Hi folks -
I have an issue with oldap 2.36 in which every ten minutes, slapd starts consuming all available CPU resources briefly. When this happens ldap searches timeout.
I have bumped up the cache size to 1.5 GB dn2id.bdb and id2entry.bdb are approx. 60 mb combined.
I'm reading through this:
https://www.openldap.org/devel/admin/tuning.html
I get errors (mismatched version) when I run DB_STAT (database environment version mismatch) So, I don't have much more to report there.
I set logging back to the default to minimize logging.
There are three nodes in our cluster - one master.
Is there anything else I can look at to help troubleshoot? I am wondering what would cause slapd to peg the cpu at exactly 10 minute intervals.
Thanks for any help.
Norman Singley Directory Services 406 243 6799 Norman.singley@mso.umt.edu
--On Thursday, January 11, 2018 7:06 PM +0000 "Singley, Norman" Norman.Singley@mso.umt.edu wrote:
I have an issue with oldap 2.36 in which every ten minutes, slapd starts consuming all available CPU resources briefly. When this happens ldap searches timeout.
I'm going to assume you mean openldap 2.4.36? That release is over 4 years old, and there have been numerous fixes to OpenLDAP since that release.
I have bumped up the cache size to 1.5 GB dn2id.bdb and id2entry.bdb are approx. 60 mb combined.
I get errors (mismatched version) when I run DB_STAT (database environment version mismatch)
You probably need to use a version specific db_stat command, if you're using the OpenLDAP provided by your distribution (i.e., db_stat4.7 or similar, depending on what version of BDB OpenLDAP was linked to)
Is there anything else I can look at to help troubleshoot? I am wondering what would cause slapd to peg the cpu at exactly 10 minute intervals.
A cron job causing a large search or similar? There's little information to work on here.
Finally, I would note that back-bdb/hdb are deprecated and back-mdb is the preferred backend with current OpenLDAP releases. back-mdb has numerous advantages in relation to performance, etc, over back-bdb/hdb.
--Quanah
--
Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: http://www.symas.com
Hi Quanah.
Thanks for the response. Yes. Oldap 2.4.36. I am hoping to update oldap versions and database backend soon, but trying to get this figured out first.
We seem to have solved the issue by adding ram and processor capacity increased the cache setting and idlecache settings in slapd.conf.
Thank you.
Norman Singley Directory Services University of Montana.
-----Original Message----- From: Quanah Gibson-Mount [mailto:quanah@symas.com] Sent: Thursday, January 11, 2018 12:51 PM To: Singley, Norman; openldap-technical@openldap.org Subject: Re: Slapd pegs CPU every ten minutes
--On Thursday, January 11, 2018 7:06 PM +0000 "Singley, Norman" Norman.Singley@mso.umt.edu wrote:
I have an issue with oldap 2.36 in which every ten minutes, slapd starts consuming all available CPU resources briefly. When this happens ldap searches timeout.
I'm going to assume you mean openldap 2.4.36? That release is over 4 years old, and there have been numerous fixes to OpenLDAP since that release.
I have bumped up the cache size to 1.5 GB dn2id.bdb and id2entry.bdb are approx. 60 mb combined.
I get errors (mismatched version) when I run DB_STAT (database environment version mismatch)
You probably need to use a version specific db_stat command, if you're using the OpenLDAP provided by your distribution (i.e., db_stat4.7 or similar, depending on what version of BDB OpenLDAP was linked to)
Is there anything else I can look at to help troubleshoot? I am wondering what would cause slapd to peg the cpu at exactly 10 minute intervals.
A cron job causing a large search or similar? There's little information to work on here.
Finally, I would note that back-bdb/hdb are deprecated and back-mdb is the preferred backend with current OpenLDAP releases. back-mdb has numerous advantages in relation to performance, etc, over back-bdb/hdb.
--Quanah
--
Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: http://www.symas.com
openldap-technical@openldap.org
-
Quanah Gibson-Mount -
Singley, Norman