[Freeipa-users] krb5kdc process at 100%

2011-09-08 Thread Smith, Martin R. [smma0...@stcloudstate.edu]
Hello all, I'm running a fairly new install of Freeipa-server and we are running into a problem that is preventing users from logging in. We have two SSH servers that authenticate to our freeipa-server and after 15 min to 4 hrs of runtime the process Krb5kdc will consume 100% of the processor

Re: [Freeipa-users] krb5kdc process at 100%

2011-09-08 Thread Simo Sorce
Is the ns-slapd instance for the ipa domain running when this happens ? Simo. On Thu, 2011-09-08 at 17:56 +, Smith, Martin R. [smma0...@stcloudstate.edu] wrote: Update: It appears to lockup immediately after a user with an expired password attempts to login. This happens when a user

Re: [Freeipa-users] krb5kdc process at 100%

2011-09-08 Thread Simo Sorce
Also any chance you can attach gdb to the krb5kdc process and take a backtrace ? Hopefully we will find out where it is hanging. Simo. On Thu, 2011-09-08 at 14:04 -0400, Simo Sorce wrote: Is the ns-slapd instance for the ipa domain running when this happens ? Simo. On Thu, 2011-09-08 at

Re: [Freeipa-users] Migration to FreeIPA 2 - password update via LDAP

2011-09-08 Thread Dan Scott
Hi, On Wed, Sep 7, 2011 at 14:59, Dmitri Pal d...@redhat.com wrote: On 09/07/2011 02:45 PM, Dan Scott wrote: I have a FreeIPA 1 system which is being migrated to FreeIPA 2. After migration, the script says: Passwords have been migrated in pre-hashed format. IPA is unable to generate

Re: [Freeipa-users] krb5kdc process at 100%

2011-09-08 Thread Smith, Martin R. [smma0...@stcloudstate.edu]
When I attach gdb to the process, I have tried the main process and the four child processes, it provides no output. Here are the steps I'm taking: 1. On freeipa-server run htop and find the pid (or ps aux) * Shows one parent PID and four child processes * 934 root 20 0