On Tue, Nov 26, 2013 at 03:07:30PM +1000, Matt Bryant wrote:
OK so been running some tcpdumps on this issue and the wierd thing is ..
can see the initial sasl bind request followed by ack from ldap ...
then nothing ldap/gssapi related until the unbind request post the
6s timeout period ...
Sumit,
Its a little tricky but ran up a script that did a ldapsearch every 2
seconds ... the following took place almost same time as one of the
sasl_bind timeouts ...
Start: .Wed Nov 27 07:55:03 EST 2013
ldap_url_parse_ext(ldap://tardis.ipa.server-noc.com)
ldap_create
On Mon, Nov 25, 2013 at 09:23:22AM +1000, Matt Bryant wrote:
All,
Was wondering if anyone can help out or point us the in right
direction. Ever since we updated from IPA v2.1 to IPA v3.0 have been
seeing some intermittent errors when trying to change passwords etc.
Getting the error cannot
After some further digging I tend to agree that its in the LDAP arena
where the issue lies .. but there is nothing in the ldap_child log thats
helping out .. (btw the other replica IPA servers dont seem to encounter
this issue just the master (ie the server with CA responsibility) ...
Also
