[Pki-users] Slowness and java.lang.ClassCastException

[Mike Johnson]

Hi.  Thanks for taking the time to look and reply.

There were some issues - a buildup of many cert requests had resulted
in thousands of certs being issued to two machines.  I'm not sure why
this happened.  As this was stopping replication, it required the
deletion of the giant entries that resulted, so it's possible that
something is inconsistent in there somewhere.

Do you think there's a way to find out which data is causing these
errors to be logged?  I notice the IPA API is particularly slow.  I
can probably find which entries were deleted if I get back to the
office tomorrow.

Thanks
Mike

On 17 November 2017 at 18:32, John Magne <jmagne at redhat.com> wrote:
> Hello:
>
> After taking a quick look at your logs, it appears there is some issue with dogtag simply
> reading records from the ldap db at a pretty low level. Is there a chance the db became
> corrupted at some point or something? Or was this a brand new install of the dogtag server?
>
> Sorry could not be more help but these symptoms are something I have not seen before.
>
>
>
> ----- Original Message -----
>> From: "Mike Johnson" <m.d.johnson at kuub.org>
>> To: pki-users at redhat.com
>> Sent: Friday, November 17, 2017 3:15:23 AM
>> Subject: [Pki-users] Slowness and java.lang.ClassCastException
>>
>> Hi.  I am running a DogTag server as part of a FreeIPA install.  I
>> have an issue which has persisted following some directory replication
>> issues, now resolved.  I had initially put the slowness down to the
>> replication issues but now I find errors in the PKI logs and the
>> slowness has persisted.
>>
>> Though the services are working as intended, it's very slow and in
>> particular the API is sitting at 100% load (user) while performing
>> operations.
>>
>> Extracts from the logs are pasted at
>> https://paste.fedoraproject.org/paste/7pz2eBm6KzItXZFFoYpldQ
>>
>> I'd be very grateful for any guidance as to how to investigate further.
>> Thanks!
>>
>> Mike
>>
>> Name        : pki-base
>> Version     : 10.4.1
>> Release     : 13.el7_4
>> Kernel: 3.10.0-693.5.2.el7.x86_64
>> CentOS 7.4.1708
>> FreeIPA v4.5, Domain Level 1.
>>
>> _______________________________________________
>> Pki-users mailing list
>> Pki-users at redhat.com
>> https://www.redhat.com/mailman/listinfo/pki-users
>>