timeout for IPA command

[Charles Hedrick]

It appears that the IPA command uses a host hardwired in /etc/ipa/default.conf.

If that fails, it then gets a list from DNS. This works fine if there’s a connection refused, but if there is no response, it takes so long to time out that most users will give up.

Is there a way to change the timeout?

[François Cami]

On Tue, Mar 19, 2019 at 3:56 PM Charles Hedrick via FreeIPA-users
 wrote:
> It appears that the IPA command uses a host hardwired in /etc/ipa/default.conf.
>
> If that fails, it then gets a list from DNS. This works fine if there’s a connection refused, but if there is no response, it takes so long to time out that most users will give up.
>
> Is there a way to change the timeout?

Try lowering tcp_syn_retries:
sysctl -w net.ipv4.tcp_syn_retries=4

There might be side-effects, so don't use too low a setting.

François
> FreeIPA-users mailing list -- [e-mail]
> To unsubscribe send an email to [e-mail]
> Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives: https://lists.fedorahosted.org/archives/list/[e-mail]...