-
Bug
-
Resolution: Done-Errata
-
Undefined
-
rhel-9.3.0
-
sssd-2.9.4-1.el9
-
None
-
None
-
ZStream
-
rhel-sst-idm-sssd
-
ssg_idm
-
20
-
21
-
0
-
Dev ack
-
False
-
-
None
-
Red Hat Enterprise Linux
-
None
-
Approved Blocker
-
Pass
-
None
-
None
This is a clone of issue RHEL-18431 to use for version rhel-9.5.0
–
Original description:
What were you trying to do that didn't work?
After upgrading to RHEL 8.9, SSSD produces thousands of "Unknown domain" messages a minute in the sssd_nss.log & sssd_be.log files. Setting 'debug_level = 0' does not stop the logging.
The host has a direct AD integration in a multi-domain forest. All of the unknown domains in the logs are excluded from the 'ad_enabled_domains' setting in sssd.conf
Please provide the package NVR for which bug is seen:
sssd-2.9.1-4.el8_9.x86_64
sssd-ad-2.9.1-4.el8_9.x86_64
sssd-client-2.9.1-4.el8_9.x86_64
sssd-common-2.9.1-4.el8_9.x86_64
sssd-common-pac-2.9.1-4.el8_9.x86_64
sssd-dbus-2.9.1-4.el8_9.x86_64
sssd-ipa-2.9.1-4.el8_9.x86_64
sssd-kcm-2.9.1-4.el8_9.x86_64
sssd-krb5-2.9.1-4.el8_9.x86_64
sssd-krb5-common-2.9.1-4.el8_9.x86_64
sssd-ldap-2.9.1-4.el8_9.x86_64
sssd-nfs-idmap-2.9.1-4.el8_9.x86_64
sssd-proxy-2.9.1-4.el8_9.x86_64
sssd-tools-2.9.1-4.el8_9.x86_64
How reproducible:
Steps to reproduce
Expected results
Actual results
- clones
-
RHEL-18431 Excessive logging to sssd_nss and sssd_be in multi-domain AD forest
- Closed
- links to
-
RHBA-2023:121961 sssd bug fix and enhancement update
- mentioned on