etc/resolv.conf file was unreachable, the sssd utility failed to try to connect to any subsequent SRV record. This caused sssd to permanently operate in offline mode. This bug has been fixed and sssd is now able to connect to an alternate server if the primary server is down.+When the first DNS entry defined in the /etc/resolv.conf file was unreachable, the sssd utility failed to try to connect to any subsequent DNS server to resolve the SRV record. This caused sssd to permanently operate in offline mode. This bug has been fixed and sssd is now able to connect to an alternate server if the primary server is down.

Comment 10 errata-xmlrpc 2011-06-02 17:36:48 UTC
An advisory has been issued which should help the problem
described in this bug report. This report is therefore being
closed with a resolution of ERRATA. For more information
on therefore solution and/or where to find the updated files,
please follow the link below. You may reopen this bug report
if the solution does not work for you.

http://rhn.redhat.com/errata/RHBA-2011-0849.html