Thanks Francois,

I found a solution for the: kernel lockd messages on the file server . There 
was some residual data left in the memory of the file -server.
I also cleared the stat.d cache in  /var/lib/nfs/statd/sm.bak/* . During the 
uninstall of the freeipa-client on the fileserver I did not reboot. Only 
stopped the sssd service and cleared the sssd cache. After that reinstalled the 
new ipa-client.
I gues a reboot after uninstalling the ipa-client would have prevented this 
kernel lock.d  messages. 
No stalls of applications after that.

Having activated the debug level=6 on the clients I see some mounts attemps 
that I can't place. e.g. for the homedirs I see
automount attempts to mount directories that were not defined. like ,"key 
.anaconda", "key /", and others, See part of the log
this is my config:
  instance type(s): sss 
  map: auto.users

  * | -fstype=nfs,rw,vers=3 fileserveraddres:/mnt/raid/homedirs/&

Client log:
(Mon Mar 18 13:02:31 2019) [sssd[autofs]] [sss_parse_name_for_domains] 
(0x0200): name 'auto.users' matched without domain, user is auto.users
(Mon Mar 18 13:02:31 2019) [sssd[autofs]] [setautomntent_send] (0x0400): 
Requesting info for automount map [auto.users] from [<ALL>]
(Mon Mar 18 13:02:31 2019) [sssd[autofs]] [sss_autofs_cmd_setautomntent_done] 
(0x0400): setautomntent found data
(Mon Mar 18 13:02:31 2019) [sssd[autofs]] [sss_autofs_cmd_getautomntbyname] 
(0x0400): Requested data of map auto.users key .anaconda
(Mon Mar 18 13:02:31 2019) [sssd[autofs]] [getautomntbyname_process] (0x0080): 
No key named [.anaconda] found
(Mon Mar 18 13:02:31 2019) [sssd[autofs]] [sss_autofs_cmd_getautomntbyname] 
(0x0400): Requested data of map auto.users key /
(Mon Mar 18 13:02:31 2019) [sssd[autofs]] [getautomntbyname_process] (0x0080): 
No key named [/] found
(Mon Mar 18 13:02:31 2019) [sssd[autofs]] [sss_autofs_cmd_getautomntbyname] 
(0x0400): Requested data of map auto.users key *
(Mon Mar 18 13:02:31 2019) [sssd[autofs]] [sss_autofs_cmd_endautomntent] 
(0x0400): endautomntent called

I found documentation about a automount bug in Centos that requests a "key 
.hidden" but the keys is see in auto.users look odd to me.

For the "named-pkcs11[1718]: network unreachable resolving 
'ns-1471.some.domain/AAAA/IN': " messages.
I could not find a solution. All DNS zones match with configuration in old 
replica. In the logs of the old replica I have seen the same log entries, 
although not so much. DNS seems to work. I see no resolving issues in resolving 
the internal clients and servers.

I have turned off the old server for 1 week now, everything is running from the 
new ipa-server, things are fully functional, except for the random  automount 
keys and some ipv6 outside addresses that can't be resolved. ( ipa-server 
4.6.4, ipa-clients 4.6.4 installed on centos 7.5)

kind regards,

Rob.

_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org

Reply via email to