Re: [Freeipa-users] 2.20 dirsrv memory usage

2012-07-18 Thread Petr Vobornik
On 07/17/2012 11:43 PM, Stephen Ingram wrote: 8><-- I'm beginning to think this is just the Web UI itself instead of 389 although it is really difficult to tell. I've poured over the debug logs and didn't see anything that caused me concern. It's certainly usable, but I just got really sp

Re: [Freeipa-users] 2.20 dirsrv memory usage

2012-07-18 Thread Stephen Ingram
On Tue, Jul 17, 2012 at 3:56 PM, John Dennis wrote: > On 07/17/2012 05:43 PM, Stephen Ingram wrote: > >> [ details of performance analysis snipped for brevity ] > > I wonder if we shouldn't add some timing metrics to our code. As it is it's > very hard to know where time is being spent. > > When I

Re: [Freeipa-users] stopping su -

2012-07-18 Thread Dmitri Pal
On 07/17/2012 06:04 PM, Steven Jones wrote: > but presumably I can control sudo with IPA? Yes you do. > > regards > > Steven Jones > > Technical Specialist - Linux RHCE > > Victoria University, Wellington, NZ > > 0064 4 463 6272 > > > From: freeipa-users-b

Re: [Freeipa-users] 2.20 dirsrv memory usage

2012-07-18 Thread Dmitri Pal
On 07/18/2012 01:53 PM, Stephen Ingram wrote: > On Tue, Jul 17, 2012 at 3:56 PM, John Dennis wrote: >> On 07/17/2012 05:43 PM, Stephen Ingram wrote: >> >>> [ details of performance analysis snipped for brevity ] >> I wonder if we shouldn't add some timing metrics to our code. As it is it's >> very

Re: [Freeipa-users] 2.20 dirsrv memory usage

2012-07-18 Thread Stephen Ingram
On Wed, Jul 18, 2012 at 6:45 AM, Petr Vobornik wrote: > On 07/17/2012 11:43 PM, Stephen Ingram wrote: > > 8><-- > > I'm beginning to think this is just the Web UI itself instead of 389 although it is really difficult to tell. I've poured over the debug logs and didn't see a

Re: [Freeipa-users] 2.20 dirsrv memory usage

2012-07-18 Thread John Dennis
On 07/18/2012 02:59 PM, Stephen Ingram wrote: On Wed, Jul 18, 2012 at 6:45 AM, Petr Vobornik wrote: On 07/17/2012 11:43 PM, Stephen Ingram wrote: 8><-- I'm beginning to think this is just the Web UI itself instead of 389 although it is really difficult to tell. I've poured over the deb

Re: [Freeipa-users] 2.20 dirsrv memory usage

2012-07-18 Thread Stephen Ingram
On Wed, Jul 18, 2012 at 12:28 PM, John Dennis wrote: > On 07/18/2012 02:59 PM, Stephen Ingram wrote: >> >> On Wed, Jul 18, 2012 at 6:45 AM, Petr Vobornik >> wrote: >>> >>> On 07/17/2012 11:43 PM, Stephen Ingram wrote: >>> >>> 8><-- >>> >>> >> >> I'm beginning to think this is just the

Re: [Freeipa-users] 2.20 dirsrv memory usage

2012-07-18 Thread Stephen Ingram
On Wed, Jul 18, 2012 at 10:59 AM, Dmitri Pal wrote: > On 07/18/2012 01:53 PM, Stephen Ingram wrote: >> On Tue, Jul 17, 2012 at 3:56 PM, John Dennis wrote: >>> On 07/17/2012 05:43 PM, Stephen Ingram wrote: >>> [ details of performance analysis snipped for brevity ] >>> I wonder if we shouldn'

Re: [Freeipa-users] 2.20 dirsrv memory usage

2012-07-18 Thread Dmitri Pal
On 07/18/2012 03:45 PM, Stephen Ingram wrote: > On Wed, Jul 18, 2012 at 12:28 PM, John Dennis wrote: >> On 07/18/2012 02:59 PM, Stephen Ingram wrote: >>> On Wed, Jul 18, 2012 at 6:45 AM, Petr Vobornik >>> wrote: On 07/17/2012 11:43 PM, Stephen Ingram wrote: 8><--

Re: [Freeipa-users] 2.20 dirsrv memory usage

2012-07-18 Thread Stephen Ingram
On Wed, Jul 18, 2012 at 1:06 PM, Dmitri Pal wrote: > On 07/18/2012 03:45 PM, Stephen Ingram wrote: >> On Wed, Jul 18, 2012 at 12:28 PM, John Dennis wrote: >>> On 07/18/2012 02:59 PM, Stephen Ingram wrote: On Wed, Jul 18, 2012 at 6:45 AM, Petr Vobornik wrote: > On 07/17/2012 11:43 P

Re: [Freeipa-users] 2.20 dirsrv memory usage

2012-07-18 Thread Dmitri Pal
On 07/18/2012 04:27 PM, Stephen Ingram wrote: > On Wed, Jul 18, 2012 at 1:06 PM, Dmitri Pal wrote: >> On 07/18/2012 03:45 PM, Stephen Ingram wrote: >>> On Wed, Jul 18, 2012 at 12:28 PM, John Dennis wrote: On 07/18/2012 02:59 PM, Stephen Ingram wrote: > On Wed, Jul 18, 2012 at 6:45 AM, Pe

Re: [Freeipa-users] FreeIPA webserver cert expired.

2012-07-18 Thread Paul Tader
On 6/29/12 5:14 PM, Rob Crittenden wrote: Paul Tader wrote: On 6/11/12 9:16 AM, Paul Tader wrote: On 6/5/12 2:33 PM, Rob Crittenden wrote: JR Aquino wrote: On Jun 5, 2012, at 11:18 AM, Paul Tader wrote: A couple days ago my (apache) certificates expired. Users are able to kinit but tools su

Re: [Freeipa-users] 2.20 dirsrv memory usage

2012-07-18 Thread Stephen Ingram
On Wed, Jul 18, 2012 at 1:52 PM, Dmitri Pal wrote: > On 07/18/2012 04:27 PM, Stephen Ingram wrote: >> On Wed, Jul 18, 2012 at 1:06 PM, Dmitri Pal wrote: >>> On 07/18/2012 03:45 PM, Stephen Ingram wrote: On Wed, Jul 18, 2012 at 12:28 PM, John Dennis wrote: > On 07/18/2012 02:59 PM, Steph

Re: [Freeipa-users] FreeIPA webserver cert expired.

2012-07-18 Thread Rob Crittenden
Paul Tader wrote: On 6/29/12 5:14 PM, Rob Crittenden wrote: Paul Tader wrote: On 6/11/12 9:16 AM, Paul Tader wrote: On 6/5/12 2:33 PM, Rob Crittenden wrote: JR Aquino wrote: On Jun 5, 2012, at 11:18 AM, Paul Tader wrote: A couple days ago my (apache) certificates expired. Users are able to

Re: [Freeipa-users] 2.20 dirsrv memory usage

2012-07-18 Thread Dmitri Pal
On 07/18/2012 05:09 PM, Stephen Ingram wrote: > On Wed, Jul 18, 2012 at 1:52 PM, Dmitri Pal wrote: >> On 07/18/2012 04:27 PM, Stephen Ingram wrote: >>> On Wed, Jul 18, 2012 at 1:06 PM, Dmitri Pal wrote: On 07/18/2012 03:45 PM, Stephen Ingram wrote: > On Wed, Jul 18, 2012 at 12:28 PM, Joh

Re: [Freeipa-users] FreeIPA webserver cert expired.

2012-07-18 Thread Paul Tader
On 7/18/12 3:58 PM, Paul Tader wrote: On 6/29/12 5:14 PM, Rob Crittenden wrote: Paul Tader wrote: On 6/11/12 9:16 AM, Paul Tader wrote: On 6/5/12 2:33 PM, Rob Crittenden wrote: JR Aquino wrote: On Jun 5, 2012, at 11:18 AM, Paul Tader wrote: A couple days ago my (apache) certificates expire

[Freeipa-users] IPA and UIDS <500

2012-07-18 Thread Steven Jones
Hi, Is there a rule or something that makes users with a UID of less than 500 not work? regards Steven Jones Technical Specialist - Linux RHCE Victoria University, Wellington, NZ 0064 4 463 6272 ___ Freeipa-users mailing list Freeipa-users@redha

[Freeipa-users] a user called oracle

2012-07-18 Thread Steven Jones
Hi, I want to create a user that users who can login to a host can sudo -i tobut I dont want to allow that user ssh or login but must exist on the server such that the sudo -i command will succeed. I cannot see how this is done, can it be done? regards Steven Jones Technical Specialist

Re: [Freeipa-users] IPA and UIDS <500

2012-07-18 Thread Stephen Gallagher
On Thu, 2012-07-19 at 00:02 +, Steven Jones wrote: > Hi, > > Is there a rule or something that makes users with a UID of less than > 500 not work? Yes, on Red Hat and older Fedora systems, UIDs below 500 are reserved for system services such as the apache user. On newer Fedora systems (and

Re: [Freeipa-users] a user called oracle

2012-07-18 Thread Stephen Gallagher
On Thu, 2012-07-19 at 00:39 +, Steven Jones wrote: > Hi, > > I want to create a user that users who can login to a host can sudo -i > tobut I dont want to allow that user ssh or login but must exist on the > server such that the sudo -i command will succeed. > > I cannot see how this i

Re: [Freeipa-users] IPA and UIDS <500

2012-07-18 Thread Steven Jones
Hi, So this is a rule that is hard coded into IPA? I agree on the principle unfortunately I have several accounts that do things like apache, run applications on the host regards Steven Jones Technical Specialist - Linux RHCE Victoria University, Wellington, NZ 0064 4 463 6272

Re: [Freeipa-users] IPA and UIDS <500

2012-07-18 Thread Steven Jones
Actually its pamunless IPA is as well. Which makes sense then to have an application run < 500 so inherently it cannot be logged into via ssh regards Steven Jones Technical Specialist - Linux RHCE Victoria University, Wellington, NZ 0064 4 463 6272 __

Re: [Freeipa-users] 2.20 dirsrv memory usage

2012-07-18 Thread Stephen Ingram
On Wed, Jul 18, 2012 at 2:26 PM, Dmitri Pal wrote: > On 07/18/2012 05:09 PM, Stephen Ingram wrote: >> On Wed, Jul 18, 2012 at 1:52 PM, Dmitri Pal wrote: >>> On 07/18/2012 04:27 PM, Stephen Ingram wrote: On Wed, Jul 18, 2012 at 1:06 PM, Dmitri Pal wrote: > On 07/18/2012 03:45 PM, Stephen