Honestly I’m not even sure if something is not working correctly :) All I know is that my httpd, access and krb5 logs are filling up all my disk space extremely quickly and I have no idea why.
Centos 6.8 + IPA 3.0 One master and one replica. Are these things related? How do I fix, where do I even start? Thanks ! On the replica the httpd log is constantly getting spammed with: [Thu Nov 24 05:55:18 2016] [error] ipa: INFO: host/[email protected]: cert_request(u’actual cert removed….. , add=True): ACIError and on the master the access log is filling up quickly with: 10.1.41.110 - - [24/Nov/2016:06:09:54 +0000] "POST /ca/agent/ca/displayBySerial HTTP/1.1" 200 10106 and finally also on the master’s krb5 log is filling up with: Nov 24 06:11:45 sso-109.nym1.placeiq.net krb5kdc[19333](info): AS_REQ (4 etypes {18 17 16 23}) 10.1.60.130: ISSUE: authtime 1479967905, etypes {rep=18 tkt=18 ses=18}, host/[email protected] for krbtgt/[email protected] Nov 24 06:11:45 sso-109.nym1.placeiq.net krb5kdc[19332](info): TGS_REQ (4 etypes {18 17 16 23}) 10.1.60.87: ISSUE: authtime 1479967905, etypes {rep=18 tkt=18 ses=18}, host/[email protected] for ldap/[email protected] Nov 24 06:11:45 sso-109.nym1.placeiq.net krb5kdc[19332](info): TGS_REQ (4 etypes {18 17 16 23}) 10.1.60.130: ISSUE: authtime 1479967905, etypes {rep=18 tkt=18 ses=18}, host/[email protected] for HTTP/[email protected] Nov 24 06:11:45 sso-109.nym1.placeiq.net krb5kdc[19333](info): TGS_REQ (1 etypes {18}) 10.1.60.130: ISSUE: authtime 1479967905, etypes {rep=18 tkt=18 ses=18}, host/[email protected] for krbtgt/[email protected] Nov 24 06:11:45 sso-109.nym1.placeiq.net krb5kdc[19333](info): AS_REQ (4 etypes {18 17 16 23}) 10.1.60.160: NEEDED_PREAUTH: host/[email protected] for krbtgt/[email protected], Additional pre-authentication required Nov 24 06:11:45 sso-109.nym1.placeiq.net krb5kdc[19332](info): AS_REQ (4 etypes {18 17 16 23}) 10.1.60.160: ISSUE: authtime 1479967905, etypes {rep=18 tkt=18 ses=18}, host/[email protected] for krbtgt/[email protected] Nov 24 06:11:45 sso-109.nym1.placeiq.net krb5kdc[19333](info): TGS_REQ (4 etypes {18 17 16 23}) 10.1.60.160: ISSUE: authtime 1479967905, etypes {rep=18 tkt=18 ses=18}, host/[email protected] for HTTP/[email protected] Nov 24 06:11:45 sso-109.nym1.placeiq.net krb5kdc[19333](info): TGS_REQ (1 etypes {18}) 10.1.60.160: ISSUE: authtime 1479967905, etypes {rep=18 tkt=18 ses=18}, host/[email protected] for krbtgt/[email protected] Nov 24 06:11:45 sso-109.nym1.placeiq.net krb5kdc[19333](info): AS_REQ (4 etypes {18 17 16 23}) 10.1.60.175: NEEDED_PREAUTH: host/[email protected] for krbtgt/[email protected], Additional pre-authentication required Nov 24 06:11:45 sso-109.nym1.placeiq.net krb5kdc[19332](info): AS_REQ (4 etypes {18 17 16 23}) 10.1.60.175: ISSUE: authtime 1479967905, etypes {rep=18 tkt=18 ses=18}, host/[email protected] for krbtgt/[email protected] <http://www.placeiq.com/> <http://www.placeiq.com/> <http://www.placeiq.com/> Jim Richard <https://twitter.com/placeiq> <https://twitter.com/placeiq> <https://twitter.com/placeiq> <https://www.facebook.com/PlaceIQ> <https://www.facebook.com/PlaceIQ> <https://www.linkedin.com/company/placeiq> <https://www.linkedin.com/company/placeiq> SYSTEM ADMINISTRATOR III (646) 338-8905 <http://placeiq.com/2016/10/26/the-making-of-a-location-data-industry-milestone/>
-- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project
