Attahced the log shown Fail of centomenger and login service .

Actually the cluster is working fine but slow and unstable .

login service fail and cert monitor fail.

[ [1;31mFAILED [0m] Failed to start NIS/YP (Network Information Service) Clients to NIS Domain Binder. See 'systemctl status ypbind.service' for details. [ [32m OK [0m] Reached target User and Group Name Lookups. Starting Login Service... Nov 27 19:06:36 central03 kernel: [ 1472.395446] NFSD: starting 90-second grace period (net ffffffff81ad9d40) Nov 27 19:06:37 central03 kernel: [ 1472.619881] fuse init (API version 7.22) Starting Permit User Sessions... Starting Zabbix Agent... [ [32m OK [0m] Started Permit User Sessions. [ [32m OK [0m] Started Command Scheduler. Starting Command Scheduler... [ [32m OK [0m] Started Job spooling tools. Starting Job spooling tools... [ [1;31mFAILED [0m] Failed to start Zabbix Agent. See 'systemctl status zabbix_agentd.service' for details. [ [32m OK [0m] Started PKI Tomcat Server pki-tomcat. [ [32m OK [0m] Reached target PKI Tomcat Server. [ [32m OK [0m] Listening on ipa-otpd socket. [ [32m OK [0m] Started Identity, Policy, Audit. [ [1;31mFAILED [0m] Failed to start Login Service. See 'systemctl status systemd-logind.service' for details. [ [32m OK [0m] Stopped Login Service. Starting Login Service... [ [1;31mFAILED [0m] Failed to start Certificate monitoring and PKI enrollment. See 'systemctl status certmonger.service' for details. [ [1;31mFAILED [0m] Failed to start Login Service. See 'systemctl status systemd-logind.service' for details. [ [32m OK [0m] Stopped Login Service. Starting Login Service... [ [32m OK [0m] Started /etc/rc.d/rc.local Compatibility. Starting Wait for Plymouth Boot Screen to Quit... Starting Terminate Plymouth Boot Screen...

2017-11-28 16:20 GMT+08:00 Florence Blanc-Renaud flo@redhat.com:

On 11/28/2017 08:25 AM, barrykfl--- via FreeIPA-users wrote:

...

Dear all:

two servers replica but the latter one become unstable.

I success promote a client to replcia master . but after reboot the response is slow and the certomanger start fail and remote login ssh very slow delay half minuets

boot log found certmanger fail to start and login service fail: just can proof that if i remove all ipa client it is fine again and login service fine.

Any idea how come ? as i used 3.0 before soit use gpg to install replcia server,

but now it use ipa-client-install first then promote to ipa-replica-install later.

[1;31mFAILED [0m] Failed to start Zabbix Agent. See 'systemctl status zabbix_agentd.service' for details. [ [1;31mFAILED [0m] Failed to start Login Service. See 'systemctl status systemd-logind.service' for details. [ [32m OK [0m] Stopped Login Service. Starting Login Service... [ [1;31mFAILED [0m] Failed to start Login Service. See 'systemctl status systemd-logind.service' for details. [ [32m OK [0m] Stopped Login Service. Starting Login Service... [ [32m OK [0m] Started /etc/rc.d/rc.local Compatibility. Starting Terminate Plymouth Boot Screen... Starting Wait for Plymouth Boot Screen to Quit...

---

FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-leave@lists.fedo rahosted.org

Hi,

do you have any error message related to certmonger that could help diagnose the certmonger failure?

sudo systemctl status certmonger sudo journalctl -u certmonger sudo journalctl -t certmonger

Flo