On Thu, Aug 11, 2016 at 12:21:43PM +0000, Ondrej Valousek wrote:
There is output of the log file (debug 0x1FF):
...
(Wed Aug 10 02:22:24 2016) [sssd[be[default]]] [resolve_srv_done] (0x0400): SRV lookup
did not return any new server.
(Wed Aug 10 02:22:24 2016) [sssd[be[default]]] [set_srv_data_status] (0x0100): Marking
SRV lookup of service 'AD' as 'not resolve
d'
(Wed Aug 10 02:22:24 2016) [sssd[be[default]]] [be_resolve_server_process] (0x0080):
Couldn't resolve server (SRV lookup meta-server), resolver returned (1432158231)
Ah, 'good' that you could reproduce this. We already found a similar
(same?) issue some time ago, but were never sure what's going on.
(Sorry, the BZ is private and contains a ton of customer data..)
Pavel, maybe with Ondrej's help we could figure it out?
> (Wed Aug 10 02:22:24 2016) [sssd[be[default]]] [be_resolve_server_process] (0x1000):
Trying with the next one!
> (Wed Aug 10 02:22:24 2016) [sssd[be[default]]] [fo_resolve_service_send] (0x0100):
Trying to resolve service 'AD'
> (Wed Aug 10 02:22:24 2016) [sssd[be[default]]] [get_server_status] (0x1000): Status
of server 'server1.prague.com' is 'name resolved'
> (Wed Aug 10 02:22:24 2016) [sssd[be[default]]] [fo_resolve_service_activate_timeout]
(0x2000): Resolve timeout set to 6 seconds
> (Wed Aug 10 02:22:24 2016) [sssd[be[default]]] [resolve_srv_send] (0x0200): The
status of SRV lookup is not resolved
> (Wed Aug 10 02:22:24 2016) [sssd[be[default]]] [fo_set_port_status] (0x0100): Marking
port 0 of server '(no name)' as 'not working'
> (Wed Aug 10 02:22:24 2016) [sssd[be[default]]] [be_resolve_server_process] (0x0080):
Couldn't resolve server (
server1.prague.com), resolver returned (5)
> (Wed Aug 10 02:22:24 2016) [sssd[be[default]]] [be_resolve_server_process] (0x1000):
Trying with the next one!
> (Wed Aug 10 02:22:24 2016) [sssd[be[default]]] [fo_resolve_service_send] (0x0100):
Trying to resolve service 'AD'
> (Wed Aug 10 02:22:24 2016) [sssd[be[default]]] [get_server_status] (0x1000): Status
of server 'server1.prague.com' is 'name resolved'
> (Wed Aug 10 02:22:24 2016) [sssd[be[default]]] [fo_resolve_service_activate_timeout]
(0x2000): Resolve timeout set to 6 seconds
> (Wed Aug 10 02:22:24 2016) [sssd[be[default]]] [resolve_srv_send] (0x0200): The
status of SRV lookup is not resolved
> (Wed Aug 10 02:22:24 2016) [sssd[be[default]]] [fo_set_port_status] (0x0100): Marking
port 0 of server '(no name)' as 'not working'
> (Wed Aug 10 02:22:24 2016) [sssd[be[default]]] [be_resolve_server_process] (0x0080):
Couldn't resolve server (
server1.prague.com), resolver returned (5)
>
> TCPdump shows (this time) that query has been sent to DNS servers and response
followed in no time. So there is deffinitely no problem with DNS here.
>
> Ondrej
>
>
> -----Original Message-----
> From: Lukas Slebodnik [mailto:lslebodn@redhat.com]
> Sent: Thursday, August 11, 2016 10:12 AM
> To: End-user discussions about the System Security Services Daemon
<sssd-users(a)lists.fedorahosted.org>
> Subject: [SSSD-users] Re: DNS resolver broken in sssd?
>
> On (11/08/16 08:06), Ondrej Valousek wrote:
> >Hi list,
> >
> >I am regularly getting messages like:
> >
> >(Mon Aug 8 21:20:19 2016) [sssd[be[default]]]
> >[be_resolve_server_process] (0x0080): Couldn't resolve server
> >(myserver.com), resolver returned (5) Or (Wed Aug 10 15:47:46 2016)
> >[sssd[be[default]]] [nsupdate_get_addrs_done] (0x0040): Could not
> >resolve address for this machine, error [5]: Input/output error,
> >resolver returned: [11]: Could not contact DNS servers
> >
> It would be good to see more context from log files (maybe the full debug level 9)
>
> LS
> _______________________________________________
> sssd-users mailing list
> sssd-users(a)lists.fedorahosted.org
>
https://lists.fedorahosted.org/admin/lists/sssd-users@lists.fedorahosted.org
>
> -----
>
> The information contained in this e-mail and in any attachments is confidential and
is designated solely for the attention of the intended recipient(s). If you are not an
intended recipient, you must not use, disclose, copy, distribute or retain this e-mail or
any part thereof. If you have received this e-mail in error, please notify the sender by
return e-mail and delete all copies of this e-mail from your computer system(s). Please
direct any additional queries to: communications(a)s3group.com. Thank You. Silicon and
Software Systems Limited (S3 Group). Registered in Ireland no. 378073. Registered Office:
South County Business Park, Leopardstown, Dublin 18.
> _______________________________________________
> sssd-users mailing list
> sssd-users(a)lists.fedorahosted.org
>
https://lists.fedorahosted.org/admin/lists/sssd-users@lists.fedorahosted.org