From owner-freebsd-stable@FreeBSD.ORG Tue Jan 24 22:48:18 2006 Return-Path: X-Original-To: freebsd-stable@freebsd.org Delivered-To: freebsd-stable@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 8AC3116A41F for ; Tue, 24 Jan 2006 22:48:18 +0000 (GMT) (envelope-from dominique.goncalves@gmail.com) Received: from uproxy.gmail.com (uproxy.gmail.com [66.249.92.201]) by mx1.FreeBSD.org (Postfix) with ESMTP id 1FB4743D5F for ; Tue, 24 Jan 2006 22:48:12 +0000 (GMT) (envelope-from dominique.goncalves@gmail.com) Received: by uproxy.gmail.com with SMTP id o2so6946uge for ; Tue, 24 Jan 2006 14:48:12 -0800 (PST) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=oDS8W1G7eXC1CJmpw49UlDZdJ2IYZjK04lZCUJNCI+xP/uiKHLebr9hRtKT4cFFP0Fkyi+scpV5/4WCcP0VrjnWZALnka3G+V3y2jG19GIoQWcI+IBy6rs7eiMstD/mC4A8CEoAYuSLAGL2Dqq2t4Z7LOieE7pnD+6pKGonslI0= Received: by 10.48.220.17 with SMTP id s17mr3207nfg; Tue, 24 Jan 2006 14:48:11 -0800 (PST) Received: by 10.49.1.17 with HTTP; Tue, 24 Jan 2006 14:48:11 -0800 (PST) Message-ID: <7daacbbe0601241448o67680fedu5521d0aa5f3b42a0@mail.gmail.com> Date: Tue, 24 Jan 2006 23:48:11 +0100 From: Dominique Goncalves To: "David F. Severski" In-Reply-To: <20060124205621.GU69091@geoff.deadheaven.com> MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Content-Disposition: inline References: <200601201130.18872.doconnor@gsoft.com.au> <7daacbbe0601192341p32673972j8f309dff1df543aa@mail.gmail.com> <20060120154215.GA54284@dan.emsphone.com> <7daacbbe0601201008m7c650f4esedcd81921d0fd81e@mail.gmail.com> <20060120200149.GB54284@dan.emsphone.com> <20060124205621.GU69091@geoff.deadheaven.com> Cc: freebsd-stable@freebsd.org Subject: Re: Using [Open]LDAP for authentication X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 24 Jan 2006 22:48:18 -0000 On 1/24/06, David F. Severski wrote: > On Fri, Jan 20, 2006 at 02:01:49PM -0600, Dan Nelson wrote: > > Two, something is calling nanosleep. It's probably nss_ldap, which > > looks like if it can't contact any of the configured ldap servers, > > waits 4 seconds, then retries, doubling the wait period every time > > until 64 seconds have elapsed, then it fails. Try putting > > > > nss_reconnect_tries 0 > > nss_reconnect_maxconntries 0 > > > > in your /usr/local/etc/nss_ldap.conf file. > > I've been struggling with similar issues where slapd seems to hang at > startup when using nss_ldap on the local system (all system accounts and > groups are local, yet the group enumeration seems to cause the hang). > Are these two settings documented anywhere for reference? I'm trying to > understand how this interact with 'bind_policy soft', which I've also > seen recommended. The nss_* settings don't seem documented in the stock > nss_ldap.conf.sample file. After some tests, using nss_ldap-1.389 instead of nss_ldap-1.444 seems to solve hangs at startup and when slapd is down. Can you try nss_ldap-1.389 thanks to portdowngrade if these hangs are still here ? > Thanks for the help. > > David > > > Regards. -- There's this old saying: "Give a man a fish, feed him for a day. Teach a man to fish, feed him for life."