Re: Open socket not connected to any real process

2018-03-08 Thread Sven Hartge
Roberto C. Sánchez wrote: > On Wed, Mar 07, 2018 at 11:08:05PM +0100, Sven Hartge wrote: >> This is why you use libpam-ldapd (instead of libpam-ldap) in >> combination with libnss-ldapd (instead of libnss-ldap). >> >> Its design with a separate daemon (nslcd) doing the actual LDAP >> connection

Re: Open socket not connected to any real process

2018-03-07 Thread Roberto C . Sánchez
On Wed, Mar 07, 2018 at 11:08:05PM +0100, Sven Hartge wrote: > > This is why you use libpam-ldapd (instead of libpam-ldap) in combination > with libnss-ldapd (instead of libnss-ldap). > > Its design with a separate daemon (nslcd) doing the actual LDAP > connection is far superior compared to the

Re: Open socket not connected to any real process

2018-03-07 Thread Sven Hartge
David Parker wrote: > Well, crap. It turns out this isn't a problem. PAM is configured for > LDAP authentication and so it opens a connection each time I log in, > owned by my sshd process, even though it's not using LDAP > authentication for root. And the other LDAP queries I'm seeing are > b

Re: Open socket not connected to any real process

2018-03-07 Thread David Parker
Well, crap. It turns out this isn't a problem. PAM is configured for LDAP authentication and so it opens a connection each time I log in, owned by my sshd process, even though it's not using LDAP authentication for root. And the other LDAP queries I'm seeing are being sent when users authenticat

Open socket not connected to any real process

2018-03-07 Thread David Parker
Hello, I have an SMTP server running Debian Wheezy (64-bit). A few weeks ago, I stopped nscd on it, because it was holding a connection open to our LDAP server and sending a ton of unnecessary queries to it. Even though nscd is not running, I am once again seeing nscd-type queries on the LDAP se