Hi Flo,
  Thanks for the tips.  Fortunately rebooting the server fixed the issue.

I did activate some debug logging, but the amount of logging is enormous on a 
live active server though so it was going to be tough to correlate.  I couldn't 
leave debugging enabled for long before resetting back to defaults and failed 
to correlate anything useful on my first attempt.  Was going to try again after 
hours, but the reboot fixed it (and was reasonably safe as we have multiple 
replicas).   

Just for future reference in case I end up here again:

I activated the plugin-logging:

ldapmodify -D "cn=directory manager" -W <<EOF
dn: cn=config
changetype: modify
replace: nsslapd-plugin-logging
nsslapd-plugin-logging: on
EOF

Then set error log level to everything:
ldapmodify -D "cn=directory manager" -W <<EOF
dn: cn=config
changetype: modify
replace: nsslapd-errorlog-level
nsslapd-errorlog-level: 16384
EOF

And access log level to everything:
ldapmodify -D "cn=directory manager" -W <<EOF
dn: cn=config
changetype: modify
replace: nsslapd-accesslog-level
nsslapd-accesslog-level: 772
EOF
_______________________________________________
FreeIPA-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/[email protected]
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Reply via email to