On 2017-04-08 12:53, Lukas Slebodnik wrote:
On (04/04/17 09:41), Ronald Wimmer wrote:
On 2017-03-31 13:35, Lukas Slebodnik wrote:
On (29/03/17 10:47), Ronald Wimmer wrote:
Hi,
yesterday I suddenly was unable to use the webinterface of my ipa master. SSH
login (with root user) did not work also.
When I uncommented the setting "memcache_timeout = 600" in the sssd config
file of the master everything seemed to work fine again. (my ipa setup has a
trust to AD)
I doubt it had anything to do memcache_timeout.
I would say that restart of sssd helped. But it difficult to say
without log files. either sssd logs or at least /var/log/secure
(journald for pam).
You were right. I uncommented the setting and the problem ocurred again.
Did you find anything suspicious in journald?
Is sssd_be busy (or any other process)?
high CPU, IO operations ...
It would be good to know more details. Restarting sssd is not a solution.
sssd_be consumed a lot of CPU and produced a lot of I/O in the sssd
cache directory. After following
https://jhrozek.wordpress.com/2015/08/19/performance-tuning-sssd-for-large-ipa-ad-trust-deployments/
the problems did nod reappear.
Regards,
Ronald
--
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project
