Re: [Freeipa-users] Large slow down when using IPA

2012-01-02 Thread Simo Sorce
On Sat, 2011-12-31 at 01:35 -0900, Erinn Looney-Triggs wrote: > On 12/30/2011 07:19 PM, JR Aquino wrote: > > > > On Dec 30, 2011, at 5:45 PM, Erinn Looney-Triggs wrote: > > > >> I have been slowly rolling out FreeIPA to my systems, trying to track > >> differences/changes. One of the most noticea

Re: [Freeipa-users] Large slow down when using IPA

2012-01-02 Thread Jakub Hrozek
On Mon, Jan 02, 2012 at 10:00:02AM -0500, Simo Sorce wrote: > On Sat, 2011-12-31 at 01:35 -0900, Erinn Looney-Triggs wrote: > > On 12/30/2011 07:19 PM, JR Aquino wrote: > > > > > > On Dec 30, 2011, at 5:45 PM, Erinn Looney-Triggs wrote: > > > > > >> I have been slowly rolling out FreeIPA to my sy

Re: [Freeipa-users] Large slow down when using IPA

2012-01-02 Thread Simo Sorce
On Mon, 2012-01-02 at 17:29 +0100, Jakub Hrozek wrote: > On Mon, Jan 02, 2012 at 10:00:02AM -0500, Simo Sorce wrote: > > On Sat, 2011-12-31 at 01:35 -0900, Erinn Looney-Triggs wrote: > > > On 12/30/2011 07:19 PM, JR Aquino wrote: > > > > > > > > On Dec 30, 2011, at 5:45 PM, Erinn Looney-Triggs wro

Re: [Freeipa-users] Large slow down when using IPA

2012-01-02 Thread Jakub Hrozek
On Mon, Jan 02, 2012 at 12:53:29PM -0500, Simo Sorce wrote: > On Mon, 2012-01-02 at 17:29 +0100, Jakub Hrozek wrote: > > On Mon, Jan 02, 2012 at 10:00:02AM -0500, Simo Sorce wrote: > > > On Sat, 2011-12-31 at 01:35 -0900, Erinn Looney-Triggs wrote: > > > > On 12/30/2011 07:19 PM, JR Aquino wrote: >

Re: [Freeipa-users] Large slow down when using IPA

2012-01-02 Thread Erinn Looney-Triggs
On 01/02/2012 11:40 AM, Jakub Hrozek wrote: > On Mon, Jan 02, 2012 at 12:53:29PM -0500, Simo Sorce wrote: >> On Mon, 2012-01-02 at 17:29 +0100, Jakub Hrozek wrote: >>> On Mon, Jan 02, 2012 at 10:00:02AM -0500, Simo Sorce wrote: On Sat, 2011-12-31 at 01:35 -0900, Erinn Looney-Triggs wrote:

Re: [Freeipa-users] Large slow down when using IPA

2012-01-02 Thread Simo Sorce
On Mon, 2012-01-02 at 11:54 -0900, Erinn Looney-Triggs wrote: > On 01/02/2012 11:40 AM, Jakub Hrozek wrote: > > On Mon, Jan 02, 2012 at 12:53:29PM -0500, Simo Sorce wrote: > >> On Mon, 2012-01-02 at 17:29 +0100, Jakub Hrozek wrote: > >>> On Mon, Jan 02, 2012 at 10:00:02AM -0500, Simo Sorce wrote: >

Re: [Freeipa-users] MD5 passwords in NIS

2012-01-02 Thread Simo Sorce
On Thu, 2011-12-29 at 13:13 -0500, Boris Epstein wrote: > > > On Wed, Dec 28, 2011 at 10:18 PM, Simo Sorce wrote: > On Wed, 2011-12-28 at 11:11 -0500, Boris Epstein wrote: > > Hello listmates, > > > > > > Apparently, in order to authenticate a Mac OS X Lio

[Freeipa-users] Large lastlog from large UIDs

2012-01-02 Thread Erinn Looney-Triggs
While digging through and trying to investigate a file system slowdown that may or may not be IPA related, I noticed an odd thing on my RHEL 5 and 6 based systems, the lastlog file was bloody huge: -rw-r--r-- 1 root root 469419202628 Jan 3 00:20 /var/log/lastlog Or for those of us who don't coun

Re: [Freeipa-users] Large slow down when using IPA

2012-01-02 Thread Erinn Looney-Triggs
On 01/02/2012 01:47 PM, Simo Sorce wrote: > On Mon, 2012-01-02 at 11:54 -0900, Erinn Looney-Triggs wrote: >> On 01/02/2012 11:40 AM, Jakub Hrozek wrote: >>> On Mon, Jan 02, 2012 at 12:53:29PM -0500, Simo Sorce wrote: On Mon, 2012-01-02 at 17:29 +0100, Jakub Hrozek wrote: > On Mon, Jan 02,

Re: [Freeipa-users] Large slow down when using IPA

2012-01-02 Thread Simo Sorce
On Mon, 2012-01-02 at 15:52 -0900, Erinn Looney-Triggs wrote: > On 01/02/2012 01:47 PM, Simo Sorce wrote: > > > Hi Erinn, > > can you please tell what's the baseline you are comparing against ? > > > > Is it nss_ldap ? With or without nscd ? > > > > Simo. > > > > > Here is what I am comparin

Re: [Freeipa-users] Large lastlog from large UIDs

2012-01-02 Thread Simo Sorce
On Mon, 2012-01-02 at 15:47 -0900, Erinn Looney-Triggs wrote: > While digging through and trying to investigate a file system slowdown > that may or may not be IPA related, I noticed an odd thing on my RHEL 5 > and 6 based systems, the lastlog file was bloody huge: > > -rw-r--r-- 1 root root 46941

Re: [Freeipa-users] Large lastlog from large UIDs

2012-01-02 Thread Erinn Looney-Triggs
On 01/02/2012 07:59 PM, Simo Sorce wrote: > On Mon, 2012-01-02 at 15:47 -0900, Erinn Looney-Triggs wrote: >> While digging through and trying to investigate a file system slowdown >> that may or may not be IPA related, I noticed an odd thing on my RHEL 5 >> and 6 based systems, the lastlog file was

Re: [Freeipa-users] Large slow down when using IPA

2012-01-02 Thread Erinn Looney-Triggs
On 01/02/2012 07:43 PM, Simo Sorce wrote: > On Mon, 2012-01-02 at 15:52 -0900, Erinn Looney-Triggs wrote: >> On 01/02/2012 01:47 PM, Simo Sorce wrote: >> >>> Hi Erinn, >>> can you please tell what's the baseline you are comparing against ? >>> >>> Is it nss_ldap ? With or without nscd ? >>> >>> S

[Freeipa-users] Expired SSL certificate issue with IPA

2012-01-02 Thread nasir nasir
Hi, I am facing a serious issue with my production IPA server. When I try to access IPA web interface using Firefox, it hangs and doesn't allow me to get in. It seems to be due to expired SSL certificate as seen in the apache log file, [Tue Jan 03 10:34:08 2012] [error] Certificate not verifi