Re: [Freeipa-users] krb5kdc process at 100%

2011-09-08 Thread Smith, Martin R. [smma0...@stcloudstate.edu]
When I attach gdb to the process, I have tried the main process and the four child processes, it provides no output. Here are the steps I'm taking: 1. On freeipa-server run htop and find the pid (or ps aux) * Shows one parent PID and four child processes * 934 root 20 0 4678

Re: [Freeipa-users] Migration to FreeIPA 2 - password update via LDAP

2011-09-08 Thread Simo Sorce
On Thu, 2011-09-08 at 17:29 -0400, Dan Scott wrote: > Hi, > > On Wed, Sep 7, 2011 at 14:59, Dmitri Pal wrote: > > On 09/07/2011 02:45 PM, Dan Scott wrote: > >> I have a FreeIPA 1 system which is being migrated to FreeIPA 2. After > >> migration, the script says: > >> > >> "Passwords have been mig

Re: [Freeipa-users] Migration to FreeIPA 2 - password update via LDAP

2011-09-08 Thread Dan Scott
Hi, On Wed, Sep 7, 2011 at 14:59, Dmitri Pal wrote: > On 09/07/2011 02:45 PM, Dan Scott wrote: >> I have a FreeIPA 1 system which is being migrated to FreeIPA 2. After >> migration, the script says: >> >> "Passwords have been migrated in pre-hashed format. >> IPA is unable to generate Kerberos ke

Re: [Freeipa-users] krb5kdc process at 100%

2011-09-08 Thread Simo Sorce
Also any chance you can attach gdb to the krb5kdc process and take a backtrace ? Hopefully we will find out where it is hanging. Simo. On Thu, 2011-09-08 at 14:04 -0400, Simo Sorce wrote: > Is the ns-slapd instance for the ipa domain running when this happens ? > > Simo. > > On Thu, 2011-09-08

Re: [Freeipa-users] krb5kdc process at 100%

2011-09-08 Thread Simo Sorce
Is the ns-slapd instance for the ipa domain running when this happens ? Simo. On Thu, 2011-09-08 at 17:56 +, Smith, Martin R. [smma0...@stcloudstate.edu] wrote: > Update: It appears to lockup immediately after a user with an expired > password attempts to login. This happens when a user attem

Re: [Freeipa-users] krb5kdc process at 100%

2011-09-08 Thread Smith, Martin R. [smma0...@stcloudstate.edu]
Update: It appears to lockup immediately after a user with an expired password attempts to login. This happens when a user attempts to login at the freeipa-server itself or one of the clients. From: freeipa-users-boun...@redhat.com [mailto:freeipa-users-boun...@redhat.com] On Behalf Of Smith,

[Freeipa-users] krb5kdc process at 100%

2011-09-08 Thread Smith, Martin R. [smma0...@stcloudstate.edu]
Hello all, I'm running a fairly new install of Freeipa-server and we are running into a problem that is preventing users from logging in. We have two SSH servers that authenticate to our freeipa-server and after 15 min to 4 hrs of runtime the process Krb5kdc will consume 100% of the processor an

[Freeipa-users] [Freeipa-interest] Announcing FreeIPA 2.1.1

2011-09-08 Thread Rob Crittenden
The FreeIPA Project is proud to announce the latest release of the FreeIPA. As always, the latest tarball can be found at http://freeipa.org/ FreeIPA 2.1.1 is available in Fedora 15. It is currently in the updates-testing repository along with a number of its dependencies. Fedora 16 and rawhid

Re: [Freeipa-users] [Freeipa-devel] Creation of replica failed: Failed to start replication on Fedora 15

2011-09-08 Thread Simo Sorce
On Thu, 2011-09-08 at 12:20 +0200, Pedro Nova wrote: > Hi All, > > When Im installing ipa-server-replica on Fedora release 15 failed: > > [20/27]: setting up initial replication > Starting replication, please wait until this has completed. > [vmnxipatest02.freeipa.gsnet.corp] reports: Update fail

[Freeipa-users] Failed to remove SELinux rule for port 7390 when uninstalling server (S.O.Fedora 15)

2011-09-08 Thread Pedro Nova
Error thrown when uninstalling FreeIPA Server on Fedora 15 When I try to uninstall IPA server using command: ipa-server-install --uninstall -d or /usr/sbin/ipa-server-install --uninstall This is a NON REVERSIBLE operation and will delete all data and configuration! Are you sure you want to cont

[Freeipa-users] Creation of replica failed: Failed to start replication on Fedora 15

2011-09-08 Thread Pedro Nova
Hi All, When Im installing ipa-server-replica on Fedora release 15 failed: [20/27]: setting up initial replication Starting replication, please wait until this has completed. [vmnxipatest02.freeipa.gsnet.corp] reports: Update failed! Status: [-2 - System error] creation of replica failed: Failed