Re: [Freeipa-users] Can't delete users
Fortunately, I can trigger it at will. ;-) I'll get the packages loaded & set up and see what I can find. On 02/05/2014 10:36 AM, Martin Kosek wrote: On 02/05/2014 04:24 PM, Bret Wortman wrote: We've discovered something odd in our current FreeIPA setup (F18, IPA 3.1.5-1.fc18.x86_64). Whenever we go to delete a user, the whole IPA infrastructure will hang. The web page becomes nonresponsive and the server doesn't respond to sudo or authentication requests. DNS requests go unanswered. The only solution we've found thus far is to "ipactl stop && ipactl start". Nothing ever shows up in any logfile we've looked at, presumably because whatever ought to be logging an error is hung. The "stop" portion can take up to 10 minutes to complete. What can I be looking at to diagnose and/or debug this? We ought to be able to delete users, not just disable them, right? -- *Bret Wortman* http://damascusgrp.com/ http://about.me/wortmanbret This sounds to me as a hang of the 389 Directory Server. Adding Nathan and Rich to CC. They will certainly want to see a stack of the stuck 389 processes: http://directory.fedoraproject.org/wiki/FAQ#Debugging_Hangs Martin smime.p7s Description: S/MIME Cryptographic Signature ___ Freeipa-users mailing list Freeipa-users@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-users
Re: [Freeipa-users] Can't delete users
On 02/05/2014 04:24 PM, Bret Wortman wrote: > We've discovered something odd in our current FreeIPA setup (F18, IPA > 3.1.5-1.fc18.x86_64). > > Whenever we go to delete a user, the whole IPA infrastructure will hang. The > web > page becomes nonresponsive and the server doesn't respond to sudo or > authentication requests. DNS requests go unanswered. > > The only solution we've found thus far is to "ipactl stop && ipactl start". > Nothing ever shows up in any logfile we've looked at, presumably because > whatever ought to be logging an error is hung. The "stop" portion can take up > to > 10 minutes to complete. > > What can I be looking at to diagnose and/or debug this? We ought to be able > to > delete users, not just disable them, right? > > > -- > *Bret Wortman* > > http://damascusgrp.com/ > http://about.me/wortmanbret This sounds to me as a hang of the 389 Directory Server. Adding Nathan and Rich to CC. They will certainly want to see a stack of the stuck 389 processes: http://directory.fedoraproject.org/wiki/FAQ#Debugging_Hangs Martin ___ Freeipa-users mailing list Freeipa-users@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-users
[Freeipa-users] Can't delete users
We've discovered something odd in our current FreeIPA setup (F18, IPA 3.1.5-1.fc18.x86_64). Whenever we go to delete a user, the whole IPA infrastructure will hang. The web page becomes nonresponsive and the server doesn't respond to sudo or authentication requests. DNS requests go unanswered. The only solution we've found thus far is to "ipactl stop && ipactl start". Nothing ever shows up in any logfile we've looked at, presumably because whatever ought to be logging an error is hung. The "stop" portion can take up to 10 minutes to complete. What can I be looking at to diagnose and/or debug this? We ought to be able to delete users, not just disable them, right? -- Bret Wortman http://damascusgrp.com/ http://about.me/wortmanbret smime.p7s Description: S/MIME Cryptographic Signature ___ Freeipa-users mailing list Freeipa-users@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-users