Red Hat Summit Red Hat SummitSupportConsoleDevelopersStart a trialContact

Appendix A. Collecting Information for Troubleshooting IdM and SSSD Running in a Container

This appendix describes procedures that help you to troubleshoot IdM and SSSD running in a container, as well as collecting important configuration and log files that you can attach to Red Hat support tickets.

A.1. Creating an sosreport on Atomic Host
Copy link

This section describes how to install and start the rhel7/rhel-tools container, as well as creating an sosreport.

The rhel7/rhel-tools container uses privileged security switches that enables processes running in this container:

  • To interact with all semaphores and shared memory segments on the host
  • To listen to ports and raw IP traffic on the host’s network
  • Interact with all processes on the host

Note that rhel7/rhel-tools runs without any separation from the host. Using the utilities provided by this container is similar as running them as the root user directly on the system.

Procedure

  1. Install the rhel7/rhel-tools container: 

    # docker pull rhel7/rhel-tools
    Copy to Clipboard Toggle word wrap

  2. Start the rhel7/rhel-tools container: 

    # atomic run rhel7/rhel-tools
    Copy to Clipboard Toggle word wrap

  3. Run the sosreport utility: 

    # sosreport
    Copy to Clipboard Toggle word wrap

    The utility stores the archive of the collected information in the /host/var/tmp/sos_tal4k_* file.

  4. Enter exit to leave the container. 

    # exit
    Copy to Clipboard Toggle word wrap
  5. Attach the sosreport archive to a support request.

This section describes how to display the version of installed IdM and SSSD containers. For example, use this information to search the Red Hat Enterprise Linux Release Notes if a problem has been fixed in a newer version.

Procedure

  • Display the version of the rhel7/ipa-server container: 

    # atomic images version rhel7/ipa-server
IMAGE NAME                                            VERSION   IMAGE ID
registry.access.redhat.com/rhel7/ipa-server:latest    4.6.5-29  9d500a8e4296
    Copy to Clipboard Toggle word wrap

  • Display the version of the rhel7/sssd container: 

    # atomic images version rhel7/sssd
IMAGE NAME                                       VERSION   IMAGE ID
registry.access.redhat.com/rhel7/sssd:latest     7.7-12    19e5cab1c905
    Copy to Clipboard Toggle word wrap

This section describes how to create an archive with important SSSD configuration and log files.

Procedure

  1. Stop the sssd container: 

    # docker stop sssd
    Copy to Clipboard Toggle word wrap

  2. Remove the contents of the SSSD cache and log directories: 

    # rm -rf /var/lib/sss/db/* /var/lib/sss/mc/* /var/log/sssd/*
    Copy to Clipboard Toggle word wrap

  3. Edit the /etc/sssd/sssd.conf file, and set the debug_level parameters to 9: 

    [domain/dockerlab.local]
...
debug_level = 9

[nss]
debug_level = 9
    Copy to Clipboard Toggle word wrap

  4. Start the sssd container: 

    docker start sssd
    Copy to Clipboard Toggle word wrap

  5. Create the /tmp/sssd-debug.tar.gz archive that contains the relevant SSSD configuration and log files: 

    # tar czvf /tmp/sssd-debug.tar.gz /etc/sssd/sssd.conf  /etc/nsswitch.conf /etc/krb5.conf /etc/pam.d /etc/samba/smb.conf /var/log/secure /var/log/messages /var/log/sssd
    Copy to Clipboard Toggle word wrap
  6. Attach the /tmp/sssd-debug.tar.gz file to the support case.

A.4. Displaying the IdM client installation log
Copy link

This section describes how you display the IdM client installation log. The log files help you to debug the problem if the client installation fails.

Procedure

  • To display the IdM client installation log: 

    # cat /var/log/sssd/install/ipaclient-install.log
    Copy to Clipboard Toggle word wrap
Back to top
Red Hat logoGithubredditYoutubeTwitter

Learn

Try, buy, & sell

Communities

About Red Hat Documentation

We help Red Hat users innovate and achieve their goals with our products and services with content they can trust. Explore our recent updates.

Making open source more inclusive

Red Hat is committed to replacing problematic language in our code, documentation, and web properties. For more details, see the Red Hat Blog.

About Red Hat

We deliver hardened solutions that make it easier for enterprises to work across platforms and environments, from the core datacenter to the network edge.

Theme

© 2025 Red Hat