Bill Dossett said:
Hi,
yes nscd is running on the client, the mail server.
ok good
Yes /etc/nsswitch.conf has ldap entries, I am authenticating
via ldap, so it should shouln't it? authconfig put these in, I use
authconfig to setup my authentication and change it from one
server to another...
I am not sure how these points are relevant.... any chance you
could elaborate?
for each login, the system has to look the username up to make sure
it exists, running nscd allows the system to cache the responses from
the back end(LDAP in this case) so it doesn't have to ask the LDAP
server every_single_time. greatly improves performance. though the
system still has to query the ldap server for the password with
PAM.
what else is running on the LDAP server? and what version of redhat
is the server running?
other things to try:
give the output of: cat /proc/sys/fs/file-nr
another:
1) (stop the ldap server)
2) run ulimit -n 5000
3) (start the ldap server)
on my redhat 7.3 box the default is 1024 open files for the
shell, the above command increases that to 5000, though this
may only delay the same problem occuring again, need to know
what else is running on the system, something is chewing resources.
another thing to try:
/usr/sbin/lsof >&/tmp/openfiles
(you may need to install lsof first, its not usually installed
I think by default). this will show you all the open files on
the system and what is using them.
also how many slapd processes are running? on my redhat 7.3 box
I have 36. I don't have many users authenticating via LDAP but
my mail server routes mail using ldap so the server is queried
constantly(I get about 5-6,000 messages/day).
nate