[Freeipa-users] Re: FreeIPA/Dogtag - Slow host deletion due to certificate pagination

2018-12-21 Thread Jared Ledvina via FreeIPA-users
Hi Florence, Thanks again for getting back to me! I took another look at this, I was able to re-grab the LDAP access logs. The issue here is reproducible simply by running 'ipa cert-find --host=$fqdn', the host doesn't even have to exist. When that runs, from the 389-ds access logs we see

[Freeipa-users] Re: FreeIPA/Dogtag - Slow host deletion due to certificate pagination

2018-12-21 Thread Florence Blanc-Renaud via FreeIPA-users
On 12/20/18 6:33 PM, Jared Ledvina via FreeIPA-users wrote: Hi Florence, Thanks for the reply! So, I've been looking at those and I currently, don't have any limit that I can find configured to 2,000 entries. Current setup: https://paste.fedoraproject.org/paste/75jhSM1qonlQB-Uqtgug-Q

[Freeipa-users] Re: FreeIPA/Dogtag - Slow host deletion due to certificate pagination

2018-12-20 Thread Jared Ledvina via FreeIPA-users
Hi Florence, Thanks for the reply! So, I've been looking at those and I currently, don't have any limit that I can find configured to 2,000 entries. Current setup: https://paste.fedoraproject.org/paste/75jhSM1qonlQB-Uqtgug-Q However, with those set, and after restarting ipa (to make sure any