Brian J. Murrell via FreeIPA-users wrote: > On Thu, 2024-12-12 at 23:52 +0100, Jernej Jakob via FreeIPA-users > wrote: >> >> That should be the issue then. My domain only gets a couple tens of >> MOD >> and DEL operations a day, most of which are dyndns updates of client >> records. Look at what they're doing and find out why. > > So, the current access log's MODs are: > > [12/Dec/2024:15:43:21.049599940 -0500] conn=7 op=240719 MOD > dn="fqdn=brian-laptop.example.com,cn=computers,cn=accounts,dc=example,dc=com" > [12/Dec/2024:15:45:00.816349745 -0500] conn=6 op=176399 MOD > dn="fqdn=pc.example.com,cn=computers,cn=accounts,dc=example,dc=com" > [12/Dec/2024:15:48:06.029678705 -0500] conn=6 op=176753 MOD > dn="fqdn=server.example.com,cn=computers,cn=accounts,dc=example,dc=com" > [12/Dec/2024:15:48:18.029279254 -0500] conn=7 op=241141 MOD > dn="fqdn=pvr.example.com,cn=computers,cn=accounts,dc=example,dc=com" > [12/Dec/2024:15:48:24.026950754 -0500] conn=7 op=241156 MOD > dn="fqdn=allie.example.com,cn=computers,cn=accounts,dc=example,dc=com" > [12/Dec/2024:15:48:26.320100385 -0500] conn=6 op=176780 MOD > dn="uid=brian,cn=users,cn=accounts,dc=example,dc=com" > [12/Dec/2024:15:49:47.726513476 -0500] conn=7 op=241220 MOD > dn="uid=brian,cn=users,cn=accounts,dc=example,dc=com" > [12/Dec/2024:15:58:21.055303486 -0500] conn=7 op=241239 MOD > dn="fqdn=brian-laptop.example.com,cn=computers,cn=accounts,dc=example,dc=com" > [12/Dec/2024:16:00:00.540396364 -0500] conn=7 op=241259 MOD > dn="fqdn=pc.example.com,cn=computers,cn=accounts,dc=example,dc=com" > [12/Dec/2024:16:01:54.552317334 -0500] conn=7 op=241293 MOD > dn="uid=alice,cn=users,cn=accounts,dc=example,dc=com" > [12/Dec/2024:16:01:56.582573499 -0500] conn=7 op=241317 MOD > dn="uid=alice,cn=users,cn=accounts,dc=example,dc=com" > [12/Dec/2024:16:03:06.023870734 -0500] conn=6 op=177077 MOD > dn="fqdn=server.example.com,cn=computers,cn=accounts,dc=example,dc=com" > [12/Dec/2024:16:03:18.032876977 -0500] conn=7 op=241692 MOD > dn="fqdn=pvr.example.com,cn=computers,cn=accounts,dc=example,dc=com" > [12/Dec/2024:16:03:24.025425407 -0500] conn=6 op=177103 MOD > dn="fqdn=allie.example.com,cn=computers,cn=accounts,dc=example,dc=com" > [12/Dec/2024:16:03:26.630725693 -0500] conn=6 op=177123 MOD > dn="uid=brian,cn=users,cn=accounts,dc=example,dc=com" > [12/Dec/2024:16:04:48.890793951 -0500] conn=6 op=177144 MOD > dn="uid=brian,cn=users,cn=accounts,dc=example,dc=com" > [12/Dec/2024:16:13:21.058340778 -0500] conn=6 op=177164 MOD > dn="fqdn=brian-laptop.example.com,cn=computers,cn=accounts,dc=example,dc=com" > [12/Dec/2024:16:14:30.488316436 -0500] conn=6 op=177197 MOD > dn="uid=dave,cn=users,cn=accounts,dc=example,dc=com" > [12/Dec/2024:16:14:47.516203642 -0500] conn=6 op=177230 MOD > dn="uid=dave,cn=users,cn=accounts,dc=example,dc=com" > [12/Dec/2024:16:15:00.241389790 -0500] conn=7 op=241767 MOD > dn="fqdn=pc.example.com,cn=computers,cn=accounts,dc=example,dc=com" > [12/Dec/2024:16:15:14.433507322 -0500] conn=7 op=241806 MOD > dn="uid=brian,cn=users,cn=accounts,dc=example,dc=com" > [12/Dec/2024:16:15:28.837183702 -0500] conn=7 op=241832 MOD > dn="uid=brian,cn=users,cn=accounts,dc=example,dc=com" > [12/Dec/2024:16:18:06.032551846 -0500] conn=7 op=241851 MOD > dn="fqdn=server.example.com,cn=computers,cn=accounts,dc=example,dc=com" > [12/Dec/2024:16:18:18.027331800 -0500] conn=7 op=241865 MOD > dn="fqdn=pvr.example.com,cn=computers,cn=accounts,dc=example,dc=com" > [12/Dec/2024:16:18:24.031518252 -0500] conn=7 op=241885 MOD > dn="fqdn=allie.example.com,cn=computers,cn=accounts,dc=example,dc=com" > [12/Dec/2024:16:18:26.976161631 -0500] conn=6 op=177280 MOD > dn="uid=brian,cn=users,cn=accounts,dc=example,dc=com" > [12/Dec/2024:16:19:49.312979067 -0500] conn=7 op=241934 MOD > dn="uid=brian,cn=users,cn=accounts,dc=example,dc=com" > [12/Dec/2024:16:28:21.064876644 -0500] conn=7 op=241954 MOD > dn="fqdn=brian-laptop.example.com,cn=computers,cn=accounts,dc=example,dc=com" > [12/Dec/2024:16:30:00.521627524 -0500] conn=6 op=177315 MOD > dn="fqdn=pc.example.com,cn=computers,cn=accounts,dc=example,dc=com" > [12/Dec/2024:16:30:59.625076375 -0500] conn=6 op=177336 MOD > dn="uid=alice,cn=users,cn=accounts,dc=example,dc=com" > [12/Dec/2024:16:31:18.757620376 -0500] conn=7 op=242015 MOD > dn="uid=alice,cn=users,cn=accounts,dc=example,dc=com" > [12/Dec/2024:16:33:06.022714088 -0500] conn=6 op=177357 MOD > dn="fqdn=server.example.com,cn=computers,cn=accounts,dc=example,dc=com" > [12/Dec/2024:16:33:18.030083155 -0500] conn=7 op=242046 MOD > dn="fqdn=pvr.example.com,cn=computers,cn=accounts,dc=example,dc=com" > [12/Dec/2024:16:33:24.039266176 -0500] conn=7 op=242061 MOD > dn="fqdn=allie.example.com,cn=computers,cn=accounts,dc=example,dc=com" > [12/Dec/2024:16:33:27.902671348 -0500] conn=7 op=242101 MOD > dn="uid=brian,cn=users,cn=accounts,dc=example,dc=com" > [12/Dec/2024:16:34:50.082741249 -0500] conn=6 op=177408 MOD > dn="uid=brian,cn=users,cn=accounts,dc=example,dc=com" > [12/Dec/2024:16:43:21.281870823 -0500] conn=7 op=242122 MOD > dn="fqdn=brian-laptop.example.com,cn=computers,cn=accounts,dc=example,dc=com" > [12/Dec/2024:16:45:00.361564352 -0500] conn=6 op=177429 MOD > dn="fqdn=pc.example.com,cn=computers,cn=accounts,dc=example,dc=com" > [12/Dec/2024:16:48:06.033650886 -0500] conn=7 op=242155 MOD > dn="fqdn=server.example.com,cn=computers,cn=accounts,dc=example,dc=com" > [12/Dec/2024:16:48:18.029209673 -0500] conn=6 op=177455 MOD > dn="fqdn=pvr.example.com,cn=computers,cn=accounts,dc=example,dc=com" > [12/Dec/2024:16:48:24.032552370 -0500] conn=7 op=242180 MOD > dn="fqdn=allie.example.com,cn=computers,cn=accounts,dc=example,dc=com" > [12/Dec/2024:16:48:27.829189856 -0500] conn=6 op=177470 MOD > dn="uid=brian,cn=users,cn=accounts,dc=example,dc=com" > [12/Dec/2024:16:49:50.601694667 -0500] conn=6 op=177503 MOD > dn="uid=brian,cn=users,cn=accounts,dc=example,dc=com" > [12/Dec/2024:16:54:39.347977860 -0500] conn=6 op=177530 MOD > dn="uid=tanya,cn=users,cn=accounts,dc=example,dc=com" > [12/Dec/2024:16:54:41.408976372 -0500] conn=7 op=242255 MOD > dn="uid=dave,cn=users,cn=accounts,dc=example,dc=com" > [12/Dec/2024:16:55:10.861296766 -0500] conn=6 op=177565 MOD > dn="uid=dave,cn=users,cn=accounts,dc=example,dc=com" > [12/Dec/2024:16:58:21.129579541 -0500] conn=6 op=177579 MOD > dn="fqdn=brian-laptop.example.com,cn=computers,cn=accounts,dc=example,dc=com" > [12/Dec/2024:17:00:00.060050889 -0500] conn=7 op=242292 MOD > dn="fqdn=pc.example.com,cn=computers,cn=accounts,dc=example,dc=com" > [12/Dec/2024:17:03:06.025203640 -0500] conn=6 op=177615 MOD > dn="fqdn=server.example.com,cn=computers,cn=accounts,dc=example,dc=com" > [12/Dec/2024:17:03:18.028695975 -0500] conn=6 op=177629 MOD > dn="fqdn=pvr.example.com,cn=computers,cn=accounts,dc=example,dc=com" > [12/Dec/2024:17:03:24.035015035 -0500] conn=6 op=177638 MOD > dn="fqdn=allie.example.com,cn=computers,cn=accounts,dc=example,dc=com" > [12/Dec/2024:17:03:28.148331620 -0500] conn=7 op=242345 MOD > dn="uid=brian,cn=users,cn=accounts,dc=example,dc=com" > [12/Dec/2024:17:04:50.602145735 -0500] conn=6 op=177758 MOD > dn="uid=brian,cn=users,cn=accounts,dc=example,dc=com" > [12/Dec/2024:17:06:39.176712028 -0500] conn=6 op=177791 MOD > dn="uid=alice,cn=users,cn=accounts,dc=example,dc=com" > [12/Dec/2024:17:06:40.100979492 -0500] conn=7 op=242486 MOD > dn="uid=alice,cn=users,cn=accounts,dc=example,dc=com" > [12/Dec/2024:17:06:41.503257409 -0500] conn=7 op=242512 MOD > dn="uid=alice,cn=users,cn=accounts,dc=example,dc=com" > [12/Dec/2024:17:10:38.333728806 -0500] conn=7 op=242534 MOD > dn="uid=dave,cn=users,cn=accounts,dc=example,dc=com" > [12/Dec/2024:17:10:56.408408863 -0500] conn=7 op=242553 MOD > dn="uid=dave,cn=users,cn=accounts,dc=example,dc=com" > [12/Dec/2024:17:13:21.063666219 -0500] conn=7 op=242572 MOD > dn="fqdn=brian-laptop.example.com,cn=computers,cn=accounts,dc=example,dc=com" > [12/Dec/2024:17:14:36.777383400 -0500] conn=7 op=242612 MOD > dn="uid=alice,cn=users,cn=accounts,dc=example,dc=com" > [12/Dec/2024:17:14:38.194704026 -0500] conn=6 op=177876 MOD > dn="uid=alice,cn=users,cn=accounts,dc=example,dc=com" > [12/Dec/2024:17:14:39.243895983 -0500] conn=7 op=242658 MOD > dn="uid=alice,cn=users,cn=accounts,dc=example,dc=com" > [12/Dec/2024:17:15:00.253549065 -0500] conn=7 op=242677 MOD > dn="fqdn=pc.example.com,cn=computers,cn=accounts,dc=example,dc=com" > [12/Dec/2024:17:18:06.023355809 -0500] conn=7 op=242697 MOD > dn="fqdn=server.example.com,cn=computers,cn=accounts,dc=example,dc=com" > [12/Dec/2024:17:18:18.031186454 -0500] conn=6 op=177908 MOD > dn="fqdn=pvr.example.com,cn=computers,cn=accounts,dc=example,dc=com" > [12/Dec/2024:17:18:24.029519463 -0500] conn=7 op=242729 MOD > dn="fqdn=allie.example.com,cn=computers,cn=accounts,dc=example,dc=com" > [12/Dec/2024:17:18:30.569950176 -0500] conn=7 op=242764 MOD > dn="uid=brian,cn=users,cn=accounts,dc=example,dc=com" > [12/Dec/2024:17:19:50.815259483 -0500] conn=6 op=178049 MOD > dn="uid=brian,cn=users,cn=accounts,dc=example,dc=com" > [12/Dec/2024:17:22:26.986355909 -0500] conn=6 op=178082 MOD > dn="uid=brian,cn=users,cn=accounts,dc=example,dc=com" > [12/Dec/2024:17:22:32.012774419 -0500] conn=7 op=243215 MOD > dn="uid=brian,cn=users,cn=accounts,dc=example,dc=com" > [12/Dec/2024:17:23:22.085735714 -0500] conn=7 op=243249 MOD > dn="uid=brian,cn=users,cn=accounts,dc=example,dc=com" > [12/Dec/2024:17:23:26.674936971 -0500] conn=6 op=178108 MOD > dn="uid=brian,cn=users,cn=accounts,dc=example,dc=com" > [12/Dec/2024:17:28:21.061035661 -0500] conn=6 op=178121 MOD > dn="fqdn=brian-laptop.example.com,cn=computers,cn=accounts,dc=example,dc=com" > [12/Dec/2024:17:29:33.535815795 -0500] conn=6 op=178146 MOD > dn="uid=brian,cn=users,cn=accounts,dc=example,dc=com" > [12/Dec/2024:17:29:36.324068718 -0500] conn=7 op=243345 MOD > dn="uid=brian,cn=users,cn=accounts,dc=example,dc=com" > [12/Dec/2024:17:29:53.487382083 -0500] conn=7 op=243371 MOD > dn="uid=brian,cn=users,cn=accounts,dc=example,dc=com" > [12/Dec/2024:17:30:00.825337604 -0500] conn=7 op=243380 MOD > dn="fqdn=pc.example.com,cn=computers,cn=accounts,dc=example,dc=com" > [12/Dec/2024:17:33:06.023425838 -0500] conn=7 op=243394 MOD > dn="fqdn=server.example.com,cn=computers,cn=accounts,dc=example,dc=com" > [12/Dec/2024:17:33:12.439895532 -0500] conn=7 op=243427 MOD > dn="uid=alice,cn=users,cn=accounts,dc=example,dc=com" > [12/Dec/2024:17:33:13.291814569 -0500] conn=7 op=243461 MOD > dn="uid=alice,cn=users,cn=accounts,dc=example,dc=com" > [12/Dec/2024:17:33:13.977456506 -0500] conn=6 op=178231 MOD > dn="uid=alice,cn=users,cn=accounts,dc=example,dc=com" > [12/Dec/2024:17:33:18.029609072 -0500] conn=6 op=178239 MOD > dn="fqdn=pvr.example.com,cn=computers,cn=accounts,dc=example,dc=com" > [12/Dec/2024:17:33:24.032513895 -0500] conn=7 op=243506 MOD > dn="fqdn=allie.example.com,cn=computers,cn=accounts,dc=example,dc=com" > [12/Dec/2024:17:34:51.401237611 -0500] conn=6 op=178273 MOD > dn="uid=brian,cn=users,cn=accounts,dc=example,dc=com" > [12/Dec/2024:17:38:59.064023115 -0500] conn=7 op=243828 MOD > dn="uid=alice,cn=users,cn=accounts,dc=example,dc=com" > [12/Dec/2024:17:39:00.384048473 -0500] conn=6 op=178526 MOD > dn="uid=alice,cn=users,cn=accounts,dc=example,dc=com" > [12/Dec/2024:17:39:01.364706604 -0500] conn=7 op=243868 MOD > dn="uid=alice,cn=users,cn=accounts,dc=example,dc=com" > [12/Dec/2024:17:43:21.063882183 -0500] conn=7 op=243887 MOD > dn="fqdn=brian-laptop.example.com,cn=computers,cn=accounts,dc=example,dc=com" > [12/Dec/2024:17:44:42.436628225 -0500] conn=6 op=178577 MOD > dn="uid=brian,cn=users,cn=accounts,dc=example,dc=com" > [12/Dec/2024:17:45:00.476235667 -0500] conn=7 op=243925 MOD > dn="fqdn=pc.example.com,cn=computers,cn=accounts,dc=example,dc=com" > [12/Dec/2024:17:46:19.788325399 -0500] conn=6 op=178610 MOD > dn="uid=brian,cn=users,cn=accounts,dc=example,dc=com" > [12/Dec/2024:17:46:24.626112107 -0500] conn=6 op=178625 MOD > dn="uid=brian,cn=users,cn=accounts,dc=example,dc=com" > [12/Dec/2024:17:48:06.021951001 -0500] conn=7 op=243995 MOD > dn="fqdn=server.example.com,cn=computers,cn=accounts,dc=example,dc=com" > [12/Dec/2024:17:48:18.025399562 -0500] conn=7 op=244010 MOD > dn="fqdn=pvr.example.com,cn=computers,cn=accounts,dc=example,dc=com" > [12/Dec/2024:17:48:24.036720748 -0500] conn=7 op=244025 MOD > dn="fqdn=allie.example.com,cn=computers,cn=accounts,dc=example,dc=com" > [12/Dec/2024:17:49:52.139354331 -0500] conn=7 op=244052 MOD > dn="uid=brian,cn=users,cn=accounts,dc=example,dc=com" > [12/Dec/2024:17:51:11.983425003 -0500] conn=6 op=178932 MOD > dn="uid=brian,cn=users,cn=accounts,dc=example,dc=com" > [12/Dec/2024:17:51:19.573975670 -0500] conn=7 op=244322 MOD > dn="uid=dave,cn=users,cn=accounts,dc=example,dc=com" > [12/Dec/2024:17:51:32.616638426 -0500] conn=6 op=178961 MOD > dn="uid=brian,cn=users,cn=accounts,dc=example,dc=com" > [12/Dec/2024:17:53:26.124585757 -0500] conn=6 op=178988 MOD > dn="uid=alice,cn=users,cn=accounts,dc=example,dc=com" > [12/Dec/2024:17:53:27.196684482 -0500] conn=7 op=244380 MOD > dn="uid=alice,cn=users,cn=accounts,dc=example,dc=com" > [12/Dec/2024:17:53:27.888452614 -0500] conn=7 op=244423 MOD > dn="uid=alice,cn=users,cn=accounts,dc=example,dc=com" > [12/Dec/2024:17:58:21.053133619 -0500] conn=6 op=179026 MOD > dn="fqdn=brian-laptop.example.com,cn=computers,cn=accounts,dc=example,dc=com" > [12/Dec/2024:18:00:00.771209780 -0500] conn=7 op=244448 MOD > dn="fqdn=pc.example.com,cn=computers,cn=accounts,dc=example,dc=com" > [12/Dec/2024:18:00:08.402252071 -0500] conn=6 op=179057 MOD > dn="uid=brian,cn=users,cn=accounts,dc=example,dc=com" > [12/Dec/2024:18:00:28.123601770 -0500] conn=6 op=179085 MOD > dn="uid=brian,cn=users,cn=accounts,dc=example,dc=com" > [12/Dec/2024:18:00:57.042735813 -0500] conn=6 op=179100 MOD > dn="uid=brian,cn=users,cn=accounts,dc=example,dc=com" > [12/Dec/2024:18:03:06.022941485 -0500] conn=7 op=244533 MOD > dn="fqdn=server.example.com,cn=computers,cn=accounts,dc=example,dc=com" > [12/Dec/2024:18:03:18.025929100 -0500] conn=7 op=244547 MOD > dn="fqdn=pvr.example.com,cn=computers,cn=accounts,dc=example,dc=com" > [12/Dec/2024:18:03:24.034669557 -0500] conn=7 op=244567 MOD > dn="fqdn=allie.example.com,cn=computers,cn=accounts,dc=example,dc=com" > [12/Dec/2024:18:04:29.123278994 -0500] conn=6 op=179134 MOD > dn="fqdn=allie.example.com,cn=computers,cn=accounts,dc=example,dc=com" > [12/Dec/2024:18:04:30.181379883 -0500] conn=6 op=179144 MOD > dn="uid=alice,cn=users,cn=accounts,dc=example,dc=com" > [12/Dec/2024:18:04:53.383131409 -0500] conn=7 op=244623 MOD > dn="uid=brian,cn=users,cn=accounts,dc=example,dc=com" > [12/Dec/2024:18:08:33.880716485 -0500] conn=7 op=244782 MOD > dn="uid=brian,cn=users,cn=accounts,dc=example,dc=com" > [12/Dec/2024:18:09:08.981616978 -0500] conn=7 op=244811 MOD > dn="uid=alice,cn=users,cn=accounts,dc=example,dc=com" > [12/Dec/2024:18:09:10.124088591 -0500] conn=7 op=244828 MOD > dn="uid=alice,cn=users,cn=accounts,dc=example,dc=com" > [12/Dec/2024:18:09:11.200088783 -0500] conn=7 op=244847 MOD > dn="uid=alice,cn=users,cn=accounts,dc=example,dc=com" > [12/Dec/2024:18:13:17.631951358 -0500] conn=6 op=179337 MOD > dn="fqdn=brian-laptop.example.com,cn=computers,cn=accounts,dc=example,dc=com" > [12/Dec/2024:18:15:00.544929452 -0500] conn=6 op=179357 MOD > dn="fqdn=pc.example.com,cn=computers,cn=accounts,dc=example,dc=com" > [12/Dec/2024:18:16:24.798129411 -0500] conn=7 op=244884 MOD > dn="uid=brian,cn=users,cn=accounts,dc=example,dc=com" > [12/Dec/2024:18:18:06.027509073 -0500] conn=7 op=244909 MOD > dn="fqdn=server.example.com,cn=computers,cn=accounts,dc=example,dc=com" > [12/Dec/2024:18:18:18.026623062 -0500] conn=7 op=244923 MOD > dn="fqdn=pvr.example.com,cn=computers,cn=accounts,dc=example,dc=com" > [12/Dec/2024:18:18:24.029399572 -0500] conn=7 op=244937 MOD > dn="fqdn=allie.example.com,cn=computers,cn=accounts,dc=example,dc=com" > [12/Dec/2024:18:19:54.479544739 -0500] conn=7 op=244970 MOD > dn="uid=brian,cn=users,cn=accounts,dc=example,dc=com" > [12/Dec/2024:18:21:40.968421085 -0500] conn=7 op=244984 MOD > dn="fqdn=pvr.example.com,cn=computers,cn=accounts,dc=example,dc=com" > > But that means nothing to me. How do I dig deeper to understand why > these MOD operations are happening?
Try enabling the audit log https://docs.redhat.com/en/documentation/red_hat_directory_server/11/html/administration_guide/configuring_logs#Configuring_Logs It will show the entire MOD being done. This will add even more writes but will show you exactly what is being done. The why may be less clear. You probably want to de-reference the connection as well. I didn't thoroughly check but it appears at a glance that all of these changes are originating from two connections. Now maybe they are closing and re-opening. That is something to check for. rob > > And as frequent as they are happening, could they really be responsible > for 5MB/s of write traffic to the database? > > > What about the seemingly endless size growth of the database? Is it > really to be expected that it's just going to grow on and on with no > limit? Shouldn't there be some kind of pruning/rolling-up/etc. going > on? > > Cheers, > b. > -- _______________________________________________ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
