Forgot to CC the ML. Sorry.
--
Daryl Fonseca-Holt
IST/CNS/Unix Server Team
University of Manitoba
204.480.1079
On Wed, 23 Mar 2016, Daryl Fonseca-Holt wrote:
Hi Thierry,
I have not filed a support request with RedHat for two reasons. First, it
seems that the NIS priming may not be a
Hi Daryl,
Thanks again for those logs and info.
It confirms that slapi-nis tree priming delays DS startup (~1min10s). As
Alexander mentioned it is now fixed with a differed priming.
My understanding is that krb5kdc startup is intense on DS. It is not
clear why but you may be right it is
On Mon, 14 Mar 2016, Daryl Fonseca-Holt wrote:
Hello Thierry,
In searching for a way to slow down the start of kadmind I discovered
that the prepare-replica install-replica process was modifying
/etc/sysconfig/krb5kdc to this:
KRB5KDC_ARGS='-w 64'
KRB5REALM=UOFMT1
KRB5KDC_ARGS='-w 64'
Hi Daryl,
Thanks for all the data. I will look at the pstacks. A first look shows
that you capture import, bind... so may be a complete
ipa-replica-install session.
I will try to retrieve the specific startup time to see what was going
on at that time.
If you have the time to monitor only
On Mon, 14 Mar 2016, thierry bordaz wrote:
Hi Daryl,
As soon as initialized with +15 users, DS instance starts in more
than a minute.
I guess a plugin startup may delay the DS startup itself and some
pstack during that minute will give us some info.
Regarding the krb authentication this
Hi Daryl,
As soon as initialized with +15 users, DS instance starts in more
than a minute.
I guess a plugin startup may delay the DS startup itself and some pstack
during that minute will give us some info.
Regarding the krb authentication this is difficult to say if they are
delayed by
Daryl,
Thanks for your help for grabbing additional data.
I am afraid any debug option at DS level would make it worse. Also there
are several debug options so first we need to know what is the potential
culprit to turn one only the right level. I will look at the
errors/access (sorry I
On 03/11/16 02:40, thierry bordaz wrote:
Hello Deryl,
My understanding is that ns-slapd is first slow to startup. Then
when krb5kdc is starting it may load ns-slapd.
We identified krb5kdc may be impacted by the number of users accounts.
From the ns-slapd errors log it is not
Hello Deryl,
My understanding is that ns-slapd is first slow to startup. Then
when krb5kdc is starting it may load ns-slapd.
We identified krb5kdc may be impacted by the number of users accounts.
From the ns-slapd errors log it is not clear why it is so slow to
start.
Would
