>> I have a problem using freeipa version 3.0.0-50 on CentOS release 6.8. The 
>> problem manifests itself as no authentication, and no DNS.
>> It seems Kerberos just stops responding to requests and requests just
>> get queued up # netstat -tuna | grep SYN_RECV Active Internet
>> connections (servers and established)
>> Proto Recv-Q Send-Q Local Address               Foreign Address             
>> State
>> tcp        0             0           <server IP>:88               <client1 
>> IP>:55440         SYN_RECV
>> tcp        0             0           <server IP>:88               <client 2 
>> IP>:40076        SYN_RECV
>> Looking at /var/log/krb5kdc.log
>> The normal activity of AS_REQ and TGS_REC messages just stops. No error 
>> messages. Just  no new messages.

>The problem isn't in Kerberos or DNS, ns-slapd is hanging. See this, 

Thanks for that. I've taken a look at the stacktrace of out ns-slapd for our 
realm. But the stacktrace doesn't give very much. Just lots of "no debugging 
symbols found" and "No symbol table info available" it seems.
In the list of threads there are lots of calls to functions but again "No 
symbol table info available." Nothing jumps out.
Similarly in the access log, while there is a lot of activity nothing is 
obviously wrong.

I didn't change the log buffering for very long, due to the predicted 
performance issues and did not catch it when it was faulty.

For some reason, apart from once last evening the issue seems to have gone away 


Cox Automotive group of companies within the UK comprises: Cox Automotive UK 
Limited (registered number: 03183918), Manheim Limited (registered number: 
00448761), Cox Automotive Retail Solutions Limited (registered number: 
02838588), Motors.co.uk Limited (registered number: 05975777), and Real Time 
Communications Limited (registered number: 04277845). Each of these companies 
is registered in England and Wales with the registered office address of 
Central House, Leeds Road, Rothwell, Leeds LS26 0JE. The Cox Automotive group 
of companies within the UK operates under various brand/trading names including 
Cox Automotive UK, Manheim Inspection Services, Manheim Auctions, Modix, Xtime 
and Closeit.


Manage your subscription for the Freeipa-users mailing list:
Go to http://freeipa.org for more info on the project

Reply via email to