[Freeipa-users] ipa-client stall on 'args=getent passwd admin'

[Jakub Hrozek]

On Tue, Nov 29, 2011 at 09:43:55PM -0500, Rob Crittenden wrote:
> Craig T wrote:
> >Hi,
> >
> >I tried letting the client install go and it does eventually finish, however SSSD_NSS queries don't work.
> >See errors below;
> >
> >----------------------------------------------------------------------
> >[root at chtvm-centos-6 /]# ipa-client-install
> >Discovery was successful!
> >Hostname: chtvm-centos-6.example.com
> >Realm: example.com
> >DNS Domain: example.com
> >IPA Server: chtvm-389.example.com
> >BaseDN: dc=example,dc=com
> >
> >Continue to configure the system with these values? [no]: yes
> >User authorized to enroll computers: admin
> >Password for admin at example.com:
> >
> >Enrolled in IPA realm example.com
> >Created /etc/ipa/default.conf
> >Configured /etc/sssd/sssd.conf
> >Configured /etc/krb5.conf for IPA realm example.com
> >SSSD enabled
> >Kerberos 5 enabled
> >Unable to find 'admin' user with 'getent passwd admin'!
> >Recognized configuration: SSSD
> >NTP enabled
> >Client configuration complete.
> >
> >-------------------------------------------------------------------------------------------------------------------------
> >File: /var/log/sssd/sssd_nss.log
> >(Wed Nov 30 10:34:16 2011) [sssd[nss]] [nss_dp_reconnect_init] (0): Could not reconnect to example.com provider.
> >(Wed Nov 30 10:34:46 2011) [sssd[nss]] [nss_dp_reconnect_init] (0): Could not reconnect to example.com provider.
> >(Wed Nov 30 10:35:16 2011) [sssd[nss]] [nss_dp_reconnect_init] (0): Could not reconnect to example.com provider.
> >(Wed Nov 30 10:35:46 2011) [sssd[nss]] [nss_dp_reconnect_init] (0): Could not reconnect to example.com provider.
> >-------------------------------------------------------------------------------------------------------------------------
> >File: /var/log/sssd/sssd_pam.log
> >(Wed Nov 30 10:34:16 2011) [sssd[pam]] [pam_dp_reconnect_init] (0): Could not reconnect to example.com provider.
> >(Wed Nov 30 10:34:46 2011) [sssd[pam]] [pam_dp_reconnect_init] (0): Could not reconnect to example.com provider.
> >(Wed Nov 30 10:35:16 2011) [sssd[pam]] [pam_dp_reconnect_init] (0): Could not reconnect to example.com provider.
> >(Wed Nov 30 10:35:46 2011) [sssd[pam]] [pam_dp_reconnect_init] (0): Could not reconnect to example.com provider.
> >-------------------------------------------------------------------------------------------------------------------------

Also the {nss,pam}_dp_reconnect_init functions are only called when the
back end crashes and the other processes are reconnecting to a new back
end instance.

Can you check logs (/var/log/messages should have the info) if there are
any messages indicating a crash?