<html><head></head><body><div style="color:#000; background-color:#fff; font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:16px"><div id="yui_3_16_0_ym19_1_1486073205813_7972">We have multiple ipa servers but only one is continuously affected by the strange problem described in the subject line.</div><div id="yui_3_16_0_ym19_1_1486073205813_7972">Users report not being able to login to servers that are using a specific ipa_server. Looking at this server ipactl shows </div><div id="yui_3_16_0_ym19_1_1486073205813_7972" dir="ltr">everything as RUNNING. ipactl restart fixes the issue until the next time.</div><div id="yui_3_16_0_ym19_1_1486073205813_7972" dir="ltr"><br></div><div id="yui_3_16_0_ym19_1_1486073205813_7972" dir="ltr">My questions are:</div><div id="yui_3_16_0_ym19_1_1486073205813_7972" dir="ltr">1. What could be causing this, and what can I check.</div><div id="yui_3_16_0_ym19_1_1486073205813_7972" dir="ltr">2. What logging should I enable on the server.</div><div id="yui_3_16_0_ym19_1_1486073205813_7972" dir="ltr">3. We are currently monitoring for processes 'Running' but clearly that is not fool-proof way to check if the service is actually up.</div><div id="yui_3_16_0_ym19_1_1486073205813_7972" dir="ltr">What would be a definitive method to check if Freeipa is up and functional in all respects. I was thinking of setting up cron job</div><div id="yui_3_16_0_ym19_1_1486073205813_7972" dir="ltr">that attempts to do kinit <fakeUserid> on a client machine. The problems that I foresee with this method is caching that might give false negatives.</div><div id="yui_3_16_0_ym19_1_1486073205813_7972" dir="ltr"><br></div><div id="yui_3_16_0_ym19_1_1486073205813_7972" dir="ltr">thanks</div></div></body></html>