Re: [Freeipa-users] 2.20 dirsrv memory usage

2012-07-18 Thread Stephen Ingram
On Tue, Jul 17, 2012 at 3:56 PM, John Dennis jden...@redhat.com wrote: On 07/17/2012 05:43 PM, Stephen Ingram wrote: [ details of performance analysis snipped for brevity ] I wonder if we shouldn't add some timing metrics to our code. As it is it's very hard to know where time is being

Re: [Freeipa-users] stopping su -

2012-07-18 Thread Dmitri Pal
On 07/17/2012 06:04 PM, Steven Jones wrote: but presumably I can control sudo with IPA? Yes you do. regards Steven Jones Technical Specialist - Linux RHCE Victoria University, Wellington, NZ 0064 4 463 6272 From:

Re: [Freeipa-users] 2.20 dirsrv memory usage

2012-07-18 Thread Dmitri Pal
On 07/18/2012 01:53 PM, Stephen Ingram wrote: On Tue, Jul 17, 2012 at 3:56 PM, John Dennis jden...@redhat.com wrote: On 07/17/2012 05:43 PM, Stephen Ingram wrote: [ details of performance analysis snipped for brevity ] I wonder if we shouldn't add some timing metrics to our code. As it is

Re: [Freeipa-users] 2.20 dirsrv memory usage

2012-07-18 Thread Stephen Ingram
On Wed, Jul 18, 2012 at 6:45 AM, Petr Vobornik pvobo...@redhat.com wrote: On 07/17/2012 11:43 PM, Stephen Ingram wrote: 8-- I'm beginning to think this is just the Web UI itself instead of 389 although it is really difficult to tell. I've poured over the debug logs and didn't see

Re: [Freeipa-users] 2.20 dirsrv memory usage

2012-07-18 Thread John Dennis
On 07/18/2012 02:59 PM, Stephen Ingram wrote: On Wed, Jul 18, 2012 at 6:45 AM, Petr Vobornik pvobo...@redhat.com wrote: On 07/17/2012 11:43 PM, Stephen Ingram wrote: 8-- I'm beginning to think this is just the Web UI itself instead of 389 although it is really difficult to tell. I've

Re: [Freeipa-users] 2.20 dirsrv memory usage

2012-07-18 Thread Stephen Ingram
On Wed, Jul 18, 2012 at 10:59 AM, Dmitri Pal d...@redhat.com wrote: On 07/18/2012 01:53 PM, Stephen Ingram wrote: On Tue, Jul 17, 2012 at 3:56 PM, John Dennis jden...@redhat.com wrote: On 07/17/2012 05:43 PM, Stephen Ingram wrote: [ details of performance analysis snipped for brevity ] I

Re: [Freeipa-users] 2.20 dirsrv memory usage

2012-07-18 Thread Dmitri Pal
On 07/18/2012 03:45 PM, Stephen Ingram wrote: On Wed, Jul 18, 2012 at 12:28 PM, John Dennis jden...@redhat.com wrote: On 07/18/2012 02:59 PM, Stephen Ingram wrote: On Wed, Jul 18, 2012 at 6:45 AM, Petr Vobornik pvobo...@redhat.com wrote: On 07/17/2012 11:43 PM, Stephen Ingram wrote: 8--

Re: [Freeipa-users] 2.20 dirsrv memory usage

2012-07-18 Thread Dmitri Pal
On 07/18/2012 04:27 PM, Stephen Ingram wrote: On Wed, Jul 18, 2012 at 1:06 PM, Dmitri Pal d...@redhat.com wrote: On 07/18/2012 03:45 PM, Stephen Ingram wrote: On Wed, Jul 18, 2012 at 12:28 PM, John Dennis jden...@redhat.com wrote: On 07/18/2012 02:59 PM, Stephen Ingram wrote: On Wed, Jul 18,

Re: [Freeipa-users] FreeIPA webserver cert expired.

2012-07-18 Thread Paul Tader
On 6/29/12 5:14 PM, Rob Crittenden wrote: Paul Tader wrote: On 6/11/12 9:16 AM, Paul Tader wrote: On 6/5/12 2:33 PM, Rob Crittenden wrote: JR Aquino wrote: On Jun 5, 2012, at 11:18 AM, Paul Tader wrote: A couple days ago my (apache) certificates expired. Users are able to kinit but tools

Re: [Freeipa-users] FreeIPA webserver cert expired.

2012-07-18 Thread Rob Crittenden
Paul Tader wrote: On 6/29/12 5:14 PM, Rob Crittenden wrote: Paul Tader wrote: On 6/11/12 9:16 AM, Paul Tader wrote: On 6/5/12 2:33 PM, Rob Crittenden wrote: JR Aquino wrote: On Jun 5, 2012, at 11:18 AM, Paul Tader wrote: A couple days ago my (apache) certificates expired. Users are able

Re: [Freeipa-users] 2.20 dirsrv memory usage

2012-07-18 Thread Dmitri Pal
On 07/18/2012 05:09 PM, Stephen Ingram wrote: On Wed, Jul 18, 2012 at 1:52 PM, Dmitri Pal d...@redhat.com wrote: On 07/18/2012 04:27 PM, Stephen Ingram wrote: On Wed, Jul 18, 2012 at 1:06 PM, Dmitri Pal d...@redhat.com wrote: On 07/18/2012 03:45 PM, Stephen Ingram wrote: On Wed, Jul 18, 2012

Re: [Freeipa-users] FreeIPA webserver cert expired.

2012-07-18 Thread Paul Tader
On 7/18/12 3:58 PM, Paul Tader wrote: On 6/29/12 5:14 PM, Rob Crittenden wrote: Paul Tader wrote: On 6/11/12 9:16 AM, Paul Tader wrote: On 6/5/12 2:33 PM, Rob Crittenden wrote: JR Aquino wrote: On Jun 5, 2012, at 11:18 AM, Paul Tader wrote: A couple days ago my (apache) certificates

[Freeipa-users] IPA and UIDS 500

2012-07-18 Thread Steven Jones
Hi, Is there a rule or something that makes users with a UID of less than 500 not work? regards Steven Jones Technical Specialist - Linux RHCE Victoria University, Wellington, NZ 0064 4 463 6272 ___ Freeipa-users mailing list

[Freeipa-users] a user called oracle

2012-07-18 Thread Steven Jones
Hi, I want to create a user that users who can login to a host can sudo -i tobut I dont want to allow that user ssh or login but must exist on the server such that the sudo -i command will succeed. I cannot see how this is done, can it be done? regards Steven Jones Technical Specialist

Re: [Freeipa-users] IPA and UIDS 500

2012-07-18 Thread Stephen Gallagher
On Thu, 2012-07-19 at 00:02 +, Steven Jones wrote: Hi, Is there a rule or something that makes users with a UID of less than 500 not work? Yes, on Red Hat and older Fedora systems, UIDs below 500 are reserved for system services such as the apache user. On newer Fedora systems (and

Re: [Freeipa-users] a user called oracle

2012-07-18 Thread Stephen Gallagher
On Thu, 2012-07-19 at 00:39 +, Steven Jones wrote: Hi, I want to create a user that users who can login to a host can sudo -i tobut I dont want to allow that user ssh or login but must exist on the server such that the sudo -i command will succeed. I cannot see how this is

Re: [Freeipa-users] IPA and UIDS 500

2012-07-18 Thread Steven Jones
Hi, So this is a rule that is hard coded into IPA? I agree on the principle unfortunately I have several accounts that do things like apache, run applications on the host regards Steven Jones Technical Specialist - Linux RHCE Victoria University, Wellington, NZ 0064 4 463 6272