[Freeipa-users] ACIerrors is httpd log

[Jim Richard]

Honestly I’m not even sure if something is not working correctly :)

All I know is that my httpd, access and krb5 logs are filling up all my disk space extremely quickly and I have no idea why.

Centos 6.8 + IPA 3.0

One master and one replica.

Are these things related? 

How do I fix, where do I even start?

Thanks !

On the replica the httpd log is constantly getting spammed with:

[Thu Nov 24 05:55:18 2016] [error] ipa: INFO: host/phoenix-153.nym1.placeiq.net at PLACEIQ.NET: cert_request(u’actual cert removed….. , add=True): ACIError

and on the master the access log is filling up quickly with:

10.1.41.110 - - [24/Nov/2016:06:09:54 +0000] "POST /ca/agent/ca/displayBySerial HTTP/1.1" 200 10106

and finally also on the master’s krb5 log is filling up with:

Nov 24 06:11:45 sso-109.nym1.placeiq.net krb5kdc[19333](info): AS_REQ (4 etypes {18 17 16 23}) 10.1.60.130: ISSUE: authtime 1479967905, etypes {rep=18 tkt=18 ses=18}, host/phoenix-130.nym1.placeiq.net at PLACEIQ.NET for krbtgt/PLACEIQ.NET at PLACEIQ.NET
Nov 24 06:11:45 sso-109.nym1.placeiq.net krb5kdc[19332](info): TGS_REQ (4 etypes {18 17 16 23}) 10.1.60.87: ISSUE: authtime 1479967905, etypes {rep=18 tkt=18 ses=18}, host/phoenix-087.nym1.placeiq.net at PLACEIQ.NET for ldap/sso-109.nym1.placeiq.net at PLACEIQ.NET
Nov 24 06:11:45 sso-109.nym1.placeiq.net krb5kdc[19332](info): TGS_REQ (4 etypes {18 17 16 23}) 10.1.60.130: ISSUE: authtime 1479967905, etypes {rep=18 tkt=18 ses=18}, host/phoenix-130.nym1.placeiq.net at PLACEIQ.NET for HTTP/sso-110.nym1.placeiq.net at PLACEIQ.NET
Nov 24 06:11:45 sso-109.nym1.placeiq.net krb5kdc[19333](info): TGS_REQ (1 etypes {18}) 10.1.60.130: ISSUE: authtime 1479967905, etypes {rep=18 tkt=18 ses=18}, host/phoenix-130.nym1.placeiq.net at PLACEIQ.NET for krbtgt/PLACEIQ.NET at PLACEIQ.NET
Nov 24 06:11:45 sso-109.nym1.placeiq.net krb5kdc[19333](info): AS_REQ (4 etypes {18 17 16 23}) 10.1.60.160: NEEDED_PREAUTH: host/phoenix-160.nym1.placeiq.net at PLACEIQ.NET for krbtgt/PLACEIQ.NET at PLACEIQ.NET, Additional pre-authentication required
Nov 24 06:11:45 sso-109.nym1.placeiq.net krb5kdc[19332](info): AS_REQ (4 etypes {18 17 16 23}) 10.1.60.160: ISSUE: authtime 1479967905, etypes {rep=18 tkt=18 ses=18}, host/phoenix-160.nym1.placeiq.net at PLACEIQ.NET for krbtgt/PLACEIQ.NET at PLACEIQ.NET
Nov 24 06:11:45 sso-109.nym1.placeiq.net krb5kdc[19333](info): TGS_REQ (4 etypes {18 17 16 23}) 10.1.60.160: ISSUE: authtime 1479967905, etypes {rep=18 tkt=18 ses=18}, host/phoenix-160.nym1.placeiq.net at PLACEIQ.NET for HTTP/sso-110.nym1.placeiq.net at PLACEIQ.NET
Nov 24 06:11:45 sso-109.nym1.placeiq.net krb5kdc[19333](info): TGS_REQ (1 etypes {18}) 10.1.60.160: ISSUE: authtime 1479967905, etypes {rep=18 tkt=18 ses=18}, host/phoenix-160.nym1.placeiq.net at PLACEIQ.NET for krbtgt/PLACEIQ.NET at PLACEIQ.NET
Nov 24 06:11:45 sso-109.nym1.placeiq.net krb5kdc[19333](info): AS_REQ (4 etypes {18 17 16 23}) 10.1.60.175: NEEDED_PREAUTH: host/phoenix-175.nym1.placeiq.net at PLACEIQ.NET for krbtgt/PLACEIQ.NET at PLACEIQ.NET, Additional pre-authentication required
Nov 24 06:11:45 sso-109.nym1.placeiq.net krb5kdc[19332](info): AS_REQ (4 etypes {18 17 16 23}) 10.1.60.175: ISSUE: authtime 1479967905, etypes {rep=18 tkt=18 ses=18}, host/phoenix-175.nym1.placeiq.net at PLACEIQ.NET for krbtgt/PLACEIQ.NET at PLACEIQ.NET


 <http://www.placeiq.com/> <http://www.placeiq.com/> <http://www.placeiq.com/>	Jim Richard	 <https://twitter.com/placeiq> <https://twitter.com/placeiq> <https://twitter.com/placeiq>	 <https://www.facebook.com/PlaceIQ> <https://www.facebook.com/PlaceIQ>	 <https://www.linkedin.com/company/placeiq> <https://www.linkedin.com/company/placeiq>
SYSTEM ADMINISTRATOR III
(646) 338-8905  

 <http://placeiq.com/2016/10/26/the-making-of-a-location-data-industry-milestone/>



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20161124/dbde30e5/attachment.htm>