On (17/04/15 11:33), Bobby Prins wrote:
>----- Oorspronkelijk bericht -----
>Verzonden: Donderdag 16 april 2015 17:19:01
>Onderwerp: Re: [SSSD-users] FreeIPA/SSSD LDAP cross-forest trust slow queries
>
>On Thu, Apr 16, 2015 at 05:07:53PM +0200, Bobby Prins wrote:
>> (Thu Apr 16 15:51:08 2015) [sssd[be[unix.example.corp]]] [ldb] (0x4000): cancel
ldb transaction (nesting: 2)
>> (Thu Apr 16 15:51:08 2015) [sssd[be[unix.example.corp]]] [sysdb_set_entry_attr]
(0x0080): ldb_modify failed: [Attribute or value exists]
>> (Thu Apr 16 15:51:08 2015) [sssd[be[unix.example.corp]]] [sysdb_set_entry_attr]
(0x0040): Error: 17 (File exists)
>> (Thu Apr 16 15:51:08 2015) [sssd[be[unix.example.corp]]] [sysdb_store_group]
(0x1000): sysdb_set_group_attr failed.
>> (Thu Apr 16 15:51:08 2015) [sssd[be[unix.example.corp]]] [sysdb_store_group]
(0x0400): Error: 17 (File exists)
>> (Thu Apr 16 15:51:08 2015) [sssd[be[unix.example.corp]]]
[sdap_store_group_with_gid] (0x0040): Could not store group PUB_R(a)example.corp
>> (Thu Apr 16 15:51:08 2015) [sssd[be[unix.example.corp]]] [sdap_save_group]
(0x0080): Could not store group with GID: [File exists]
>> (Thu Apr 16 15:51:08 2015) [sssd[be[unix.example.corp]]] [sdap_save_group]
(0x0080): Failed to save group [PUB_R(a)example.corp]: [File exists]
>> (Thu Apr 16 15:51:08 2015) [sssd[be[unix.example.corp]]] [sdap_save_groups]
(0x0040): Failed to store group 0. Ignoring.
>> (Thu Apr 16 15:51:08 2015) [sssd[be[unix.example.corp]]] [ldb] (0x4000): commit
ldb transaction (nesting: 1)
>> (Thu Apr 16 15:51:08 2015) [sssd[be[unix.example.corp]]] [ldb] (0x4000): commit
ldb transaction (nesting: 0)
>> (Thu Apr 16 15:51:08 2015) [sssd[be[unix.example.corp]]] [sdap_id_op_destroy]
(0x4000): releasing operation connection
>> (Thu Apr 16 15:51:08 2015) [sssd[be[unix.example.corp]]] [sdap_id_op_done]
(0x4000): releasing operation connection
>
>This sounds like another bug that Lukas fixed the other day, could you
>try his test packages?
>
>https://copr.fedoraproject.org/coprs/lslebodn/sssd-1-12-latest/
Wow, thanks for your reply. I tested the packages and the errors don't occur anymore.
This speeds up logging in (SSH) using an AD account from ~15 seconds (every time) to
'a couple of seconds' at most.
Thank you very much for testing.
I'm glad it works for you.
LS