Bug 1327211 - sssd_be Out of memory
Summary: sssd_be Out of memory
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Fedora
Classification: Fedora
Component: sssd
Version: 23
Hardware: x86_64
OS: Linux
unspecified
medium
Target Milestone: ---
Assignee: Jakub Hrozek
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2016-04-14 13:10 UTC by Chad DeNike
Modified: 2016-07-08 09:25 UTC (History)
9 users (show)

Fixed In Version: sssd-1.13.4-2.fc23
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2016-07-08 09:25:07 UTC
Type: Bug


Attachments (Terms of Use)

Description Chad DeNike 2016-04-14 13:10:20 UTC
Description of problem:  I have 3 Fedora 23 KDE hosts exhibiting the same behavior.  They are all part of a FreeIPA domain (ipa-server-3.0.0-47).  I get an Out of memory error on the sssd_be process randomly and the sssd_be process is killed.  When this happens you can no longer login host.


Version-Release number of selected component (if applicable):
sssd-1.13.3-6.fc23.x86_64
sssd-krb5-common-1.13.3-6.fc23.x86_64
sssd-proxy-1.13.3-6.fc23.x86_64
sssd-common-1.13.3-6.fc23.x86_64
sssd-ad-1.13.3-6.fc23.x86_64
sssd-ldap-1.13.3-6.fc23.x86_64
sssd-common-pac-1.13.3-6.fc23.x86_64
sssd-krb5-1.13.3-6.fc23.x86_64
python3-sssdconfig-1.13.3-6.fc23.noarch
python-sssdconfig-1.13.3-6.fc23.noarch
sssd-ipa-1.13.3-6.fc23.x86_64
sssd-client-1.13.3-6.fc23.x86_64

How reproducible:
Login to host.  Lock screen.  When trying to log back in cannot login with password.  Sometimes it works and sometime it doesn't, once the Out of memory condition happens you can no longer login.

Steps to Reproduce:
1.
2.
3.

Actual results:
Cannot login

Expected results:
Login

Additional info:


dmesg produces the following output:

[253813.677582] [28894]     0 28894    66306       51      75       3      200             0 sssd
[253813.677583] [28895]     0 28895  4807394  2974089    9315      22  1732515             0 sssd_be
[253813.677585] [28896]     0 28896    67742       61      83       4      166             0 sssd_nss
[253813.677586] [28897]     0 28897    61008       39      72       3      166             0 sssd_sudo
[253813.677587] [28898]     0 28898    62123       41      75       4      177             0 sssd_pam
[253813.677588] [28899]     0 28899    61006       40      71       3      164             0 sssd_ssh
[253813.677589] [28900]     0 28900    68523       39      84       3      259             0 sssd_pac
[253813.677591] Out of memory: Kill process 28895 (sssd_be) score 739 or sacrifice child
[253813.677594] Killed process 28895 (sssd_be) total-vm:19229576kB, anon-rss:11894380kB, file-rss:1976kB

Comment 1 Jakub Hrozek 2016-04-14 15:44:12 UTC
We fixed several memory leaks in sssd in the 1.13.4 release that was out just today. Also some leaks in libtevent were fixed in libtevent 0.9.28, so can you please try sssd 1.13.4 when Lukas packages it and also libtevent 0.9.28?

Comment 2 Lukas Slebodnik 2016-04-15 07:00:05 UTC
sssd-1.13.4-1.fc23 is already in updates-testing
You can update packages with following command
    dnf --enablerepo=updates-testing update sssd

Comment 3 Chad DeNike 2016-04-15 14:46:09 UTC
The update doesn't seem to be available.

[root@punisher ~]# dnf --enablerepo=updates-testing update sssd
Dependencies resolved.
Nothing to do.
Complete!
[root@punisher ~]# dnf --enablerepo=updates-testing upgrade sssd
Last metadata expiration check: 0:01:14 ago on Fri Apr 15 10:42:30 2016.
Dependencies resolved.
Nothing to do.
Complete!
[root@punisher ~]# dnf --enablerepo=updates-testing install sssd
Last metadata expiration check: 0:01:29 ago on Fri Apr 15 10:42:30 2016.
Package sssd-1.13.3-6.fc23.x86_64 is already installed, skipping.
Dependencies resolved.
Nothing to do.
Complete!

Comment 4 Lukas Slebodnik 2016-04-15 14:57:55 UTC
I'm sorry I built packages in koji[1] but I forgot to push updates to fedora.
I have just pushed packages to updates-testing[2]
It will take some time(usually a day) until they will be in rpm repositories.
Then you will be able to update packages from updates-testing.
    dnf --enablerepo=updates-testing update sssd

[1] http://koji.fedoraproject.org/koji/buildinfo?buildID=754415
[2] https://bodhi.fedoraproject.org/updates/FEDORA-2016-fcc7d9a72d


Note You need to log in before you can comment on or make changes to this bug.