On 29 Apr 2016 9:10 pm, "Lukas Slebodnik" lslebodn@redhat.com wrote:
On (29/04/16 17:56), Patrick Coleman wrote:
Hi,
We've got a number of machines using sssd to connect to LDAP for auth. In the past we've had problems with sssd crashing regularly[1], but after posting here we built some custom packages to disable netlink notifications from the kernel, and it's generally improved.
We're still seeing auth failures across random machines - perhaps 1-2% when we run a process which connects to all hosts. The machines are generally heavily loaded when this happens, and sssd.log looks like:
Do you meand IO related load or CPU related load?
Lots of both, but we're typically IO bound more of the time.
If there is issue with CPU then you can mount sssd cache to tmpfs to avoid such issues. (there are plans to improve it in 1.14)
Cool, I'll give that a go.
Cheers Patrick
On 30 Apr 2016, at 10:28, Patrick Coleman patrick.coleman@meraki.com wrote:
On 29 Apr 2016 9:10 pm, "Lukas Slebodnik" lslebodn@redhat.com wrote:
On (29/04/16 17:56), Patrick Coleman wrote:
Hi,
We've got a number of machines using sssd to connect to LDAP for auth. In the past we've had problems with sssd crashing regularly[1], but after posting here we built some custom packages to disable netlink notifications from the kernel, and it's generally improved.
We're still seeing auth failures across random machines - perhaps 1-2% when we run a process which connects to all hosts. The machines are generally heavily loaded when this happens, and sssd.log looks like:
Do you meand IO related load or CPU related load?
Lots of both, but we're typically IO bound more of the time.
If there is issue with CPU then you can mount sssd cache to tmpfs to avoid such issues. (there are plans to improve it in 1.14)
Cool, I'll give that a go.
Alternatively, increase the 'timeout' option in sssd's sections..
Cheers Patrick _______________________________________________ sssd-users mailing list sssd-users@lists.fedorahosted.org https://lists.fedorahosted.org/admin/lists/sssd-users@lists.fedorahosted.org
sssd-users@lists.fedorahosted.org