On 21/09/2021 13:26, Rob Crittenden wrote:
lejeczek via FreeIPA-users wrote:
Hi guys.
I've noticed I think a patter, such that when IPA clientA does lots of
ssh to a former IPA clientB (or might be to any non-IPA host?) then logs
size go up rapidly.
Logs: sssd_ssh.log, sssd_private.lot.log,
In terms of IPA client configs - those are vanilla default, nothing
added for extra verbosity.
As soon as I add such a non-IPA host as a client then logs stop growing.
Before I start going through logs I thought I'd ask if this might be a
result of some obvious & gruesome IPA misconfiguration?
many thanks, L.
Version(s)? distros?
So you're saying that you have one or more IPA servers and one or more
IPA clients and those clients are logging excessively until you add a
non-IPA host? What is a non-IPA host and adding it where?
I think you'll need to see what is in those logs.
rob
I've noticed I think a patter, such that when IPA clientA does lots of ssh -
lsyncd - to a former IPA clientB (former member or might be to any
not-ever-IPA-member host?) then logs size go up rapidly.
As soon as I add such a non-IPA host as a client - to IPA domain - then logs
stop growing OR stop 'lsyncd' so no intensive 'ssh' and logs also stop growing.
In other words
freeIPA clientA <- lsyncd -> non-IPA host => logs grow rapidly (~100s MB in ~2
mins)
freeIPA clientA <- lsyncd -> another freeIPA member logs "normal"
(should be easy to reproduce - setup up a "regular" 'lsyncd' between, simplest
case, two nodes. Most likely, how much work 'lsyncd' does determines IPA client logs
growth pace)
All nodes involved are CentOS Stream.
thanks, L.
_______________________________________________
FreeIPA-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/[email protected]
Do not reply to spam on the list, report it:
https://pagure.io/fedora-infrastructure
