So you're trying to login and get these messages on ovirt01 (192.168.0.145) and ipaclient01 (192.168.0.236).  What could be wrong:  (Thu Mar 22 23:59:26 2018) [sssd[be[nix.mds.xyz]]] [ldb] (0x4000): cancel ldb transaction (nesting: 2) (Thu Mar 22 23:59:26 2018) [sssd[be[nix.mds.xyz]]] [sysdb_mod_group_member] (0x0080): ldb_modify failed: [No such object](32)[ldb_wait from ldb_modify with LDB_WAIT_ALL: No such object (32)] (Thu Mar […]

It may happen that you can't ping a hostname either internally on a local DNS you may be running or externally.   Flushing the DNS cache may not work either: C:\Users\tom>ipconfig /flushdns Windows IP Configuration Successfully flushed the DNS Resolver Cache. C:\Users\tom>ping vcsa01 Ping request could not find host vcsa01. Please check the name and try […]

So my last Seagate SATA drive in my RAID 6 Array died spectacularly taking out my 4.8.4 Kernel and locking up my storage to the point where the only way I can get to it is via the kernel boot parameter init=/bin/bash .  The disk lasted about 5.762 years:  

This is a much shorter version of our troubleshooting article on NFS Ganesh we created earlier.  This is meant as a quick start guide for those who just want to get this server up and running very quickly.  The point of High Availabilty is that the best implement HA solutions never allow any outage to […]

If you are getting this: krb5_child.log:(Tue Mar  6 23:18:46 2018) [[sssd[krb5_child[3193]]]] [map_krb5_error] (0x0020): 1655: [-1765328340][Cannot find key for nfs/nfs01.nix.my.dom@NIX.my.dom kvno 6 in keytab] Then you can resolve it by copying the old keytab file back (or removing the incorrect entries using ktutil).  In our case we had made a saved copy and readded the NFS […]

You're getting this:  Name resolution for the name <URL> timed out after none of the configured DNS servers responded. One of the resolutions is to adjust a few network parameters:  netsh interface tcp set global rss=disabled netsh interface tcp set global autotuninglevel=disabled netsh int ip set global taskoffload=disabled Then set these registry options:  regedit: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters […]

ping cannot find host but nslookup on a host works just fine:   Ping request could not find host HOST. Please check the name and try again. Restart the DNS Client Service in Windows Services to resolve this one.  A few other commands to try:   ipconfig /flushdns ipconfig /registerdns Following this, check eventviewer why it stopped […]

In this post we will go over how to setup a highly available NFS Cluster using: GlusterFS NFS Ganesha CentOS 7  HAPROXY keepalived firewalld selinux This post is very lengthy and goes over quite a few details on the way to configuring this setup.  We document virtually every step including how to build out a […]

FreeIPA replication failes for about 13 minutes with no activity on the first IDM server.  Not clear why at first. Feb 12 10:06:56 idmipa01 named-pkcs11[2529]: zone nix.mds.xyz/IN: sending notifies (serial 1518448016) Feb 12 10:07:06 idmipa01 named-pkcs11[2529]: error (chase DS servers) resolving 'mds.xyz/DS/IN': 192.168.0.224#53 Feb 12 10:07:14 idmipa01 ns-slapd: [12/Feb/2018:10:07:14.130840773 -0500] – ERR – NSMMReplicationPlugin – […]

When trying to ssh into a host using the server's short name, you get challenged or asked for a password.  You need to set the following to:   First item to set is the following: dns_canonicalize_hostname = true in /etc/krb5.conf.  It will then prevent from asking a password.  Using the server's FQDN will work without issues.   […]