[Freeipa-users] ACIerrors is httpd log

Honestly I’m not even sure if something is not working correctly :) All I know is that my httpd, access and krb5 logs are filling up all my disk space extremely quickly and I have no idea why. Centos 6.8 + IPA 3.0 One master and one replica. Are these things related? How do I fix, where do I

Re: [Freeipa-users] ACIerrors is httpd log

Jim Richard wrote: > Honestly I’m not even sure if something is not working correctly :) > > All I know is that my httpd, access and krb5 logs are filling up all my > disk space extremely quickly and I have no idea why. > > Centos 6.8 + IPA 3.0 > > One master and one replica. > > Are these thin

Re: [Freeipa-users] ACIerrors is httpd log

I think I know what the issue is. I had 2 IPA servers, both with CA’s I dropped one and rebuilt without the CA but a bunch of clients are still pointing at this one server that now is without a CA. Will rebuild that one with a CA and almost sure that will fix.

Re: [Freeipa-users] ACIerrors is httpd log

Jim Richard wrote: > I think I know what the issue is. > > I had 2 IPA servers, both with CA’s > > I dropped one and rebuilt without the CA but a bunch of clients are > still pointing at this one server that now is without a CA. > > Will rebuild that one with a CA and almost sure that will fix.

Re: [Freeipa-users] ACIerrors is httpd log

Hmm ya. So before I rebuilt anything I thought maybe it was my DNS records but it looks like that’s not it. More background, I used to have sso-109 and sso-110, both CA’s. I rebuilt sso-110 without CA. My DNS is external, BIND on another host. Using the following (at the end of the message) ho

Re: [Freeipa-users] ACIerrors is httpd log

Jim Richard wrote: > Hmm ya. So before I rebuilt anything I thought maybe it was my DNS > records but it looks like that’s not it. > > More background, I used to have sso-109 and sso-110, both CA’s. I > rebuilt sso-110 without CA. > > My DNS is external, BIND on another host. > > Using the follo

Re: [Freeipa-users] ACIerrors is httpd log

just now getting back to this, have been truncating httpd logs via cron since then to keep from filing up my disk. So, does this ring any bells :) [Wed Dec 14 00:38:39 2016] [error] ipa: DEBUG: IPA: virtual verify retrieve certificate [Wed Dec 14 00:38:39 2016] [error] ipa: DEBUG: Not granted b

Re: [Freeipa-users] ACIerrors is httpd log

Jim Richard wrote: > just now getting back to this, have been truncating httpd logs via cron > since then to keep from filing up my disk. > > So, does this ring any bells :) No but the complete, unredacted logs were VERY helpful, thanks. So the code looks like this in 3.0, which IIRC you are run