<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">On 09/09/2013 10:20 AM, Charlie Derwent
wrote:<br>
</div>
<blockquote
cite="mid:CA+W6xesxJhbS52_ta28ww3Sm_s_KNkQo21ytPDmzACu7Wz1w8w@mail.gmail.com"
type="cite">
<div dir="ltr">
<div>Hi,</div>
<div> </div>
<div>2 questions, some of our automation accounts are needlessly
querying the IPA server every time they call a command via
sudo. This is generating a lot of noise in our access logs. Is
there any way to ensure certain system accounts don't call out
to the IPA server for additional groups or sudo permission
when completing tasks?</div>
</div>
</blockquote>
<br>
What are your client platforms? Does sssd or newer versions of sudo
cache?<br>
<br>
<blockquote
cite="mid:CA+W6xesxJhbS52_ta28ww3Sm_s_KNkQo21ytPDmzACu7Wz1w8w@mail.gmail.com"
type="cite">
<div dir="ltr">
<div> </div>
<div>The other question is slightly more embarrassing, one of
our guys saw /var filling and noticed that
/var/lib/dirsrv/slapd-EXAMPLE-COM/db/ had a load of "log"
files which looked like they weren't being tidied. </div>
</div>
</blockquote>
<br>
They are automatically cleaned up. If you have a lot of updates, it
may take longer.<br>
<br>
<blockquote
cite="mid:CA+W6xesxJhbS52_ta28ww3Sm_s_KNkQo21ytPDmzACu7Wz1w8w@mail.gmail.com"
type="cite">
<div dir="ltr">
<div>One stupid decision later and I'm now here asking on his
behalf if there is anyway of restoring the database from a
replica or is a complete rebuild required?</div>
</div>
</blockquote>
<br>
Just reinit the replica using ipa-replica-manage.<br>
<br>
<blockquote
cite="mid:CA+W6xesxJhbS52_ta28ww3Sm_s_KNkQo21ytPDmzACu7Wz1w8w@mail.gmail.com"
type="cite">
<div dir="ltr">
<div> </div>
<div>Second question is obviously a little bit more urgent than
the first but any advice is greatly appreciated.</div>
<div> </div>
<div>Thanks,</div>
<div>Charlie</div>
<div> </div>
<div> </div>
<div> </div>
<div> </div>
<div> </div>
<div> </div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
Freeipa-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Freeipa-users@redhat.com">Freeipa-users@redhat.com</a>
<a class="moz-txt-link-freetext" href="https://www.redhat.com/mailman/listinfo/freeipa-users">https://www.redhat.com/mailman/listinfo/freeipa-users</a></pre>
</blockquote>
<br>
</body>
</html>