SUMMARY: excessive LDAP connections

From: Will Dowling <william.m.dowling_at_nuim.ie>
Date: Fri Apr 08 2005 - 10:55:14 EDT
Hey all,
Thanks to those who replied. I got a few conflicting
reports on this.

 "The best solution, unless you are using xfn for something,
is to
remove the xfn line from /etc/auto_master, and stop/start
autofs." - Rachel Polanskis  

  "This is normal.  It occurs on Linux also.  Anytime you
run a process 
that needs to resolve uids/guids to names will need to open
a connection 
  to LDAP.  So running "ls -l" needs to contact LDAP." -
Brian Miller

 "Make sure you have NSCD running on each client. 
Otherwise, every ls, id,
etc command will do separate quieries for each and every
file it looks at." - Chris_Sellers

I tried all of these but none worked so I decided that Brian
was right and it was normal. 
But today(after a busy week) it was solved, thanks to Robert
Petkus :

 " Make sure that in /etc/nsswitch.conf you don't use ldap
at all for 
services (services:   files) then restart nscd."

 Works perfect. Cheers.

 Will
 

> 
> Hey folks,
> I'm running a Sun Fire v880 with Solaris 9 and Sun One
> Directory Server5.2. LDAP is used to manage user accounts.
> I just added four blade 2500's to
> my network and configured LDAP correctly. 
> Now LDAP seems to be creating alot of connections. I
> cannot remember if this is normal or not. 
> There always seems to be a fixed number of established
> connections but then a ridiculous amount of close_wait
> sessions
> when I try and do some work on the workstations.
> To give you an example this is when the workstation is
> idle
> 
>  bash-2.05$ netstat | more
> 
> TCP: IPv4
>    Local Address        Remote Address    Swind Send-Q
> Rwind Recv-Q  State
> -------------------- -------------------- ----- ------
> ----- ------ -------
> localhost.1022  server.nfsd 49640      0 49640      0
> ESTABLISHED
> localhost.35077 localhost.35073 49152      0 49152      0
> ESTABLISHED
> locahost.35073 localhost.35077 49152      0 49152      0
> ESTABLISHED
> localhost.35078 localhost.35073 49152      0 49152      0
> ESTABLISHED
> localhost.35073 localhost.35078 49152      0 49152      0
> ESTABLISHED
> localhost.35079 localhost.35073 49152      0 49152      0
> ESTABLISHED
> localhost.35073 localhost.35079 49152      0 49152      0
> ESTABLISHED
> localhost.35080 localhost.35073 49152      0 49152      0
> ESTABLISHED
> lcoalhost.35073 localhost.35080 49152      0 49152      0
> ESTABLISHED
> localhost.35081 localhost.35073 49152      0 49152      0
> ESTABLISHED
> localhost.35073 localhost.35081 49152      0 49152      0
> ESTABLISHED
> localhost.35084 localhost.35073 49152      0 49152      0
> ESTABLISHED
> localhost.35073 localhost.35084 49152      0 49152      0
> ESTABLISHED
> 
> while this is when I do some work on it :
> 
> bash-2.05$ netstat | more
> 
> TCP: IPv4
>    Local Address        Remote Address    Swind Send-Q
> Rwind Recv-Q  State
> -------------------- -------------------- ----- ------
> ----- ------ -------
> localhost.1022  server.nfsd 49640      0 49640      0
> ESTABLISHED
> localhost.35077 localhost.35073 49152      0 49152      0
> ESTABLISHED
> localhost.35073localhost.35077 49152      0 49152      0
> ESTABLISHED
> localhost.35078 localhost.35073 49152      0 49152      0
> ESTABLISHED
> localhost.35073 localhost.35078 49152      0 49152      0
> ESTABLISHED
> localhost.35079 localhost.35073 49152      0 49152      0
> ESTABLISHED
> localhost.35073 localhost.35079 49152      0 49152      0
> ESTABLISHED
> localhost.35080 localhost.35073 49152      0 49152      0
> ESTABLISHED
> localhost.35073 localhost.35080 49152      0 49152      0
> ESTABLISHED
> localhost.35081 localhost.35073 49152      0 49152      0
> ESTABLISHED
> localhost.35073 localhost.35081 49152      0 49152      0
> ESTABLISHED
> localhost.35084 localhost.35073 49152      0 49152      0
> ESTABLISHED
> localhost.35073 localhost.35084 49152      0 49152      0
> ESTABLISHED
> localhost.35600 server.ldap 49640      0 49640      0
> TIME_WAIT
> localhost.35601 server.ldap 49640      0 49640      0
> TIME_WAIT
> localhost.35602 server.ldap 49640      0 49640      0
> TIME_WAIT
> localhost.35603 server.ldap 49640      0 49640      0
> TIME_WAIT
> localhost.35604 server.ldap 49640      0 49640      0
> TIME_WAIT
> localhost.35605 server.ldap 49640      0 49640      0
> TIME_WAIT
> localhost.35606 server.ldap 49640      0 49640      0
> TIME_WAIT
> localhost.35608 server.ldap 49640      0 49640      0
> TIME_WAIT
> localhost.35609 server.ldap 49640      0 49640      0
> TIME_WAIT
> localhost.35610 server.ldap 49640      0 49640      0
> TIME_WAIT
> localhost.35611 server.ldap 49640      0 49640      0
> TIME_WAIT
> localhost.35612 server.ldap 49640      0 49640      0
> TIME_WAIT
> localhost.35613 server.ldap 49640      0 49640      0
> TIME_WAIT
> localhost.35614 server.ldap 49640      0 49640      0
> TIME_WAIT
> localhost.35615 server.ldap 49640      0 49640      0
> TIME_WAIT
> localhost.35616 server.ldap 49640      0 49640      0
> TIME_WAIT
> localhost.35617 server.ldap 49640      0 49640      0
> TIME_WAIT
> localhost.35618 server.ldap 49640      0 49640      0
> TIME_WAIT
> localhost.35619 server.ldap 49640      0 49640      0
> TIME_WAIT
> localhost.35620 servere.ldap 49640      0 49640      0
> TIME_WAIT
> localhost.35621 server.ldap 49640      0 49640      0
> TIME_WAIT
> localhost.35622 server.ldap 49640      0 49640      0
> TIME_WAIT
> localhost.35623 server.ldap 49640      0 49640      0
> TIME_WAIT
> localhost.35624 server.ldap 49640      0 49640      0
> TIME_WAIT
> 
> Is this normal or do I have a problem?
> _______________________________________________
> sunmanagers mailing list
> sunmanagers@sunmanagers.org
> http://www.sunmanagers.org/mailman/listinfo/sunmanagers
_______________________________________________
sunmanagers mailing list
sunmanagers@sunmanagers.org
http://www.sunmanagers.org/mailman/listinfo/sunmanagers
Received on Fri Apr 8 10:55:34 2005

This archive was generated by hypermail 2.1.8 : Thu Mar 03 2016 - 06:43:45 EST