Sssd.service times out after machine (vm) startup

NethServer Version: 7.3 updated to 7.4
Module: samba

Users can’t login to access shares and cannot login to the web gui, nextcloud user clients can log in, this is what I could find in the logs afterwards… does this say anything useful to anyone?

Oct 18 12:55:26 server7c systemd: Started Samba SMB Daemon.
Oct 18 12:55:26 server7c smbd[1587]: [2017/10/18 12:55:26.451084,  0] ../lib/util/become_daemon.c:124(daemon_ready)
Oct 18 12:55:26 server7c smbd[1587]:  STATUS=daemon 'smbd' finished starting up and ready to serve connections
Oct 18 12:55:27 server7c smbd[1587]: [2017/10/18 12:55:27.460498,  0] ../source3/printing/nt_printing.c:187(nt_printing_init)
Oct 18 12:55:27 server7c smbd[1587]:  nt_printing_init: error checking published printers: WERR_ACCESS_DENIED
Oct 18 12:55:28 server7c systemd: Started The Apache HTTP Server.
Oct 18 12:55:30 server7c systemd: Started Dynamic System Tuning Daemon.
Oct 18 12:55:30 server7c kernel: nf_conntrack version 0.5.0 (16384 buckets, 65536 max)
Oct 18 12:55:32 server7c nmbd[1346]: [2017/10/18 12:55:32.408085,  0] ../source3/nmbd/nmbd_become_lmb.c:397(become_local_master_stage2)
Oct 18 12:55:32 server7c nmbd[1346]:  *****
Oct 18 12:55:32 server7c nmbd[1346]:  
Oct 18 12:55:32 server7c nmbd[1346]:  Samba name server SERVER7C is now a local master browser for workgroup domain on subnet 192.168.124.227
Oct 18 12:55:32 server7c nmbd[1346]:  
Oct 18 12:55:32 server7c nmbd[1346]:  *****
Oct 18 12:55:45 server7c systemd: Started MariaDB database server.
Oct 18 12:55:45 server7c shorewall: IPv4 Forwarding Enabled
Oct 18 12:55:45 server7c shorewall: Processing /etc/shorewall/start ...
Oct 18 12:55:46 server7c shorewall: Processing /etc/shorewall/started ...
Oct 18 12:55:46 server7c logger: Shorewall started
Oct 18 12:55:46 server7c shorewall: done.
Oct 18 12:55:46 server7c systemd: Started Shorewall IPv4 firewall.
Oct 18 12:56:01 server7c sshd[1997]: Did not receive identification string from 192.168.124.107 port 65503
Oct 18 12:56:05 server7c collectd[998]: rrdtool plugin: rrd_update_r (/var/lib/collectd/rrd/server7c.domain.com/swap/swap-cached.rrd) failed: /var/lib/collectd/rrd/server7c.domain.com/swap/swap-cached.rrd: illegal attempt to update using time 1508356516 when last update time is 1508356516 (minimum one second step)
Oct 18 12:56:05 server7c collectd[998]: rrdtool plugin: rrd_update_r (/var/lib/collectd/rrd/server7c.domain.com/swap/percent-free.rrd) failed: /var/lib/collectd/rrd/server7c.domain.com/swap/percent-free.rrd: illegal attempt to update using time 1508356516 when last update time is 1508356516 (minimum one second step)
.....................................
Oct 18 12:56:15 server7c collectd[998]: rrdtool plugin: rrd_update_r (/var/lib/collectd/rrd/server7c.domain.com/cpu-1/cpu-softirq.rrd) failed: /var/lib/collectd/rrd/server7c.domain.com/cpu-1/cpu-softirq.rrd: illegal attempt to update using time 1508356516 when last update time is 1508356516 (minimum one second step)
Oct 18 12:56:16 server7c collectd[998]: rrdtool plugin: rrd_update_r (/var/lib/collectd/rrd/server7c.domain.com/df-home/df_complex-free.rrd) failed: /var/lib/collectd/rrd/server7c.domain.com/df-home/df_complex-free.rrd: illegal attempt to update using time 1508356516 when last update time is 1508356516 (minimum one second step)
Oct 18 12:56:16 server7c collectd[998]: rrdtool plugin: rrd_update_r (/var/lib/collectd/rrd/server7c.domain.com/df-home/df_complex-used.rrd) failed: /var/lib/collectd/rrd/server7c.domain.com/df-home/df_complex-used.rrd: illegal attempt to update using time 1508356516 when last update time is 1508356516 (minimum one second step)
Oct 18 12:56:23 server7c systemd: sssd.service start operation timed out. Terminating.
Oct 18 12:56:23 server7c sssd[be[domain.com]]: Shutting down
Oct 18 12:56:23 server7c sssd[nss]: Shutting down
Oct 18 12:56:23 server7c sssd[pam]: Shutting down
Oct 18 12:56:23 server7c systemd: Failed to start System Security Services Daemon.
Oct 18 12:56:23 server7c systemd: Unit sssd.service entered failed state.
Oct 18 12:56:23 server7c systemd: sssd.service failed.
Oct 18 12:56:23 server7c systemd: Reached target User and Group Name Lookups.
Oct 18 12:56:23 server7c systemd: Starting User and Group Name Lookups.
Oct 18 12:56:23 server7c systemd: Starting Login Service...
Oct 18 12:56:23 server7c systemd: Starting Permit User Sessions...
Oct 18 12:56:23 server7c systemd: Started Login Service.
Oct 18 12:56:23 server7c systemd-logind: Watching system buttons on /dev/input/event0 (Power Button)
Oct 18 12:56:23 server7c systemd-logind: Watching system buttons on /dev/input/event1 (Sleep Button)
Oct 18 12:56:23 server7c systemd-logind: Watching system buttons on /dev/input/event4 (Video Bus)
Oct 18 12:56:23 server7c systemd-logind: New seat seat0.
Oct 18 12:56:23 server7c systemd: Started Permit User Sessions.
Oct 18 12:56:23 server7c systemd: Starting Terminate Plymouth Boot Screen...
Oct 18 12:56:23 server7c systemd: Started Command Scheduler.
Oct 18 12:56:23 server7c systemd: Starting Command Scheduler...
Oct 18 12:56:23 server7c systemd: Starting Wait for Plymouth Boot Screen to Quit...
Oct 18 12:56:23 server7c systemd: Received SIGRTMIN+21 from PID 271 (plymouthd).
Oct 18 12:56:23 server7c systemd: Started Terminate Plymouth Boot Screen.
Oct 18 12:56:23 server7c systemd: Started Wait for Plymouth Boot Screen to Quit.
Oct 18 12:56:23 server7c systemd: Started Getty on tty1.
Oct 18 12:56:23 server7c systemd: Starting Getty on tty1...
Oct 18 12:56:23 server7c systemd: Reached target Login Prompts.
Oct 18 12:56:23 server7c systemd: Starting Login Prompts.
Oct 18 12:56:23 server7c systemd: Reached target Multi-User System.
Oct 18 12:56:23 server7c systemd: Starting Multi-User System.
Oct 18 12:56:23 server7c systemd: Starting Update UTMP about System Runlevel Changes...
Oct 18 12:56:23 server7c systemd: Started Update UTMP about System Runlevel Changes.
Oct 18 12:56:23 server7c systemd: Startup finished in 756ms (kernel) + 6.786s (initrd) + 2min 22.041s (userspace) = 2min 29.584s.
Oct 18 12:57:15 server7c collectd[998]: rrdtool plugin: rrd_update_r (/var/lib/collectd/rrd/server7c.domain.com/ping/ping-192.168.124.2.rrd) failed: /var/lib/collectd/rrd/server7c.domain.com/ping/ping-192.168.124.2.rrd: illegal attempt to update using time 1508356516 when last update time is 1508356516 (minimum one second step)

Also this…
post reboot where users were again able to login to shares.

Oct 18 14:05:23 server7c admin-todos: [ERROR] admin-todos: /etc/nethserver/todos.d/50restore-modules exit code 9
Oct 18 14:05:59 server7c chronyd[686]: Selected source 96.126.105.86
Oct 18 14:06:00 server7c sssd: ; TSIG error with server: tsig verify failure
Oct 18 14:06:00 server7c sssd: update failed: SERVFAIL
Oct 18 14:06:00 server7c sssd: ; TSIG error with server: tsig verify failure
Oct 18 14:06:00 server7c sssd: update failed: SERVFAIL
Oct 18 14:06:00 server7c sssd: ; TSIG error with server: tsig verify failure
Oct 18 14:06:00 server7c sssd: update failed: SERVFAIL
Oct 18 14:06:00 server7c sssd: ; TSIG error with server: tsig verify failure
Oct 18 14:06:00 server7c sssd: update failed: SERVFAIL
Oct 18 14:06:00 server7c sssd: tkey query failed: GSSAPI error: Major = Unspecified GSS failure.  Minor code may provide more information, Minor = Server not found in Kerberos database.
Oct 18 14:06:00 server7c sssd: tkey query failed: GSSAPI error: Major = Unspecified GSS failure.  Minor code may provide more information, Minor = Server not found in Kerberos database.
Oct 18 14:06:00 server7c sssd: tkey query failed: GSSAPI error: Major = Unspecified GSS failure.  Minor code may provide more information, Minor = Server not found in Kerberos database.

Could you paste the output of

 systemctl status sssd

Did you install latest upstream updates?

I haven’t installed today’s 7.4 update but it was updated 2 days ago after fixing the rpm db thing. I haven’t had any issues with Samba since a reboot the day I posted this.

[root@server7c ~]# systemctl status sssd
● sssd.service - System Security Services Daemon
   Loaded: loaded (/usr/lib/systemd/system/sssd.service; enabled; vendor preset: disabled)
  Drop-In: /etc/systemd/system/sssd.service.d
           └─journal.conf
   Active: active (running) since Sat 2017-10-21 12:21:16 MST; 2 days ago
 Main PID: 1069 (sssd)
   CGroup: /system.slice/sssd.service
           ├─1069 /usr/sbin/sssd -i -f
           ├─1161 /usr/libexec/sssd/sssd_be --burglwe burglwe.com --uid 0 --gid 0 --debug-to-files
           ├─1343 /usr/libexec/sssd/sssd_nss --uid 0 --gid 0 --debug-to-files
           └─1344 /usr/libexec/sssd/sssd_pam --uid 0 --gid 0 --debug-to-files

Oct 23 12:23:37 server7c.burglwe.com sssd_be[1161]: GSSAPI client step 1
Oct 23 12:23:37 server7c.burglwe.com sssd_be[1161]: GSSAPI client step 2
Oct 23 12:32:32 server7c.burglwe.com sssd_be[1161]: GSSAPI client step 1
Oct 23 12:32:32 server7c.burglwe.com sssd_be[1161]: GSSAPI client step 1
Oct 23 12:32:32 server7c.burglwe.com sssd_be[1161]: GSSAPI client step 1
Oct 23 12:32:32 server7c.burglwe.com sssd_be[1161]: GSSAPI client step 2
Oct 23 12:38:37 server7c.burglwe.com sssd_be[1161]: GSSAPI client step 1
Oct 23 12:38:37 server7c.burglwe.com sssd_be[1161]: GSSAPI client step 1
Oct 23 12:38:37 server7c.burglwe.com sssd_be[1161]: GSSAPI client step 1
Oct 23 12:38:37 server7c.burglwe.com sssd_be[1161]: GSSAPI client step 2