I'm seeing what feels like a concurrency error. I'm in a cloud environment and
launching a group of instances which are all trying to join a domain at about
the same time via ipa-client-install. Some of these operations succeed, and
others fail.
The error message on those that fail is that th
This sounds exactly like the problem I am having. I will attach my error log.
Is this what yours looks like?
error_log
Description: error_log
On Jan 28, 2016, at 1:10 PM, Izzo, Anthony wrote:I’m seeing what feels like a concurrency error. I’m in a cloud environment and laun
Yes, that's it!
From: David Zabner [mailto:da...@cazena.com]
Sent: Thursday, January 28, 2016 1:31 PM
To: Izzo, Anthony (U.S. Person)
Cc: freeipa-users@redhat.com
Subject: Re: [Freeipa-users] Server error with multiple clients joining domain
simultaneously
This sounds exactly like the pr
Sent: Thursday, January 28, 2016 1:35 PM
To: freeipa-users@redhat.com
Cc: 'David Zabner'
Subject: RE: [Freeipa-users] Server error with multiple clients joining domain
simultaneously
Yes, that's it!
From: David Zabner [mailto:da...@cazena.com]
Sent: Thursday, January 28, 2016 1:31
freeipa-users@redhat.com>
Subject: Re: [Freeipa-users] Server error with multiple clients joining domain
simultaneously
This sounds exactly like the problem I am having. I will attach my error log.
Is this what yours looks like?
--
Manage your subscription for the Freeipa-users mailing lis
31 PM
> To: Izzo, Anthony (U.S. Person)
> mailto:aizz...@harris.com>>
> Cc: freeipa-users@redhat.com<mailto:freeipa-users@redhat.com>
> Subject: Re: [Freeipa-users] Server error with multiple clients joining
> domain simultaneously
>
> This sounds exactly l
ain simultaneously
>>
>> Yes, that’s it!
>>
>> From: David Zabner [mailto:da...@cazena.com]
>> Sent: Thursday, January 28, 2016 1:31 PM
>> To: Izzo, Anthony (U.S. Person)
>> mailto:aizz...@harris.com>>
>> Cc: freeipa-users@redhat.com<mailto:f
s.com>> wrote:
>>>
>>> I should add that some of my team members have tried serializing their
>>> instance launches, and this problem does not seem to occur under those
>>> circumstances. (That’s not a solution, just a data point for those
>>> inter
by changing the gssapi settings in /etc/httpd/conf.d/ipa.conf to:
>>>>
>>>> AuthType Kerberos
>>>> AuthName "Kerberos Login"
>>>> KrbMethodNegotiate on
>>>> KrbMethodK5Passwd off
>>>> KrbServiceName HTTP
>>
David Zabner wrote:
> Ok so I added the line "KrbConstrainedDelegationLock ipa” to ipa.conf (httpd
> configuration)
>
>
> My error log is now full of network errors:
>
config looks right to me. Does this mean that some requests are
successful and others are not?
I'd set LogLevel debug in nss.
10 matches
Mail list logo