如何解决SSSD意外终止的问题?

目录或认证服务

1 前言

一个问题,一篇文章,一出故事。
笔者最近新部署的SFTP需要使用域认证,因此使用到SSSD,最近该服务偶尔意外退出,相见错误如下,

Feb 16 06:07:11 azsftp01 sssd[2420271]: Child [3566589] ('cmdschool.com':'%BE_cmdschool.com') was terminated by own WATCHDOG. Consult corresponding logs 
to figure out the reason.
Feb 16 06:07:11 azsftp01 sssd_be[3719968]: Starting up
Feb 16 06:07:35 azsftp01 sssd[2420271]: Child [3566590] ('nss':'nss') was terminated by own WATCHDOG. Consult corresponding logs to figure out the reason.
Feb 16 06:07:35 azsftp01 sssd_nss[3719976]: Starting up
Feb 16 06:07:35 azsftp01 sssd[2420271]: Child [3566591] ('pam':'pam') was terminated by own WATCHDOG. Consult corresponding logs to figure out the reason.
Feb 16 06:07:35 azsftp01 sssd[2420271]: Child [3566592] ('pac':'pac') was terminated by own WATCHDOG. Consult corresponding logs to figure out the reason.
Feb 16 06:07:35 azsftp01 sssd_pam[3719978]: Starting up
Feb 16 06:07:35 azsftp01 sssd_pac[3719979]: Starting up
Feb 16 06:07:42 azsftp01 sssd[2420271]: Child [3719968] ('cmdschool.com':'%BE_cmdschool.com') was terminated by own WATCHDOG. Consult corresponding logs to figure out the reason.
Feb 16 06:07:42 azsftp01 sssd_be[3719980]: Starting up
Feb 16 06:07:44 azsftp01 sssd_nss[3719981]: Starting up
Feb 16 06:07:44 azsftp01 sssd_pam[3719983]: Starting up
Feb 16 06:07:44 azsftp01 sssd_pac[3719982]: Starting up
Feb 16 06:08:13 azsftp01 sssd[2420271]: Child [3719980] ('cmdschool.com':'%BE_cmdschool.com') was terminated by own WATCHDOG. Consult corresponding logs to figure out the reason.
Feb 16 06:08:13 azsftp01 sssd_be[3719989]: Starting up
Feb 16 06:08:17 azsftp01 sssd_nss[3719993]: Starting up
Feb 16 06:08:17 azsftp01 sssd_pam[3719995]: Starting up
Feb 16 06:08:17 azsftp01 sssd_pac[3719994]: Starting up
Feb 16 06:08:44 azsftp01 sssd[2420271]: Child [3719989] ('cmdschool.com':'%BE_cmdschool.com') was terminated by own WATCHDOG. Consult corresponding logs to figure out the reason.
Feb 16 06:08:44 azsftp01 sssd[2420271]: Exiting the SSSD. Could not restart critical service [nss].
Feb 16 06:08:44 azsftp01 sssd_be[3671148]: Shutting down (status = 0)
Feb 16 06:08:44 azsftp01 systemd[1]: sssd.service: Main process exited, code=exited, status=1/FAILURE
Feb 16 06:08:44 azsftp01 systemd[1]: sssd.service: Failed with result 'exit-code'.
Feb 16 06:08:44 azsftp01 systemd[1]: sssd.service: Consumed 12min 53.873s CPU time.

2 最佳实践

2.1 修改配置文件开启域的调试模式

vim /etc/sssd/sssd.conf

开启域的调试模式,如果有多个域则每域都开启,

[domain/cmdschool.org]
debug_level = 9

[domain/cmdschool.com]
debug_level = 9

2.2 重启服务使配置生效

systemctl restart sssd

2.3 等待下次错误并检查日志

ls /var/log/sssd
没有评论

发表回复

目录或认证服务
如何解决SSSD初始化凭据预认证失败?

1 前言 一个问题,一篇文章,一出故事。 笔者生产环境的SSSD服务器遇到用户无法登录,然后“/va …

目录或认证服务
如何解决SSSD的用户条目的UPN与PAC不匹配问题?

1 前言 一个问题,一篇文章,一出故事。 今天遇到域用户输入正确的用户名和密码不能登录问题,详细错误 …

目录或认证服务
如何解决SSSD的多域用户ID冲突问题?

1 前言 一个问题,一篇文章,一出故事。 笔者在生产环境中遇到SSSD因为同时使用两个不同的域导致U …