Hey Everyone, I'm using FreeIPA with Ovirt 3.6 and I'm seeing some really long login times.  I know it's not my IPA servers, as login times are farily quick for the servers that are attached to the domain. I can even do a kinit very quickly on all of the ovirt nodes.  So any ideas?  Where can I find logs about IPA logins for ovirt?   >  > > Jeb Baxleyabout.me/jeb.baxley  > > > >   _______________________________________________ Users mailing list Users(a)ovirt.org http://lists.ovirt.org/mailman/listinfo/users

On Thursday, November 12, 2015 04:46:43 PM Donny Davis wrote: > Are you using AAA or manage-domains? > Also are you 150% sure your engine can resolve itself (Maybe DNS issue or /etc/hosts not configured right?) > On Thu, 2015-11-12 at 15:48 -0500, Jeb Baxley wrote: > > Hey Everyone, > > > > I'm using FreeIPA with Ovirt 3.6 and I'm seeing some really long > > login times. I know it's not my IPA servers, as login times are > > farily quick for the servers that are attached to the domain. > > > > I can even do a kinit very quickly on all of the ovirt nodes. So any > > ideas? Where can I find logs about IPA logins for ovirt? > > > > > > > > > Jeb Baxleyabout.me/jeb.baxley > > > > > > > > > > > > _______________________________________________ > > Users mailing list > > Users(a)ovirt.org > > http://lists.ovirt.org/mailman/listinfo/users

Hey Everyone, Thanks for all of your help.  i found biggest part of the problem.  Before I used AAA-ldap-setup, I used engine-manage-domains.  This was was creating a conflict, essentially the managed-domain wass going first and after it timed-out it would use the aaa-ldap connection.  After I removed the managed-domain and restart the ovirt-engine, the logins started to work much much faster.  it's around 10 secs now.  Still would prefer to be less than a second, but way better than a minute.     Jeb Baxleyabout.me/jeb.baxley     On Thu, Nov 12, 2015 at 7:30 PM, Jeb Baxley <jeb.baxley(a)gmail.com&gt; wrote: > I used AAA, specificaly the aaa-ldap-setup script.  it went very > quickly and the login check and the search check went very quickly > - less than a second. > > the engine ( the ovirt installation that manages the ovirt nodes) > can resolve itself.  I just did a nslookup and it pulls from the > IPA DNS.   > >   >   Jeb Baxleyabout.me/jeb.baxley >   >   > > On Thu, Nov 12, 2015 at 4:48 PM, Alexander Wels <awels(a)redhat.com&gt; > wrote: > > On Thursday, November 12, 2015 04:46:43 PM Donny Davis wrote: > > > Are you using AAA or manage-domains? > > > > > > > Also are you 150% sure your engine can resolve itself (Maybe DNS > > issue or > > /etc/hosts not configured right?) > > > > > On Thu, 2015-11-12 at 15:48 -0500, Jeb Baxley wrote: > > > > Hey Everyone, > > > > > > > > I'm using FreeIPA with Ovirt 3.6 and I'm seeing some really > > long > > > > login times.  I know it's not my IPA servers, as login times > > are > > > > farily quick for the servers that are attached to the domain. > > > > > > > > I can even do a kinit very quickly on all of the ovirt > > nodes.  So any > > > > ideas?  Where can I find logs about IPA logins for ovirt? > > > > > > > > > > > >     >  >    > Jeb Baxleyabout.me/jeb.baxley > > > > > > > >  >  >       >       > > > > > > > > > _______________________________________________ > > > > Users mailing list > > > > Users(a)ovirt.org > > > > http://lists.ovirt.org/mailman/listinfo/users > > > > >