[Freeipa-users] CRON: Authentication service cannot retrieve authentication info

[Thomas Lau]

Hi,

It's an in-house program which runs on one kerberos user.

On Tue, Apr 14, 2015 at 5:34 AM, Dmitri Pal <dpal at redhat.com> wrote:
> On 04/13/2015 08:23 AM, Thomas Lau wrote:
>
> Hi,
>
> These problem appear randomly, sometime it still work even under heavy
> packet loss, some times would be like this. So its hard to catch.
>
> On Apr 13, 2015 3:22 PM, "Jakub Hrozek" <jhrozek at redhat.com> wrote:
>>
>> On Mon, Apr 13, 2015 at 01:15:09PM +0800, Thomas Lau wrote:
>> > Hi all,
>> >
>> > We have cronjob which running on a FreeIPA LDAP user; When connection
>> > between IPA server and client having heavy packet loss, following
>> > error would occur:
>> >
>> > CRON[20637]: Authentication service cannot retrieve authentication info
>> >
>> > I have cache credentials and store password if offline enabled on
>> > sssd, how these problem would still happening?
>
>
> It might be that the cause of the problem is actually the packet loss or
> some kind of delay.
> SSSD might not think that it is offline but cron job itself times out and
> reports failure.
> Do you know what operation in the job fails?
>
>
>> >
>> >
>> > sssd.conf:
>> >
>> > cache_credentials = True
>> > krb5_store_password_if_offline = True
>>
>> Did the use log in at least once offline? You can verify if the password
>> has been cached using the ldbsearch utility. It would be best to catch
>> the occurence of the problem in logs.
>>
>> --
>> Manage your subscription for the Freeipa-users mailing list:
>> https://www.redhat.com/mailman/listinfo/freeipa-users
>> Go to http://freeipa.org for more info on the project
>
>
>
>
>
> --
> Thank you,
> Dmitri Pal
>
> Sr. Engineering Manager IdM portfolio
> Red Hat, Inc.
>
>
> --
> Manage your subscription for the Freeipa-users mailing list:
> https://www.redhat.com/mailman/listinfo/freeipa-users
> Go to http://freeipa.org for more info on the project



-- 
Thomas Lau
Director of Infrastructure
Tetrion Capital Limited

Direct: +852-3976-8903
Mobile: +852-9323-9670
Address: 20/F, IFC 1, Central district, Hong Kong