Attahced the log shown Fail of centomenger and login service .
Actually the cluster is working fine but slow and unstable .
login service fail and cert monitor fail.
[ [1;31mFAILED [0m] Failed to start NIS/YP (Network Information Service)
Clients to NIS Domain Binder.
See 'systemctl status ypbind.service' for details.
[ [32m OK [0m] Reached target User and Group Name Lookups.
Starting Login Service...
Nov 27 19:06:36 central03 kernel: [ 1472.395446] NFSD: starting
90-second grace period (net ffffffff81ad9d40)
Nov 27 19:06:37 central03 kernel: [ 1472.619881] fuse init (API version
7.22)
Starting Permit User Sessions...
Starting Zabbix Agent...
[ [32m OK [0m] Started Permit User Sessions.
[ [32m OK [0m] Started Command Scheduler.
Starting Command Scheduler...
[ [32m OK [0m] Started Job spooling tools.
Starting Job spooling tools...
[ [1;31mFAILED [0m] Failed to start Zabbix Agent.
See 'systemctl status zabbix_agentd.service' for details.
[ [32m OK [0m] Started PKI Tomcat Server pki-tomcat.
[ [32m OK [0m] Reached target PKI Tomcat Server.
[ [32m OK [0m] Listening on ipa-otpd socket.
[ [32m OK [0m] Started Identity, Policy, Audit.
[ [1;31mFAILED [0m] Failed to start Login Service.
See 'systemctl status systemd-logind.service' for details.
[ [32m OK [0m] Stopped Login Service.
Starting Login Service...
[ [1;31mFAILED [0m] Failed to start Certificate monitoring and PKI
enrollment.
See 'systemctl status certmonger.service' for details.
[ [1;31mFAILED [0m] Failed to start Login Service.
See 'systemctl status systemd-logind.service' for details.
[ [32m OK [0m] Stopped Login Service.
Starting Login Service...
[ [32m OK [0m] Started /etc/rc.d/rc.local Compatibility.
Starting Wait for Plymouth Boot Screen to Quit...
Starting Terminate Plymouth Boot Screen...
2017-11-28 16:20 GMT+08:00 Florence Blanc-Renaud <flo(a)redhat.com>:
On 11/28/2017 08:25 AM, barrykfl--- via FreeIPA-users wrote:
> Dear all:
>
> two servers replica but the latter one become unstable.
>
> I success promote a client to replcia master .
> but after reboot the response is slow and the certomanger start fail
> and remote login ssh very slow delay half minuets
>
> boot log found certmanger fail to start and login service fail:
> just can proof that if i remove all ipa client it is fine again and login
> service fine.
>
> Any idea how come ? as i used 3.0 before soit use gpg to install replcia
> server,
>
> but now it use ipa-client-install first then promote to
> ipa-replica-install later.
>
> [1;31mFAILED [0m] Failed to start Zabbix Agent.
> See 'systemctl status zabbix_agentd.service' for details.
> [ [1;31mFAILED [0m] Failed to start Login Service.
> See 'systemctl status systemd-logind.service' for details.
> [ [32m OK [0m] Stopped Login Service.
> Starting Login Service...
> [ [1;31mFAILED [0m] Failed to start Login Service.
> See 'systemctl status systemd-logind.service' for details.
> [ [32m OK [0m] Stopped Login Service.
> Starting Login Service...
> [ [32m OK [0m] Started /etc/rc.d/rc.local Compatibility.
> Starting Terminate Plymouth Boot Screen...
> Starting Wait for Plymouth Boot Screen to Quit...
>
>
>
> _______________________________________________
> FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
> To unsubscribe send an email to freeipa-users-leave(a)lists.fedo
>
rahosted.org
>
> Hi,
do you have any error message related to certmonger that could help
diagnose the certmonger failure?
sudo systemctl status certmonger
sudo journalctl -u certmonger
sudo journalctl -t certmonger
Flo