Re: [Freeipa-users] IPA Query Tuning and a Recovery Question

2013-09-26 Thread Petr Viktorin
On 09/26/2013 12:00 AM, Charlie Derwent wrote: On Mon, Sep 16, 2013 at 3:21 PM, Rob Crittenden rcrit...@redhat.com mailto:rcrit...@redhat.com wrote: [...] http://freeipa.org/page/__TroubleshootingGuide#Replica___Re-Initialization

Re: [Freeipa-users] IPA Query Tuning and a Recovery Question

2013-09-25 Thread Charlie Derwent
On Mon, Sep 16, 2013 at 3:21 PM, Rob Crittenden rcrit...@redhat.com wrote: Rich Megginson wrote: On 09/16/2013 03:21 AM, Charlie Derwent wrote: Hi Update on the errors kinit charlesd kinit: Generic error (see e-text) while getting initial credentials krb5kdc.log - LOOKING_UP_CLIENT:

Re: [Freeipa-users] IPA Query Tuning and a Recovery Question

2013-09-16 Thread Charlie Derwent
Hi Update on the errors kinit charlesd kinit: Generic error (see e-text) while getting initial credentials krb5kdc.log - LOOKING_UP_CLIENT: charl...@example.com for krbtg/ example@example.com, Server Error Starting the IPA service (dirsrv in particular) gives Failed to read data from

Re: [Freeipa-users] IPA Query Tuning and a Recovery Question

2013-09-16 Thread Rich Megginson
On 09/16/2013 03:21 AM, Charlie Derwent wrote: Hi Update on the errors kinit charlesd kinit: Generic error (see e-text) while getting initial credentials krb5kdc.log - LOOKING_UP_CLIENT: charl...@example.com mailto:charl...@example.com for krbtg/example@example.com

Re: [Freeipa-users] IPA Query Tuning and a Recovery Question

2013-09-16 Thread Rob Crittenden
Rich Megginson wrote: On 09/16/2013 03:21 AM, Charlie Derwent wrote: Hi Update on the errors kinit charlesd kinit: Generic error (see e-text) while getting initial credentials krb5kdc.log - LOOKING_UP_CLIENT: charl...@example.com mailto:charl...@example.com for krbtg/example@example.com

Re: [Freeipa-users] IPA Query Tuning and a Recovery Question

2013-09-13 Thread Rich Megginson
On 09/12/2013 08:04 PM, Charlie Derwent wrote: On Mon, Sep 9, 2013 at 5:32 PM, Rich Megginson rmegg...@redhat.com mailto:rmegg...@redhat.com wrote: On 09/09/2013 10:20 AM, Charlie Derwent wrote: Hi, 2 questions, some of our automation accounts are needlessly querying the

Re: [Freeipa-users] IPA Query Tuning and a Recovery Question

2013-09-12 Thread Charlie Derwent
On Mon, Sep 9, 2013 at 5:32 PM, Rich Megginson rmegg...@redhat.com wrote: On 09/09/2013 10:20 AM, Charlie Derwent wrote: Hi, 2 questions, some of our automation accounts are needlessly querying the IPA server every time they call a command via sudo. This is generating a lot of noise in

[Freeipa-users] IPA Query Tuning and a Recovery Question

2013-09-09 Thread Charlie Derwent
Hi, 2 questions, some of our automation accounts are needlessly querying the IPA server every time they call a command via sudo. This is generating a lot of noise in our access logs. Is there any way to ensure certain system accounts don't call out to the IPA server for additional groups or sudo

Re: [Freeipa-users] IPA Query Tuning and a Recovery Question

2013-09-09 Thread Rich Megginson
On 09/09/2013 11:40 AM, Charlie Derwent wrote: On Mon, Sep 9, 2013 at 5:32 PM, Rich Megginson rmegg...@redhat.com mailto:rmegg...@redhat.com wrote: On 09/09/2013 10:20 AM, Charlie Derwent wrote: Hi, 2 questions, some of our automation accounts are needlessly querying the IPA

Re: [Freeipa-users] IPA Query Tuning and a Recovery Question

2013-09-09 Thread Charlie Derwent
On Mon, Sep 9, 2013 at 5:32 PM, Rich Megginson rmegg...@redhat.com wrote: On 09/09/2013 10:20 AM, Charlie Derwent wrote: Hi, 2 questions, some of our automation accounts are needlessly querying the IPA server every time they call a command via sudo. This is generating a lot of noise in

Re: [Freeipa-users] IPA Query Tuning and a Recovery Question

2013-09-09 Thread Rich Megginson
On 09/09/2013 10:20 AM, Charlie Derwent wrote: Hi, 2 questions, some of our automation accounts are needlessly querying the IPA server every time they call a command via sudo. This is generating a lot of noise in our access logs. Is there any way to ensure certain system accounts don't call

Re: [Freeipa-users] IPA Query Tuning and a Recovery Question

2013-09-09 Thread Dmitri Pal
On 09/09/2013 02:26 PM, Rich Megginson wrote: On 09/09/2013 11:40 AM, Charlie Derwent wrote: On Mon, Sep 9, 2013 at 5:32 PM, Rich Megginson rmegg...@redhat.com mailto:rmegg...@redhat.com wrote: On 09/09/2013 10:20 AM, Charlie Derwent wrote: Hi, 2 questions, some of our