freeipa

#7213 Increase dbus client timeouts during CA install
Closed: fixed Opened by zultron.

Closed: fixed
Reopen Issue

In FreeIPA 4.5 and 4.6, the ipa-server-install program can fail during the "Configuring certificate server (pki-tomcatd)" stage on a heavily-loaded host.

The dogtag service is memory intensive, and on a memory-constrained system, can be unresponsive right after start-up, especially for expensive operations that generate new certificates.

These delays can cause failures when dbus clients time out while attempting to run
new certificate operations through certmonger. This patch changes dbus client timeouts for some such operations to 120 seconds (from the default 25 seconds).

There is a github PR #1078 that fixes this problem, as well as quite a bit of discussion.

Metadata Update from @tkrizek:
- Issue priority set to: normal
- Issue set to the milestone: FreeIPA 4.6.2

master:

  • a2dea5a56daaf04b1066b2b6ea8c503a8de10474 Increase dbus client timeouts during CA install

ipa-4-6:

  • 7881d6db3e1795be280fe3ce77533a787f0d1e46 Increase dbus client timeouts during CA install

Metadata Update from @tdudlak:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)
Metadata
None
None
None
None
Normal
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.