dweller dweller via FreeIPA-users wrote: > Hi, Rob. > >> What does happen will depend on what version of IPA/389-ds-base you have > Using these at the moment. If you share some insight I would be greatful. > > [root@ipa ~]# rpm -qa | grep -E 'ipa-server|389-ds' > 389-ds-base-1.4.3.28-6.module_el8.6.0+1102+fe5d910f.x86_64 > ipa-server-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64
Ok, seems new enough to include the changes. IIRC it was something about not running full automember on mods. We do not recommend mixing releases together though. It looks like you have a mix of 8.6 and 8.7 packages. Mixing is not tested. In most cases it's fine but in others... >> memberof can also be an expensive operation > Can you elaborate more on this? Whenever a membership is changed the whole memberof may be recalculated, particularly when there is nesting. We may need to engage someone from the 389-ds team for the automember hangup. They'll probably want you to get a pstack. You can learn how on their troubleshooting page. rob _______________________________________________ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue