<html><body>Hi Jakub, I changed the DNS server in resolv.conf to a closer IPA server and it seems to be stable now. If it bombs out again I will get more info but right now I don't think we will see anything. I also found this though from yesterday /var/log/sssd/check# cat sssd_watson.local.log.1 (Mon Jan 11 22:43:40 2016) [sssd[be[watson.local]]] [id_callback] (0x0010): The Monitor returned an error [org.freedesktop.DBus.Error.NoReply] Sean Hogan Security Engineer Watson Security & Risk Assurance Watson Cloud Technology and Support email: schogan@us.ibm.com | Tel 919 486 1397 <img src="cid:1__=88BBF5ABDFF181408f9e8a93df938690918c88B@" width="67" height="53" align="top"> <img src="cid:2__=88BBF5ABDFF181408f9e8a93df938690918c88B@" width="60" height="51" align="top"> <img width="16" height="16" src="cid:3__=88BBF5ABDFF181408f9e8a93df938690918c88B@" border="0" alt="Inactive hide details for Jakub Hrozek ---01/12/2016 09:46:51 AM---On Tue, Jan 12, 2016 at 09:06:36AM -0700, Sean Hogan wrote: ">Jakub Hrozek ---01/12/2016 09:46:51 AM---On Tue, Jan 12, 2016 at 09:06:36AM -0700, Sean Hogan wrote: > From: Jakub Hrozek <jhrozek@redhat.com> To: freeipa-users@redhat.com Date: 01/12/2016 09:46 AM Subject: Re: [Freeipa-users] SSSD Child not responding Sent by: freeipa-users-bounces@redhat.com <hr width="100%" size="2" align="left" noshade style="color:#8091A5; "> <tt>On Tue, Jan 12, 2016 at 09:06:36AM -0700, Sean Hogan wrote: > > > Hi all, > > Over the past couple of months we have been seeing the sssd process eat > up 100% cpu and not allowing anyone to log on. Krb5.conf is set for DNS > discovery, RHEL 6.6. If we kill the java process it clears up the box and > able to log back into it. This is due to IBM java ibmjgssprovider.jar but > fixes for that are in place. What we do see in the sssd.log is below .. > has anyone seen this before? > > SSSD enumerate is set to false, 120 timeout Can you get a pstack of the child that is not responding? -- Manage your subscription for the Freeipa-users mailing list: </tt><tt><a href="https://www.redhat.com/mailman/listinfo/freeipa-users">https://www.redhat.com/mailman/listinfo/freeipa-users</a></tt><tt> Go to </tt><tt><a href="http://freeipa.org">http://freeipa.org</a></tt><tt> for more info on the project </tt> </body></html>