Sumit,
Its a little tricky but ran up a script that did a ldapsearch every 2
seconds ... the following took place almost same time as one of the
sasl_bind timeouts ...
Start: .Wed Nov 27 07:55:03 EST 2013
ldap_url_parse_ext(ldap://tardis.ipa.server-noc.com)
ldap_create
ldap_url_parse_ext(lda
On Tue, Nov 26, 2013 at 03:07:30PM +1000, Matt Bryant wrote:
> OK so been running some tcpdumps on this issue and the wierd thing is ..
>
> can see the initial sasl bind request followed by ack from ldap ...
> then nothing ldap/gssapi related until the unbind request post the
> 6s timeout period .
After some further digging I tend to agree that its in the LDAP arena
where the issue lies .. but there is nothing in the ldap_child log thats
helping out .. (btw the other replica IPA servers dont seem to encounter
this issue just the master (ie the server with CA responsibility) ...
Also mor
On Mon, Nov 25, 2013 at 09:23:22AM +1000, Matt Bryant wrote:
> All,
>
> Was wondering if anyone can help out or point us the in right
> direction. Ever since we updated from IPA v2.1 to IPA v3.0 have been
> seeing some intermittent errors when trying to change passwords etc.
> Getting the error ca
All,
Was wondering if anyone can help out or point us the in right direction.
Ever since we updated from IPA v2.1 to IPA v3.0 have been seeing some
intermittent errors when trying to change passwords etc. Getting the
error cannot change password since system offline.
Have increased the loggi