risto hartikainen via FreeIPA-users wrote: > Hello people > > Could I have advice how to debug why slapd on ipa server is constantly using > 15-30% cpu.. this behaviour started on ca master after successful migration > from rhel7 to latest rhel 8.9. > > There were no problems during migration, there were only 2 ipa nodes to > upgrade. Immediately after upgrade everything was fine but after 24 hours ipa > server that is also ca master, started using cpu more way more than second > ipa server. All ipa related operations and commands are slow but work. Error > log for dirsrv is clean. I used crontab to run ipa-backup during night and > that is only operation that has happened after migration. > > I dont have deeper knowledge about ipa nor ldap so I thought that perhaps > fresh replica from second ipa server could help, it didnt. I used > ipa-replica-manage re-initialize from other node, no errors with that one but > didnt do any good. > > After this I tried ipa-replica-manage list-ruv but I am not sure how to > interpret result: > > [root@ipa user]# ipa-replica-manage list-ruv > Directory Manager password: > > Replica Update Vectors: > primary.ipa.server:389: 30 > secondary.ipa.server:389: 28 > primary.ipa.server:389: 26 > Certificate Server Replica Update Vectors: > primary.ipa.server:389: 31 > secondary.ipa.server:389: 29 > primary.ipa.server:389: 24 > primary.ipa.server:389: 23 > primary.ipa.server:389: 22 > primary.ipa.server:389: 21 > primary.ipa.server:389: 18 > primary.ipa.server:389: 17 > primary.ipa.server:389: 16 > [root@ipa user]# > > This ipa service setup is old and has had many migrations over the time, > starting from rhel6. Does this output mean there are duplicate & obsolete > replication agreements? Could this be the reason why slapd is using so much > cpu? > > Any help is appreciated!
ipa-replica-manage clean-dangling-ruv will remove any unnecessary (dangling) RUVs. The most common cause for them was domail-level 0 installs that were removed. Since this dates back to RHEL 6 that's very possible. I don't know that this accounts for all the CPU usage. rob -- _______________________________________________ FreeIPA-users mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/[email protected] Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
