Thanks Francois,
I found a solution for the: kernel lockd messages on the file server . There was some
residual data left in the memory of the file -server.
I also cleared the stat.d cache in /var/lib/nfs/statd/sm.bak/* . During the uninstall of
the freeipa-client on the fileserver I did not reboot. Only stopped the sssd service and
cleared the sssd cache. After that reinstalled the new ipa-client.
I gues a reboot after uninstalling the ipa-client would have prevented this kernel lock.d
messages.
No stalls of applications after that.
Having activated the debug level=6 on the clients I see some mounts attemps that I
can't place. e.g. for the homedirs I see
automount attempts to mount directories that were not defined. like ,"key
.anaconda", "key /", and others, See part of the log
this is my config:
instance type(s): sss
map: auto.users
* | -fstype=nfs,rw,vers=3 fileserveraddres:/mnt/raid/homedirs/&
Client log:
(Mon Mar 18 13:02:31 2019) [sssd[autofs]] [sss_parse_name_for_domains] (0x0200): name
'auto.users' matched without domain, user is auto.users
(Mon Mar 18 13:02:31 2019) [sssd[autofs]] [setautomntent_send] (0x0400): Requesting info
for automount map [auto.users] from [<ALL>]
(Mon Mar 18 13:02:31 2019) [sssd[autofs]] [sss_autofs_cmd_setautomntent_done] (0x0400):
setautomntent found data
(Mon Mar 18 13:02:31 2019) [sssd[autofs]] [sss_autofs_cmd_getautomntbyname] (0x0400):
Requested data of map auto.users key .anaconda
(Mon Mar 18 13:02:31 2019) [sssd[autofs]] [getautomntbyname_process] (0x0080): No key
named [.anaconda] found
(Mon Mar 18 13:02:31 2019) [sssd[autofs]] [sss_autofs_cmd_getautomntbyname] (0x0400):
Requested data of map auto.users key /
(Mon Mar 18 13:02:31 2019) [sssd[autofs]] [getautomntbyname_process] (0x0080): No key
named [/] found
(Mon Mar 18 13:02:31 2019) [sssd[autofs]] [sss_autofs_cmd_getautomntbyname] (0x0400):
Requested data of map auto.users key *
(Mon Mar 18 13:02:31 2019) [sssd[autofs]] [sss_autofs_cmd_endautomntent] (0x0400):
endautomntent called
I found documentation about a automount bug in Centos that requests a "key
.hidden" but the keys is see in auto.users look odd to me.
For the "named-pkcs11[1718]: network unreachable resolving
'ns-1471.some.domain/AAAA/IN': " messages.
I could not find a solution. All DNS zones match with configuration in old replica. In the
logs of the old replica I have seen the same log entries, although not so much. DNS seems
to work. I see no resolving issues in resolving the internal clients and servers.
I have turned off the old server for 1 week now, everything is running from the new
ipa-server, things are fully functional, except for the random automount keys and some
ipv6 outside addresses that can't be resolved. ( ipa-server 4.6.4, ipa-clients 4.6.4
installed on centos 7.5)
kind regards,
Rob.