On 19.09.22 12:47, Sumit Bose wrote:
Am Mon, Sep 19, 2022 at 11:23:34AM +0200 schrieb Ronald Wimmer:
On 19.09.22 10:41, Sumit Bose via FreeIPA-users wrote:
Am Mon, Sep 19, 2022 at 08:28:56AM +0200 schrieb Ronald Wimmer via 
FreeIPA-users:
On 14.09.22 19:23, Rob Crittenden wrote:
Ronald Wimmer via FreeIPA-users wrote:
Hi,

on one of our ipa servers kinit stopped working. kinit admin shows an
error:

kinit: Connection reset by peer while getting default ccache

Why? What could possibly be wrong? (the default ccache should be on the
same machine so why do I get a conn reset here?)

This may provide some additional details:

$ KRB5_TRACE=/dev/stdout kinit admin

KRB5_TRACE=/dev/stdout kinit admin
kinit: Connection refused while getting default ccache

Hi,

I guess this is a default setup where the sssd-kcm package is installed
and the default credential cache type is set to KCM. It looks like kinit
has issues connection to the KCM socket. KCM is socket activated, can
you check if systemd is handling the socket with

      systemctl status sssd-kcm.socket

Thanks a lot. That hint helped!

After upgrading IPA relevant OS packages I do always get an I/O error (SSSD
couldn't load the configuration database [5]: Input/output error.) from
SSSD.

"dnf reinstall sssd-common" fixes the problem. But after another update SSSD
stops working again. (I do fix that with another reinstall...)

Hi,

do you, by chance, still have the SSSD versions before and after the
updates around?

I digged a little deeper. It has nothing todo with the updates but with rebooting the machine.

After a reboot the directory /var/lib/sss/db is missing. So I do get a "NOPERMISSION" error upon trying to start sssd. Doing a "dnf reinstall sssd-common" fixes that.

sssd-common is 2.6.2-4.0.2.el8_6.1.x86_64

Cheers,
Ronald
_______________________________________________
FreeIPA-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/[email protected]
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Reply via email to