Forgot to CC the ML. Sorry.
--
Daryl Fonseca-Holt
IST/CNS/Unix Server Team
University of Manitoba
204.480.1079
On Wed, 23 Mar 2016, Daryl Fonseca-Holt wrote:
Hi Thierry,
I have not filed a support request with RedHat for two reasons. First, it
seems that the NIS priming may not be a pro
Hello Daryl,
I can reproduce locally the slow DS startup (due to slapi-nis
priming). In fact the version I was using had not the slapi-nis fix
to differ the priming.
I failed to reproduce the intensive load on DS when krb5kdc startup.
Looking at yours logs, we can see that krb5kdc
Hi Daryl,
Thanks again for those logs and info.
It confirms that slapi-nis tree priming delays DS startup (~1min10s). As
Alexander mentioned it is now fixed with a differed priming.
My understanding is that krb5kdc startup is intense on DS. It is not
clear why but you may be right it is getti
On Mon, 14 Mar 2016, Daryl Fonseca-Holt wrote:
Hello Thierry,
In searching for a way to slow down the start of kadmind I discovered
that the prepare-replica install-replica process was modifying
/etc/sysconfig/krb5kdc to this:
KRB5KDC_ARGS='-w 64'
KRB5REALM=UOFMT1
KRB5KDC_ARGS='-w 64'
duri
Hello Thierry,
In searching for a way to slow down the start of kadmind I discovered
that the prepare-replica install-replica process was modifying
/etc/sysconfig/krb5kdc to this:
KRB5KDC_ARGS='-w 64'
KRB5REALM=UOFMT1
KRB5KDC_ARGS='-w 64'
during the configuration of krb5kdc. Prior to tha
Hi Daryl,
In fact the slow DS startup is due to slapi-nis priming:
#0 0x7f189a2689fc in strcmpi_fast
#1 oc_find_nolock
#2 0x7f189a2699bd in va_expand_one_oc
#3 0x7f189a269d70 in schema_expand_objectclasses_ext
#4 0x7f189a26cbea in slapi_schema_expand_obje
Hi Daryl,
Thanks for all the data. I will look at the pstacks. A first look shows
that you capture import, bind... so may be a complete
ipa-replica-install session.
I will try to retrieve the specific startup time to see what was going
on at that time.
If you have the time to monitor only star
Hi Thierry,
I moved the old logs into a subdirectory called try1. I did the
recommended ipa-server-install --uninstall. Tried the replica install
again. Failed during kadmind start like the previous time.
The log from ipa-replica-install (with -d) is at
http://home.cc.umanitoba.ca/~fonsecah/
On Mon, 14 Mar 2016, thierry bordaz wrote:
Hi Daryl,
As soon as initialized with +15 users, DS instance starts in more
than a minute.
I guess a plugin startup may delay the DS startup itself and some
pstack during that minute will give us some info.
Regarding the krb authentication this is
Hi Daryl,
As soon as initialized with +15 users, DS instance starts in more
than a minute.
I guess a plugin startup may delay the DS startup itself and some pstack
during that minute will give us some info.
Regarding the krb authentication this is difficult to say if they are
delayed by th
Daryl,
Thanks for your help for grabbing additional data.
I am afraid any debug option at DS level would make it worse. Also there
are several debug options so first we need to know what is the potential
culprit to turn one only the right level. I will look at the
errors/access (sorry I missed
On 03/11/16 02:40, thierry bordaz wrote:
Hello Deryl,
My understanding is that ns-slapd is first slow to startup. Then
when krb5kdc is starting it may load ns-slapd.
We identified krb5kdc may be impacted by the number of users accounts.
From the ns-slapd errors log it is not c
Hello Deryl,
My understanding is that ns-slapd is first slow to startup. Then
when krb5kdc is starting it may load ns-slapd.
We identified krb5kdc may be impacted by the number of users accounts.
From the ns-slapd errors log it is not clear why it is so slow to
start.
Would y
13 matches
Mail list logo
