excessively long log in time
Hey Everyone, I'm using FreeIPA with Ovirt 3.6 and I'm seeing some really long login times. I know it's not my IPA servers, as login times are farily quick for the servers that are attached to the domain. I can even do a kinit very quickly on all of the ovirt nodes. So any ideas? Where can I find logs about IPA logins for ovirt? [image: --] Jeb Baxley [image: http://]about.me/jeb.baxley <http://about.me/jeb.baxley>
Are you using AAA or manage-domains? On Thu, 2015-11-12 at 15:48 -0500, Jeb Baxley wrote:
Hey Everyone,
I'm using FreeIPA with Ovirt 3.6 and I'm seeing some really long login times. I know it's not my IPA servers, as login times are farily quick for the servers that are attached to the domain.
I can even do a kinit very quickly on all of the ovirt nodes. So any ideas? Where can I find logs about IPA logins for ovirt?
> > Jeb Baxleyabout.me/jeb.baxley > > > >
Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
On Thursday, November 12, 2015 04:46:43 PM Donny Davis wrote:
Are you using AAA or manage-domains?
Also are you 150% sure your engine can resolve itself (Maybe DNS issue or /etc/hosts not configured right?)
On Thu, 2015-11-12 at 15:48 -0500, Jeb Baxley wrote:
Hey Everyone,
I'm using FreeIPA with Ovirt 3.6 and I'm seeing some really long login times. I know it's not my IPA servers, as login times are farily quick for the servers that are attached to the domain.
I can even do a kinit very quickly on all of the ovirt nodes. So any ideas? Where can I find logs about IPA logins for ovirt?
Jeb Baxleyabout.me/jeb.baxley
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
I used AAA, specificaly the aaa-ldap-setup script. it went very quickly and the login check and the search check went very quickly - less than a second. the engine ( the ovirt installation that manages the ovirt nodes) can resolve itself. I just did a nslookup and it pulls from the IPA DNS. [image: --] Jeb Baxley [image: http://]about.me/jeb.baxley <http://about.me/jeb.baxley> On Thu, Nov 12, 2015 at 4:48 PM, Alexander Wels <awels@redhat.com> wrote:
On Thursday, November 12, 2015 04:46:43 PM Donny Davis wrote:
Are you using AAA or manage-domains?
Also are you 150% sure your engine can resolve itself (Maybe DNS issue or /etc/hosts not configured right?)
On Thu, 2015-11-12 at 15:48 -0500, Jeb Baxley wrote:
Hey Everyone,
I'm using FreeIPA with Ovirt 3.6 and I'm seeing some really long login times. I know it's not my IPA servers, as login times are farily quick for the servers that are attached to the domain.
I can even do a kinit very quickly on all of the ovirt nodes. So any ideas? Where can I find logs about IPA logins for ovirt?
> > > Jeb Baxleyabout.me/jeb.baxley
> >
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Hey Everyone, Thanks for all of your help. i found biggest part of the problem. Before I used AAA-ldap-setup, I used engine-manage-domains. This was was creating a conflict, essentially the managed-domain wass going first and after it timed-out it would use the aaa-ldap connection. After I removed the managed-domain and restart the ovirt-engine, the logins started to work much much faster. it's around 10 secs now. Still would prefer to be less than a second, but way better than a minute. [image: --] Jeb Baxley [image: http://]about.me/jeb.baxley <http://about.me/jeb.baxley> On Thu, Nov 12, 2015 at 7:30 PM, Jeb Baxley <jeb.baxley@gmail.com> wrote:
I used AAA, specificaly the aaa-ldap-setup script. it went very quickly and the login check and the search check went very quickly - less than a second.
the engine ( the ovirt installation that manages the ovirt nodes) can resolve itself. I just did a nslookup and it pulls from the IPA DNS.
[image: --] Jeb Baxley [image: http://]about.me/jeb.baxley <http://about.me/jeb.baxley>
On Thu, Nov 12, 2015 at 4:48 PM, Alexander Wels <awels@redhat.com> wrote:
On Thursday, November 12, 2015 04:46:43 PM Donny Davis wrote:
Are you using AAA or manage-domains?
Also are you 150% sure your engine can resolve itself (Maybe DNS issue or /etc/hosts not configured right?)
On Thu, 2015-11-12 at 15:48 -0500, Jeb Baxley wrote:
Hey Everyone,
I'm using FreeIPA with Ovirt 3.6 and I'm seeing some really long login times. I know it's not my IPA servers, as login times are farily quick for the servers that are attached to the domain.
I can even do a kinit very quickly on all of the ovirt nodes. So any ideas? Where can I find logs about IPA logins for ovirt?
> > > Jeb Baxleyabout.me/jeb.baxley
> >
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
You can check your engine logs in /var/log/ovirt-engine/engine.log for reasons why its still taking so long to login. On Fri, 2015-11-13 at 09:16 -0500, Jeb Baxley wrote:
Hey Everyone,
Thanks for all of your help. i found biggest part of the problem. Before I used AAA-ldap-setup, I used engine-manage-domains. This was was creating a conflict, essentially the managed-domain wass going first and after it timed-out it would use the aaa-ldap connection. After I removed the managed-domain and restart the ovirt-engine, the logins started to work much much faster. it's around 10 secs now. Still would prefer to be less than a second, but way better than a minute.
Jeb Baxleyabout.me/jeb.baxley
On Thu, Nov 12, 2015 at 7:30 PM, Jeb Baxley <jeb.baxley@gmail.com> wrote:
I used AAA, specificaly the aaa-ldap-setup script. it went very quickly and the login check and the search check went very quickly - less than a second.
the engine ( the ovirt installation that manages the ovirt nodes) can resolve itself. I just did a nslookup and it pulls from the IPA DNS.
Jeb Baxleyabout.me/jeb.baxley
On Thu, Nov 12, 2015 at 4:48 PM, Alexander Wels <awels@redhat.com> wrote:
On Thursday, November 12, 2015 04:46:43 PM Donny Davis wrote:
Are you using AAA or manage-domains?
Also are you 150% sure your engine can resolve itself (Maybe DNS issue or /etc/hosts not configured right?)
On Thu, 2015-11-12 at 15:48 -0500, Jeb Baxley wrote:
Hey Everyone,
I'm using FreeIPA with Ovirt 3.6 and I'm seeing some really long login times. I know it's not my IPA servers, as login times are farily quick for the servers that are attached to the domain.
I can even do a kinit very quickly on all of the ovirt nodes. So any ideas? Where can I find logs about IPA logins for ovirt?
> > > Jeb Baxleyabout.me/jeb.baxley
> > > >
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
participants (3)
-
Alexander Wels -
Donny Davis -
Jeb Baxley