Hello people
Could I have advice how to debug why slapd on ipa server is constantly using
15-30% cpu.. this behaviour started on ca master after successful migration
from rhel7 to latest rhel 8.9.
There were no problems during migration, there were only 2 ipa nodes to
upgrade. Immediately after upgrade everything was fine but after 24 hours ipa
server that is also ca master, started using cpu more way more than second ipa
server. All ipa related operations and commands are slow but work. Error log
for dirsrv is clean. I used crontab to run ipa-backup during night and that is
only operation that has happened after migration.
I dont have deeper knowledge about ipa nor ldap so I thought that perhaps fresh
replica from second ipa server could help, it didnt. I used ipa-replica-manage
re-initialize from other node, no errors with that one but didnt do any good.
After this I tried ipa-replica-manage list-ruv but I am not sure how to
interpret result:
[root@ipa user]# ipa-replica-manage list-ruv
Directory Manager password:
Replica Update Vectors:
primary.ipa.server:389: 30
secondary.ipa.server:389: 28
primary.ipa.server:389: 26
Certificate Server Replica Update Vectors:
primary.ipa.server:389: 31
secondary.ipa.server:389: 29
primary.ipa.server:389: 24
primary.ipa.server:389: 23
primary.ipa.server:389: 22
primary.ipa.server:389: 21
primary.ipa.server:389: 18
primary.ipa.server:389: 17
primary.ipa.server:389: 16
[root@ipa user]#
This ipa service setup is old and has had many migrations over the time,
starting from rhel6. Does this output mean there are duplicate & obsolete
replication agreements? Could this be the reason why slapd is using so much
cpu?
Any help is appreciated!
Risto
--
_______________________________________________
FreeIPA-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/[email protected]
Do not reply to spam, report it:
https://pagure.io/fedora-infrastructure/new_issue
