IdM/IPA performance degradation with heavy Kerberos authentication trafic, LDAP tuning of krbLastSuccessfulAuth
Issue
We are experiencing performance issues with IPA that are affecting our production environment.
While I've not been able to determine from logs that there is an apparent issue, we have been experiencing notable latency in authentication from client systems as well as querying IPA with the management Web UI as well as the command line 'ipa' tool.
Restarting the ipa service on both replica and master does not resolve the issue.
Environment
RHEL 6.4
redhat-release-server-6Server-6.4.0.4.el6.x86_64
ipa-server-3.0.0-26.el6_4.4.x86_64
389-ds-base-1.2.11.15-20.el6_4.x86_64
krb5-server-1.10.3-10.el6_4.4.x86_64
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.