On 8/24/2010 10:59 AM, Bjoern Boschman wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, are there any news on this? Today the same happend to one of my Debian/squeeze installations running: nscd 2.10.2-6 My best guess is that the nscd FDs where running full after several days. After all in my opinion this should be grave severity?
The problems we found were a combination of nscd using one FD for each request, and had 32 worker threads, each of which was waiting in libnss-ldap for one request. libnss-ldap had in the code a default timeout of NO_LIMIT, even though the documentation indicated 30 seconds. Thus once libnss-ldap hung up, all the nscd threads would hang, but incoming requests would continue to use one FD each, until the limit of FD was reached at which time nscd would loop. The system keept running as each client would try nscd, wait 30 seconds, then do the ldap calls from the application. The problems we had seen were summed up in an internal note on 4/14/2009:
nscd and nss-ldap were working on Dapper, fail on Hardy, and appear to be working on Intrepid. This would lead me to believe that there was some change introduced in Hardy and fixed on Intrepid. version of nss-ldap down stream code: Dapper 238, Dapper 258, Intrepid 260, latest 264. In version 250 a large fix was introduced to stop leaking FDs. in 259 or 260 another fix was introduced that handed error codes better especially if start_tls failed, There are three lines that look like they could fix be our problem.
Also see: https://bugs.launchpad.net/ubuntu/+source/libnss-ldap/+bug/292971 which has our latest fix for libnss-ldap. So use an ldap.conf timeout = 30 and get the libnss-ldap - 264-2ubuntu2 package.
B -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAkxz7FgACgkQABMWRpwdNunyqQCg03CGv5gWopasbTOpSvYAtTMS YwMAoNLBgAkk03xmrakKDI0JrR5RZygu =Wn0y -----END PGP SIGNATURE-----
-- Douglas E. Engert <deeng...@anl.gov> Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
