Hi. Thanks for taking the time to look and reply. There were some issues - a buildup of many cert requests had resulted in thousands of certs being issued to two machines. I'm not sure why this happened. As this was stopping replication, it required the deletion of the giant entries that resulted, so it's possible that something is inconsistent in there somewhere. Do you think there's a way to find out which data is causing these errors to be logged? I notice the IPA API is particularly slow. I can probably find which entries were deleted if I get back to the office tomorrow. Thanks Mike On 17 November 2017 at 18:32, John Magne <jmagne@redhat.com> wrote:
Hello:
After taking a quick look at your logs, it appears there is some issue with dogtag simply reading records from the ldap db at a pretty low level. Is there a chance the db became corrupted at some point or something? Or was this a brand new install of the dogtag server?
Sorry could not be more help but these symptoms are something I have not seen before.
----- Original Message -----
From: "Mike Johnson" <m.d.johnson@kuub.org> To: pki-users@redhat.com Sent: Friday, November 17, 2017 3:15:23 AM Subject: [Pki-users] Slowness and java.lang.ClassCastException
Hi. I am running a DogTag server as part of a FreeIPA install. I have an issue which has persisted following some directory replication issues, now resolved. I had initially put the slowness down to the replication issues but now I find errors in the PKI logs and the slowness has persisted.
Though the services are working as intended, it's very slow and in particular the API is sitting at 100% load (user) while performing operations.
Extracts from the logs are pasted at https://paste.fedoraproject.org/paste/7pz2eBm6KzItXZFFoYpldQ
I'd be very grateful for any guidance as to how to investigate further. Thanks!
Mike
Name : pki-base Version : 10.4.1 Release : 13.el7_4 Kernel: 3.10.0-693.5.2.el7.x86_64 CentOS 7.4.1708 FreeIPA v4.5, Domain Level 1.
_______________________________________________ Pki-users mailing list Pki-users@redhat.com https://www.redhat.com/mailman/listinfo/pki-users