[Freeipa-users] SSSD setting memcache_timeout on ipa master

[Lukas Slebodnik]

On (08/04/17 17:55), Ronald Wimmer wrote:
>On 2017-04-08 12:53, Lukas Slebodnik wrote:
>> On (04/04/17 09:41), Ronald Wimmer wrote:
>> > On 2017-03-31 13:35, Lukas Slebodnik wrote:
>> > > On (29/03/17 10:47), Ronald Wimmer wrote:
>> > > > Hi,
>> > > > 
>> > > > yesterday I suddenly was unable to use the webinterface of my ipa master. SSH
>> > > > login (with root user) did not work also.
>> > > > 
>> > > > When I uncommented the setting "memcache_timeout = 600" in the sssd config
>> > > > file of the master everything seemed to work fine again. (my ipa setup has a
>> > > > trust to AD)
>> > > > 
>> > > I doubt it had anything to do memcache_timeout.
>> > > I would say that restart of sssd helped. But it difficult to say
>> > > without log files. either sssd logs or at least /var/log/secure
>> > > (journald for pam).
>> > You were right. I uncommented the setting and the problem ocurred again.
>> > 
>> Did you find anything suspicious in journald?
>> Is sssd_be busy (or any other process)?
>> high CPU, IO operations ...
>> 
>> It would be good to know more details. Restarting sssd is not a solution.
>
>sssd_be consumed a lot of CPU and produced a lot of I/O in the sssd cache
>directory. After following https://jhrozek.wordpress.com/2015/08/19/performance-tuning-sssd-for-large-ipa-ad-trust-deployments/
>the problems did nod reappear.
>
Did you try all recommended steps or just few?

Do you know which one was the most useful in your case?

LS