orion / freeipa

Forked from freeipa 5 years ago
Clone

7881d6d Increase dbus client timeouts during CA install

3 files Authored by zultron 6 years ago, Committed by tdudlak 6 years ago,
    Increase dbus client timeouts during CA install
    
    When running on memory-constrained systems, the `ipa-server-install`
    program often fails during the "Configuring certificate server
    (pki-tomcatd)" stage in FreeIPA 4.5 and 4.6.
    
    The memory-intensive dogtag service causes swapping on low-memory
    systems right after start-up, and especially new certificate
    operations requested via certmonger can exceed the dbus client default
    25 second timeout.
    
    This patch changes dbus client timeouts for some such operations to
    120 seconds (from the default 25 seconds, IIRC).
    
    See more discussion in FreeIPA PR #1078 [1] and FreeIPA container
    issue #157 [2].  Upstream ticket at [3].
    
    [1]: https://github.com/freeipa/freeipa/pull/1078
    [2]: https://github.com/freeipa/freeipa-container/issues/157
    [3]: https://pagure.io/freeipa/issue/7213
    
    Reviewed-By: Stanislav Laznicka <slaznick@redhat.com>
    Reviewed-By: Rob Crittenden <rcritten@redhat.com>
    
        
file modified
+2 -0
file modified
+4 -1