Re: [Freeipa-users] Can't delete users

2014-02-05 Thread Bret Wortman

Fortunately, I can trigger it at will.  ;-)

I'll get the packages loaded & set up and see what I can find.

On 02/05/2014 10:36 AM, Martin Kosek wrote:

On 02/05/2014 04:24 PM, Bret Wortman wrote:

We've discovered something odd in our current FreeIPA setup (F18, IPA
3.1.5-1.fc18.x86_64).

Whenever we go to delete a user, the whole IPA infrastructure will hang. The web
page becomes nonresponsive and the server doesn't respond to sudo or
authentication requests. DNS requests go unanswered.

The only solution we've found thus far is to "ipactl stop && ipactl start".
Nothing ever shows up in any logfile we've looked at, presumably because
whatever ought to be logging an error is hung. The "stop" portion can take up to
10 minutes to complete.

What can I be looking at to diagnose and/or debug this? We ought to be able to
delete users, not just disable them, right?


--
*Bret Wortman*

http://damascusgrp.com/
http://about.me/wortmanbret

This sounds to me as a hang of the 389 Directory Server. Adding Nathan and Rich
to CC.

They will certainly want to see a stack of the stuck 389 processes:
http://directory.fedoraproject.org/wiki/FAQ#Debugging_Hangs

Martin






smime.p7s
Description: S/MIME Cryptographic Signature
___
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users

Re: [Freeipa-users] Can't delete users

2014-02-05 Thread Martin Kosek
On 02/05/2014 04:24 PM, Bret Wortman wrote:
> We've discovered something odd in our current FreeIPA setup (F18, IPA 
> 3.1.5-1.fc18.x86_64).
> 
> Whenever we go to delete a user, the whole IPA infrastructure will hang. The 
> web 
> page becomes nonresponsive and the server doesn't respond to sudo or 
> authentication requests. DNS requests go unanswered.
> 
> The only solution we've found thus far is to "ipactl stop && ipactl start". 
> Nothing ever shows up in any logfile we've looked at, presumably because 
> whatever ought to be logging an error is hung. The "stop" portion can take up 
> to 
> 10 minutes to complete.
> 
> What can I be looking at to diagnose and/or debug this? We ought to be able 
> to 
> delete users, not just disable them, right?
> 
> 
> -- 
> *Bret Wortman*
> 
> http://damascusgrp.com/
> http://about.me/wortmanbret

This sounds to me as a hang of the 389 Directory Server. Adding Nathan and Rich
to CC.

They will certainly want to see a stack of the stuck 389 processes:
http://directory.fedoraproject.org/wiki/FAQ#Debugging_Hangs

Martin

___
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users


[Freeipa-users] Can't delete users

2014-02-05 Thread Bret Wortman

  
  
We've discovered something odd in our current FreeIPA setup (F18,
IPA 3.1.5-1.fc18.x86_64).

Whenever we go to delete a user, the whole IPA infrastructure will
hang. The web page becomes nonresponsive and the server doesn't
respond to sudo or authentication requests. DNS requests go
unanswered.

The only solution we've found thus far is to "ipactl stop &&
ipactl start". Nothing ever shows up in any logfile we've looked at,
presumably because whatever ought to be logging an error is hung.
The "stop" portion can take up to 10 minutes to complete.

What can I be looking at to diagnose and/or debug this? We ought to
be able to delete users, not just disable them, right?


-- 
  Bret Wortman
  
  
  http://damascusgrp.com/
  
  http://about.me/wortmanbret

  

  



smime.p7s
Description: S/MIME Cryptographic Signature
___
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users