On Tue, Dec 02, 2014 at 05:31:16PM +0100, Roy Sigurd Karlsbakk wrote:

On Thu, Nov 27, 2014 at 07:36:28PM +0100, Roy Sigurd Karlsbakk wrote:

...

Hi all.

I just upgraded some servers to RHEL7 and saw some really, really bad performance and found ssse_pac to be the badguy. After disabling PAC, the system worked well. Before that, server had a load at 200 with only 3-400 users. This is with sssd 1.11.2. After removing pac, it was down to a calm load of 1.2 or so, similar to that of Samba 3 with winbind. Any ideas what might have cause this?

Do you have any log files from the pac responder? Are you using the PAC responder with IPA or AD provider? Did you see multiple sssd_pac processes in the process list or just one?

Not sure which logs to look for. I only saw one sssd_pac process, and that had used a helluva lot of time.

The lgo file is /var/log/sssd/sssd_pac.log. By default it should be pretty empty, you can increade the debug level by setting e.g.

debug_level = 4

in the [pac] section of /etc/sssd/sssd.conf. If there is no [pac] section, just add it. The maximum debug level is 10 but 4 should be sufficient for a start.

bye, Sumit

roy _______________________________________________ sssd-users mailing list sssd-users@lists.fedorahosted.org https://lists.fedorahosted.org/mailman/listinfo/sssd-users