Re: [Freeipa-users] Kerberos hanging approx. once a day

2015-07-23 Thread Rich Megginson
On 07/22/2015 11:47 PM, Torsten Harenberg wrote: Good morning, Am 22.07.15 um 19:25 schrieb Rich Megginson: On 07/22/2015 11:03 AM, Torsten Harenberg wrote: Dear Rich, Am 22.07.2015 um 17:03 schrieb Rich Megginson: It might be helpful to do a # debuginfo-install 389-ds-base ipa-server slapi-

Re: [Freeipa-users] Kerberos hanging approx. once a day

2015-07-23 Thread Sumit Bose
On Thu, Jul 23, 2015 at 10:21:41AM +0200, Marisa Sandhoff wrote: > Hi Sumit, > > > > > I'm not a 389ds expert but in my setup nsslapd-cachememsize is set to > > 10M and since I didn't do any tuning I would expect that this is some > > default. > > > > Perhaps we should start with increasing the

Re: [Freeipa-users] Kerberos hanging approx. once a day

2015-07-23 Thread Ludwig Krispenz
you can change the cachememsize online: ldapmodify dn: cn=,cn=ldbm database,cn=plugins,cn=config changetype: modify replace: nsslapd-cachememsize nsslapd-cachememsize: But I would also increase the dbcache size, which would require a restart to be effect

Re: [Freeipa-users] Kerberos hanging approx. once a day

2015-07-23 Thread Marisa Sandhoff
Hi Sumit, > > I'm not a 389ds expert but in my setup nsslapd-cachememsize is set to > 10M and since I didn't do any tuning I would expect that this is some > default. > Perhaps we should start with increasing the nsslapd-cachememsize to 10M and than see what happens with our server. Actually, h

Re: [Freeipa-users] Kerberos hanging approx. once a day

2015-07-23 Thread Ludwig Krispenz
On 07/23/2015 09:56 AM, Sumit Bose wrote: On Thu, Jul 23, 2015 at 09:18:43AM +0200, Torsten Harenberg wrote: Hi Sumit, The principal looks strange, I would at least expect the fully-qualified name of the ipa server here. What does the 'hostname' command return? It [root@ipa slapd-PLEIADES-U

Re: [Freeipa-users] Kerberos hanging approx. once a day

2015-07-23 Thread Sumit Bose
On Thu, Jul 23, 2015 at 09:18:43AM +0200, Torsten Harenberg wrote: > Hi Sumit, > > > > The principal looks strange, I would at least expect the fully-qualified > > name of the ipa server here. What does the 'hostname' command return? It > > [root@ipa slapd-PLEIADES-UNI-WUPPERTAL-DE]# hostname >

Re: [Freeipa-users] LDAP to Free IPA Migration SSSD migration : example configuration of sssd.conf file?

2015-07-23 Thread Jakub Hrozek
On Wed, Jul 22, 2015 at 06:45:17PM -0600, Matt Koch wrote: > Hello, > I’m looking for an example sssd.conf migrationconfiguration that will allow > for the user to seamlessly authenticate to LDAP or freeIPA prior to > installation of the freeipa client. > > This would be during migration to gen

Re: [Freeipa-users] Kerberos hanging approx. once a day

2015-07-23 Thread Torsten Harenberg
Hi Sumit, > The principal looks strange, I would at least expect the fully-qualified > name of the ipa server here. What does the 'hostname' command return? It [root@ipa slapd-PLEIADES-UNI-WUPPERTAL-DE]# hostname ipa.pleiades.uni-wuppertal.de > is expected that it will return the fully-qualifie

Re: [Freeipa-users] Kerberos hanging approx. once a day

2015-07-23 Thread Sumit Bose
On Thu, Jul 23, 2015 at 08:35:45AM +0200, Torsten Harenberg wrote: > Huu.. situation is getting worse. > > Even after a full reboot, slapd does not start at all anymore on the > primary server. > > This is the full log (looks like the realm is missing suddenly?): > ... > [23/Jul/2015:08:25:09