Re: nslcd errors talking to IPVS cluster of LDAP servers

[Ken Gaillot <kjgaillo [at] gleim.com>]

Arthur de Jong wrote:
> Can you provide some more debugging info for when this happens? You can
> run nslcd with the -d option which causes debugging info to be sent to
> stderr.

Quite interesting: When I stop nscd and run "nslcd -d", I don't get 
errors; but when I turn nscd back on, I do. Here's an example:

nslcd: [e685fb] DEBUG: connection from pid=906 uid=0 gid=0
nslcd: [e685fb] DEBUG: nslcd_group_bymember(recarter)
nslcd: [e685fb] DEBUG: myldap_search(base="cn=Accounts,dc=gleim,dc=com", 
filter="(&(objectClass=posixAccount)(uid=recarter))")
nslcd: [e685fb] ldap_result() failed: Can't contact LDAP server
nslcd: [e685fb] ldap_abandon() failed to abandon search: Other (e.g., 
implementation specific) error
nslcd: [e685fb] DEBUG: myldap_get_entry(): retry search
nslcd: [e685fb] DEBUG: simple anonymous bind to ldap://ldap.teamgleim.com
nslcd: [e685fb] connected to LDAP server ldap://ldap.teamgleim.com
nslcd: [e685fb] DEBUG: 
myldap_search(base="ou=groups,dc=adonis,dc=shells,dc=gleim,dc=com", 
filter="(&(objectClass=posixGroup)(|(memberUid=recarter)(uniqueMember=uid=recarter,cn=Accounts,dc=gleim,dc=com)))")
nslcd: [e685fb] DEBUG: ldap_result(): end of results

So it appears the issue might actually be related to nscd, or an 
interaction of nscd and nslcd. I'll try running without nscd for a week 
or so and see whether we get any further problems.

-- Ken Gaillot <kjgaillo@gleim.com>
Network Operations Center, Gleim Publications
--
To unsubscribe send an email to
nss-pam-ldapd-users-unsubscribe@lists.arthurdejong.org or see
http://lists.arthurdejong.org/nss-pam-ldapd-users