Attahced the log shown Fail of centomenger and login service .

Actually the cluster is working fine but slow and unstable .

login service fail and cert monitor fail.


[ [1;31mFAILED [0m] Failed to start NIS/YP (Network Information Service) Clients to NIS Domain Binder.
See 'systemctl status ypbind.service' for details.
[ [32m  OK  [0m] Reached target User and Group Name Lookups.
         Starting Login Service...
         Nov 27 19:06:36 central03 kernel: [ 1472.395446] NFSD: starting 90-second grace period (net ffffffff81ad9d40)
Nov 27 19:06:37 central03 kernel: [ 1472.619881] fuse init (API version 7.22)
Starting Permit User Sessions...
         Starting Zabbix Agent...
[ [32m  OK  [0m] Started Permit User Sessions.
[ [32m  OK  [0m] Started Command Scheduler.
         Starting Command Scheduler...
[ [32m  OK  [0m] Started Job spooling tools.
         Starting Job spooling tools...
[ [1;31mFAILED [0m] Failed to start Zabbix Agent.
See 'systemctl status zabbix_agentd.service' for details.
[ [32m  OK  [0m] Started PKI Tomcat Server pki-tomcat.
[ [32m  OK  [0m] Reached target PKI Tomcat Server.
[ [32m  OK  [0m] Listening on ipa-otpd socket.
[ [32m  OK  [0m] Started Identity, Policy, Audit.
[ [1;31mFAILED [0m] Failed to start Login Service.
See 'systemctl status systemd-logind.service' for details.
[ [32m  OK  [0m] Stopped Login Service.
         Starting Login Service...
[ [1;31mFAILED [0m] Failed to start Certificate monitoring and PKI enrollment.
See 'systemctl status certmonger.service' for details.
[ [1;31mFAILED [0m] Failed to start Login Service.
See 'systemctl status systemd-logind.service' for details.
[ [32m  OK  [0m] Stopped Login Service.
         Starting Login Service...
[ [32m  OK  [0m] Started /etc/rc.d/rc.local Compatibility.
         Starting Wait for Plymouth Boot Screen to Quit...
         Starting Terminate Plymouth Boot Screen...


2017-11-28 16:20 GMT+08:00 Florence Blanc-Renaud <flo@redhat.com>:
On 11/28/2017 08:25 AM, barrykfl--- via FreeIPA-users wrote:
Dear all:

two servers replica but the latter one become unstable.

I success promote a client  to replcia master .
but after reboot the response is slow and the certomanger start fail
and remote login ssh very slow delay half minuets

boot log found certmanger fail to start and  login service fail:
just can proof that if i remove all ipa client it is fine again and login service fine.

Any idea how come ? as i used 3.0 before soit use gpg to install replcia server,

but now it use ipa-client-install first then promote to ipa-replica-install later.

[1;31mFAILED [0m] Failed to start Zabbix Agent.
See 'systemctl status zabbix_agentd.service' for details.
[ [1;31mFAILED [0m] Failed to start Login Service.
See 'systemctl status systemd-logind.service' for details.
[ [32m  OK  [0m] Stopped Login Service.
          Starting Login Service...
[ [1;31mFAILED [0m] Failed to start Login Service.
See 'systemctl status systemd-logind.service' for details.
[ [32m  OK  [0m] Stopped Login Service.
          Starting Login Service...
[ [32m  OK  [0m] Started /etc/rc.d/rc.local Compatibility.
          Starting Terminate Plymouth Boot Screen...
          Starting Wait for Plymouth Boot Screen to Quit...



_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-leave@lists.fedorahosted.org

Hi,

do you have any error message related to certmonger that could help diagnose the certmonger failure?

sudo systemctl status certmonger
sudo journalctl -u certmonger
sudo journalctl -t certmonger

Flo