On Thu, 2024-12-12 at 23:52 +0100, Jernej Jakob via FreeIPA-users wrote: > > That should be the issue then. My domain only gets a couple tens of > MOD > and DEL operations a day, most of which are dyndns updates of client > records. Look at what they're doing and find out why.
So, the current access log's MODs are: [12/Dec/2024:15:43:21.049599940 -0500] conn=7 op=240719 MOD dn="fqdn=brian-laptop.example.com,cn=computers,cn=accounts,dc=example,dc=com" [12/Dec/2024:15:45:00.816349745 -0500] conn=6 op=176399 MOD dn="fqdn=pc.example.com,cn=computers,cn=accounts,dc=example,dc=com" [12/Dec/2024:15:48:06.029678705 -0500] conn=6 op=176753 MOD dn="fqdn=server.example.com,cn=computers,cn=accounts,dc=example,dc=com" [12/Dec/2024:15:48:18.029279254 -0500] conn=7 op=241141 MOD dn="fqdn=pvr.example.com,cn=computers,cn=accounts,dc=example,dc=com" [12/Dec/2024:15:48:24.026950754 -0500] conn=7 op=241156 MOD dn="fqdn=allie.example.com,cn=computers,cn=accounts,dc=example,dc=com" [12/Dec/2024:15:48:26.320100385 -0500] conn=6 op=176780 MOD dn="uid=brian,cn=users,cn=accounts,dc=example,dc=com" [12/Dec/2024:15:49:47.726513476 -0500] conn=7 op=241220 MOD dn="uid=brian,cn=users,cn=accounts,dc=example,dc=com" [12/Dec/2024:15:58:21.055303486 -0500] conn=7 op=241239 MOD dn="fqdn=brian-laptop.example.com,cn=computers,cn=accounts,dc=example,dc=com" [12/Dec/2024:16:00:00.540396364 -0500] conn=7 op=241259 MOD dn="fqdn=pc.example.com,cn=computers,cn=accounts,dc=example,dc=com" [12/Dec/2024:16:01:54.552317334 -0500] conn=7 op=241293 MOD dn="uid=alice,cn=users,cn=accounts,dc=example,dc=com" [12/Dec/2024:16:01:56.582573499 -0500] conn=7 op=241317 MOD dn="uid=alice,cn=users,cn=accounts,dc=example,dc=com" [12/Dec/2024:16:03:06.023870734 -0500] conn=6 op=177077 MOD dn="fqdn=server.example.com,cn=computers,cn=accounts,dc=example,dc=com" [12/Dec/2024:16:03:18.032876977 -0500] conn=7 op=241692 MOD dn="fqdn=pvr.example.com,cn=computers,cn=accounts,dc=example,dc=com" [12/Dec/2024:16:03:24.025425407 -0500] conn=6 op=177103 MOD dn="fqdn=allie.example.com,cn=computers,cn=accounts,dc=example,dc=com" [12/Dec/2024:16:03:26.630725693 -0500] conn=6 op=177123 MOD dn="uid=brian,cn=users,cn=accounts,dc=example,dc=com" [12/Dec/2024:16:04:48.890793951 -0500] conn=6 op=177144 MOD dn="uid=brian,cn=users,cn=accounts,dc=example,dc=com" [12/Dec/2024:16:13:21.058340778 -0500] conn=6 op=177164 MOD dn="fqdn=brian-laptop.example.com,cn=computers,cn=accounts,dc=example,dc=com" [12/Dec/2024:16:14:30.488316436 -0500] conn=6 op=177197 MOD dn="uid=dave,cn=users,cn=accounts,dc=example,dc=com" [12/Dec/2024:16:14:47.516203642 -0500] conn=6 op=177230 MOD dn="uid=dave,cn=users,cn=accounts,dc=example,dc=com" [12/Dec/2024:16:15:00.241389790 -0500] conn=7 op=241767 MOD dn="fqdn=pc.example.com,cn=computers,cn=accounts,dc=example,dc=com" [12/Dec/2024:16:15:14.433507322 -0500] conn=7 op=241806 MOD dn="uid=brian,cn=users,cn=accounts,dc=example,dc=com" [12/Dec/2024:16:15:28.837183702 -0500] conn=7 op=241832 MOD dn="uid=brian,cn=users,cn=accounts,dc=example,dc=com" [12/Dec/2024:16:18:06.032551846 -0500] conn=7 op=241851 MOD dn="fqdn=server.example.com,cn=computers,cn=accounts,dc=example,dc=com" [12/Dec/2024:16:18:18.027331800 -0500] conn=7 op=241865 MOD dn="fqdn=pvr.example.com,cn=computers,cn=accounts,dc=example,dc=com" [12/Dec/2024:16:18:24.031518252 -0500] conn=7 op=241885 MOD dn="fqdn=allie.example.com,cn=computers,cn=accounts,dc=example,dc=com" [12/Dec/2024:16:18:26.976161631 -0500] conn=6 op=177280 MOD dn="uid=brian,cn=users,cn=accounts,dc=example,dc=com" [12/Dec/2024:16:19:49.312979067 -0500] conn=7 op=241934 MOD dn="uid=brian,cn=users,cn=accounts,dc=example,dc=com" [12/Dec/2024:16:28:21.064876644 -0500] conn=7 op=241954 MOD dn="fqdn=brian-laptop.example.com,cn=computers,cn=accounts,dc=example,dc=com" [12/Dec/2024:16:30:00.521627524 -0500] conn=6 op=177315 MOD dn="fqdn=pc.example.com,cn=computers,cn=accounts,dc=example,dc=com" [12/Dec/2024:16:30:59.625076375 -0500] conn=6 op=177336 MOD dn="uid=alice,cn=users,cn=accounts,dc=example,dc=com" [12/Dec/2024:16:31:18.757620376 -0500] conn=7 op=242015 MOD dn="uid=alice,cn=users,cn=accounts,dc=example,dc=com" [12/Dec/2024:16:33:06.022714088 -0500] conn=6 op=177357 MOD dn="fqdn=server.example.com,cn=computers,cn=accounts,dc=example,dc=com" [12/Dec/2024:16:33:18.030083155 -0500] conn=7 op=242046 MOD dn="fqdn=pvr.example.com,cn=computers,cn=accounts,dc=example,dc=com" [12/Dec/2024:16:33:24.039266176 -0500] conn=7 op=242061 MOD dn="fqdn=allie.example.com,cn=computers,cn=accounts,dc=example,dc=com" [12/Dec/2024:16:33:27.902671348 -0500] conn=7 op=242101 MOD dn="uid=brian,cn=users,cn=accounts,dc=example,dc=com" [12/Dec/2024:16:34:50.082741249 -0500] conn=6 op=177408 MOD dn="uid=brian,cn=users,cn=accounts,dc=example,dc=com" [12/Dec/2024:16:43:21.281870823 -0500] conn=7 op=242122 MOD dn="fqdn=brian-laptop.example.com,cn=computers,cn=accounts,dc=example,dc=com" [12/Dec/2024:16:45:00.361564352 -0500] conn=6 op=177429 MOD dn="fqdn=pc.example.com,cn=computers,cn=accounts,dc=example,dc=com" [12/Dec/2024:16:48:06.033650886 -0500] conn=7 op=242155 MOD dn="fqdn=server.example.com,cn=computers,cn=accounts,dc=example,dc=com" [12/Dec/2024:16:48:18.029209673 -0500] conn=6 op=177455 MOD dn="fqdn=pvr.example.com,cn=computers,cn=accounts,dc=example,dc=com" [12/Dec/2024:16:48:24.032552370 -0500] conn=7 op=242180 MOD dn="fqdn=allie.example.com,cn=computers,cn=accounts,dc=example,dc=com" [12/Dec/2024:16:48:27.829189856 -0500] conn=6 op=177470 MOD dn="uid=brian,cn=users,cn=accounts,dc=example,dc=com" [12/Dec/2024:16:49:50.601694667 -0500] conn=6 op=177503 MOD dn="uid=brian,cn=users,cn=accounts,dc=example,dc=com" [12/Dec/2024:16:54:39.347977860 -0500] conn=6 op=177530 MOD dn="uid=tanya,cn=users,cn=accounts,dc=example,dc=com" [12/Dec/2024:16:54:41.408976372 -0500] conn=7 op=242255 MOD dn="uid=dave,cn=users,cn=accounts,dc=example,dc=com" [12/Dec/2024:16:55:10.861296766 -0500] conn=6 op=177565 MOD dn="uid=dave,cn=users,cn=accounts,dc=example,dc=com" [12/Dec/2024:16:58:21.129579541 -0500] conn=6 op=177579 MOD dn="fqdn=brian-laptop.example.com,cn=computers,cn=accounts,dc=example,dc=com" [12/Dec/2024:17:00:00.060050889 -0500] conn=7 op=242292 MOD dn="fqdn=pc.example.com,cn=computers,cn=accounts,dc=example,dc=com" [12/Dec/2024:17:03:06.025203640 -0500] conn=6 op=177615 MOD dn="fqdn=server.example.com,cn=computers,cn=accounts,dc=example,dc=com" [12/Dec/2024:17:03:18.028695975 -0500] conn=6 op=177629 MOD dn="fqdn=pvr.example.com,cn=computers,cn=accounts,dc=example,dc=com" [12/Dec/2024:17:03:24.035015035 -0500] conn=6 op=177638 MOD dn="fqdn=allie.example.com,cn=computers,cn=accounts,dc=example,dc=com" [12/Dec/2024:17:03:28.148331620 -0500] conn=7 op=242345 MOD dn="uid=brian,cn=users,cn=accounts,dc=example,dc=com" [12/Dec/2024:17:04:50.602145735 -0500] conn=6 op=177758 MOD dn="uid=brian,cn=users,cn=accounts,dc=example,dc=com" [12/Dec/2024:17:06:39.176712028 -0500] conn=6 op=177791 MOD dn="uid=alice,cn=users,cn=accounts,dc=example,dc=com" [12/Dec/2024:17:06:40.100979492 -0500] conn=7 op=242486 MOD dn="uid=alice,cn=users,cn=accounts,dc=example,dc=com" [12/Dec/2024:17:06:41.503257409 -0500] conn=7 op=242512 MOD dn="uid=alice,cn=users,cn=accounts,dc=example,dc=com" [12/Dec/2024:17:10:38.333728806 -0500] conn=7 op=242534 MOD dn="uid=dave,cn=users,cn=accounts,dc=example,dc=com" [12/Dec/2024:17:10:56.408408863 -0500] conn=7 op=242553 MOD dn="uid=dave,cn=users,cn=accounts,dc=example,dc=com" [12/Dec/2024:17:13:21.063666219 -0500] conn=7 op=242572 MOD dn="fqdn=brian-laptop.example.com,cn=computers,cn=accounts,dc=example,dc=com" [12/Dec/2024:17:14:36.777383400 -0500] conn=7 op=242612 MOD dn="uid=alice,cn=users,cn=accounts,dc=example,dc=com" [12/Dec/2024:17:14:38.194704026 -0500] conn=6 op=177876 MOD dn="uid=alice,cn=users,cn=accounts,dc=example,dc=com" [12/Dec/2024:17:14:39.243895983 -0500] conn=7 op=242658 MOD dn="uid=alice,cn=users,cn=accounts,dc=example,dc=com" [12/Dec/2024:17:15:00.253549065 -0500] conn=7 op=242677 MOD dn="fqdn=pc.example.com,cn=computers,cn=accounts,dc=example,dc=com" [12/Dec/2024:17:18:06.023355809 -0500] conn=7 op=242697 MOD dn="fqdn=server.example.com,cn=computers,cn=accounts,dc=example,dc=com" [12/Dec/2024:17:18:18.031186454 -0500] conn=6 op=177908 MOD dn="fqdn=pvr.example.com,cn=computers,cn=accounts,dc=example,dc=com" [12/Dec/2024:17:18:24.029519463 -0500] conn=7 op=242729 MOD dn="fqdn=allie.example.com,cn=computers,cn=accounts,dc=example,dc=com" [12/Dec/2024:17:18:30.569950176 -0500] conn=7 op=242764 MOD dn="uid=brian,cn=users,cn=accounts,dc=example,dc=com" [12/Dec/2024:17:19:50.815259483 -0500] conn=6 op=178049 MOD dn="uid=brian,cn=users,cn=accounts,dc=example,dc=com" [12/Dec/2024:17:22:26.986355909 -0500] conn=6 op=178082 MOD dn="uid=brian,cn=users,cn=accounts,dc=example,dc=com" [12/Dec/2024:17:22:32.012774419 -0500] conn=7 op=243215 MOD dn="uid=brian,cn=users,cn=accounts,dc=example,dc=com" [12/Dec/2024:17:23:22.085735714 -0500] conn=7 op=243249 MOD dn="uid=brian,cn=users,cn=accounts,dc=example,dc=com" [12/Dec/2024:17:23:26.674936971 -0500] conn=6 op=178108 MOD dn="uid=brian,cn=users,cn=accounts,dc=example,dc=com" [12/Dec/2024:17:28:21.061035661 -0500] conn=6 op=178121 MOD dn="fqdn=brian-laptop.example.com,cn=computers,cn=accounts,dc=example,dc=com" [12/Dec/2024:17:29:33.535815795 -0500] conn=6 op=178146 MOD dn="uid=brian,cn=users,cn=accounts,dc=example,dc=com" [12/Dec/2024:17:29:36.324068718 -0500] conn=7 op=243345 MOD dn="uid=brian,cn=users,cn=accounts,dc=example,dc=com" [12/Dec/2024:17:29:53.487382083 -0500] conn=7 op=243371 MOD dn="uid=brian,cn=users,cn=accounts,dc=example,dc=com" [12/Dec/2024:17:30:00.825337604 -0500] conn=7 op=243380 MOD dn="fqdn=pc.example.com,cn=computers,cn=accounts,dc=example,dc=com" [12/Dec/2024:17:33:06.023425838 -0500] conn=7 op=243394 MOD dn="fqdn=server.example.com,cn=computers,cn=accounts,dc=example,dc=com" [12/Dec/2024:17:33:12.439895532 -0500] conn=7 op=243427 MOD dn="uid=alice,cn=users,cn=accounts,dc=example,dc=com" [12/Dec/2024:17:33:13.291814569 -0500] conn=7 op=243461 MOD dn="uid=alice,cn=users,cn=accounts,dc=example,dc=com" [12/Dec/2024:17:33:13.977456506 -0500] conn=6 op=178231 MOD dn="uid=alice,cn=users,cn=accounts,dc=example,dc=com" [12/Dec/2024:17:33:18.029609072 -0500] conn=6 op=178239 MOD dn="fqdn=pvr.example.com,cn=computers,cn=accounts,dc=example,dc=com" [12/Dec/2024:17:33:24.032513895 -0500] conn=7 op=243506 MOD dn="fqdn=allie.example.com,cn=computers,cn=accounts,dc=example,dc=com" [12/Dec/2024:17:34:51.401237611 -0500] conn=6 op=178273 MOD dn="uid=brian,cn=users,cn=accounts,dc=example,dc=com" [12/Dec/2024:17:38:59.064023115 -0500] conn=7 op=243828 MOD dn="uid=alice,cn=users,cn=accounts,dc=example,dc=com" [12/Dec/2024:17:39:00.384048473 -0500] conn=6 op=178526 MOD dn="uid=alice,cn=users,cn=accounts,dc=example,dc=com" [12/Dec/2024:17:39:01.364706604 -0500] conn=7 op=243868 MOD dn="uid=alice,cn=users,cn=accounts,dc=example,dc=com" [12/Dec/2024:17:43:21.063882183 -0500] conn=7 op=243887 MOD dn="fqdn=brian-laptop.example.com,cn=computers,cn=accounts,dc=example,dc=com" [12/Dec/2024:17:44:42.436628225 -0500] conn=6 op=178577 MOD dn="uid=brian,cn=users,cn=accounts,dc=example,dc=com" [12/Dec/2024:17:45:00.476235667 -0500] conn=7 op=243925 MOD dn="fqdn=pc.example.com,cn=computers,cn=accounts,dc=example,dc=com" [12/Dec/2024:17:46:19.788325399 -0500] conn=6 op=178610 MOD dn="uid=brian,cn=users,cn=accounts,dc=example,dc=com" [12/Dec/2024:17:46:24.626112107 -0500] conn=6 op=178625 MOD dn="uid=brian,cn=users,cn=accounts,dc=example,dc=com" [12/Dec/2024:17:48:06.021951001 -0500] conn=7 op=243995 MOD dn="fqdn=server.example.com,cn=computers,cn=accounts,dc=example,dc=com" [12/Dec/2024:17:48:18.025399562 -0500] conn=7 op=244010 MOD dn="fqdn=pvr.example.com,cn=computers,cn=accounts,dc=example,dc=com" [12/Dec/2024:17:48:24.036720748 -0500] conn=7 op=244025 MOD dn="fqdn=allie.example.com,cn=computers,cn=accounts,dc=example,dc=com" [12/Dec/2024:17:49:52.139354331 -0500] conn=7 op=244052 MOD dn="uid=brian,cn=users,cn=accounts,dc=example,dc=com" [12/Dec/2024:17:51:11.983425003 -0500] conn=6 op=178932 MOD dn="uid=brian,cn=users,cn=accounts,dc=example,dc=com" [12/Dec/2024:17:51:19.573975670 -0500] conn=7 op=244322 MOD dn="uid=dave,cn=users,cn=accounts,dc=example,dc=com" [12/Dec/2024:17:51:32.616638426 -0500] conn=6 op=178961 MOD dn="uid=brian,cn=users,cn=accounts,dc=example,dc=com" [12/Dec/2024:17:53:26.124585757 -0500] conn=6 op=178988 MOD dn="uid=alice,cn=users,cn=accounts,dc=example,dc=com" [12/Dec/2024:17:53:27.196684482 -0500] conn=7 op=244380 MOD dn="uid=alice,cn=users,cn=accounts,dc=example,dc=com" [12/Dec/2024:17:53:27.888452614 -0500] conn=7 op=244423 MOD dn="uid=alice,cn=users,cn=accounts,dc=example,dc=com" [12/Dec/2024:17:58:21.053133619 -0500] conn=6 op=179026 MOD dn="fqdn=brian-laptop.example.com,cn=computers,cn=accounts,dc=example,dc=com" [12/Dec/2024:18:00:00.771209780 -0500] conn=7 op=244448 MOD dn="fqdn=pc.example.com,cn=computers,cn=accounts,dc=example,dc=com" [12/Dec/2024:18:00:08.402252071 -0500] conn=6 op=179057 MOD dn="uid=brian,cn=users,cn=accounts,dc=example,dc=com" [12/Dec/2024:18:00:28.123601770 -0500] conn=6 op=179085 MOD dn="uid=brian,cn=users,cn=accounts,dc=example,dc=com" [12/Dec/2024:18:00:57.042735813 -0500] conn=6 op=179100 MOD dn="uid=brian,cn=users,cn=accounts,dc=example,dc=com" [12/Dec/2024:18:03:06.022941485 -0500] conn=7 op=244533 MOD dn="fqdn=server.example.com,cn=computers,cn=accounts,dc=example,dc=com" [12/Dec/2024:18:03:18.025929100 -0500] conn=7 op=244547 MOD dn="fqdn=pvr.example.com,cn=computers,cn=accounts,dc=example,dc=com" [12/Dec/2024:18:03:24.034669557 -0500] conn=7 op=244567 MOD dn="fqdn=allie.example.com,cn=computers,cn=accounts,dc=example,dc=com" [12/Dec/2024:18:04:29.123278994 -0500] conn=6 op=179134 MOD dn="fqdn=allie.example.com,cn=computers,cn=accounts,dc=example,dc=com" [12/Dec/2024:18:04:30.181379883 -0500] conn=6 op=179144 MOD dn="uid=alice,cn=users,cn=accounts,dc=example,dc=com" [12/Dec/2024:18:04:53.383131409 -0500] conn=7 op=244623 MOD dn="uid=brian,cn=users,cn=accounts,dc=example,dc=com" [12/Dec/2024:18:08:33.880716485 -0500] conn=7 op=244782 MOD dn="uid=brian,cn=users,cn=accounts,dc=example,dc=com" [12/Dec/2024:18:09:08.981616978 -0500] conn=7 op=244811 MOD dn="uid=alice,cn=users,cn=accounts,dc=example,dc=com" [12/Dec/2024:18:09:10.124088591 -0500] conn=7 op=244828 MOD dn="uid=alice,cn=users,cn=accounts,dc=example,dc=com" [12/Dec/2024:18:09:11.200088783 -0500] conn=7 op=244847 MOD dn="uid=alice,cn=users,cn=accounts,dc=example,dc=com" [12/Dec/2024:18:13:17.631951358 -0500] conn=6 op=179337 MOD dn="fqdn=brian-laptop.example.com,cn=computers,cn=accounts,dc=example,dc=com" [12/Dec/2024:18:15:00.544929452 -0500] conn=6 op=179357 MOD dn="fqdn=pc.example.com,cn=computers,cn=accounts,dc=example,dc=com" [12/Dec/2024:18:16:24.798129411 -0500] conn=7 op=244884 MOD dn="uid=brian,cn=users,cn=accounts,dc=example,dc=com" [12/Dec/2024:18:18:06.027509073 -0500] conn=7 op=244909 MOD dn="fqdn=server.example.com,cn=computers,cn=accounts,dc=example,dc=com" [12/Dec/2024:18:18:18.026623062 -0500] conn=7 op=244923 MOD dn="fqdn=pvr.example.com,cn=computers,cn=accounts,dc=example,dc=com" [12/Dec/2024:18:18:24.029399572 -0500] conn=7 op=244937 MOD dn="fqdn=allie.example.com,cn=computers,cn=accounts,dc=example,dc=com" [12/Dec/2024:18:19:54.479544739 -0500] conn=7 op=244970 MOD dn="uid=brian,cn=users,cn=accounts,dc=example,dc=com" [12/Dec/2024:18:21:40.968421085 -0500] conn=7 op=244984 MOD dn="fqdn=pvr.example.com,cn=computers,cn=accounts,dc=example,dc=com" But that means nothing to me. How do I dig deeper to understand why these MOD operations are happening? And as frequent as they are happening, could they really be responsible for 5MB/s of write traffic to the database? What about the seemingly endless size growth of the database? Is it really to be expected that it's just going to grow on and on with no limit? Shouldn't there be some kind of pruning/rolling-up/etc. going on? Cheers, b. -- _______________________________________________ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
