#4114 sssd failover leads to delayed and failed logins
Closed: Fixed 4 years ago by pbrezina. Opened 4 years ago by sbose.

Ticket was cloned from Red Hat Bugzilla (product Red Hat Enterprise Linux 7): Bug 1769755

Description of problem:
During testing IPA deployment in my customers environment and running various
fail over test scenarios, we recognized that under some circumstances, fail
over didn't work as expected and resulted in failed or delayed (~ 60 - 70
seconds) logins.

Version-Release number of selected component (if applicable): 1.16.4


How reproducible: Always.


Steps to Reproduce:
1. Client connected to two IPA servers (A and B)
2. Cut connection to server A
3. Login to client
4. Allow connection to server A
5. Cut connection to server B

If you keep doing this repeatedly, at some point the fail back from B to A
doesn't work; SSSD takes a very long time to recognize the connection to server
A is restored and uses it again.

Actual results: Logins delayed or not working at all


Expected results: Fail over + fail back work smoothly


Additional info:
* This was already analysed by Sumit Bose and he has a fix for it available.
* Customer case will be linked.
* Exception set to ?
* We'll need this fix in 7.7 z-stream (for EUS) later as well
* It also applies to RHEL 8 AFAIK

Metadata Update from @sbose:
- Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=1769755

4 years ago

Metadata Update from @sbose:
- Issue assigned to sbose

4 years ago

Metadata Update from @sbose:
- Custom field patch adjusted to on

4 years ago

Commit 707fdf0 relates to this ticket

Commit b9a53cf relates to this ticket

  • master
    • 707fdf0 - ipa: add failover to access checks
    • b9a53cf - ipa: add failover to override lookups

Metadata Update from @pbrezina:
- Issue close_status updated to: Fixed
- Issue status updated to: Closed (was: Open)

4 years ago
  • sssd-1-16
    • 4897063 - ipa: add failover to override lookups
    • a4dd1eb - ipa: add failover to access checks

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/5075

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.

Login to comment on this ticket.

Metadata