[Freeipa-users] Kerberos hanging

[Terry John]

>> I have a problem using freeipa version 3.0.0-50 on CentOS release 6.8. The problem manifests itself as no authentication, and no DNS.
>> It seems Kerberos just stops responding to requests and requests just
>> get queued up # netstat -tuna | grep SYN_RECV Active Internet
>> connections (servers and established)
>> Proto Recv-Q Send-Q Local Address               Foreign Address             State
>> tcp        0             0           <server IP>:88               <client1 IP>:55440         SYN_RECV
>> tcp        0             0           <server IP>:88               <client 2 IP>:40076        SYN_RECV
>>
>> Looking at /var/log/krb5kdc.log
>> The normal activity of AS_REQ and TGS_REC messages just stops. No error messages. Just  no new messages.

>The problem isn't in Kerberos or DNS, ns-slapd is hanging. See this, http://directory.fedoraproject.org/docs/389ds/FAQ/faq.html#debugging-hangs
>rob

Thanks for that. I've taken a look at the stacktrace of out ns-slapd for our realm. But the stacktrace doesn't give very much. Just lots of "no debugging symbols found" and "No symbol table info available" it seems.
In the list of threads there are lots of calls to functions but again "No symbol table info available." Nothing jumps out.
Similarly in the access log, while there is a lot of activity nothing is obviously wrong.

I didn't change the log buffering for very long, due to the predicted performance issues and did not catch it when it was faulty.

For some reason, apart from once last evening the issue seems to have gone away now..

Terry




Cox Automotive group of companies within the UK comprises: Cox Automotive UK Limited (registered number: 03183918), Manheim Limited (registered number: 00448761), Cox Automotive Retail Solutions Limited (registered number: 02838588), Motors.co.uk Limited (registered number: 05975777), and Real Time Communications Limited (registered number: 04277845). Each of these companies is registered in England and Wales with the registered office address of Central House, Leeds Road, Rothwell, Leeds LS26 0JE. The Cox Automotive group of companies within the UK operates under various brand/trading names including Cox Automotive UK, Manheim Inspection Services, Manheim Auctions, Modix, Xtime and Closeit.

V:0CF72C13B2AD