[Freeipa-users] Any thoughts on sssd_sudo memory usage ?

[Vaclav Adamec]

Thanks, I'll try some workarounds and wait for new package in centos
repositories

On Tue, May 26, 2015 at 7:53 AM, Lukas Slebodnik <lslebodn at redhat.com> wrote:
> On (26/05/15 06:44), Vaclav Adamec wrote:
>>With higher debug level I see that sssd sudo trying to resolve local
>>account (for nagios monitoring)
>>
> There was/is a bug which does not respect filter_user in sudo provider
> https://fedorahosted.org/sssd/ticket/2625. (It's already fixed in fedora >= 22)
>
> It would be a workaround for you.
>
>>On Tue, May 26, 2015 at 6:39 AM, Vaclav Adamec
>><vaclav.adamec at suchy-zleb.cz> wrote:
>>> ps -eo pid,cmd,size,rss | grep sssd_sudo
>>> 1533 /usr/libexec/sssd/sssd_sudo 4245972 4247700
>>>
>>> and huge amount of this (trying again and again):
>>>
>>> (Tue May 26 06:35:47 2015) [sssd[sudo]]
>>> [sudosrv_check_user_dp_callback] (0x0040): Could not look up the user
>>> [2]: No such file or directory
>>> (Tue May 26 06:35:47 2015) [sssd[sudo]] [sudosrv_get_user] (0x0080):
>>> No results for getpwnam call
>>>
>>> but other servers in same datacenter looks ok in the same time, but
>>> later this error was visible also on others, it's just question of
>>> time.
> I assume you have sssd-1.11 because such bug was fixed in sssd-1.12
> https://git.fedorahosted.org/cgit/sssd.git/commit/?id=09579ae252c181c7884defc0612c36108f6cf509
>
> You can test with my pre-release of sssd-1.12.5
> https://copr.fedoraproject.org/coprs/lslebodn/sssd-1-12-latest/
> (It already contains fix for #2625)
>
> LS



-- 
-- May the fox be with you ...
   /\
  (~(
   ) )         /\_/\
  (_=---_(@ @)
    (          \   /
    /|/----\|\  V
    " "     " "