[SSSD-users]Re: SSSD Not Restarted After Being Killed By Watchdog

Patrick Riehecky via sssd-users Mon, 24 Feb 2025 12:25:07 -0800

I've also started seeing this as well on my Alma9 box.

sssd.log attached for what it is worth... It has a "backtrace"?


________________________________________
From: Mark Jackson via sssd-users <[email protected]>
Sent: Thursday, February 20, 2025 3:31 PM
To: [email protected]
Cc: Mark Jackson
Subject: [SSSD-users]SSSD Not Restarted After Being Killed By Watchdog

[EXTERNAL] – This message is from an external sender

Hello,

I previously opened an issue on GitHub 
(https://urldefense.proofpoint.com/v2/url?u=https-3A__github.com_SSSD_sssd_issues_7838&d=DwIGaQ&c=gRgGjJ3BkIsb5y6s49QqsA&r=OAMtP0DWou0nlXG7Kmxo2enjXJfwb1DXS9fwcaESuTE&m=g1XCsyPW2dGE5xQSX_CBb-nf1eX9xfO7P_QJkYWgnvpMrem3l5IFVfG2dHi6r4Hu&s=FsUklZOxbsd8Rbg4DIQ_RUpr9SJ-QbqSX5Hd-alLFTw&e=
 ) regarding this, but I feel the mailing list is more active and I may get a 
response here quicker. I am investigating an ongoing issue. We are working with 
vendor support also, but we have still not been able to find a solution.

SSSD Version: 2.9.4
OS: RHEL 7/8/9

SSSD is connected upstream to a RedHat IdM (FreeIPA) cluster.

There seems to be two related issues.

1. SSSD is being killed by watchdog. We think external load from backups is 
causing this to happen, but it is still unclear for certain.
2. SSSD is not restarted after being killed by Watchdog.

When this happens users become unable to login via SSH. We have tried the 
following to resolve the issue, but we continue to see SSSD get killed by 
Watchdog without being restarted.

- Upgrading SSSD to latest version available to RHEL.
- Increasing SSSD timeout.
- Adding 'Restart=on-failure' to the SSSD systemd unit.
- Looking for selinux alerts and setting selinux to permissive.
- Disabling third party security services.
- Validating the configs.
- Reviewing relevant logs.
- As a temporary fix we added a cron job to restart the service, but this does 
not work reliably. I can collect logs, or configs, at request to further this 
investigation. I am seeking feedback regarding known issues or ways I may 
continue to look for root cause.

Feedback would be appreciated, thank you in advance.
--
_______________________________________________
sssd-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: 
https://urldefense.proofpoint.com/v2/url?u=https-3A__docs.fedoraproject.org_en-2DUS_project_code-2Dof-2Dconduct_&d=DwIGaQ&c=gRgGjJ3BkIsb5y6s49QqsA&r=OAMtP0DWou0nlXG7Kmxo2enjXJfwb1DXS9fwcaESuTE&m=g1XCsyPW2dGE5xQSX_CBb-nf1eX9xfO7P_QJkYWgnvpMrem3l5IFVfG2dHi6r4Hu&s=YTj0Hx9Q15y45a9iAxSs-YVwTLaDSbdyghj4hABvhM0&e=
List Guidelines: 
https://urldefense.proofpoint.com/v2/url?u=https-3A__fedoraproject.org_wiki_Mailing-5Flist-5Fguidelines&d=DwIGaQ&c=gRgGjJ3BkIsb5y6s49QqsA&r=OAMtP0DWou0nlXG7Kmxo2enjXJfwb1DXS9fwcaESuTE&m=g1XCsyPW2dGE5xQSX_CBb-nf1eX9xfO7P_QJkYWgnvpMrem3l5IFVfG2dHi6r4Hu&s=PS9pc0ZQd3y9xRj6E5M0n1WRKo24vXRdsnkwReKcYJM&e=
List Archives: 
https://urldefense.proofpoint.com/v2/url?u=https-3A__lists.fedorahosted.org_archives_list_sssd-2Dusers-40lists.fedorahosted.org&d=DwIGaQ&c=gRgGjJ3BkIsb5y6s49QqsA&r=OAMtP0DWou0nlXG7Kmxo2enjXJfwb1DXS9fwcaESuTE&m=g1XCsyPW2dGE5xQSX_CBb-nf1eX9xfO7P_QJkYWgnvpMrem3l5IFVfG2dHi6r4Hu&s=N8ZiRL_SRUHxrqFqcxSnC8LwRIzSPanIkFxd83nRWWg&e=
Do not reply to spam, report it: 
https://urldefense.proofpoint.com/v2/url?u=https-3A__pagure.io_fedora-2Dinfrastructure_new-5Fissue&d=DwIGaQ&c=gRgGjJ3BkIsb5y6s49QqsA&r=OAMtP0DWou0nlXG7Kmxo2enjXJfwb1DXS9fwcaESuTE&m=g1XCsyPW2dGE5xQSX_CBb-nf1eX9xfO7P_QJkYWgnvpMrem3l5IFVfG2dHi6r4Hu&s=gF1GovjTG64YzSQDavwfNcGUqY_shFuzh556M92MvQk&e=

²Ï¼gsssdí=ksH¶ßý+zªfÊqÖ=,S¹ãØã¼ÖIÝryYÔk?jïýï{N2"HrBjÆ¡û¼ú¼ú½R$¥³'É{RIµµ¿£kÎ¹yC®G®Ã××¡wC^I-kßàþÇè:ñ©AÙ5ÉÅÙéû«/[¯æ
¨Æ©G<Ô çn ÌÛXÌ¦¼ñ\VbàROàÚÐzïBk&¸hUd"wÔ¤¶Z´~Y 
q6pt{>ÍÔ1G¨© þ!³M:YÛ3N1¾îY0TTÐeªkîÍµ,ï÷n
<BÖbPccBN"©C®§µûÔvsPrÛÍM¬Ã¹ 
¶»4±©bbß}:üÐ8ýüRÜ]â1¸<d·¥Ø¦9¨ý¤U_º/hàLÚÁéµÉ"=HÒ~Ú4"+ªÔQõw.jÔùeu«·ßíµ'ì:Ì¼v½ÅÂ®#÷&xQÓ^^aÚ½Ý¥é]Ôº
 ÷Éº#¢å¥~2púÀê¯Ô
mû1 e®ÚãNl~ghÂr4æX®.IJ
¶¬H\ÞNpl«Û¿½=ÑÆî{§%Ö$î½C¾^½?þ|ºõ:óùr~ò×Ùç«
òñäââðô&\Ëó³ÓÓócòöÉåûòîó¿}:%oþ¼<?<:Q·!¯ÉcH[
3ú¶ÔÛ²bãØnú¡ÓÄÁ
ÛÄÒa(økåæúKxh      Î&0Ödàf@Ò7ÜXît_`r¸a6¹kÜÒ 
(2Ûì§±$Þ×õõÊÑû0=pÁ!¹Ãußµ#Uõ]709ýe
"üfnwçÑ§Q¹ÅdDýE*
Ê¹J40äÃjÍ´î
XÐÀKÕbá#.îY¸ðÙ×lYå»#øi}dð/ÝAÖÊ0ûÈ3×!®à/ÇÅ³A9G Â 
Ý>%É8¥ÁfÞð)(½ "ÍèßEÞDXxæ°Ô,±@=|ÖJ®E¼ÕD¼Í "ÈÔdUÄê´U]¨°
®ç'*©pÄ»¢Ç.ÁWe¦;ÒS°x¢JÇ·ÄE¬¦³e:*178u~G:²eÀU¼´µ43%AYúñWWïÞbÔ6óÓOTÉë2´×uRàJ¦.¤ñ¹Ö¬ýèk´çºÇ´â^**12É=Vµ²ggQ7

Ð:
B%-¹LiÔ4=Åä8L·9-4èéKQCHg*Þ-å¡ÃGG¥9³¡£}.ÁA
hªkkpo7úhø6ØÈë6è
D2ÜF¨IwW²ÝÙwÍ)[3Õ§Èª-!§RSC¼î:l\ße9cn¸-á4ÃíL³7úLßß  
TIcååGºÙ¢Fã®È³Ð)Ø(m%ÉXØ«ç»wÌ¤~~)OLWÉßïå©
ÝRbRýBlâXeFÂMMÅLk&¯û¨ESÀ( @G·÷®,Zaez´RS± *9¤ò
GÔñEH§¬{Ì\ÂlS!yðÝÇ²ÈB%
ó\ÊRéëëÆmèÅýÔNÀ×öÐ4ö,ÃPìN\oe]³.fBÈÞnm;ÃpôØyv!µÏäÙµ¼&Þ7
í·«RÉ¾õtÎïÍäÆ³S©#æ%¬¶»íRÉµEQÇÒLWÒJL°G©s
Uó¡Ë¡÷s°:Ý.L`ìwåÓe÷9 
ì¥ÒºL\Æý;\²×§°FØ¯hÌÒ\Ë²ST3áÁYh¬÷æ©DÊKYDTÍékè
T8&æC¦oâ,Q¨Ä7àF*Ê+§¶Tcçµ¿ÕgeÔßIbg&ÏÒ¶);QÙÐì`ñ¼x,ÌB!`Ûçæ2\Ìb¶<aL³µ¸Ì½9V¸Fº7Þ7ÇýÕ²¶éÝífOTÉ«ÿð°ÿo
 Xó-£§(B 
>tý@|üÿÒ¼ Ã¢ÔÆSUò÷?¯~ñ
>ã;(§l:^Ý)/ßtY'¾Gs8Èn³3aE5Ý[ÿp|ö.:Ë¸<<@.b
ã:ÝVÕ=Ï¥h?UÉºrlJcXëÀº!u£½-ux\
RÂhÊó^):\,ÇÇSO£4Í<ÝgâyZr+Q4JpðXîÄ±h-(
?¹ã"#<<3÷tnñ%±©Î)ÒÑh¨ä~H   |)É
hO"ÿðG#~}q´Ä&!èÇ³&Å³
ÔT*q
R¦¨àc*      ãqÖà9J$°.ÀÕ½kÂüèØ+¯
(Ú½î;½{òt1}2[zb)#bàº8têE9ønè©ä³ÈÙöððfPóZ¾i¯vza@@¦·ÉD¨Bv-qªt>
ð.(¹%ÒVÿ)gêp-¹nà¿Æb 
mp)æãxfuç%NËJDUù@UºóÎÁ'?zwüâ6w!»iöëh}Á¯Ä¨JÆ¹Ù¶VÙ¢&ø=]yäâ|j·tÞ

wÂÁ¤Mm:w³á§aÃÍq#ÎÀêþ§#ÅØõÄ®ÿùêÕÿ|ù;ÿ½ñ·?ðÿß¯ÿùÇÍßvþo|;ú{ç×±-@õíçøo$Z&rýü+ÿã7åW¾0t!Åx©£"
HÄñ[òw"¨!þgX£Èóûó2?
ºð@yÑ¦h>)A2¦§\Íê¥àO¹S\ÚöVÈï\<I 
í¤ù:Þ{{u¾Gè6j+8°Ða*"~3±nó(üôÙ$ÏMÄ±?±;ùFêûÔ0:Íw÷õE·ÚR»ÓßïîÃÿmEÊA;éý¯iF×RdÇòîõÐÒ
|`Ð°|
"~¸^ãømÈg¸@ÜùÅsHÍ!äõÊ)ùâÃ¶ÃÖ',"V.'Ôp·ºÛÄ»9¨¹Çí
ÞJzIt0Ú(8oî1ËJmµ1b
ªß^ókJýZ¹î`?\Ç©KqCâ8ÛÔñrdÛQEVu±ØÇv<ºÞÌfÜoé¡ÓééºÑoµuYjÔ¡ö«ð
3½½«m¯ÂýTÃÈ#¬*Yi@¨2²½ SÛHm#µÌG 
<Fp_`'íÑ`èÚPwL;®ÔÇÑuü§ã=ÜbF³£û{jÛ.r±ìþ3Î8ñãa¦<äXQÆ\#tØ·¬SUnÈ(Õ¬´}ÐÕóTjç!Õ|
À9ÖDÌæ\%ÑÖ³ÑMXÂh`6#@Æ·ù0¼|NT¼iøJé¾AT¨ÃÕ,!ïõqÓLê<ÒB\
+ÑoqJs"×ÑÀ¢»hÛÄUÑj(ÅlmK/ßâ-ãó2}zÃ0DýÙü|·ùA$ÍR
å^ìRÈ£7(YÑQt?z¿MîÏDçE
<wE çIDâ¨`ÕXã}E°hðÔ=ºÿé~è;×Ç÷îhvI¶!²§4>ï'Îúõ)ÙÛôÏäìí
Ì$üÄ¿mH©ÿFÚ
Ç5|G×Ãwù%ÇÓTÿ#¤!ºfLâÓBïÍCÓü¤ÔËáÌ8Ç¦áA¶qQ-I³£®@pÐ
L³ÕÅ|tµ©B""yBÉL'^sÞü¸%ÙVhwäÙÚ
«&äõÊ)ÉÕVX%yDQ¬°CþS¹8fèªaäVÔ+²Ú)1~³d:3æ+*³J¦-J÷¥Ø«+Vº¥y¦Ë®¦x¨ÇE
 
øB8N)ª¢uÂ>>IðÜ0¹¾Áµ½Æ7Õ.ä4ÿk^Óõ]çg¾²k|BwçBñÉ«J2W¶¶ÌïYföÎ´Õìáµõ®°BRóV·ü5eÙBR)ú¿x]¥r¦¿[HZ;Ãk4tó
 .Êúó+úY!Ù1©Ï5Ûuoã'ÿbüàxÆ    
V'ÒGôéÑ2Üô¦ùS7W{¸Â§2Kp0Ô3u'#kÔ÷TqêÌá4ú¦hñÂ|; 
`ÊØÒm¤±Çùñ[+^¥»U»òÎxuÿ6iWi:0¨8ÃÂa²=nXa3Ö(?¯vMµÈø/Ç~a½p»Ðá|¡î`Ò¾Û
      Û
jÕÂ=A$bv`ùì{ú(û0¡töõ°¯[ÉÇ?Î(]ÜXÀñÏåkwõÅR½P7¥ê¦ÔZR½Tõ{«hôVÐyÁÂªzEV»"uS*ÝjÍjJut«nJ½¦Tk^SªUµ_lSJ¼
²îC½°>ØÍÍm=¥¿B©6ËºÛT2oº%±EÔª[Du·i²×3×
¦ªÁW=÷¦U¶ÄËÈ+hl(wëèçmw¥N§®m×µíµÖ¶VP<XE%õ`Ô,¬*©Wdµ+R×¶Óµíö¬ÚvWêumûÅÔ¶ÛójÛíºöbkÛøíPuiû
¶ñ¤ÖÜÊ6
¨m².loNa»ý3¶Ûua».lOÖs:æº®ýSÕµsjGñ²6"ZeU¿´¢6æAuM{ñv·/Õ5íº¦½Î¶"U_,Gvµ"F~aUÉH½"«]º¦®iwfÖ´»´W×´_LM»3¯¦Ý©ëg/¶¦íp^×´_ZM¾[ÓµMÖ5íÍ©iw~Æv§®i×5íÉbbNÇ\×´ªvNí(^ÓFD«¬i¾*jÚûHßm{üfH´îðu'B«¬Ð¶|»ÄÀ(®3HÂM£Àqf=jñSÒ/`Ä
    ôè#!ÄÙÙÌ°xßJEHHØºa¦ü=ú1U|o6änzí}@µàÑ£i
rhÀnÉÇè>Áû*»AÅ©Ú&«,M@?bô*a¢ÒÌÌ¢WÔqåbÙú1¯E^õ}W7
»£Ðøzs,è 0J{1¨¢þMe¼ÈîGyPB03¦« 
}ÞT¶@²Ô¹B»~è`l×vï©¿ðÁfNóZORdYãaßdD~r   Üw     
Üçú9è,¾_Ô×ûàðk¾trCl`å©«± {½c ø
S"'×~z¥I<*öS00ÞÑNEháão(âè½|Êi±È[4»aK:*AmT^u°Æ¼j   
Ôy±h£çÆXI[®Â¥O@ÝD>Aàú\úäÒ'[Íñ6P«2ÙeHoÿð¤ÿúº êõ¬%W[B
ªRÝª¦?+»;8nôÕË5nXjcÝ\-¹:µ¯%WªA
J©$à§¡CjÜjÌ»ëb7ÓOþ J9®þìË]7 
÷Ä¢=IUÛÝÖj´-Kµh§¥vúzw1%§J%î^ÙT§¥lrÕ«AÍ%ÒUÛµÓIkY 
ñ;C£,È²þ³Ó£÷I|+:<±x#;ãðV&:ÄäÙ¦Æ+:6/^ã@x\Ë py;¾n§¿!i{Üë 
iÔ1G<0ÔÄÓ äëáåÑûãÏ§[¯3ÿ·G^ã«_ÈÉ§ã
òþäü¼þÞ¿'"÷TEêö§y¿Ûâ*n£Ñ üyÚO=°ÝQÒ×ÛÀÇ>HÛ"d_m¨-9ç 
±øUIªøYyrGÊ½<ä)J»×Vç¨'¶0rÛ

-- 
_______________________________________________
sssd-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/[email protected]
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

[SSSD-users]Re: SSSD Not Restarted After Being Killed By Watchdog

Reply via email to