How to find out what is doing to many ldap queries

["Riha, Marek" <Marek.Riha [at] t-systems.com>]

Hello,

 

I have installed sles 11.4 with nscd  on systems and there are running Oracle databases.

 

From ldap colleagues:

The systems  xxx and  yyy  caused high load permanent on the LDAP Server since the 16.11.2017, 1000 times more as before.

 

Before 16.11.2017 there was about  20.000 queries per day  from these systems now we have

about 24.000.000  per day (300 queries per second), see list below (columns results)

This caused high load on the LDAP Server permanent.

 

I set debug mode for nscd and I see a lot of these messages:

 

Thu Dec  7 18:52:28 2017 - 15605: Haven't found "orasma" in password cache!

Thu Dec  7 18:52:28 2017 - 15605: handle_request: request received (Version = 2) from PID 21717

Thu Dec  7 18:52:28 2017 - 15605:       GETPWBYNAME (smaadm)

Thu Dec  7 18:52:28 2017 - 15605: Haven't found "smaadm" in password cache!

Thu Dec  7 18:52:28 2017 - 15605: handle_request: request received (Version = 2) from PID 21717

Thu Dec  7 18:52:28 2017 - 15605:       GETPWBYNAME (orap65)

Thu Dec  7 18:52:28 2017 - 15605: Haven't found "orap65" in password cache!

Thu Dec  7 18:52:28 2017 - 15605: handle_request: request received (Version = 2) from PID 21717

Thu Dec  7 18:52:28 2017 - 15605:       GETPWBYNAME (p65adm)

Thu Dec  7 18:52:28 2017 - 15605: Haven't found "p65adm" in password cache!

Thu Dec  7 18:52:28 2017 - 15605: handle_request: request received (Version = 2) from PID 21717

Thu Dec  7 18:52:28 2017 - 15605:       GETPWBYNAME (dh2adm)

Thu Dec  7 18:52:28 2017 - 15605: Haven't found "dh2adm" in password cache!

Thu Dec  7 18:52:28 2017 - 15605: handle_request: request received (Version = 2) from PID 21717

Thu Dec  7 18:52:28 2017 - 15605:       GETPWBYNAME (oradh2)

Thu Dec  7 18:52:28 2017 - 15605: Haven't found "oradh2" in password cache!

 

These users are in ldap database, but not configured for mentioned system

 

Is there possibility How to find out what is doing to many  ldap queries ?

 

BR,

 

Marek

-- 
To unsubscribe send an email to
nss-pam-ldapd-users-unsubscribe@lists.arthurdejong.org or see
https://lists.arthurdejong.org/nss-pam-ldapd-users/