<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">On 04/13/2015 08:23 AM, Thomas Lau
wrote:<br>
</div>
<blockquote
cite="mid:CAEZt6eDiC=waUoNZUCxDF35vbLBKHb+MpYz=zjGuFa07We9+AA@mail.gmail.com"
type="cite">
<p dir="ltr">Hi, </p>
<p dir="ltr">These problem appear randomly, sometime it still work
even under heavy packet loss, some times would be like this. So
its hard to catch. </p>
<div class="gmail_quote">On Apr 13, 2015 3:22 PM, "Jakub Hrozek"
<<a moz-do-not-send="true" href="mailto:jhrozek@redhat.com">jhrozek@redhat.com</a>>
wrote:<br type="attribution">
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">On Mon, Apr
13, 2015 at 01:15:09PM +0800, Thomas Lau wrote:<br>
> Hi all,<br>
><br>
> We have cronjob which running on a FreeIPA LDAP user;
When connection<br>
> between IPA server and client having heavy packet loss,
following<br>
> error would occur:<br>
><br>
> CRON[20637]: Authentication service cannot retrieve
authentication info<br>
><br>
> I have cache credentials and store password if offline
enabled on<br>
> sssd, how these problem would still happening?<br>
</blockquote>
</div>
</blockquote>
<br>
It might be that the cause of the problem is actually the packet
loss or some kind of delay.<br>
SSSD might not think that it is offline but cron job itself times
out and reports failure.<br>
Do you know what operation in the job fails?<br>
<br>
<br>
<blockquote
cite="mid:CAEZt6eDiC=waUoNZUCxDF35vbLBKHb+MpYz=zjGuFa07We9+AA@mail.gmail.com"
type="cite">
<div class="gmail_quote">
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">
><br>
><br>
> sssd.conf:<br>
><br>
> cache_credentials = True<br>
> krb5_store_password_if_offline = True<br>
<br>
Did the use log in at least once offline? You can verify if
the password<br>
has been cached using the ldbsearch utility. It would be best
to catch<br>
the occurence of the problem in logs.<br>
<br>
--<br>
Manage your subscription for the Freeipa-users mailing list:<br>
<a moz-do-not-send="true"
href="https://www.redhat.com/mailman/listinfo/freeipa-users"
target="_blank">https://www.redhat.com/mailman/listinfo/freeipa-users</a><br>
Go to <a moz-do-not-send="true" href="http://freeipa.org"
target="_blank">http://freeipa.org</a> for more info on the
project<br>
</blockquote>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
</blockquote>
<br>
<br>
<pre class="moz-signature" cols="72">--
Thank you,
Dmitri Pal
Sr. Engineering Manager IdM portfolio
Red Hat, Inc.</pre>
</body>
</html>