On Tue, Mar 19, 2019 at 3:56 PM Charles Hedrick via FreeIPA-users <freeipa-users@lists.fedorahosted.org> wrote: > > It appears that the IPA command uses a host hardwired in > /etc/ipa/default.conf. > > If that fails, it then gets a list from DNS. This works fine if there’s a > connection refused, but if there is no response, it takes so long to time out > that most users will give up. > > Is there a way to change the timeout?
Try lowering tcp_syn_retries: sysctl -w net.ipv4.tcp_syn_retries=4 There might be side-effects, so don't use too low a setting. François > _______________________________________________ > FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org > To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org > Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > List Archives: > https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org _______________________________________________ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org
