[Freeipa-users] sssd went away, failed to restart

Fri May 13 19:31:35 UTC 2016

On 05/13/16 14:45, Lukas Slebodnik wrote:
> On (12/05/16 15:35), Harald Dunkel wrote:
>> On 05/12/16 13:48, Lukas Slebodnik wrote:
> 
>>> I would like to fix it but I do not know what to fix.
>>>
>>> Is there anything interesting/suspicious in syslog/journald
>>> from the same time?
>>>
>>
>> "journalctl -u sssd" says
>>
> It is not helpful either.
> We asked to find *ANYTHING* interesting/suspicious in syslog/journald
> So it needn't be related to sssd.
> 

Understood. Below is the complete journalctl and syslog from reboot
till sssd being marked as failed by systemd. The only problems I see
in between are the authentication failures and "user unknown" error
messages. The log files on the ipa servers don't show any signs
of a problem either (esp. krb5kdc.log, the slapd log files, and
kernel.log of the ipa1 server).

> It can be realted to swapping, out of entropy, disk needs to spin up,
> high load, DNS not responding, whatever
> 
> But it's task for you to find out what trigger the problem.
> We do not have an access to problematic machines.
> 

Does it really matter *why* this host is slow or why ipa1 didn't
answer? My point is that sssd should be sufficiently stable to
startup even when its slow "somehow" and when the first ipa server
it tried appears to be unreachable. Looking at the log files I
have the impression that ipa2 works as expected, and yet sssd on
the client went Guru for some reason it didn't write into the log
file.

> So try to find a reason which trigger the problem and provide
> reasonable reproducer.
>

I'd love to give you more information, but this is a production
system. Rebooting the host to find some way to reproduce the
problem is painful for a lot of people.

Since the client runs Jessie I will try to backport Timo's freeipa
4.3.1 packages for Debian/Ubuntu. sssd is already up-to-date.
ipa1 and ipa2 are running Centos 7 and freeipa 4.2; hopefully
thats OK. And I am setting up additional servers ipa3 and ipa4
to improve availability.

Regards
Harri

-------------- next part --------------
-- Logs begin at Sat 2016-05-07 01:00:34 CEST, end at Fri 2016-05-13 20:14:51 CEST. --
May 12 06:01:57 srvvm01.ac.example.com systemd-journal[24]: Runtime journal is using 8.0M (max allowed 3.1G, trying to leave 4.0G free of 31.4G available ? current limit 3.1G).
May 12 06:01:57 srvvm01.ac.example.com systemd-journal[24]: Runtime journal is using 8.0M (max allowed 3.1G, trying to leave 4.0G free of 31.4G available ? current limit 3.1G).
May 12 06:01:57 srvvm01.ac.example.com systemd-journal[24]: Journal started
May 12 06:01:57 srvvm01.ac.example.com systemd[1]: Mounted Debug File System.
May 12 06:01:57 srvvm01.ac.example.com systemd[1]: Mounted Huge Pages File System.
May 12 06:01:57 srvvm01.ac.example.com systemd[1]: Mounted POSIX Message Queue File System.
May 12 06:01:57 srvvm01.ac.example.com systemd[1]: Started Remount Root and Kernel File Systems.
May 12 06:01:57 srvvm01.ac.example.com systemd[1]: Started Various fixups to make systemd work better on Debian.
May 12 06:01:57 srvvm01.ac.example.com systemd[1]: Starting Load/Save Random Seed...
May 12 06:01:57 srvvm01.ac.example.com systemd[1]: Starting Local File Systems (Pre).
May 12 06:01:57 srvvm01.ac.example.com systemd[1]: Reached target Local File Systems (Pre).
May 12 06:01:57 srvvm01.ac.example.com systemd[1]: Starting Local File Systems.
May 12 06:01:57 srvvm01.ac.example.com systemd[1]: Reached target Local File Systems.
May 12 06:01:57 srvvm01.ac.example.com systemd[1]: Starting Remote File Systems.
May 12 06:01:57 srvvm01.ac.example.com systemd[1]: Started Trigger Flushing of Journal to Persistent Storage.
May 12 06:02:06 srvvm01.ac.example.com systemd-journal[24]: Permanent journal is using 2.4G (max allowed 2.0G, trying to leave 4.0G free of 2.1T available ? current limit 2.4G).
May 12 06:02:14 srvvm01.ac.example.com systemd-journal[24]: Time spent on flushing to /var is 8.301385s for 16 entries.
May 12 06:01:59 srvvm01.ac.example.com logger[65]: /etc/resolvconf/update-libc.d/sendmail (dynamic) update_resolv:
May 12 06:01:59 srvvm01.ac.example.com logger[66]: /etc/resolvconf/update-libc.d/sendmail (dynamic) update_sendmail:
May 12 06:02:15 srvvm01.ac.example.com logger[94]: /etc/network/if-up.d/sendmail (dynamic) update_interface: lo up
May 12 06:02:15 srvvm01.ac.example.com logger[95]: /etc/network/if-up.d/sendmail (dynamic) update_sendmail: lo up
May 12 06:02:15 srvvm01.ac.example.com logger[132]: /etc/resolvconf/update-libc.d/sendmail (dynamic) update_resolv:
May 12 06:02:15 srvvm01.ac.example.com logger[133]: /etc/resolvconf/update-libc.d/sendmail (dynamic) update_sendmail:
May 12 06:02:15 srvvm01.ac.example.com logger[145]: /etc/network/if-up.d/sendmail (dynamic) update_interface: eth0 up
May 12 06:02:15 srvvm01.ac.example.com logger[146]: /etc/network/if-up.d/sendmail (dynamic) update_provider: eth0 up ac.example.com.
May 12 06:02:15 srvvm01.ac.example.com logger[147]: /etc/network/if-up.d/sendmail (dynamic) update_host: eth0 up ac.example.com. 10.19.96.11
May 12 06:02:15 srvvm01.ac.example.com logger[148]: /etc/network/if-up.d/sendmail (dynamic) update_sendmail: eth0 up ac.example.com. 10.19.96.11
May 12 06:02:15 srvvm01.ac.example.com logger[164]: /etc/network/if-up.d/sendmail (dynamic) update_interface: --all up
May 12 06:02:35 srvvm01.ac.example.com logger[165]: /etc/network/if-up.d/sendmail (dynamic) update_sendmail: --all up
May 12 06:01:57 srvvm01.ac.example.com systemd[1]: Started Copy rules generated while the root was ro.
May 12 06:01:58 srvvm01.ac.example.com systemd[1]: Started LSB: ebtables ruleset management.
May 12 06:01:58 srvvm01.ac.example.com systemd[1]: Started LSB: IPv6 Recursive DNS Server discovery.
May 12 06:01:58 srvvm01.ac.example.com systemd[1]: Started LSB: Tune IDE hard disks.
May 12 06:02:03 srvvm01.ac.example.com systemd[1]: Started Load/Save Random Seed.
May 12 06:02:03 srvvm01.ac.example.com systemd[1]: Starting LSB: Raise network interfaces....
May 12 06:02:16 srvvm01.ac.example.com systemd[1]: Started Create Volatile Files and Directories.
May 12 06:02:16 srvvm01.ac.example.com systemd[1]: Starting Update UTMP about System Boot/Shutdown...
May 12 06:02:19 srvvm01.ac.example.com systemd[1]: Started Update UTMP about System Boot/Shutdown.
May 12 06:02:35 srvvm01.ac.example.com systemd[1]: Started LSB: Raise network interfaces..
May 12 06:02:35 srvvm01.ac.example.com systemd[1]: Starting Network.
May 12 06:02:41 srvvm01.ac.example.com anacron[178]: Anacron 2.3 started on 2016-05-12
May 12 06:02:42 srvvm01.ac.example.com hdparm[21]: Setting parameters of disc: (none).
May 12 06:02:42 srvvm01.ac.example.com rdnssd[29]: Starting IPv6 Recursive DNS Server discovery Daemon: rdnssd.
May 12 06:02:42 srvvm01.ac.example.com networking[67]: Configuring network interfaces...done.
May 12 06:02:46 srvvm01.ac.example.com cron[179]: (CRON) INFO (pidfile fd = 3)
May 12 06:02:48 srvvm01.ac.example.com anacron[178]: Normal exit (0 jobs run)
May 12 06:02:49 srvvm01.ac.example.com logger[220]: /etc/init.d/sendmail start
May 12 06:02:51 srvvm01.ac.example.com cron[179]: (dreger) ORPHAN (no passwd entry)
May 12 06:02:51 srvvm01.ac.example.com cron[179]: (adminteam) ORPHAN (no passwd entry)
May 12 06:02:51 srvvm01.ac.example.com cron[179]: (CRON) INFO (Running @reboot jobs)
May 12 06:02:59 srvvm01.ac.example.com ntpd[219]: ntpd 4.2.6p5 at 1.2349-o Wed Oct 28 20:16:08 UTC 2015 (1)
May 12 06:02:59 srvvm01.ac.example.com lldpd[235]: created chroot directory /var/run/lldpd
May 12 06:02:59 srvvm01.ac.example.com lldpd[235]: /etc/localtime copied to chroot
May 12 06:02:59 srvvm01.ac.example.com lldpd[235]: protocol LLDP enabled
May 12 06:02:59 srvvm01.ac.example.com lldpd[235]: protocol CDPv1 disabled
May 12 06:02:59 srvvm01.ac.example.com lldpd[235]: protocol CDPv2 disabled
May 12 06:02:59 srvvm01.ac.example.com lldpd[235]: protocol SONMP disabled
May 12 06:02:59 srvvm01.ac.example.com lldpd[235]: protocol EDP disabled
May 12 06:02:59 srvvm01.ac.example.com lldpd[235]: protocol FDP disabled
May 12 06:02:59 srvvm01.ac.example.com lldpd[235]: libevent 2.0.21-stable initialized with epoll method
May 12 06:03:00 srvvm01.ac.example.com ntpd[236]: proto: precision = 0.101 usec
May 12 06:03:00 srvvm01.ac.example.com ntp[186]: Starting NTP server: ntpd.
May 12 06:03:00 srvvm01.ac.example.com systemd[1]: Starting Certificate monitoring and PKI enrollment...
May 12 06:03:00 srvvm01.ac.example.com systemd[1]: Starting System Logging Service...
May 12 06:03:00 srvvm01.ac.example.com systemd[1]: Starting Clam AntiVirus userspace daemon...
May 12 06:03:00 srvvm01.ac.example.com systemd[1]: Started Clam AntiVirus userspace daemon.
May 12 06:03:00 srvvm01.ac.example.com systemd[1]: Starting LSB: ClamAV virus milter...
May 12 06:03:00 srvvm01.ac.example.com systemd[1]: Started LLDP daemon.
May 12 06:03:00 srvvm01.ac.example.com systemd[1]: Started /etc/rc.local Compatibility.
May 12 06:03:00 srvvm01.ac.example.com systemd[1]: Started LSB: Start NTP daemon.
May 12 06:03:00 srvvm01.ac.example.com systemd[1]: Started LSB: start Samba daemons for the AD DC.
May 12 06:03:00 srvvm01.ac.example.com systemd[1]: Started LSB: start Samba NetBIOS nameserver (nmbd).
May 12 06:03:00 srvvm01.ac.example.com systemd[1]: Starting Dovecot IMAP/POP3 email server...
May 12 06:03:00 srvvm01.ac.example.com systemd[1]: Started Dovecot IMAP/POP3 email server.
May 12 06:03:00 srvvm01.ac.example.com systemd[1]: Starting LSB: start Samba SMB/CIFS daemon (smbd)...
May 12 06:03:00 srvvm01.ac.example.com systemd[1]: Started LSB: start Samba SMB/CIFS daemon (smbd).
May 12 06:03:06 srvvm01.ac.example.com ntpd[236]: Listen and drop on 0 v4wildcard 0.0.0.0 UDP 123
May 12 06:03:06 srvvm01.ac.example.com ntpd[236]: Listen and drop on 1 v6wildcard :: UDP 123
May 12 06:03:06 srvvm01.ac.example.com ntpd[236]: Listen normally on 2 lo 127.0.0.1 UDP 123
May 12 06:03:06 srvvm01.ac.example.com ntpd[236]: Listen normally on 3 eth0 10.19.96.11 UDP 123
May 12 06:03:06 srvvm01.ac.example.com ntpd[236]: Listen normally on 4 lo ::1 UDP 123
May 12 06:03:06 srvvm01.ac.example.com ntpd[236]: Listen normally on 5 eth0 fe80::220:8cff:fe8a:5183 UDP 123
May 12 06:03:06 srvvm01.ac.example.com ntpd[236]: peers refreshed
May 12 06:03:06 srvvm01.ac.example.com ntpd[236]: Listening on routing socket on fd #22 for interface updates
May 12 06:03:06 srvvm01.ac.example.com ntpd[236]: authreadkeys: file /etc/ntp/keys: No such file or directory
May 12 06:03:09 srvvm01.ac.example.com lldpcli[234]: cannot find configuration file/directory /etc/lldpd.conf
May 12 06:03:09 srvvm01.ac.example.com lldpcli[234]: unknown command from argument 1: `#`
May 12 06:03:09 srvvm01.ac.example.com lldpcli[234]: an error occurred while executing last command
May 12 06:03:09 srvvm01.ac.example.com lldpcli[234]: unknown command from argument 1: `#`
May 12 06:03:09 srvvm01.ac.example.com lldpcli[234]: an error occurred while executing last command
May 12 06:03:09 srvvm01.ac.example.com lldpcli[234]: lldpd should resume operations
May 12 06:03:10 srvvm01.ac.example.com systemd[1]: Started System Logging Service.
May 12 06:03:11 srvvm01.ac.example.com sendmail[194]: Starting Mail Transport Agent (MTA): sendmailMakefile:290: warning: overriding recipe for target '/etc/aliases.news.db'
May 12 06:03:14 srvvm01.ac.example.com sendmail[194]: Makefile:287: warning: ignoring old recipe for target '/etc/aliases.news.db'
May 12 06:03:14 srvvm01.ac.example.com sendmail[194]: Makefile:344: warning: overriding recipe for target '/etc/aliases.news'
May 12 06:03:14 srvvm01.ac.example.com sendmail[194]: Makefile:287: warning: ignoring old recipe for target '/etc/aliases.news'
May 12 06:03:13 srvvm01.ac.example.com systemd[1]: Started Zabbix Agent.
May 12 06:03:14 srvvm01.ac.example.com sshd[183]: Server listening on 0.0.0.0 port 22.
May 12 06:03:14 srvvm01.ac.example.com sshd[183]: Server listening on :: port 22.
May 12 06:03:15 srvvm01.ac.example.com dovecot[241]: master: Dovecot v2.2.18 starting up for imap, pop3 (core dumps disabled)
May 12 06:03:15 srvvm01.ac.example.com sssd[373]: Starting up
May 12 06:03:16 srvvm01.ac.example.com dovecot[241]: Warning: fd limit (ulimit -n) is lower than required under max. load (1024 < 3000), because of default_client_limit
May 12 06:03:18 srvvm01.ac.example.com clamav-milter[372]: +++ Started at Thu May 12 06:03:18 2016
May 12 06:03:20 srvvm01.ac.example.com clamd[239]: Received 1 file descriptor(s) from systemd.
May 12 06:03:20 srvvm01.ac.example.com clamd[239]: clamd daemon 0.99 (OS: linux-gnu, ARCH: x86_64, CPU: x86_64)
May 12 06:03:20 srvvm01.ac.example.com clamd[239]: Running as user clamav (UID 111, GID 143)
May 12 06:03:20 srvvm01.ac.example.com clamd[239]: Log file size limited to 4294967295bytes.
May 12 06:03:20 srvvm01.ac.example.com clamd[239]: Reading databases from /var/lib/clamav
May 12 06:03:20 srvvm01.ac.example.com clamd[239]: Not loading PUA signatures.
May 12 06:03:20 srvvm01.ac.example.com clamd[239]: Bytecode: Security mode set to "TrustSigned".
May 12 06:03:18 srvvm01.ac.example.com systemd[1]: Started LSB: ClamAV virus milter.
May 12 06:03:20 srvvm01.ac.example.com systemd[1]: Started LSB: INN news server.
May 12 06:03:20 srvvm01.ac.example.com freshclam[180]: ClamAV update process started at Thu May 12 06:03:20 2016
May 12 06:03:20 srvvm01.ac.example.com freshclam[180]: WARNING: Your ClamAV installation is OUTDATED!
May 12 06:03:20 srvvm01.ac.example.com freshclam[180]: WARNING: Local version: 0.99 Recommended version: 0.99.2
May 12 06:03:20 srvvm01.ac.example.com freshclam[180]: DON'T PANIC! Read http://www.clamav.net/support/faq
May 12 06:03:20 srvvm01.ac.example.com clamav-milter[240]: Starting Sendmail milter plugin for ClamAV: clamav-milter.
May 12 06:03:20 srvvm01.ac.example.com inn2[189]: Starting news server: innd.
May 12 06:03:20 srvvm01.ac.example.com innd[415]: SERVER descriptors 1023
May 12 06:03:20 srvvm01.ac.example.com innd[415]: SERVER outgoing 1010
May 12 06:03:20 srvvm01.ac.example.com innd[415]: SERVER ccsetup control:12
May 12 06:03:20 srvvm01.ac.example.com innd[415]: SERVER lcsetup localconn:14
May 12 06:03:21 srvvm01.ac.example.com freshclam[180]: main.cvd is up to date (version: 57, sigs: 4218790, f-level: 60, builder: amishhammer)
May 12 06:03:21 srvvm01.ac.example.com freshclam[180]: daily.cld is up to date (version: 21529, sigs: 139560, f-level: 63, builder: neo)
May 12 06:03:21 srvvm01.ac.example.com freshclam[180]: bytecode.cld is up to date (version: 277, sigs: 47, f-level: 63, builder: neo)
May 12 06:03:21 srvvm01.ac.example.com sssd[be[417]: Starting up
May 12 06:03:22 srvvm01.ac.example.com innd[415]: SERVER rcsetup remconn:15
May 12 06:03:22 srvvm01.ac.example.com innd[415]: SERVER rcsetup remconn:17
May 12 06:03:22 srvvm01.ac.example.com innd[415]: controlchan! spawned controlchan!:21:proc:425
May 12 06:03:23 srvvm01.ac.example.com innd[415]: SERVER perl filtering enabled
May 12 06:03:23 srvvm01.ac.example.com innd[415]: SERVER starting
May 12 06:03:23 srvvm01.ac.example.com dovecot[392]: imap-login: Disconnected (disconnected before auth was ready, waited 2 secs): user=<>, rip=10.19.102.238, lip=10.19.96.11, TLS handshaking: Disconnected, session=<gR9OPZ0yBACsE2bu>
May 12 06:03:23 srvvm01.ac.example.com dovecot[392]: imap-login: Disconnected (disconnected before auth was ready, waited 2 secs): user=<>, rip=10.19.102.238, lip=10.19.96.11, TLS handshaking: Disconnected, session=<1jpOPZ0yBQCsE2bu>
May 12 06:03:26 srvvm01.ac.example.com sssd[438]: Starting up
May 12 06:03:26 srvvm01.ac.example.com sssd[440]: Starting up
May 12 06:03:26 srvvm01.ac.example.com sssd[437]: Starting up
May 12 06:03:25 srvvm01.ac.example.com systemd[1]: Started Certificate monitoring and PKI enrollment.
May 12 06:03:26 srvvm01.ac.example.com sssd[439]: Starting up
May 12 06:03:29 srvvm01.ac.example.com sssd[441]: Starting up
May 12 06:03:37 srvvm01.ac.example.com ipa-submit[445]: GSSAPI client step 1
May 12 06:03:37 srvvm01.ac.example.com ipa-submit[445]: GSSAPI client step 1
May 12 06:03:37 srvvm01.ac.example.com ipa-submit[445]: GSSAPI client step 1
May 12 06:03:37 srvvm01.ac.example.com ipa-submit[445]: GSSAPI client step 1
May 12 06:03:37 srvvm01.ac.example.com ipa-submit[445]: GSSAPI client step 2
May 12 06:03:39 srvvm01.ac.example.com sssd_be[417]: GSSAPI client step 1
May 12 06:03:39 srvvm01.ac.example.com sssd_be[417]: GSSAPI client step 1
May 12 06:03:39 srvvm01.ac.example.com sssd_be[417]: GSSAPI client step 1
May 12 06:03:39 srvvm01.ac.example.com sssd_be[417]: GSSAPI client step 2
May 12 06:03:42 srvvm01.ac.example.com dovecot[392]: imap-login: Disconnected (no auth attempts in 19 secs): user=<>, rip=10.0.142.199, lip=10.19.96.11, TLS handshaking: SSL_accept() syscall failed: Connection reset by peer, session=<9T14Pp0yjwAFkY7H>
May 12 06:03:42 srvvm01.ac.example.com dovecot[392]: imap-login: Disconnected (no auth attempts in 19 secs): user=<>, rip=10.0.142.199, lip=10.19.96.11, TLS handshaking, session=<50d4Pp0yjgAFkY7H>
May 12 06:03:42 srvvm01.ac.example.com dovecot[392]: imap-login: Disconnected (no auth attempts in 21 secs): user=<>, rip=10.0.142.199, lip=10.19.96.11, TLS handshaking: SSL_accept() syscall failed: Connection reset by peer, session=<HU94Pp0yjQAFkY7H>
May 12 06:03:42 srvvm01.ac.example.com dovecot[392]: imap-login: Disconnected (no auth attempts in 21 secs): user=<>, rip=10.0.142.199, lip=10.19.96.11, TLS handshaking: SSL_accept() syscall failed: Connection reset by peer, session=<zGZ4Pp0yjAAFkY7H>
May 12 06:03:47 srvvm01.ac.example.com controlchan[425]: starting
May 12 06:03:56 srvvm01.ac.example.com sshd[485]: Connection closed by 10.19.96.127 [preauth]
May 12 06:03:57 srvvm01.ac.example.com clamd[239]: Loaded 4353011 signatures.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: TCP: No tcp AF_INET/AF_INET6 SOCK_STREAM socket received from systemd.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: LOCAL: Received AF_UNIX SOCK_STREAM socket from systemd.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: Limits: Global size limit set to 104857600 bytes.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: Limits: File size limit set to 26214400 bytes.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: Limits: Recursion level limit set to 16.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: Limits: Files limit set to 10000.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: Limits: MaxEmbeddedPE limit set to 10485760 bytes.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: Limits: MaxHTMLNormalize limit set to 10485760 bytes.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: Limits: MaxHTMLNoTags limit set to 2097152 bytes.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: Limits: MaxScriptNormalize limit set to 5242880 bytes.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: Limits: MaxZipTypeRcg limit set to 1048576 bytes.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: Limits: MaxPartitions limit set to 50.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: Limits: MaxIconsPE limit set to 100.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: Limits: PCREMatchLimit limit set to 10000.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: Limits: PCRERecMatchLimit limit set to 5000.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: Limits: PCREMaxFileSize limit set to 26214400.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: Archive support enabled.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: Algorithmic detection enabled.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: Portable Executable support enabled.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: ELF support enabled.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: Mail files support enabled.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: OLE2 support enabled.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: PDF support enabled.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: SWF support enabled.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: HTML support enabled.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: Self checking every 3600 seconds.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: Limits: Global size limit set to 104857600 bytes.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: Limits: File size limit set to 26214400 bytes.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: Limits: Recursion level limit set to 16.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: Limits: Files limit set to 10000.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: Limits: MaxEmbeddedPE limit set to 10485760 bytes.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: Limits: MaxHTMLNormalize limit set to 10485760 bytes.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: Limits: MaxHTMLNoTags limit set to 2097152 bytes.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: Limits: MaxScriptNormalize limit set to 5242880 bytes.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: Limits: MaxZipTypeRcg limit set to 1048576 bytes.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: Limits: MaxPartitions limit set to 50.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: Limits: MaxIconsPE limit set to 100.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: Limits: PCREMatchLimit limit set to 10000.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: Limits: PCRERecMatchLimit limit set to 5000.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: Limits: PCREMaxFileSize limit set to 26214400.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: Archive support enabled.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: Algorithmic detection enabled.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: Portable Executable support enabled.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: ELF support enabled.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: Mail files support enabled.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: OLE2 support enabled.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: PDF support enabled.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: SWF support enabled.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: HTML support enabled.
May 12 06:04:04 srvvm01.ac.example.com clamd[239]: Self checking every 3600 seconds.
May 12 06:04:05 srvvm01.ac.example.com systemd[1]: sssd.service start operation timed out. Terminating.
May 12 06:04:05 srvvm01.ac.example.com sssd[438]: Shutting down
May 12 06:04:05 srvvm01.ac.example.com sssd[437]: Shutting down
May 12 06:04:05 srvvm01.ac.example.com sssd[be[417]: Shutting down
May 12 06:04:05 srvvm01.ac.example.com sssd[439]: Shutting down
May 12 06:04:05 srvvm01.ac.example.com auth[490]: pam_unix(dovecot:auth): check pass; user unknown
May 12 06:04:05 srvvm01.ac.example.com auth[490]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=user1 rhost=10.0.142.199
May 12 06:04:05 srvvm01.ac.example.com auth[449]: pam_unix(dovecot:auth): check pass; user unknown
May 12 06:04:05 srvvm01.ac.example.com auth[429]: pam_unix(dovecot:auth): check pass; user unknown
May 12 06:04:05 srvvm01.ac.example.com auth[449]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=user2 rhost=10.19.97.188
May 12 06:04:05 srvvm01.ac.example.com auth[429]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=user3 rhost=10.19.97.179
May 12 06:04:05 srvvm01.ac.example.com auth[490]: pam_sss(dovecot:auth): Request to sssd failed. Bad address
May 12 06:04:05 srvvm01.ac.example.com auth[449]: pam_sss(dovecot:auth): Request to sssd failed. Bad address
May 12 06:04:05 srvvm01.ac.example.com sssd[441]: Shutting down
May 12 06:04:05 srvvm01.ac.example.com auth[429]: pam_sss(dovecot:auth): Request to sssd failed. Bad address
May 12 06:04:05 srvvm01.ac.example.com sssd[440]: Shutting down
May 12 06:04:05 srvvm01.ac.example.com sshd[482]: Invalid user user4 from 10.19.96.197
May 12 06:04:06 srvvm01.ac.example.com auth[478]: pam_unix(dovecot:auth): check pass; user unknown
May 12 06:04:06 srvvm01.ac.example.com auth[475]: pam_unix(dovecot:auth): check pass; user unknown
May 12 06:04:06 srvvm01.ac.example.com auth[474]: pam_unix(dovecot:auth): check pass; user unknown
May 12 06:04:06 srvvm01.ac.example.com auth[473]: pam_unix(dovecot:auth): check pass; user unknown
May 12 06:04:06 srvvm01.ac.example.com auth[427]: pam_unix(dovecot:auth): check pass; user unknown
May 12 06:04:06 srvvm01.ac.example.com auth[444]: pam_unix(dovecot:auth): check pass; user unknown
May 12 06:04:06 srvvm01.ac.example.com auth[433]: pam_unix(dovecot:auth): check pass; user unknown
May 12 06:04:06 srvvm01.ac.example.com auth[430]: pam_unix(dovecot:auth): check pass; user unknown
May 12 06:04:06 srvvm01.ac.example.com auth[430]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=user5 rhost=10.19.97.177
May 12 06:04:06 srvvm01.ac.example.com auth[428]: pam_unix(dovecot:auth): check pass; user unknown
May 12 06:04:06 srvvm01.ac.example.com auth[448]: pam_unix(dovecot:auth): check pass; user unknown
May 12 06:04:06 srvvm01.ac.example.com auth[431]: pam_unix(dovecot:auth): check pass; user unknown
May 12 06:04:06 srvvm01.ac.example.com auth[432]: pam_unix(dovecot:auth): check pass; user unknown
May 12 06:04:06 srvvm01.ac.example.com auth[477]: pam_unix(dovecot:auth): check pass; user unknown
May 12 06:04:06 srvvm01.ac.example.com sendmail[389]: alias database /etc/mail/aliases.user rebuilt by root
May 12 06:04:06 srvvm01.ac.example.com auth[426]: pam_unix(dovecot:auth): check pass; user unknown
May 12 06:04:06 srvvm01.ac.example.com auth[484]: pam_unix(dovecot:auth): check pass; user unknown
May 12 06:04:06 srvvm01.ac.example.com auth[489]: pam_unix(dovecot:auth): check pass; user unknown
May 12 06:04:06 srvvm01.ac.example.com auth[488]: pam_unix(dovecot:auth): check pass; user unknown
May 12 06:04:06 srvvm01.ac.example.com auth[487]: pam_unix(dovecot:auth): check pass; user unknown
May 12 06:04:06 srvvm01.ac.example.com sshd[482]: input_userauth_request: invalid user user5 [preauth]
May 12 06:04:06 srvvm01.ac.example.com auth[478]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=user6 rhost=10.19.98.10
May 12 06:04:06 srvvm01.ac.example.com auth[475]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=user5 rhost=10.19.97.186
May 12 06:04:06 srvvm01.ac.example.com auth[474]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=user6 rhost=10.19.98.10
May 12 06:04:06 srvvm01.ac.example.com auth[473]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=user6 rhost=10.19.98.10
May 12 06:04:06 srvvm01.ac.example.com auth[427]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=user7 rhost=10.19.98.158
May 12 06:04:06 srvvm01.ac.example.com auth[444]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=user8 rhost=10.19.97.141
May 12 06:04:06 srvvm01.ac.example.com auth[433]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=user9 rhost=10.19.102.239
May 12 06:04:06 srvvm01.ac.example.com auth[436]: pam_unix(dovecot:auth): check pass; user unknown
May 12 06:04:06 srvvm01.ac.example.com auth[430]: pam_sss(dovecot:auth): Request to sssd failed. Connection refused
May 12 06:04:06 srvvm01.ac.example.com auth[428]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=user11 rhost=10.19.97.13
May 12 06:04:06 srvvm01.ac.example.com auth[448]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=user12 rhost=10.19.102.240
May 12 06:04:06 srvvm01.ac.example.com auth[431]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=user13 rhost=10.19.97.159
May 12 06:04:06 srvvm01.ac.example.com auth[432]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=user14 rhost=10.19.97.90
May 12 06:04:06 srvvm01.ac.example.com auth[478]: pam_sss(dovecot:auth): Request to sssd failed. Connection refused
May 12 06:04:06 srvvm01.ac.example.com auth[475]: pam_sss(dovecot:auth): Request to sssd failed. Connection refused
May 12 06:04:06 srvvm01.ac.example.com auth[474]: pam_sss(dovecot:auth): Request to sssd failed. Connection refused
May 12 06:04:06 srvvm01.ac.example.com auth[473]: pam_sss(dovecot:auth): Request to sssd failed. Connection refused
May 12 06:04:06 srvvm01.ac.example.com auth[427]: pam_sss(dovecot:auth): Request to sssd failed. Connection refused
May 12 06:04:06 srvvm01.ac.example.com auth[444]: pam_sss(dovecot:auth): Request to sssd failed. Connection refused
May 12 06:04:06 srvvm01.ac.example.com auth[433]: pam_sss(dovecot:auth): Request to sssd failed. Connection refused
May 12 06:04:06 srvvm01.ac.example.com auth[436]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=user15 rhost=10.19.102.238
May 12 06:04:06 srvvm01.ac.example.com auth[428]: pam_sss(dovecot:auth): Request to sssd failed. Connection refused
May 12 06:04:06 srvvm01.ac.example.com auth[448]: pam_sss(dovecot:auth): Request to sssd failed. Connection refused
May 12 06:04:06 srvvm01.ac.example.com auth[431]: pam_sss(dovecot:auth): Request to sssd failed. Connection refused
May 12 06:04:06 srvvm01.ac.example.com auth[432]: pam_sss(dovecot:auth): Request to sssd failed. Connection refused
May 12 06:04:06 srvvm01.ac.example.com auth[477]: pam_sss(dovecot:auth): Request to sssd failed. Connection refused
May 12 06:04:06 srvvm01.ac.example.com auth[426]: pam_sss(dovecot:auth): Request to sssd failed. Connection refused
May 12 06:04:06 srvvm01.ac.example.com auth[484]: pam_sss(dovecot:auth): Request to sssd failed. Connection refused
May 12 06:04:06 srvvm01.ac.example.com auth[489]: pam_sss(dovecot:auth): Request to sssd failed. Connection refused
May 12 06:04:06 srvvm01.ac.example.com auth[488]: pam_sss(dovecot:auth): Request to sssd failed. Connection refused
May 12 06:04:06 srvvm01.ac.example.com auth[487]: pam_sss(dovecot:auth): Request to sssd failed. Connection refused
May 12 06:04:06 srvvm01.ac.example.com auth[436]: pam_sss(dovecot:auth): Request to sssd failed. Connection refused
May 12 06:04:06 srvvm01.ac.example.com sendmail[389]: /etc/mail/aliases.user: 917 aliases, longest 569 bytes, 19796 bytes total
May 12 06:04:05 srvvm01.ac.example.com systemd[1]: Failed to start System Security Services Daemon.
May 12 06:04:05 srvvm01.ac.example.com systemd[1]: Unit sssd.service entered failed state.
May 12 06:04:05 srvvm01.ac.example.com systemd[1]: Starting User and Group Name Lookups.
May 12 06:04:05 srvvm01.ac.example.com systemd[1]: Reached target User and Group Name Lookups.
May 12 06:04:05 srvvm01.ac.example.com systemd[1]: Starting Login Service...
May 12 06:04:05 srvvm01.ac.example.com systemd[1]: Starting Permit User Sessions...
May 12 06:04:05 srvvm01.ac.example.com systemd[1]: Started Permit User Sessions.
May 12 06:04:05 srvvm01.ac.example.com systemd[1]: Started Getty on tty1.
May 12 06:04:05 srvvm01.ac.example.com systemd[1]: Starting Container Getty on /dev/pts/3...
May 12 06:04:05 srvvm01.ac.example.com systemd[1]: Started Container Getty on /dev/pts/3.
May 12 06:04:05 srvvm01.ac.example.com systemd[1]: Starting Container Getty on /dev/pts/2...
May 12 06:04:06 srvvm01.ac.example.com systemd-logind[492]: New seat seat0.
May 12 06:04:06 srvvm01.ac.example.com systemd[1]: Started Login Service.
May 12 06:04:06 srvvm01.ac.example.com sshd[482]: Failed none for invalid user user5 from 10.19.96.197 port 36750 ssh2
May 12 06:04:06 srvvm01.ac.example.com sshd[482]: Failed password for invalid user user5 from 10.19.96.197 port 36750 ssh2
May 12 06:04:06 srvvm01.ac.example.com sshd[482]: Failed password for invalid user user5 from 10.19.96.197 port 36750 ssh2
-------------- next part --------------
May 12 05:55:58 srvvm01 systemd[1]: Stopping System Logging Service...
May 12 05:55:59 srvvm01 kernel: [1020200.459525] bonding: bond1: link status definitely up for interface eth4, 1000 Mbps full duplex
May 12 05:56:00 srvvm01 kernel: [1020200.816246] igb 0000:81:00.0 eth2: igb: eth2 NIC Link is Down
May 12 05:56:00 srvvm01 kernel: [1020200.843263] igb 0000:81:00.1 eth3: igb: eth3 NIC Link is Down
May 12 05:56:00 srvvm01 kernel: [1020200.859487] bonding: bond1: link status definitely down for interface eth2, disabling it
May 12 05:56:03 srvvm01 kernel: [1020204.243953] igb 0000:81:00.2 eth4: igb: eth4 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX/TX
May 12 05:56:03 srvvm01 kernel: [1020204.256836] bonding: bond1: link status definitely up for interface eth4, 1000 Mbps full duplex
May 12 05:56:06 srvvm01 kernel: [1020207.139979] br0: port 12(veth7RLOHG) entered disabled state
May 12 05:56:12 srvvm01 rsyslogd: [origin software="rsyslogd" swVersion="8.4.2" x-pid="218" x-info="http://www.rsyslog.com"] exiting on signal 15.
May 12 06:03:10 srvvm01 rsyslogd: [origin software="rsyslogd" swVersion="8.4.2" x-pid="238" x-info="http://www.rsyslog.com"] start
May 12 06:03:10 srvvm01 systemd[1]: Mounted Debug File System.
May 12 06:03:10 srvvm01 systemd[1]: Mounted Huge Pages File System.
May 12 06:03:10 srvvm01 rsyslogd-2039: Could not open output pipe '/dev/xconsole': No such file or directory [try http://www.rsyslog.com/e/2039 ]
May 12 06:03:10 srvvm01 systemd[1]: Mounted POSIX Message Queue File System.
May 12 06:03:10 srvvm01 systemd[1]: Started Remount Root and Kernel File Systems.
May 12 06:03:10 srvvm01 systemd[1]: Started Various fixups to make systemd work better on Debian.
May 12 06:03:10 srvvm01 systemd[1]: Starting Load/Save Random Seed...
May 12 06:03:10 srvvm01 systemd[1]: Starting Local File Systems (Pre).
May 12 06:03:10 srvvm01 systemd[1]: Reached target Local File Systems (Pre).
May 12 06:03:10 srvvm01 systemd[1]: Starting Local File Systems.
May 12 06:03:10 srvvm01 systemd[1]: Reached target Local File Systems.
May 12 06:03:10 srvvm01 systemd[1]: Starting Remote File Systems.
May 12 06:03:10 srvvm01 rsyslogd-2007: action 'action 19' suspended, next retry is Thu May 12 06:03:40 2016 [try http://www.rsyslog.com/e/2007 ]
May 12 06:03:10 srvvm01 systemd[1]: Started Trigger Flushing of Journal to Persistent Storage.
May 12 06:03:10 srvvm01 logger[65]: /etc/resolvconf/update-libc.d/sendmail (dynamic) update_resolv:
May 12 06:03:10 srvvm01 logger[66]: /etc/resolvconf/update-libc.d/sendmail (dynamic) update_sendmail:
May 12 06:03:10 srvvm01 logger[94]: /etc/network/if-up.d/sendmail (dynamic) update_interface: lo up
May 12 06:03:10 srvvm01 logger[95]: /etc/network/if-up.d/sendmail (dynamic) update_sendmail: lo up
May 12 06:03:10 srvvm01 logger[132]: /etc/resolvconf/update-libc.d/sendmail (dynamic) update_resolv:
May 12 06:03:10 srvvm01 logger[133]: /etc/resolvconf/update-libc.d/sendmail (dynamic) update_sendmail:
May 12 06:03:10 srvvm01 logger[145]: /etc/network/if-up.d/sendmail (dynamic) update_interface: eth0 up
May 12 06:03:10 srvvm01 logger[146]: /etc/network/if-up.d/sendmail (dynamic) update_provider: eth0 up ac.example.com.
May 12 06:03:10 srvvm01 logger[147]: /etc/network/if-up.d/sendmail (dynamic) update_host: eth0 up ac.example.com. 10.19.96.11
May 12 06:03:10 srvvm01 logger[148]: /etc/network/if-up.d/sendmail (dynamic) update_sendmail: eth0 up ac.example.com. 10.19.96.11
May 12 06:03:10 srvvm01 logger[164]: /etc/network/if-up.d/sendmail (dynamic) update_interface: --all up
May 12 06:03:10 srvvm01 logger[165]: /etc/network/if-up.d/sendmail (dynamic) update_sendmail: --all up
May 12 06:03:10 srvvm01 systemd[1]: Started Copy rules generated while the root was ro.
May 12 06:03:10 srvvm01 systemd[1]: Started LSB: ebtables ruleset management.
May 12 06:03:10 srvvm01 systemd[1]: Started LSB: IPv6 Recursive DNS Server discovery.
May 12 06:03:10 srvvm01 systemd[1]: Started LSB: Tune IDE hard disks.
May 12 06:03:10 srvvm01 systemd[1]: Started Load/Save Random Seed.
May 12 06:03:10 srvvm01 systemd[1]: Starting LSB: Raise network interfaces....
May 12 06:03:10 srvvm01 systemd[1]: Started Create Volatile Files and Directories.
May 12 06:03:10 srvvm01 systemd[1]: Starting Update UTMP about System Boot/Shutdown...
May 12 06:03:10 srvvm01 systemd[1]: Started Update UTMP about System Boot/Shutdown.
May 12 06:03:10 srvvm01 systemd[1]: Started LSB: Raise network interfaces..
May 12 06:03:10 srvvm01 systemd[1]: Starting Network.
May 12 06:03:10 srvvm01 anacron[178]: Anacron 2.3 started on 2016-05-12
May 12 06:03:10 srvvm01 hdparm[21]: Setting parameters of disc: (none).
May 12 06:03:10 srvvm01 rdnssd[29]: Starting IPv6 Recursive DNS Server discovery Daemon: rdnssd.
May 12 06:03:10 srvvm01 networking[67]: Configuring network interfaces...done.
May 12 06:03:10 srvvm01 cron[179]: (CRON) INFO (pidfile fd = 3)
May 12 06:03:10 srvvm01 anacron[178]: Normal exit (0 jobs run)
May 12 06:03:10 srvvm01 logger[220]: /etc/init.d/sendmail start
May 12 06:03:10 srvvm01 cron[179]: (dreger) ORPHAN (no passwd entry)
May 12 06:03:10 srvvm01 cron[179]: (adminteam) ORPHAN (no passwd entry)
May 12 06:03:10 srvvm01 cron[179]: (CRON) INFO (Running @reboot jobs)
May 12 06:03:10 srvvm01 ntpd[219]: ntpd 4.2.6p5 at 1.2349-o Wed Oct 28 20:16:08 UTC 2015 (1)
May 12 06:03:10 srvvm01 lldpd[235]: created chroot directory /var/run/lldpd
May 12 06:03:10 srvvm01 lldpd[235]: /etc/localtime copied to chroot
May 12 06:03:10 srvvm01 lldpd[235]: protocol LLDP enabled
May 12 06:03:10 srvvm01 lldpd[235]: protocol CDPv1 disabled
May 12 06:03:10 srvvm01 lldpd[235]: protocol CDPv2 disabled
May 12 06:03:10 srvvm01 lldpd[235]: protocol SONMP disabled
May 12 06:03:10 srvvm01 lldpd[235]: protocol EDP disabled
May 12 06:03:10 srvvm01 lldpd[235]: protocol FDP disabled
May 12 06:03:10 srvvm01 lldpd[235]: libevent 2.0.21-stable initialized with epoll method
May 12 06:03:10 srvvm01 ntpd[236]: proto: precision = 0.101 usec
May 12 06:03:10 srvvm01 ntp[186]: Starting NTP server: ntpd.
May 12 06:03:10 srvvm01 systemd[1]: Starting Certificate monitoring and PKI enrollment...
May 12 06:03:10 srvvm01 systemd[1]: Starting System Logging Service...
May 12 06:03:10 srvvm01 systemd[1]: Starting Clam AntiVirus userspace daemon...
May 12 06:03:10 srvvm01 systemd[1]: Started Clam AntiVirus userspace daemon.
May 12 06:03:10 srvvm01 systemd[1]: Starting LSB: ClamAV virus milter...
May 12 06:03:10 srvvm01 systemd[1]: Started LLDP daemon.
May 12 06:03:10 srvvm01 systemd[1]: Started /etc/rc.local Compatibility.
May 12 06:03:10 srvvm01 systemd[1]: Started LSB: Start NTP daemon.
May 12 06:03:10 srvvm01 systemd[1]: Started LSB: start Samba daemons for the AD DC.
May 12 06:03:10 srvvm01 systemd[1]: Started LSB: start Samba NetBIOS nameserver (nmbd).
May 12 06:03:10 srvvm01 systemd[1]: Starting Dovecot IMAP/POP3 email server...
May 12 06:03:10 srvvm01 systemd[1]: Started Dovecot IMAP/POP3 email server.
May 12 06:03:10 srvvm01 systemd[1]: Starting LSB: start Samba SMB/CIFS daemon (smbd)...
May 12 06:03:10 srvvm01 systemd[1]: Started LSB: start Samba SMB/CIFS daemon (smbd).
May 12 06:03:10 srvvm01 ntpd[236]: Listen and drop on 0 v4wildcard 0.0.0.0 UDP 123
May 12 06:03:10 srvvm01 ntpd[236]: Listen and drop on 1 v6wildcard :: UDP 123
May 12 06:03:10 srvvm01 ntpd[236]: Listen normally on 2 lo 127.0.0.1 UDP 123
May 12 06:03:10 srvvm01 ntpd[236]: Listen normally on 3 eth0 10.19.96.11 UDP 123
May 12 06:03:11 srvvm01 ntpd[236]: Listen normally on 4 lo ::1 UDP 123
May 12 06:03:11 srvvm01 ntpd[236]: Listen normally on 5 eth0 fe80::220:8cff:fe8a:5183 UDP 123
May 12 06:03:11 srvvm01 ntpd[236]: peers refreshed
May 12 06:03:11 srvvm01 ntpd[236]: Listening on routing socket on fd #22 for interface updates
May 12 06:03:11 srvvm01 ntpd[236]: authreadkeys: file /etc/ntp/keys: No such file or directory
May 12 06:03:11 srvvm01 lldpcli[234]: cannot find configuration file/directory /etc/lldpd.conf
May 12 06:03:11 srvvm01 lldpcli[234]: unknown command from argument 1: `#`
May 12 06:03:11 srvvm01 lldpcli[234]: an error occurred while executing last command
May 12 06:03:11 srvvm01 lldpcli[234]: unknown command from argument 1: `#`
May 12 06:03:11 srvvm01 lldpcli[234]: an error occurred while executing last command
May 12 06:03:11 srvvm01 lldpcli[234]: lldpd should resume operations
May 12 06:03:11 srvvm01 systemd[1]: Started System Logging Service.
May 12 06:03:11 srvvm01 sendmail[194]: Starting Mail Transport Agent (MTA): sendmailMakefile:290: warning: overriding recipe for target '/etc/aliases.news.db'
May 12 06:03:14 srvvm01 sendmail[194]: Makefile:287: warning: ignoring old recipe for target '/etc/aliases.news.db'
May 12 06:03:14 srvvm01 sendmail[194]: Makefile:344: warning: overriding recipe for target '/etc/aliases.news'
May 12 06:03:14 srvvm01 sendmail[194]: Makefile:287: warning: ignoring old recipe for target '/etc/aliases.news'
May 12 06:03:14 srvvm01 systemd[1]: Started Zabbix Agent.
May 12 06:03:16 srvvm01 dovecot: master: Dovecot v2.2.18 starting up for imap, pop3 (core dumps disabled)
May 12 06:03:16 srvvm01 sssd: Starting up
May 12 06:03:16 srvvm01 dovecot[241]: Warning: fd limit (ulimit -n) is lower than required under max. load (1024 < 3000), because of default_client_limit
May 12 06:03:18 srvvm01 clamav-milter[372]: +++ Started at Thu May 12 06:03:18 2016
May 12 06:03:20 srvvm01 clamd[239]: Received 1 file descriptor(s) from systemd.
May 12 06:03:20 srvvm01 clamd[239]: clamd daemon 0.99 (OS: linux-gnu, ARCH: x86_64, CPU: x86_64)
May 12 06:03:20 srvvm01 clamd[239]: Running as user clamav (UID 111, GID 143)
May 12 06:03:20 srvvm01 clamd[239]: Log file size limited to 4294967295bytes.
May 12 06:03:20 srvvm01 clamd[239]: Reading databases from /var/lib/clamav
May 12 06:03:20 srvvm01 clamd[239]: Not loading PUA signatures.
May 12 06:03:20 srvvm01 clamd[239]: Bytecode: Security mode set to "TrustSigned".
May 12 06:03:20 srvvm01 systemd[1]: Started LSB: ClamAV virus milter.
May 12 06:03:20 srvvm01 systemd[1]: Started LSB: INN news server.
May 12 06:03:20 srvvm01 freshclam[180]: ClamAV update process started at Thu May 12 06:03:20 2016
May 12 06:03:20 srvvm01 freshclam[180]: WARNING: Your ClamAV installation is OUTDATED!
May 12 06:03:20 srvvm01 freshclam[180]: WARNING: Local version: 0.99 Recommended version: 0.99.2
May 12 06:03:20 srvvm01 freshclam[180]: DON'T PANIC! Read http://www.clamav.net/support/faq
May 12 06:03:20 srvvm01 clamav-milter[240]: Starting Sendmail milter plugin for ClamAV: clamav-milter.
May 12 06:03:20 srvvm01 inn2[189]: Starting news server: innd.
May 12 06:03:20 srvvm01 innd: SERVER descriptors 1023
May 12 06:03:21 srvvm01 innd: SERVER outgoing 1010
May 12 06:03:21 srvvm01 innd: SERVER ccsetup control:12
May 12 06:03:21 srvvm01 innd: SERVER lcsetup localconn:14
May 12 06:03:21 srvvm01 freshclam[180]: main.cvd is up to date (version: 57, sigs: 4218790, f-level: 60, builder: amishhammer)
May 12 06:03:21 srvvm01 freshclam[180]: daily.cld is up to date (version: 21529, sigs: 139560, f-level: 63, builder: neo)
May 12 06:03:21 srvvm01 freshclam[180]: bytecode.cld is up to date (version: 277, sigs: 47, f-level: 63, builder: neo)
May 12 06:03:21 srvvm01 sssd[be[example.com]]: Starting up
May 12 06:03:22 srvvm01 innd: SERVER rcsetup remconn:15
May 12 06:03:22 srvvm01 innd: SERVER rcsetup remconn:17
May 12 06:03:22 srvvm01 innd: controlchan! spawned controlchan!:21:proc:425
May 12 06:03:23 srvvm01 innd: SERVER perl filtering enabled
May 12 06:03:25 srvvm01 innd: SERVER starting
May 12 06:03:25 srvvm01 dovecot: imap-login: Disconnected (disconnected before auth was ready, waited 2 secs): user=<>, rip=10.19.102.238, lip=10.19.96.11, TLS handshaking: Disconnected, session=<gR9OPZ0yBACsE2bu>
May 12 06:03:26 srvvm01 dovecot: imap-login: Disconnected (disconnected before auth was ready, waited 2 secs): user=<>, rip=10.19.102.238, lip=10.19.96.11, TLS handshaking: Disconnected, session=<1jpOPZ0yBQCsE2bu>
May 12 06:03:26 srvvm01 sssd[sudo]: Starting up
May 12 06:03:26 srvvm01 sssd[ssh]: Starting up
May 12 06:03:26 srvvm01 sssd[nss]: Starting up
May 12 06:03:26 srvvm01 systemd[1]: Started Certificate monitoring and PKI enrollment.
May 12 06:03:26 srvvm01 sssd[pam]: Starting up
May 12 06:03:29 srvvm01 sssd[pac]: Starting up
May 12 06:03:42 srvvm01 dovecot: imap-login: Disconnected (no auth attempts in 19 secs): user=<>, rip=10.0.142.199, lip=10.19.96.11, TLS handshaking: SSL_accept() syscall failed: Connection reset by peer, session=<9T14Pp0yjwAFkY7H>
May 12 06:03:42 srvvm01 dovecot: imap-login: Disconnected (no auth attempts in 19 secs): user=<>, rip=10.0.142.199, lip=10.19.96.11, TLS handshaking, session=<50d4Pp0yjgAFkY7H>
May 12 06:03:42 srvvm01 dovecot: imap-login: Disconnected (no auth attempts in 21 secs): user=<>, rip=10.0.142.199, lip=10.19.96.11, TLS handshaking: SSL_accept() syscall failed: Connection reset by peer, session=<HU94Pp0yjQAFkY7H>
May 12 06:03:42 srvvm01 dovecot: imap-login: Disconnected (no auth attempts in 21 secs): user=<>, rip=10.0.142.199, lip=10.19.96.11, TLS handshaking: SSL_accept() syscall failed: Connection reset by peer, session=<zGZ4Pp0yjAAFkY7H>
May 12 06:03:47 srvvm01 controlchan[425]: starting
May 12 06:03:57 srvvm01 clamd[239]: Loaded 4353011 signatures.
May 12 06:04:04 srvvm01 clamd[239]: TCP: No tcp AF_INET/AF_INET6 SOCK_STREAM socket received from systemd.
May 12 06:04:04 srvvm01 clamd[239]: LOCAL: Received AF_UNIX SOCK_STREAM socket from systemd.
May 12 06:04:04 srvvm01 clamd[239]: Limits: Global size limit set to 104857600 bytes.
May 12 06:04:04 srvvm01 clamd[239]: Limits: File size limit set to 26214400 bytes.
May 12 06:04:04 srvvm01 clamd[239]: Limits: Recursion level limit set to 16.
May 12 06:04:04 srvvm01 clamd[239]: Limits: Files limit set to 10000.
May 12 06:04:04 srvvm01 clamd[239]: Limits: MaxEmbeddedPE limit set to 10485760 bytes.
May 12 06:04:04 srvvm01 clamd[239]: Limits: MaxHTMLNormalize limit set to 10485760 bytes.
May 12 06:04:04 srvvm01 clamd[239]: Limits: MaxHTMLNoTags limit set to 2097152 bytes.
May 12 06:04:04 srvvm01 clamd[239]: Limits: MaxScriptNormalize limit set to 5242880 bytes.
May 12 06:04:04 srvvm01 clamd[239]: Limits: MaxZipTypeRcg limit set to 1048576 bytes.
May 12 06:04:04 srvvm01 clamd[239]: Limits: MaxPartitions limit set to 50.
May 12 06:04:04 srvvm01 clamd[239]: Limits: MaxIconsPE limit set to 100.
May 12 06:04:04 srvvm01 clamd[239]: Limits: PCREMatchLimit limit set to 10000.
May 12 06:04:04 srvvm01 clamd[239]: Limits: PCRERecMatchLimit limit set to 5000.
May 12 06:04:04 srvvm01 clamd[239]: Limits: PCREMaxFileSize limit set to 26214400.
May 12 06:04:04 srvvm01 clamd[239]: Archive support enabled.
May 12 06:04:04 srvvm01 clamd[239]: Algorithmic detection enabled.
May 12 06:04:04 srvvm01 clamd[239]: Portable Executable support enabled.
May 12 06:04:04 srvvm01 clamd[239]: ELF support enabled.
May 12 06:04:04 srvvm01 clamd[239]: Mail files support enabled.
May 12 06:04:04 srvvm01 clamd[239]: OLE2 support enabled.
May 12 06:04:04 srvvm01 clamd[239]: PDF support enabled.
May 12 06:04:04 srvvm01 clamd[239]: SWF support enabled.
May 12 06:04:04 srvvm01 clamd[239]: HTML support enabled.
May 12 06:04:04 srvvm01 clamd[239]: Self checking every 3600 seconds.
May 12 06:04:04 srvvm01 clamd[239]: Limits: Global size limit set to 104857600 bytes.
May 12 06:04:04 srvvm01 clamd[239]: Limits: File size limit set to 26214400 bytes.
May 12 06:04:04 srvvm01 clamd[239]: Limits: Recursion level limit set to 16.
May 12 06:04:04 srvvm01 clamd[239]: Limits: Files limit set to 10000.
May 12 06:04:04 srvvm01 clamd[239]: Limits: MaxEmbeddedPE limit set to 10485760 bytes.
May 12 06:04:04 srvvm01 clamd[239]: Limits: MaxHTMLNormalize limit set to 10485760 bytes.
May 12 06:04:04 srvvm01 clamd[239]: Limits: MaxHTMLNoTags limit set to 2097152 bytes.
May 12 06:04:04 srvvm01 clamd[239]: Limits: MaxScriptNormalize limit set to 5242880 bytes.
May 12 06:04:04 srvvm01 clamd[239]: Limits: MaxZipTypeRcg limit set to 1048576 bytes.
May 12 06:04:04 srvvm01 clamd[239]: Limits: MaxPartitions limit set to 50.
May 12 06:04:04 srvvm01 clamd[239]: Limits: MaxIconsPE limit set to 100.
May 12 06:04:04 srvvm01 clamd[239]: Limits: PCREMatchLimit limit set to 10000.
May 12 06:04:04 srvvm01 clamd[239]: Limits: PCRERecMatchLimit limit set to 5000.
May 12 06:04:04 srvvm01 clamd[239]: Limits: PCREMaxFileSize limit set to 26214400.
May 12 06:04:04 srvvm01 clamd[239]: Archive support enabled.
May 12 06:04:04 srvvm01 clamd[239]: Algorithmic detection enabled.
May 12 06:04:04 srvvm01 clamd[239]: Portable Executable support enabled.
May 12 06:04:04 srvvm01 clamd[239]: ELF support enabled.
May 12 06:04:04 srvvm01 clamd[239]: Mail files support enabled.
May 12 06:04:04 srvvm01 clamd[239]: OLE2 support enabled.
May 12 06:04:04 srvvm01 clamd[239]: PDF support enabled.
May 12 06:04:04 srvvm01 clamd[239]: SWF support enabled.
May 12 06:04:04 srvvm01 clamd[239]: HTML support enabled.
May 12 06:04:04 srvvm01 clamd[239]: Self checking every 3600 seconds.
May 12 06:04:05 srvvm01 systemd[1]: sssd.service start operation timed out. Terminating.
May 12 06:04:05 srvvm01 sssd[sudo]: Shutting down
May 12 06:04:05 srvvm01 sssd[nss]: Shutting down
May 12 06:04:05 srvvm01 sssd[be[example.com]]: Shutting down
May 12 06:04:05 srvvm01 sssd[pam]: Shutting down
May 12 06:04:06 srvvm01 sssd[pac]: Shutting down
May 12 06:04:06 srvvm01 sssd[ssh]: Shutting down
May 12 06:04:06 srvvm01 sendmail[389]: alias database /etc/mail/aliases.user rebuilt by root
May 12 06:04:06 srvvm01 sendmail[389]: /etc/mail/aliases.user: 917 aliases, longest 569 bytes, 19796 bytes total
May 12 06:04:06 srvvm01 systemd[1]: Failed to start System Security Services Daemon.
May 12 06:04:06 srvvm01 systemd[1]: Unit sssd.service entered failed state.
May 12 06:04:06 srvvm01 systemd[1]: Starting User and Group Name Lookups.
May 12 06:04:06 srvvm01 systemd[1]: Reached target User and Group Name Lookups.
May 12 06:04:06 srvvm01 systemd[1]: Starting Login Service...
May 12 06:04:06 srvvm01 systemd[1]: Starting Permit User Sessions...
May 12 06:04:06 srvvm01 systemd[1]: Started Permit User Sessions.
May 12 06:04:06 srvvm01 systemd[1]: Started Getty on tty1.
May 12 06:04:06 srvvm01 systemd[1]: Starting Container Getty on /dev/pts/3...
May 12 06:04:06 srvvm01 systemd[1]: Started Container Getty on /dev/pts/3.
May 12 06:04:06 srvvm01 systemd[1]: Starting Container Getty on /dev/pts/2...
May 12 06:04:06 srvvm01 systemd[1]: Started Login Service.
May 12 06:04:06 srvvm01 sendmail[389]: alias database /etc/mail/aliases rebuilt by root
May 12 06:04:06 srvvm01 sendmail[389]: /etc/mail/aliases: 214 aliases, longest 435 bytes, 11818 bytes total
May 12 06:04:09 srvvm01 sendmail[389]: alias database /etc/aliases.news rebuilt by root
May 12 06:04:09 srvvm01 dovecot: imap-login: Disconnected (auth failed, 1 attempts in 9 secs): user=<user1>, method=PLAIN, rip=10.0.142.199, lip=10.19.96.11, TLS, session=<UaF/P50yoAAFkY7H>
May 12 06:04:09 srvvm01 sendmail[389]: /etc/aliases.news: 235 aliases, longest 115 bytes, 27926 bytes total
May 12 06:04:09 srvvm01 sendmail[513]: alias database /etc/mail/aliases.user rebuilt by root
May 12 06:04:09 srvvm01 sendmail[513]: /etc/mail/aliases.user: 917 aliases, longest 569 bytes, 19796 bytes total
May 12 06:04:09 srvvm01 sendmail[513]: alias database /etc/mail/aliases rebuilt by root
May 12 06:04:09 srvvm01 sendmail[513]: /etc/mail/aliases: 214 aliases, longest 435 bytes, 11818 bytes total
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 473 bytes
Desc: OpenPGP digital signature
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20160513/9b22db49/attachment.sig>