Re: [Freeipa-users] Can't delete users

2014-02-05 Thread Martin Kosek
On 02/05/2014 04:24 PM, Bret Wortman wrote:
 We've discovered something odd in our current FreeIPA setup (F18, IPA 
 3.1.5-1.fc18.x86_64).
 
 Whenever we go to delete a user, the whole IPA infrastructure will hang. The 
 web 
 page becomes nonresponsive and the server doesn't respond to sudo or 
 authentication requests. DNS requests go unanswered.
 
 The only solution we've found thus far is to ipactl stop  ipactl start. 
 Nothing ever shows up in any logfile we've looked at, presumably because 
 whatever ought to be logging an error is hung. The stop portion can take up 
 to 
 10 minutes to complete.
 
 What can I be looking at to diagnose and/or debug this? We ought to be able 
 to 
 delete users, not just disable them, right?
 
 
 -- 
 *Bret Wortman*
 
 http://damascusgrp.com/
 http://about.me/wortmanbret

This sounds to me as a hang of the 389 Directory Server. Adding Nathan and Rich
to CC.

They will certainly want to see a stack of the stuck 389 processes:
http://directory.fedoraproject.org/wiki/FAQ#Debugging_Hangs

Martin

___
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users


Re: [Freeipa-users] Can't delete users

2014-02-05 Thread Bret Wortman

Fortunately, I can trigger it at will.  ;-)

I'll get the packages loaded  set up and see what I can find.

On 02/05/2014 10:36 AM, Martin Kosek wrote:

On 02/05/2014 04:24 PM, Bret Wortman wrote:

We've discovered something odd in our current FreeIPA setup (F18, IPA
3.1.5-1.fc18.x86_64).

Whenever we go to delete a user, the whole IPA infrastructure will hang. The web
page becomes nonresponsive and the server doesn't respond to sudo or
authentication requests. DNS requests go unanswered.

The only solution we've found thus far is to ipactl stop  ipactl start.
Nothing ever shows up in any logfile we've looked at, presumably because
whatever ought to be logging an error is hung. The stop portion can take up to
10 minutes to complete.

What can I be looking at to diagnose and/or debug this? We ought to be able to
delete users, not just disable them, right?


--
*Bret Wortman*

http://damascusgrp.com/
http://about.me/wortmanbret

This sounds to me as a hang of the 389 Directory Server. Adding Nathan and Rich
to CC.

They will certainly want to see a stack of the stuck 389 processes:
http://directory.fedoraproject.org/wiki/FAQ#Debugging_Hangs

Martin






smime.p7s
Description: S/MIME Cryptographic Signature
___
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users