From owner-freebsd-stable@FreeBSD.ORG Fri Jan 20 20:01:51 2006 Return-Path: X-Original-To: freebsd-stable@freebsd.org Delivered-To: freebsd-stable@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 8139816A41F; Fri, 20 Jan 2006 20:01:51 +0000 (GMT) (envelope-from dan@dan.emsphone.com) Received: from dan.emsphone.com (dan.emsphone.com [199.67.51.101]) by mx1.FreeBSD.org (Postfix) with ESMTP id D9C2943D48; Fri, 20 Jan 2006 20:01:50 +0000 (GMT) (envelope-from dan@dan.emsphone.com) Received: (from dan@localhost) by dan.emsphone.com (8.13.1/8.13.3) id k0KK1nSU086104; Fri, 20 Jan 2006 14:01:49 -0600 (CST) (envelope-from dan) Date: Fri, 20 Jan 2006 14:01:49 -0600 From: Dan Nelson To: Dominique Goncalves Message-ID: <20060120200149.GB54284@dan.emsphone.com> References: <200601201130.18872.doconnor@gsoft.com.au> <7daacbbe0601192341p32673972j8f309dff1df543aa@mail.gmail.com> <20060120154215.GA54284@dan.emsphone.com> <7daacbbe0601201008m7c650f4esedcd81921d0fd81e@mail.gmail.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <7daacbbe0601201008m7c650f4esedcd81921d0fd81e@mail.gmail.com> X-OS: FreeBSD 5.4-STABLE X-message-flag: Outlook Error User-Agent: Mutt/1.5.11 Cc: vsevolod@freebsd.org, freebsd-stable@freebsd.org Subject: Re: Using [Open]LDAP for authentication X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 20 Jan 2006 20:01:51 -0000 In the last episode (Jan 20), Dominique Goncalves said: > I've updated my system with FreeBSD 6.0-STABLE #0: Thu Jan 19 > 21:51:24 CET 2006 but the hangs is still here. > > Here is results of the command "id" with "strace" executed on single > user mode: > > strace with ldap in nsswitch.conf: > http://djdomics.free.fr/FreeBSD/strace-nss-w-ldap.txt I see two issues right off the bat. One, there are lots of writes to fd -1, which indicates an error-checking bug somewhere. It probably doesn't affect you though. Two, something is calling nanosleep. It's probably nss_ldap, which looks like if it can't contact any of the configured ldap servers, waits 4 seconds, then retries, doubling the wait period every time until 64 seconds have elapsed, then it fails. Try putting nss_reconnect_tries 0 nss_reconnect_maxconntries 0 in your /usr/local/etc/nss_ldap.conf file. That should tell it not to retry after a failed connect, but just to fail. To avoid any failures at all, you should set up multiple replicated ldap servers there's always a server to connect to. -- Dan Nelson dnelson@allantgroup.com