I'm working on doing this. While doing so, I note I have two hosts,
seemingly with 40,000 certificates each. I'm assuming this is not
great for performance.
On 17 November 2017 at 18:56, Marc Sauton <msauton(a)redhat.com> wrote:
Yes, try to match the time stamps like for example the pki-tomcat ca
debug
log entry
[17/Nov/2017:10:16:20][http-bio-8080-exec-2]: getEntries: exception
java.lang.ClassCastException
to the LDAP server errors log file, path similar to
/var/log/dirsrv/slapd-EXAMPLE-COM/errors
Thanks,
M.
On Fri, Nov 17, 2017 at 10:32 AM, John Magne <jmagne(a)redhat.com> wrote:
>
> Hello:
>
> After taking a quick look at your logs, it appears there is some issue
> with dogtag simply
> reading records from the ldap db at a pretty low level. Is there a chance
> the db became
> corrupted at some point or something? Or was this a brand new install of
> the dogtag server?
>
> Sorry could not be more help but these symptoms are something I have not
> seen before.
>
>
>
> ----- Original Message -----
> > From: "Mike Johnson" <m.d.johnson(a)kuub.org>
> > To: pki-users(a)redhat.com
> > Sent: Friday, November 17, 2017 3:15:23 AM
> > Subject: [Pki-users] Slowness and java.lang.ClassCastException
> >
> > Hi. I am running a DogTag server as part of a FreeIPA install. I
> > have an issue which has persisted following some directory replication
> > issues, now resolved. I had initially put the slowness down to the
> > replication issues but now I find errors in the PKI logs and the
> > slowness has persisted.
> >
> > Though the services are working as intended, it's very slow and in
> > particular the API is sitting at 100% load (user) while performing
> > operations.
> >
> > Extracts from the logs are pasted at
> >
https://paste.fedoraproject.org/paste/7pz2eBm6KzItXZFFoYpldQ
> >
> > I'd be very grateful for any guidance as to how to investigate further.
> > Thanks!
> >
> > Mike
> >
> > Name : pki-base
> > Version : 10.4.1
> > Release : 13.el7_4
> > Kernel: 3.10.0-693.5.2.el7.x86_64
> > CentOS 7.4.1708
> > FreeIPA v4.5, Domain Level 1.
> >
> > _______________________________________________
> > Pki-users mailing list
> > Pki-users(a)redhat.com
> >
https://www.redhat.com/mailman/listinfo/pki-users
> >
>
> _______________________________________________
> Pki-users mailing list
> Pki-users(a)redhat.com
>
https://www.redhat.com/mailman/listinfo/pki-users