All three of my IPA servers have this health check failing:
[root@ipa3 ~]# ipa-healthcheck --source
pki.server.healthcheck.clones.connectivity_and_data --check
ClonesConnectivyAndDataCheck --output-type=human
Internal server error 'Link'
ERROR:
pki.server.healthcheck.clones.connectivity_and_data.ClonesConnectivyAndDataCheck
[root@ipa5 ~]# ipa-healthcheck
--source=pki.server.healthcheck.clones.connectivity_and_data
--check=ClonesConnectivyAndDataCheck --output-type=human
Internal server error 'Link'
Unable to reach KRA at https://ipa5.ipa.robots.org.uk:443: Request timed out
ERROR:
pki.server.healthcheck.clones.connectivity_and_data.ClonesConnectivyAndDataCheck
ERROR:
pki.server.healthcheck.clones.connectivity_and_data.ClonesConnectivyAndDataCheck
[root@ipa6 ~]# ipa-healthcheck
--source=pki.server.healthcheck.clones.connectivity_and_data
--check=ClonesConnectivyAndDataCheck --output-type=human
Unable to reach KRA at https://ipa6.ipa.robots.org.uk:443: Request timed out
ERROR:
pki.server.healthcheck.clones.connectivity_and_data.ClonesConnectivyAndDataCheck
[root@ipa6 ~]# java.io.FileNotFoundException: /tmp/tmpc4h9ypzo/password.txt
(No such file or directory)
at java.base/java.io.FileInputStream.open0(Native Method)
at java.base/java.io.FileInputStream.open(FileInputStream.java:216)
at
java.base/java.io.FileInputStream.<init>(FileInputStream.java:157)
at
java.base/java.io.FileInputStream.<init>(FileInputStream.java:111)
at java.base/java.io.FileReader.<init>(FileReader.java:60)
at com.netscape.cmstools.cli.MainCLI.loadPassword(MainCLI.java:241)
at com.netscape.cmstools.cli.MainCLI.parseOptions(MainCLI.java:416)
at com.netscape.cmstools.cli.MainCLI.execute(MainCLI.java:647)
at com.netscape.cmstools.cli.MainCLI.main(MainCLI.java:698)
The problem is the timeout mechanism implemented in
ipahealthcheck.core.core:run_plugin; it turns out that 10 seconds is not
sufficient in my case.
Plugin
<pki.server.healthcheck.clones.connectivity_and_data.ClonesConnectivyAndDataCheck
object at 0x7fe02c4992b0> elapsed time: 0:00:16.857277 sec
I've bumped the timeout to 30 seconds in
/etc/ipahealthcheck/ipahealthcheck.conf and all is well.
I wonder if others are running into this problem as well? If so it may
be worth making this change by default in ipa-healtcheck. Or maybe my
IPA servers are slower than everyone else's... :)
--
Sam Morris <https://robots.org.uk/>
PGP: rsa4096/CAAA AA1A CA69 A83A 892B 1855 D20B 4202 5CDA 27B9
--
_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org
Do not reply to spam, report it:
https://pagure.io/fedora-infrastructure/new_issue
