Red Hat Bugzilla – Bug 1137010
disable midpoint refresh for netgroups if ptask refresh is enabled
Last modified: 2015-03-10 02:00:46 EDT
This bug is created as a clone of upstream ticket: https://fedorahosted.org/sssd/ticket/2102 If periodical refresh of expired netgroups is enabled, we should disable async midpoint refresh (only for netgroups), since it is not useful anymore - all netgroups are kept up to date. Tests showed that having midpoint refresh enabled may actually slow down netgroup request occasionally.
master: ad132722d6f3393ae1e6d720a222a0f880f2ea54 f933190722886ff23eab8148b473915908bc8c23
There is a minor typo in the logging. "then" should be "than". [sssd[be[LDAP]]] [confdb_get_domain_internal] (0x0100): refresh_expired_interval (20000) cannot be greater then entry_cache_timeout (5400)
Verified in version sssd-1.12.2-39.el7 Output of beaker automation run: :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ LOG ] :: netgroup_bug_08: BZ1137010 disable midpoint refresh for netgroups if refresh_expired_interval is set :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: adding new entry "cn=netgroup_1137010,ou=Netgroups,dc=example,dc=com" :: [ PASS ] :: File '/var/log/sssd/sssd_LDAP.log' should contain 'refresh_expired_interval (101) cannot be greater' :: [ BEGIN ] :: Running 'getent netgroup netgroup_1137010 | grep host1' netgroup_1137010 (host1,user1,example1.com) :: [ PASS ] :: Command 'getent netgroup netgroup_1137010 | grep host1' (Expected 0, got 0) modifying entry "cn=netgroup_1137010,ou=Netgroups,dc=example,dc=com" :: [ PASS ] :: File '/var/log/sssd/sssd_LDAP.log' should not contain 'Adding netgroup triple \[(host1137010,user1137010,example.com)\] to attributes of \[netgroup_1137010\]' :: [ PASS ] :: File '/var/log/sssd/sssd_LDAP.log' should contain 'Adding netgroup triple \[(host1137010,user1137010,example.com)\] to attributes of \[netgroup_1137010\]' :: [ BEGIN ] :: Running 'getent netgroup netgroup_1137010 | grep host1137010' netgroup_1137010 (host1137010,user1137010,example.com) :: [ PASS ] :: Command 'getent netgroup netgroup_1137010 | grep host1137010' (Expected 0, got 0) :: [ BEGIN ] :: Running 'getent netgroup netgroup_1137010 | grep host1' netgroup_1137010 (host1137010,user1137010,example.com) :: [ PASS ] :: Command 'getent netgroup netgroup_1137010 | grep host1' (Expected 0, got 0) modifying entry "cn=netgroup_1137010,ou=Netgroups,dc=example,dc=com" :: [ PASS ] :: File '/var/log/sssd/sssd_LDAP.log' should not contain 'Adding netgroup triple \[(host1137010_2,user1137010_2,example2.com)\] to attributes of \[netgroup_1137010\]' :: [ PASS ] :: File '/var/log/sssd/sssd_LDAP.log' should contain 'Adding netgroup triple \[(host1137010_2,user1137010_2,example2.com)\] to attributes of \[netgroup_1137010\]' :: [ BEGIN ] :: Running 'getent netgroup netgroup_1137010 | grep host1137010_2' netgroup_1137010 (host1137010_2,user1137010_2,example2.com) :: [ PASS ] :: Command 'getent netgroup netgroup_1137010 | grep host1137010_2' (Expected 0, got 0) netgroup-bug-08-BZ1137010-disable-midpoint-refresh-for-netgroups-if-refresh-expired-interval-is-set result: PASS
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://rhn.redhat.com/errata/RHBA-2015-0441.html