openldap-technical

openldap-technical@openldap.org

23 participants
9804 discussions

Root cause: Strange OpenLdap performace issue
by Michele Mase' 15 May '12

15 May '12

I've a tiny ldap service (only 6000 records) vith openldap 2.3.x rhel5.x master/slave; The first query takes me over 4 seconds (instead of taking less than 0.1.seconds): time ldapsearch -x -b "c=it" -s sub "(o=*)" -D "cn=Manager,dc=sir" -h www.example.com -w mypasswd The same query using one level takes only 0.4 seconds time ldapsearch -x -b "c=it" -s one "(o=*)" -D "cn=Manager,dc=sir" -h www.example.com -w mypasswd I've tested the following: New brand system with openldap 2.4.x rhel6.x mirror mode: both queries take me less than 0.2 seconds New brand system with the same releases, 2.3.x rhel5.x: both queries take me less than 0.2 seconds The problem should be in the prod. system: I've tried almost all: reindexing operations, better indexing options, more cache, better threads tuning, more cpu and ram to the servers ... nothing to do: the first quey takes more than 4 seconds. The last operation was a "disaster recovery" of the prod. ldap: 1 stop ldap on both systems 2 slapcat to save the last good ldif 3 remove of all databases (rm -fr /var/lib/ldap/*) on both systems 4 recreate dirs, DB_CONFIG and restore ldif; restore permissions 5 start ldap service on both servers And magically, the issue has gone! Now first query, yes the "bad" query with the subtree options, works like a charm, giving me the results in less than 0.1 seconds .... Which could be the root cause? DB defragmentation? I was unable to find the root cause. PLS, help me to find some suggestions. Regards Michele Masè

2 2

overlay nssov + pass-through authentication
by Uwe Werler 15 May '12

15 May '12

Hello list, up to now we have pam_ldap/nss_ldap running from padl and all user accounts have pass-through authentication configured to authenticate against an external ldap server.* Now I try the overlay nssov and except authentication all is running fine. If I use the userPassword directly the user can authenticate without problems. Isn't it possible to use pass-through authentication with overlay nssov? Thanks in advance! Regards Uwe *userPassword: {SASL}uid

1 0

Cannot mount users's home directories
by zingalo 15 May '12

15 May '12

Hi, i have problems mounting on the client ubuntu the users's home directories that are on a server debian squeeze with ldap-samba. First of all, which is the correct syntax for homeDirectory attribute if that home is on a server. I wrote: homeDirectory: //192.168.5.219/users/username but pam_mount tells me volume not found. am not sure of samba and smbldap configurations also. could you take a look of my conf files? this is smb.conf: [global] #identificazione workgroup = AMAHORO server string = amahoro security = user #opzioni di rete hosts allow = 192.168.5.0/24 localhost #opzioni per il log log file = /var/log/samba/log.%u max log size = 1000 log level = 3 #opzioni per l'accesso alle condivisioni encrypt passwords = yes null passwords = no security = user #smb passwd file = /etc/samba/smbpasswd username map = /etc/samba/smbusers #LDAP passdb backend = ldapsam:ldap://127.0.0.1/ ldap admin dn = cn=Manager,dc=amahoro,dc=bi ldap suffix = dc=amahoro,dc=bi ldap machine suffix = ou=Computers ldap user suffix = ou=Users ldap group suffix = ou=Groups ldap ssl = no add user script = /usr/local/sbin/smbldap-useradd -m "%u" add group script = /usr/local/sbin/smbldap-groupadd "%g" delete user from group script = /usr/local/sbin/smbldap-groupmod -x "%u" "%g" delete user script = /usr/local/sbin/smbldap-userdel "%u" delete group script = /usr/loca/sbin/smbldap-groupdel "%g" [homes] path = /users/%u browseable = no writable = yes valid users = %S read only = no guest ok = no admin users = %u write list = %u read list = %u create mask = 0700 directory mask = 0700 [user_data] comment = Leçon browseable = yes public = yes writable = no path = /user_data and this is smbldap.conf: # $Source: $ # $Id: smbldap.conf,v 1.18 2005/05/27 14:28:47 jtournier Exp $ # # smbldap-tools.conf : Q & D configuration file for smbldap-tools # This code was developped by IDEALX (http://IDEALX.org/) and # contributors (their names can be found in the CONTRIBUTORS file). # # Copyright (C) 2001-2002 IDEALX # # This program is free software; you can redistribute it and/or # modify it under the terms of the GNU General Public License # as published by the Free Software Foundation; either version 2 # of the License, or (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program; if not, write to the Free Software # Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, # USA. # Purpose : # . be the configuration file for all smbldap-tools scripts ############################################################################## # # General Configuration # ############################################################################## # Put your own SID. To obtain this number do: "net getlocalsid". # If not defined, parameter is taking from "net getlocalsid" return SID="S-1-5-21-251852451-2940789264-3475694606" # Domain name the Samba server is in charged. # If not defined, parameter is taking from smb.conf configuration file # Ex: sambaDomain="IDEALX-NT" sambaDomain="AMAHORO" #realm="amahoro.bi" ############################################################################## # # LDAP Configuration # ############################################################################## # Notes: to use to dual ldap servers backend for Samba, you must patch # Samba with the dual-head patch from IDEALX. If not using this patch # . one master LDAP server where all writing operations must be done # . one slave LDAP server where all reading operations must be done # (typically a replication directory) # Slave LDAP server # Ex: slaveLDAP=127.0.0.1 # If not defined, parameter is set to "127.0.0.1" slaveLDAP="127.0.0.1" # Slave LDAP port # If not defined, parameter is set to "389" slavePort="389" # Master LDAP server: needed for write operations # Ex: masterLDAP=127.0.0.1 # If not defined, parameter is set to "127.0.0.1" masterLDAP="127.0.0.1" # Master LDAP port # If not defined, parameter is set to "389" #masterPort="389" masterPort="389" # Use TLS for LDAP # If set to 1, this option will use start_tls for connection # (you should also used the port 389) # If not defined, parameter is set to "0" ldapTLS="0" # Use SSL for LDAP # If set to 1, this option will use SSL for connection # (standard port for ldaps is 636) # If not defined, parameter is set to "0" ldapSSL="0" # How to verify the server's certificate (none, optional or require) # see "man Net::LDAP" in start_tls section for more details verify="require" # CA certificate # see "man Net::LDAP" in start_tls section for more details cafile="/etc/smbldap-tools/ca.pem" # certificate to use to connect to the ldap server # see "man Net::LDAP" in start_tls section for more details clientcert="/etc/smbldap-tools/smbldap-tools.iallanis.info.pem" # key certificate to use to connect to the ldap server # see "man Net::LDAP" in start_tls section for more details clientkey="/etc/smbldap-tools/smbldap-tools.iallanis.info.key" # LDAP Suffix # Ex: suffix=dc=IDEALX,dc=ORG suffix="dc=amahoro,dc=bi" # Where are stored Users # Ex: usersdn="ou=Users,dc=IDEALX,dc=ORG" # Warning: if 'suffix' is not set here, you must set the full dn for usersdn usersdn="ou=Users,${suffix}" # Where are stored Computers # Ex: computersdn="ou=Computers,dc=IDEALX,dc=ORG" # Warning: if 'suffix' is not set here, you must set the full dn for computersdn computersdn="ou=Computers,${suffix}" # Where are stored Groups # Ex: groupsdn="ou=Groups,dc=IDEALX,dc=ORG" # Warning: if 'suffix' is not set here, you must set the full dn for groupsdn groupsdn="ou=Groups,${suffix}" # Where are stored Idmap entries (used if samba is a domain member server) # Ex: groupsdn="ou=Idmap,dc=IDEALX,dc=ORG" # Warning: if 'suffix' is not set here, you must set the full dn for idmapdn idmapdn="ou=Idmap,${suffix}" # Where to store next uidNumber and gidNumber available for new users and groups # If not defined, entries are stored in sambaDomainName object. # Ex: sambaUnixIdPooldn="sambaDomainName=${sambaDomain},${suffix}" # Ex: sambaUnixIdPooldn="cn=NextFreeUnixId,${suffix}" sambaUnixIdPooldn="sambaDomainName=AMAHORO,${suffix}" # Default scope Used scope="sub" # Unix password encryption (CRYPT, MD5, SMD5, SSHA, SHA, CLEARTEXT) hash_encrypt="SSHA" # if hash_encrypt is set to CRYPT, you may set a salt format. # default is "%s", but many systems will generate MD5 hashed # passwords if you use "$1$%.8s". This parameter is optional! crypt_salt_format="%s" ############################################################################## # # Unix Accounts Configuration # ############################################################################## # Login defs # Default Login Shell # Ex: userLoginShell="/bin/bash" userLoginShell="/bin/bash" # Home directory # Ex: userHome="/home/%U" userHome="/users/%U" # Default mode used for user homeDirectory userHomeDirectoryMode="700" # Gecos userGecos="System User" # Default User (POSIX and Samba) GID defaultUserGid="513" # Default Computer (Samba) GID defaultComputerGid="550" # Skel dir skeletonDir="/etc/skel" # Default password validation time (time in days) Comment the next line if # you don't want password to be enable for defaultMaxPasswordAge days (be # careful to the sambaPwdMustChange attribute's value) defaultMaxPasswordAge="45" ############################################################################## # # SAMBA Configuration # ############################################################################## # The UNC path to home drives location (%U username substitution) # Just set it to a null string if you want to use the smb.conf 'logon home' # directive and/or disable roaming profiles # Ex: userSmbHome="\\PDC-SMB3\%U" userSmbHome="\\amahoro\users\%U" # The UNC path to profiles locations (%U username substitution) # Just set it to a null string if you want to use the smb.conf 'logon path' # directive and/or disable roaming profiles # Ex: userProfile="\\PDC-SMB3\profiles\%U" userProfile="\\amahoro\profiles\%U" # The default Home Drive Letter mapping # (will be automatically mapped at logon time if home directory exist) # Ex: userHomeDrive="H:" #userHomeDrive="H:" # The default user netlogon script name (%U username substitution) # if not used, will be automatically username.cmd # make sure script file is edited under dos # Ex: userScript="startup.cmd" # make sure script file is edited under dos userScript="logon.bat" # Domain appended to the users "mail"-attribute # when smbldap-useradd -M is used # Ex: mailDomain="idealx.com" mailDomain="iallanis.info" ############################################################################## # # SMBLDAP-TOOLS Configuration (default are ok for a RedHat) # ############################################################################## # Allows not to use smbpasswd (if with_smbpasswd == 0 in smbldap_conf.pm) but # prefer Crypt::SmbHash library with_smbpasswd="0" #smbpasswd="/usr/bin/smbpasswd" # Allows not to use slappasswd (if with_slappasswd == 0 in smbldap_conf.pm) # but prefer Crypt:: libraries with_slappasswd="0" slappasswd="/usr/sbin/slappasswd" # comment out the following line to get rid of the default banner # no_banner="1" Thanks for your time

2 4

LDAP & AUTOMOUNT QUESTION
by Borresen, John - 0442 - MITLL 14 May '12

14 May '12

All, Running OpenLDAP 2.4.23 on CentOS5.8. Looking into modifying our automount a bit. For example, say we have the following LDIF for an automap: from the auto.master: objectClass automount(structural) automountInformation auto.admin -nosuid automountKey /admin The auto.admin LDIF has this: objectClass automount(structural) automountInformation server:/vol/vol2/admin/documents automountKey docs There is another entry, same automountInformation (server:/vol/vol2/admin/documents) for documents and doc. Is there any way that we can combine those entries into one? For example, something like this: objectClass automount(structural) automountInformation server:/vol/vol2/admin/documents automountKey docs automountKey documents automountKey doc I tried to modify things in this fashion but, it failed, "only one automountKey is permitted". Thanks for the help, I hope I made our intentions clear. In the long run we would like to have the option for an EU (end-user) to be able to change directories to /admin/docs, /admin/documents, or /admin/doc. Dave Borresen Solaris/Linux Systems Administrator Surveillance Systems Group MIT Lincoln Laboratory john.borresen(a)ll.mit.edu

1 0

ACL for nssov-overlay
by Uwe Werler 14 May '12

14 May '12

Hello list, does someone know how I can define an ACL for the socket used by the nssov-overlay? I tried by socket.url="/var/run/nslcd/socket" read but it won't work. Any suggestions? Thanks in advance! Regards Uwe

1 0

Re: OpenLDAP 2.4.23 multi-master replication of the cn=config tree error: could not put entry file in place
by Brandon Hume 11 May '12

11 May '12

(Please reply to the list, so any useful information gets archived for others in the future...) On 05/11/12 05:39 AM, Cyril Grosjean wrote: > 26374 open("/etc/openldap/slapd.d/cn=config.ldif", O_RDONLY) = 16 > 26374 open("/etc/openldap/slapd.d/cn=config.40TIFd", > O_RDWR|O_CREAT|O_EXCL, 0600) = 16 > 26374 rename("/etc/openldap/slapd.d/cn=config.40TIFd", > "/etc/openldap/slapd.d/cn=config.ldif") = -1 EACCES (Permission denied) > 26374 unlink("/etc/openldap/slapd.d/cn=config.40TIFd") = 0 > So it really looks to me like a bug. As suggested by Quanah, I'll try > OpenLDAP 2.4.31 if I've time for that, but my goal was possibly to > stick to "official" rpms, for obvious support reasons. If it's a bug, then it's a bug in the operating system. strace traces system calls ("_s_ystem trace"). You can plainly see OpenLDAP creating the new cn=config.ldif as a tempfile, trying to rename it to overwrite the old, and being told by the *OS* that it's not allowed to do so. Here's the exact same operation on my own server: 5596 open("/appl/ldap/etc/slapd.d/cn=config.ldif", O_RDONLY) = 57 5596 open("/appl/ldap/etc/slapd.d/cn=config.Zi6PH7", O_RDWR|O_CREAT|O_EXCL, 0600) = 57 5596 rename("/appl/ldap/etc/slapd.d/cn=config.Zi6PH7", "/appl/ldap/etc/slapd.d/cn=config.ldif") = 0 How about showing us the exact permissions on the directory and that file? What's the output of: ls -lZd /etc/openldap/slapd.d /etc/openldap/slapd.d/cn=config.ldif and: getfacl /etc/openldap/slapd.d /etc/openldap/slapd.d/cn=config.ldif

3 2

2-node MMR w/ delta-syncrepl setup, out of sync, best way to resync?
by Brandon Hume 10 May '12

10 May '12

I have a new MMR setup, "kil-ds-3" and "kil-ds-4". I turns out that I was missing syncprov on the cn=accesslog tree, which the guys on IRC helped me out with correcting (thanks again, JoBbZ!). But even though I corrected that, and syncrepl is working great now, kil-ds-4 is not discovering and replicating the ~15k changes made on kil-ds-3 while syncing was broken, even when restarting the server. Howard pointed me at the -c command line argument for slapd, and I've given it a try with "slapd -c rid=002", as well as "slapd -c rid=002,sin=2,csn=0", and neither one causes the server to do a full resync, although the manpage says "-c rid=002" should be sufficient. Do the rules for that change in a mirrormode setup? Is the only real fix an "/etc/init.d/ldapd stop && rm -f ${DBDIR}/* && /etc/init.d/ldapd start"? *Somewhat* related to that... we have an "updater" process that runs through the directory and changes departmental affiliations, organizational affiliations, entitlements, and so on. Most of the time only a few dozen records get touched, but of course about three times a year new students come in, more graduate, and so on... and on those landmark days I might see tens of thousands of entries getting updated in about 30 minutes. With that kind of situation, what kind of value should I keep for olcSpSessionLog (syncprov-sessionlog)? If, for example, I had one side of the mirror down during this update process, would I lose any replication or performance if the sessionlog overflowed (olcSpSessionLog = 10000, and 25k changes are made)? I'm assuming the recovering node would simply fall back to a "present phase" synchronization and syncing'll just take a bit longer, and even then that will only happen if > 10k entries are *deleted* as opposed to modified. Am I understanding the process correctly?

2 2

RE: openldap to AD proxy
by Alex Samad - Yieldbroker 10 May '12

10 May '12

Still haven't been able to get this working. And can't find any way to turn on any debugging for ldap backend. If anyone has done this if they could provide some feed back. A -----Original Message----- From: Alex Samad - Yieldbroker Sent: Friday, 4 May 2012 2:32 PM To: 'openldap-technical(a)openldap.org' Subject: openldap to AD proxy Hi I am still struggling with the my openldap to AD proxy connection. I have successfully connected such that I can do search when I bind to openldap with an AD dn, but I want to be able to do anon search and I want anon to map through to a dn I have created in AD which has read only rights. dn: olcDatabase={3}ldap,cn=config objectClass: olcDatabaseConfig objectClass: olcLDAPConfig olcDatabase: {3}ldap olcAccess: {0}to * by dn.base="gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth" manage by * read olcReadOnly: TRUE olcRootDN: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth olcSizeLimit: 500 olcSuffix: dc=xyz,dc=com olcDburi: "ldap://ldap. xyz.com " olcDbRebindAsUser: TRUE olcDbChaseReferrals: TRUE olcdbaclbind: bindmethod=simple binddn="CN=ad readonly,OU=YB Services,OU= xyz,DC= xyz,DC=com" credentials=":)" starttls=no olcDbIDAssertBind: bindmethod=none binddn="CN=ad readonly,OU=YB Services,OU= xyz,DC= xyz,DC=com" credentials=":)" starttls=no I have a subordinate db at ou=external, DC= xyz,DC=com I can do a ldapsearch -x -D " CN=ad readonly,OU=YB Services,OU= xyz,DC= xyz,DC=com" -b " DC= xyz,DC=com" -w :) what I can't do is ldapsearch -x -b " DC= xyz,DC=com" I am thinking I want to map anon request through to the readonly DN. But still leave it such that when people bind to openldap as themselves they bind to AD as themselves How would I do that ? Thanks Alex

1 0

Re: slapadd hanging initializing mdb backend
by Mark 09 May '12

09 May '12

On Wed, May 2, 2012 at 3:37 PM, Quanah Gibson-Mount <quanah(a)zimbra.com>wrote: > --On Monday, April 30, 2012 10:37 AM -0500 Mark <mah042(a)gmail.com> wrote: > > When I try to slapadd initial data into an empty mdb backend, the slapadd >> hangs: >> >> $ /tmp/openldap-2.4.31/sbin/**slapadd -w -S 1 -c -F >> /tmp/openldap-2.4.31/etc/**slapd.d -b dc=example,dc=com -l >> /tmp/openldap-2.4.31/etc/**initdb.ldif >> _#################### 100.00% eta none elapsed >> none fast! >> (does not return to a shell prompt. I have to INT it.) >> > > Caused by using -w, ITS#7225, currently fixed in git master. > Did you mean ITS#7255 ?

2 1

Lock table is out of available locks
by Marc Patermann 09 May '12

09 May '12

Hi, while extending an object by adding a lot of maildrop values, slapd refused to MOD with err 80: May 4 15:31:57 rzhs720 slapd[27004]: conn=1007 op=3 MOD dn="ou=infogroup,ou=foo" May 4 15:31:57 rzhs720 slapd[27004]: conn=1007 op=3 MOD attr=objectClass ou cn mail member maildrop May 4 15:31:57 rzhs720 slapd[27004]: slap_queue_csn: queing 0x7fd30c0c20f0 20120504133157.956217Z#000000#000#000000 May 4 15:31:57 rzhs720 slapd[27004]: bdb(ou=foo): Lock table is out of available locks May 4 15:31:57 rzhs720 slapd[27004]: => bdb_idl_insert_key: c_put id failed: Cannot allocate memory (12) May 4 15:31:57 rzhs720 slapd[27004]: conn=1007 op=3: attribute "maildrop" index add failure Adding the object with less maildrop entries is not a problem. # db_stat -c -h /var/lib/ldap/main-data/ 1834 Last allocated locker ID 0x7fffffff Current maximum unused locker ID 9 Number of lock modes 1000 Maximum number of locks possible 1000 Maximum number of lockers possible 1000 Maximum number of lock objects possible 7 Number of current locks 1000 Maximum number of locks at any one time 131 Number of current lockers 196 Maximum number of lockers at any one time 8 Number of current lock objects 611 Maximum number of lock objects at any one time 447M Total number of locks requested (447627426) 447M Total number of locks released (447627285) 0 Total number of locks upgraded 550 Total number of locks downgraded 17M Lock requests not available due to conflicts, for which we waited (17614104) 0 Lock requests not available due to conflicts, for which we did not wait 0 Number of deadlocks 0 Lock timeout value 0 Number of locks that have timed out 0 Transaction timeout value 0 Number of transactions that have timed out 544KB The size of the lock region 70M The number of region locks that required waiting (9%) -rw------- 1 ldap ldap 14M May 4 16:16 mail.bdb -rw------- 1 ldap ldap 9.0M May 4 16:16 maildrop.bdb # db_stat -m 2GB Total cache size 1 Number of caches 2GB Pool individual cache size 0 Maximum memory-mapped file size 0 Maximum open file descriptors 0 Maximum sequential buffer writes 0 Sleep after writing maximum sequential buffers 0 Requested pages mapped into the process' address space 511M Requested pages found in the cache (99%) 40787 Requested pages not found in the cache 14 Pages created in the cache 40787 Pages read into the cache 20862 Pages written from the cache to the backing file 0 Clean pages forced from the cache 0 Dirty pages forced from the cache 0 Dirty pages written by trickle-sync thread 40801 Current total page count 40801 Current clean page count 0 Current dirty page count 262147 Number of hash buckets used for page location 510M Total number of times hash chains searched for a page (510897500) 2 The longest hash chain searched for a page 564M Total number of hash chain entries checked for page (564617346) 1375049 The number of hash bucket locks that required waiting (0%) 364335 The maximum number of times any hash bucket lock was waited for (0%) 7486 The number of region locks that required waiting (12%) 0 The number of buffers frozen 0 The number of buffers thawed 0 The number of frozen buffers freed 49931 The number of page allocations 0 The number of hash buckets examined during allocations 0 The maximum number of hash buckets examined for an allocation 0 The number of pages examined during allocations 0 The max number of pages examined for an allocation 18790 Threads waited on page I/O Pool File: ou.bdb 4096 Page size 0 Requested pages mapped into the process' address space 8568 Requested pages found in the cache (99%) 30 Requested pages not found in the cache 0 Pages created in the cache 30 Pages read into the cache 579 Pages written from the cache to the backing file Pool File: givenName.bdb 4096 Page size 0 Requested pages mapped into the process' address space 9744 Requested pages found in the cache (92%) 811 Requested pages not found in the cache 0 Pages created in the cache 811 Pages read into the cache 508 Pages written from the cache to the backing file Pool File: mail.bdb 4096 Page size 0 Requested pages mapped into the process' address space 82597 Requested pages found in the cache (96%) 2802 Requested pages not found in the cache 1 Pages created in the cache 2802 Pages read into the cache 3687 Pages written from the cache to the backing file Pool File: uidNumber.bdb 4096 Page size 0 Requested pages mapped into the process' address space 911 Requested pages found in the cache (93%) 63 Requested pages not found in the cache 0 Pages created in the cache 63 Pages read into the cache 134 Pages written from the cache to the backing file Pool File: relativeDomainName.bdb 4096 Page size 0 Requested pages mapped into the process' address space 31932 Requested pages found in the cache (98%) 605 Requested pages not found in the cache 0 Pages created in the cache 605 Pages read into the cache 1890 Pages written from the cache to the backing file Pool File: cn.bdb 4096 Page size 0 Requested pages mapped into the process' address space 51546 Requested pages found in the cache (95%) 2683 Requested pages not found in the cache 2 Pages created in the cache 2683 Pages read into the cache 3198 Pages written from the cache to the backing file Pool File: maildrop.bdb 4096 Page size 0 Requested pages mapped into the process' address space 3908380 Requested pages found in the cache (99%) 2291 Requested pages not found in the cache 0 Pages created in the cache 2291 Pages read into the cache 3938 Pages written from the cache to the backing file Pool File: gidNumber.bdb 4096 Page size 0 Requested pages mapped into the process' address space 1097 Requested pages found in the cache (92%) 89 Requested pages not found in the cache 0 Pages created in the cache 89 Pages read into the cache 172 Pages written from the cache to the backing file Pool File: version.bdb 4096 Page size 0 Requested pages mapped into the process' address space 1744 Requested pages found in the cache (97%) 41 Requested pages not found in the cache 0 Pages created in the cache 41 Pages read into the cache 76 Pages written from the cache to the backing file Pool File: zoneName.bdb 4096 Page size 0 Requested pages mapped into the process' address space 3370 Requested pages found in the cache (99%) 30 Requested pages not found in the cache 0 Pages created in the cache 30 Pages read into the cache 131 Pages written from the cache to the backing file Pool File: entryCSN.bdb 4096 Page size 0 Requested pages mapped into the process' address space 83520 Requested pages found in the cache (99%) 306 Requested pages not found in the cache 0 Pages created in the cache 306 Pages read into the cache 1015 Pages written from the cache to the backing file Pool File: sn.bdb 4096 Page size 0 Requested pages mapped into the process' address space 10019 Requested pages found in the cache (92%) 765 Requested pages not found in the cache 0 Pages created in the cache 765 Pages read into the cache 643 Pages written from the cache to the backing file Pool File: objectClass.bdb 4096 Page size 0 Requested pages mapped into the process' address space 115341 Requested pages found in the cache (99%) 321 Requested pages not found in the cache 0 Pages created in the cache 321 Pages read into the cache 826 Pages written from the cache to the backing file Pool File: uid.bdb 4096 Page size 0 Requested pages mapped into the process' address space 2273 Requested pages found in the cache (91%) 216 Requested pages not found in the cache 0 Pages created in the cache 216 Pages read into the cache 171 Pages written from the cache to the backing file Pool File: id2entry.bdb 16384 Page size 0 Requested pages mapped into the process' address space 499M Requested pages found in the cache (99%) 17796 Requested pages not found in the cache 11 Pages created in the cache 17796 Pages read into the cache 1463 Pages written from the cache to the backing file Pool File: entryUUID.bdb 4096 Page size 0 Requested pages mapped into the process' address space 2183 Requested pages found in the cache (87%) 317 Requested pages not found in the cache 0 Pages created in the cache 317 Pages read into the cache 415 Pages written from the cache to the backing file Pool File: dn2id.bdb 4096 Page size 0 Requested pages mapped into the process' address space 7462379 Requested pages found in the cache (99%) 11621 Requested pages not found in the cache 0 Pages created in the cache 11621 Pages read into the cache 2016 Pages written from the cache to the backing file # ps -eLf | grep slapd | wc -l 19 Can anyone tell me what happens here and what to do about it? Marc

2 5

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

openldap-technical