Description of problem: SSSD on startup checks for the nscd socket in case the nscd caching conflicts with the NSS maps that SSSD caches. At the same time, sssd-kcm uses the sssd binary to regenerate the configuration database. And even if sssd runs in this --genconf mode, it still runs the nscd check. This is not needed and can be confusing, because it's completely OK to run sssd-kcm but not the rest of SSSD. Version-Release number of selected component (if applicable): sssd-2.2.0 How reproducible: always Steps to Reproduce: 1. systemctl restart sssd-kcm 2. 3. Actual results: """ NSCD socket was detected and seems to be configured to cache some of the databases controlled by SSSD [passwd,group,netgroup,services]. It is recommended not to run NSCD in parallel with SSSD, unless NSCD is configured not to cache these """ in syslog. Expected results: silence is syslog Additional info: Reported at https://bugzilla.redhat.com/show_bug.cgi?id=903648#c9
Upstream ticket: https://pagure.io/SSSD/sssd/issue/4028
* master: 0a10d863f4186a18d4622e72065c8aa66b6bfa17
Michal, can you patch the fedora packages?
FEDORA-2019-cf0463b5e1 has been submitted as an update to Fedora 29. https://bodhi.fedoraproject.org/updates/FEDORA-2019-cf0463b5e1
sssd-2.2.0-3.fc30 has been pushed to the Fedora 30 testing repository. If problems still persist, please make note of it in this bug report. See https://fedoraproject.org/wiki/QA:Updates_Testing for instructions on how to install test updates. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2019-bc337e43c1
sssd-2.2.0-3.fc29 has been pushed to the Fedora 29 testing repository. If problems still persist, please make note of it in this bug report. See https://fedoraproject.org/wiki/QA:Updates_Testing for instructions on how to install test updates. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2019-cf0463b5e1
sssd-2.2.0-3.fc30 has been pushed to the Fedora 30 stable repository. If problems still persist, please make note of it in this bug report.
sssd-2.2.0-3.fc29 has been pushed to the Fedora 29 stable repository. If problems still persist, please make note of it in this bug report.
Not sure if this is related but this just happened with usermod: We don't even use sssd and it's disabled. But clearing the.ldb files makes the message go away. 5.1.19-300.fc30 rpm -q sssd sssd-2.2.0-3.fc30.x86_64 systemctl status sssd ● sssd.service - System Security Services Daemon Loaded: loaded (/usr/lib/systemd/system/sssd.service; disabled; vendor preset: enabled) Active: inactive (dead) usermod -a -G cnslab ragarwal (Sat Aug 3 18:30:02:247487 2019) [sss_cache] [sysdb_domain_cache_connect] (0x0010): DB version too old [0.20], expected [0.21] for domain implicit_files! Higher version of database is expected! In order to upgrade the database, you must run SSSD. Removing cache files in /var/lib/sss/db should fix the issue, but note that removing cache files will also remove all of your cached credentials. Could not open available domains usermod: sss_cache exited with status 69 usermod: Failed to flush the sssd cache. (Sat Aug 3 18:30:02:271662 2019) [sss_cache] [sysdb_domain_cache_connect] (0x0010): DB version too old [0.20], expected [0.21] for domain implicit_files! Higher version of database is expected! In order to upgrade the database, you must run SSSD. Removing cache files in /var/lib/sss/db should fix the issue, but note that removing cache files will also remove all of your cached credentials. Could not open available domains usermod: sss_cache exited with status 69 usermod: Failed to flush the sssd cache.