[Freeipa-users] Log filling up a couple of times per day

[Richard Megginson]

----- Original Message -----
> Hi Dimitri,
> 
> I can do, we already analyzed it once.
> 
> There is a loadbalancer checking the ldap protocol which seems to be
> seen as fail.
> 
> Is there a check I can perform on the ldap ports to see if the service
> is available without generating the errors ?

If you just need to check ldap i.e. that port 389 is listening:

ldapsearch -xLLL -h ldaphost -s base -b "" "objectclass=*" 1.1

That will still log to the directory server access log.

> 
> I will post a snippet later on if you have no clue.
> 
> Thanks,
> 
> Matt
> 
> 2015-03-26 23:01 GMT+01:00 Dmitri Pal <dpal at redhat.com>:
> > On 03/26/2015 05:37 PM, Matt . wrote:
> >>
> >> Hi Guys,
> >>
> >> I'm facing every day a fast filling log of:
> >>
> >> /var/log/krb5kdc.log
> >> /var/log/dirsrv/slapd-DOMAIN/access*
> >>
> >> I need to remove the files and restart ipa. The kerberos log is
> >> filling up most, the access logs are quite fast on 100MB and a new one
> >> is created.
> >>
> >> Now I do some LDAP loging/logout per day, servers that chedck if they
> >> are registered for SSSD so that it logs it is normal, but I want to
> >> get rid of it I guess.
> >>
> >> I'm throwing out I think about 6GB per day of logs, all loglevels are low.
> >>
> >> Any idea ?
> >>
> >> It's 3.x on CentOS 6.6
> >>
> >> Any idea ?
> >>
> >> Thanks Matt
> >>
> > Do you have some services that are repeatedly doing something kerberos
> > related and failing?
> > I guess getting a snippet of the kerberos log would give some hint on what
> > is it logging all the time.
> >
> > --
> > Thank you,
> > Dmitri Pal
> >
> > Sr. Engineering Manager IdM portfolio
> > Red Hat, Inc.
> >
> > --
> > Manage your subscription for the Freeipa-users mailing list:
> > https://www.redhat.com/mailman/listinfo/freeipa-users
> > Go to http://freeipa.org for more info on the project
> 
> --
> Manage your subscription for the Freeipa-users mailing list:
> https://www.redhat.com/mailman/listinfo/freeipa-users
> Go to http://freeipa.org for more info on the project
>