[Freeipa-users] Kerberos hanging approx. once a day

[Rich Megginson]

On 07/22/2015 02:09 PM, Torsten Harenberg wrote:
> Am 22.07.2015 um 21:49 schrieb Rich Megginson:
>>> but strage: there is no bind binary:
>> Then I'm not sure what's going on.
> currently there is a java process on ldaps:
>
> [root at ipa ~]# netstat -p -n | grep 636
> tcp6       0      0 132.195.124.12:636      132.195.124.12:36546
> VERBUNDEN   800/ns-slapd
> tcp6       0      0 132.195.124.12:636      132.195.124.12:36553
> VERBUNDEN   800/ns-slapd
> tcp6       0      0 132.195.124.12:36546    132.195.124.12:636
> VERBUNDEN   1331/java
> tcp6       0      0 132.195.124.12:36549    132.195.124.12:636
> VERBUNDEN   1331/java
> tcp6       0      0 132.195.124.12:36551    132.195.124.12:636
> VERBUNDEN   1331/java
> tcp6       0      0 132.195.124.12:36553    132.195.124.12:636
> VERBUNDEN   1331/java
> tcp6       0      0 132.195.124.12:636      132.195.124.12:36549
> VERBUNDEN   800/ns-slapd
> tcp6       0      0 132.195.124.12:36548    132.195.124.12:636
> VERBUNDEN   1331/java
> tcp6       0      0 132.195.124.12:36550    132.195.124.12:636
> VERBUNDEN   1331/java
> tcp6       0      0 132.195.124.12:636      132.195.124.12:36554
> VERBUNDEN   800/ns-slapd
> tcp6       0      0 132.195.124.12:36554    132.195.124.12:636
> VERBUNDEN   1331/java
> tcp6       0      0 132.195.124.12:636      132.195.124.12:36548
> VERBUNDEN   800/ns-slapd
> tcp6       0      0 132.195.124.12:636      132.195.124.12:36547
> VERBUNDEN   800/ns-slapd
> tcp6       0      0 132.195.124.12:36552    132.195.124.12:636
> VERBUNDEN   1331/java
> tcp6       0      0 132.195.124.12:36547    132.195.124.12:636
> VERBUNDEN   1331/java
> tcp6       0      0 132.195.124.12:636      132.195.124.12:36550
> VERBUNDEN   800/ns-slapd
> tcp6       0      0 132.195.124.12:636      132.195.124.12:36552
> VERBUNDEN   800/ns-slapd
> tcp6       0      0 132.195.124.12:636      132.195.124.12:36551
> VERBUNDEN   800/ns-slapd
>
> [root at ipa ~]# ps ax | grep 1331
>   1331 ?        Ssl    2:19 /usr/lib/jvm/jre/bin/java
> -DRESTEASY_LIB=/usr/share/java/resteasy -classpath
> /usr/share/tomcat/bin/bootstrap.jar:/usr/share/tomcat/bin/tomcat-juli.jar:/usr/lib/java/commons-daemon.jar
> -Dcatalina.base=/var/lib/pki/pki-tomcat
> -Dcatalina.home=/usr/share/tomcat -Djava.endorsed.dirs=
> -Djava.io.tmpdir=/var/lib/pki/pki-tomcat/temp
> -Djava.util.logging.config.file=/var/lib/pki/pki-tomcat/conf/logging.properties
> -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager
> -Djava.security.manager
> -Djava.security.policy==/var/lib/pki/pki-tomcat/conf/catalina.policy
> org.apache.catalina.startup.Bootstrap start
>   8411 pts/1    S+     0:00 grep --color=auto 1331
> [root at ipa ~]#
>
> Could that cause these requests?

Possibly, but I didn't think DogTag used persistent search.

>
> Best regards,
>
>    Torsten
>
>