freeipa/ipaserver/install
John Morris a2dea5a56d
Increase dbus client timeouts during CA install
When running on memory-constrained systems, the `ipa-server-install`
program often fails during the "Configuring certificate server
(pki-tomcatd)" stage in FreeIPA 4.5 and 4.6.

The memory-intensive dogtag service causes swapping on low-memory
systems right after start-up, and especially new certificate
operations requested via certmonger can exceed the dbus client default
25 second timeout.

This patch changes dbus client timeouts for some such operations to
120 seconds (from the default 25 seconds, IIRC).

See more discussion in FreeIPA PR #1078 [1] and FreeIPA container
issue #157 [2].  Upstream ticket at [3].

[1]: https://github.com/freeipa/freeipa/pull/1078
[2]: https://github.com/freeipa/freeipa-container/issues/157
[3]: https://pagure.io/freeipa/issue/7213

Reviewed-By: Stanislav Laznicka <slaznick@redhat.com>
Reviewed-By: Rob Crittenden <rcritten@redhat.com>
2017-10-18 17:55:25 +02:00
..
plugins Fix ipa-server-upgrade: This entry already exists 2017-08-30 12:47:53 +02:00
server ipa-server-upgrade: do not add untracked certs to the request list 2017-10-17 10:22:39 +02:00
__init__.py Remove __all__ specifications in ipaclient and ipaserver.install 2013-09-06 15:42:33 +02:00
adtrust.py Correct typo estabilish->establish in the install scripts 2017-07-24 13:41:16 +02:00
adtrustinstance.py logging: do not log into the root logger 2017-07-14 15:55:59 +02:00
bindinstance.py py3: fixing zonemgr_callback 2017-07-27 16:48:49 +02:00
ca.py install: allow specifying external CA template 2017-10-04 10:09:18 +02:00
cainstance.py install: allow specifying external CA template 2017-10-04 10:09:18 +02:00
certs.py browser config: cleanup after removal of Firefox extension 2017-09-21 10:27:14 +02:00
conncheck.py install: introduce installer class hierarchy 2016-11-11 12:17:25 +01:00
custodiainstance.py Misc Python 3 fixes for ipaserver.secrets 2017-08-11 13:47:35 +02:00
dns.py logging: do not log into the root logger 2017-07-14 15:55:59 +02:00
dnskeysyncinstance.py logging: do not log into the root logger 2017-07-14 15:55:59 +02:00
dogtag.py install: introduce installer class hierarchy 2016-11-11 12:17:25 +01:00
dogtaginstance.py Increase dbus client timeouts during CA install 2017-10-18 17:55:25 +02:00
dsinstance.py Use 389-ds provided method for file limits tuning 2017-10-17 14:59:06 +02:00
httpinstance.py Fix ipa-server-upgrade with server cert tracking 2017-09-19 09:34:31 +02:00
installutils.py Remove the message attribute from exceptions 2017-10-06 09:19:46 +02:00
ipa_backup.py logging: remove object-specific loggers 2017-07-14 15:55:59 +02:00
ipa_cacert_manage.py ipa-cacert-manage: avoid some duplicate string definitions 2017-10-04 10:09:18 +02:00
ipa_kra_install.py kra-install: better warning message 2017-10-17 15:59:58 +02:00
ipa_ldap_updater.py logging: remove object-specific loggers 2017-07-14 15:55:59 +02:00
ipa_otptoken_import.py OTP import: support hash names with HMAC- prefix 2017-09-18 11:37:31 +02:00
ipa_pkinit_manage.py logging: remove object-specific loggers 2017-07-14 15:55:59 +02:00
ipa_replica_install.py install: re-introduce option groups 2017-03-13 10:12:40 +01:00
ipa_replica_prepare.py logging: remove object-specific loggers 2017-07-14 15:55:59 +02:00
ipa_restore.py logging: do not reference loggers in arguments and attributes 2017-07-14 15:55:59 +02:00
ipa_server_certinstall.py x509: Make certificates represented as objects 2017-07-27 10:28:58 +02:00
ipa_server_install.py install: re-introduce option groups 2017-03-13 10:12:40 +01:00
ipa_server_upgrade.py logging: remove object-specific loggers 2017-07-14 15:55:59 +02:00
ipa_winsync_migrate.py logging: remove object-specific loggers 2017-07-14 15:55:59 +02:00
kra.py kra: promote: Get ticket before calling custodia 2017-06-15 10:10:27 +02:00
krainstance.py Unify storing certificates in LDAP 2017-08-25 09:40:15 +02:00
krbinstance.py Less confusing message for PKINIT configuration during install 2017-10-13 16:47:53 +02:00
ldapupdate.py logging: remove object-specific loggers 2017-07-14 15:55:59 +02:00
ntpinstance.py logging: do not log into the root logger 2017-07-14 15:55:59 +02:00
odsexporterinstance.py logging: do not log into the root logger 2017-07-14 15:55:59 +02:00
opendnssecinstance.py logging: do not log into the root logger 2017-07-14 15:55:59 +02:00
otpdinstance.py Enable pylint missing-final-newline check 2015-12-23 07:59:22 +01:00
replication.py Python3: Fix winsync replication agreement 2017-09-15 08:36:22 +02:00
schemaupdate.py logging: do not use ipa_log_manager to create module-level loggers 2017-07-14 15:55:59 +02:00
service.py Unify storing certificates in LDAP 2017-08-25 09:40:15 +02:00
sysupgrade.py logging: do not log into the root logger 2017-07-14 15:55:59 +02:00
upgradeinstance.py logging: do not log into the root logger 2017-07-14 15:55:59 +02:00