On (08/04/17 17:55), Ronald Wimmer wrote: >On 2017-04-08 12:53, Lukas Slebodnik wrote: >> On (04/04/17 09:41), Ronald Wimmer wrote: >> > On 2017-03-31 13:35, Lukas Slebodnik wrote: >> > > On (29/03/17 10:47), Ronald Wimmer wrote: >> > > > Hi, >> > > > >> > > > yesterday I suddenly was unable to use the webinterface of my ipa >> > > > master. SSH >> > > > login (with root user) did not work also. >> > > > >> > > > When I uncommented the setting "memcache_timeout = 600" in the sssd >> > > > config >> > > > file of the master everything seemed to work fine again. (my ipa setup >> > > > has a >> > > > trust to AD) >> > > > >> > > I doubt it had anything to do memcache_timeout. >> > > I would say that restart of sssd helped. But it difficult to say >> > > without log files. either sssd logs or at least /var/log/secure >> > > (journald for pam). >> > You were right. I uncommented the setting and the problem ocurred again. >> > >> Did you find anything suspicious in journald? >> Is sssd_be busy (or any other process)? >> high CPU, IO operations ... >> >> It would be good to know more details. Restarting sssd is not a solution. > >sssd_be consumed a lot of CPU and produced a lot of I/O in the sssd cache >directory. After following >https://jhrozek.wordpress.com/2015/08/19/performance-tuning-sssd-for-large-ipa-ad-trust-deployments/ >the problems did nod reappear. > Did you try all recommended steps or just few?
Do you know which one was the most useful in your case? LS -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project