<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">Hi Lachlan,<br>
<br>
This is probably a complete hack, but the way I've changed
nsslapd-cachememsize in the past is -<br>
<br>
On each ipa replica in turn -<br>
<ol>
<li>ipactl stop</li>
<li>vim /etc/dirsrv/slapd-DOMAIN/dse.ldif - (where DOMAIN is
your server's domain/realm - not sure which) find and change
the value of nsslapd-cachememsize</li>
<li>ipactl start</li>
</ol>
<p>This seemed to work in that it made the error messages go away
and it made heavily loaded servers more stable. However, I've
not tried this on a recent version of ipa so it may no longer
work or not be needed any more.</p>
<p>Regards</p>
<p>Bob<br>
</p>
<br>
On 17/03/2017 02:20, Lachlan Musicman wrote:<br>
</div>
<blockquote
cite="mid:CAGBeqiN_+1ZYhD2HsDS8zT0gNqiZhXqN_oXnS1ajm-5PV3zy3A@mail.gmail.com"
type="cite">
<div dir="ltr">While going through the logs on the FreeIPA server,
I noticed this:<br>
<br>
<br>
WARNING: changelog: entry cache size 2097152 B is less than db
size 12804096 B; We recommend to increase the entry cache size
nsslapd-cachememsize.<br>
<div><br>
<br>
</div>
<div>I have found a number of documents:<br>
<br>
</div>
<div>What it is: <a moz-do-not-send="true"
href="https://access.redhat.com/documentation/en-US/Red_Hat_Directory_Server/8.0/html/Configuration_and_Command_Reference/Configuration_Command_File_Reference-Database_Attributes_under_cnNetscapeRoot_cnldbm_database_cnplugins_cnconfig_and_cnUserRoot_cnldbm_database_cnplugins_cnconfig-nsslapd_cachememsize.html">https://access.redhat.com/documentation/en-US/Red_Hat_Directory_Server/8.0/html/Configuration_and_Command_Reference/Configuration_Command_File_Reference-Database_Attributes_under_cnNetscapeRoot_cnldbm_database_cnplugins_cnconfig_and_cnUserRoot_cnldbm_database_cnplugins_cnconfig-nsslapd_cachememsize.html</a><br>
<br>
</div>
<div>How to tune it: <a moz-do-not-send="true"
href="https://access.redhat.com/documentation/en-US/Red_Hat_Directory_Server/8.1/html/Administration_Guide/memoryusage.html">https://access.redhat.com/documentation/en-US/Red_Hat_Directory_Server/8.1/html/Administration_Guide/memoryusage.html</a><br>
<br>
</div>
<div><br>
</div>
<div>etc etc.<br>
<br>
</div>
<div>I have no idea of what the secret password is for the
"cn=directory manager" and can't find any information about
where I might find it or where or when it might have been set
anywhere. I have found a number of likely candidates, but none
have worked.<br>
<br>
</div>
<div>I found this page:<br>
<br>
<a moz-do-not-send="true"
href="https://www.freeipa.org/page/Howto/Change_Directory_Manager_Password">https://www.freeipa.org/page/Howto/Change_Directory_Manager_Password</a><br>
<br>
</div>
<div>but I'd prefer to not change the password if possible. <br>
<br>
</div>
<div>cheers<br>
</div>
<div>L.<br>
</div>
<div><br>
<br>
</div>
<div><br clear="all">
<div>
<div class="gmail_signature">
<div dir="ltr">
<div>------<br>
The most dangerous phrase in the language is, "We've
always done it this way."<br>
<br>
- Grace Hopper<br>
</div>
</div>
</div>
</div>
</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
</blockquote>
<p><br>
</p>
</body>
</html>