I''m trying to import a existing schema into my fedora installation. The schema is defined in http://lab.ac.uab.edu/vnet/documents/ldif/commURI.ldif.txt So far I''ve copied that file to my installations config directory, renamed to 98commURI.ldif and restarted my instance of fedora ds. This generates an error message: dse - The entry cn=schema in file /opt/fedora-ds/slapd-mist/config/schema/98comURI.ldif is invalid, error code 21 (Invalid syntax) - attribute type commURI: Missing attribute syntax OID [07/Aug/2006:16:36:39 +0100] dse - Please edit the file to correct the reported problems and then restart the server. The directory server is a fresh installation of fedora-ds-1.0.2-1.RHEL.i386 Can anyone point me in the right direction? -- Giles Chamberlin
Morris, Patrick
2006-Aug-07 16:00 UTC
RE: [Fedora-directory-users] Importing an LDIF schema
It looks like...well, like you''re missing the syntax OID on the commURI attribute. Just a guess. :)> -----Original Message----- > From: fedora-directory-users-bounces@redhat.com > [mailto:fedora-directory-users-bounces@redhat.com] On Behalf > Of Giles Chamberlin > Sent: Monday, August 07, 2006 8:53 AM > To: fedora-directory-users@redhat.com > Subject: [Fedora-directory-users] Importing an LDIF schema > > I''m trying to import a existing schema into my fedora installation. > The schema is defined in > http://lab.ac.uab.edu/vnet/documents/ldif/commURI.ldif.txt > > So far I''ve copied that file to my installations config > directory, renamed to 98commURI.ldif and restarted my > instance of fedora ds. > > This generates an error message: > > dse - The entry cn=schema in file > /opt/fedora-ds/slapd-mist/config/schema/98comURI.ldif is > invalid, error code 21 (Invalid syntax) - attribute type > commURI: Missing attribute syntax OID > [07/Aug/2006:16:36:39 +0100] dse - Please edit the file to > correct the reported problems and then restart the server. > > > The directory server is a fresh installation of > fedora-ds-1.0.2-1.RHEL.i386 Can anyone point me in the right > direction? > > -- > Giles Chamberlin > > -- > Fedora-directory-users mailing list > Fedora-directory-users@redhat.com > https://www.redhat.com/mailman/listinfo/fedora-directory-users >
Hi everyone, I''m running fds on 2 servers, a supplier and consumer, both are running redhat ES 4; I noticed today and for the last few days that the supplier directory server is running very, very slow, top reveals that ns-slapd is killing the cpu; these are running on server class hardware, roughly 1.5 GHZ hp proliant servers; the consumer directory server cpu utilization is almost 0 (99 % idol); I don''t really know how to being to troubleshoot this problem; I''ve seen similar issues on oracle database servers when database indexes were corrupt and had to be rebuilt....Any ideas as to how to begin to troubleshoot this? Thanks very much. 1806 ldap 15 0 517m 33m 14m S 90.6 3.3 4:56.21 ns-slapd Confidentiality Notice: The information contained in this electronic message is intended for the exclusive use of the individual or entity named above and may contain privileged or confidential information. If the reader of this message is not the intended recipient or the employee or agent responsible to deliver it to the intended recipient, you are hereby notified that dissemination, distribution or copying of this information is prohibited. If you have received this communication in error, please notify the sender immediately by telephone and destroy the copies you received.
Mike Jackson
2006-Aug-07 18:53 UTC
Re: [Fedora-directory-users] High cpu utilizaton by slapd
Bliss, Aaron wrote:> Hi everyone, > I''m running fds on 2 servers, a supplier and consumer, both are running > redhat ES 4; I noticed today and for the last few days that the supplier > directory server is running very, very slow, top reveals that ns-slapd > is killing the cpu; these are running on server class hardware, roughly > 1.5 GHZ hp proliant servers; the consumer directory server cpu > utilization is almost 0 (99 % idol); I don''t really know how to being to > troubleshoot this problem; I''ve seen similar issues on oracle database > servers when database indexes were corrupt and had to be rebuilt....Any > ideas as to how to begin to troubleshoot this? Thanks very much. > > 1806 ldap 15 0 517m 33m 14m S 90.6 3.3 4:56.21 ns-slapdI have also seen ns-slapd utilize quite a lot of cpu in some cases. However, the question I always ask first is that "is it hurting something?". If the answer is "no", or "I don''t know", then I generally ignore it. So far, I haven''t had a positive answer to the questions. Is the client-facing performance of your servers suffering somehow which you can clearly document?> Confidentiality Notice: > The information contained in this electronic message is intended for the exclusive use of the individual or entity named above and may contain privileged or confidential information. If the reader of this message is not the intended recipient or the employee or agent responsible to deliver it to the intended recipient, you are hereby notified that dissemination, distribution or copying of this information is prohibited. If you have received this communication in error, please notify the sender immediately by telephone and destroy the copies you received.Sorry, you sent your confidential message to a public mailing list which is likely to be indexed by google. You have no guarantee of confidentiality. BR, Mike -- http://www.netauth.com - LDAP Directory Consulting
Richard Megginson
2006-Aug-07 19:05 UTC
Re: [Fedora-directory-users] High cpu utilizaton by slapd
Bliss, Aaron wrote:> Hi everyone, > I''m running fds on 2 servers, a supplier and consumer, both are running > redhat ES 4; I noticed today and for the last few days that the supplier > directory server is running very, very slow, top reveals that ns-slapd > is killing the cpu; these are running on server class hardware, roughly > 1.5 GHZ hp proliant servers; the consumer directory server cpu > utilization is almost 0 (99 % idol); I don''t really know how to being to > troubleshoot this problem; I''ve seen similar issues on oracle database > servers when database indexes were corrupt and had to be rebuilt....Any > ideas as to how to begin to troubleshoot this? Thanks very much. > > 1806 ldap 15 0 517m 33m 14m S 90.6 3.3 4:56.21 ns-slapd >Do you have a lot of delete operations? It could be that the tombstone reaping thread is working overtime. You can turn on replication logging and look for tombstone messages.> Confidentiality Notice: > The information contained in this electronic message is intended for the exclusive use of the individual or entity named above and may contain privileged or confidential information. If the reader of this message is not the intended recipient or the employee or agent responsible to deliver it to the intended recipient, you are hereby notified that dissemination, distribution or copying of this information is prohibited. If you have received this communication in error, please notify the sender immediately by telephone and destroy the copies you received. > > > -- > Fedora-directory-users mailing list > Fedora-directory-users@redhat.com > https://www.redhat.com/mailman/listinfo/fedora-directory-users >
Patrick Morris
2006-Aug-07 19:09 UTC
Re: [Fedora-directory-users] High cpu utilizaton by slapd
On Mon, 07 Aug 2006, Bliss, Aaron wrote:> Hi everyone, > I''m running fds on 2 servers, a supplier and consumer, both are running > redhat ES 4; I noticed today and for the last few days that the supplier > directory server is running very, very slow, top reveals that ns-slapd > is killing the cpu; these are running on server class hardware, roughly > 1.5 GHZ hp proliant servers; the consumer directory server cpu > utilization is almost 0 (99 % idol); I don''t really know how to being to > troubleshoot this problem; I''ve seen similar issues on oracle database > servers when database indexes were corrupt and had to be rebuilt....Any > ideas as to how to begin to troubleshoot this? Thanks very much. > > 1806 ldap 15 0 517m 33m 14m S 90.6 3.3 4:56.21 ns-slapdNot much to go on here, but I''d start with the basics I''d look at for any overloaded server. have you looked in the access logs to see if the increased load is coming from an external source? Anything in the error logs? Anything in the system logs? How''s memory looking on the box? Anything changed recently?
Bliss, Aaron
2006-Aug-07 19:12 UTC
RE: [Fedora-directory-users] High cpu utilizaton by slapd
Replication logging: Is this the "Enable Changelog" checkbox? It''s currently enabled; does this need to be enabled? Thanks again. Aaron -----Original Message----- From: fedora-directory-users-bounces@redhat.com [mailto:fedora-directory-users-bounces@redhat.com] On Behalf Of Richard Megginson Sent: Monday, August 07, 2006 3:06 PM To: General discussion list for the Fedora Directory server project. Subject: Re: [Fedora-directory-users] High cpu utilizaton by slapd Bliss, Aaron wrote:> Hi everyone, > I''m running fds on 2 servers, a supplier and consumer, both arerunning> redhat ES 4; I noticed today and for the last few days that thesupplier> directory server is running very, very slow, top reveals that ns-slapd > is killing the cpu; these are running on server class hardware,roughly> 1.5 GHZ hp proliant servers; the consumer directory server cpu > utilization is almost 0 (99 % idol); I don''t really know how to beingto> troubleshoot this problem; I''ve seen similar issues on oracle database > servers when database indexes were corrupt and had to berebuilt....Any> ideas as to how to begin to troubleshoot this? Thanks very much. > > 1806 ldap 15 0 517m 33m 14m S 90.6 3.3 4:56.21 ns-slapd >Do you have a lot of delete operations? It could be that the tombstone reaping thread is working overtime. You can turn on replication logging and look for tombstone messages.> Confidentiality Notice: > The information contained in this electronic message is intended forthe exclusive use of the individual or entity named above and may contain privileged or confidential information. If the reader of this message is not the intended recipient or the employee or agent responsible to deliver it to the intended recipient, you are hereby notified that dissemination, distribution or copying of this information is prohibited. If you have received this communication in error, please notify the sender immediately by telephone and destroy the copies you received.> > > -- > Fedora-directory-users mailing list > Fedora-directory-users@redhat.com > https://www.redhat.com/mailman/listinfo/fedora-directory-users >
Richard Megginson
2006-Aug-07 19:20 UTC
Re: [Fedora-directory-users] High cpu utilizaton by slapd
Bliss, Aaron wrote:> Replication logging: > Is this the "Enable Changelog" checkbox? It''s currently enabled; does > this need to be enabled? Thanks again. >No, not the changelog. http://directory.fedora.redhat.com/wiki/FAQ#Troubleshooting> Aaron > > -----Original Message----- > From: fedora-directory-users-bounces@redhat.com > [mailto:fedora-directory-users-bounces@redhat.com] On Behalf Of Richard > Megginson > Sent: Monday, August 07, 2006 3:06 PM > To: General discussion list for the Fedora Directory server project. > Subject: Re: [Fedora-directory-users] High cpu utilizaton by slapd > > Bliss, Aaron wrote: > >> Hi everyone, >> I''m running fds on 2 servers, a supplier and consumer, both are >> > running > >> redhat ES 4; I noticed today and for the last few days that the >> > supplier > >> directory server is running very, very slow, top reveals that ns-slapd >> is killing the cpu; these are running on server class hardware, >> > roughly > >> 1.5 GHZ hp proliant servers; the consumer directory server cpu >> utilization is almost 0 (99 % idol); I don''t really know how to being >> > to > >> troubleshoot this problem; I''ve seen similar issues on oracle database >> servers when database indexes were corrupt and had to be >> > rebuilt....Any > >> ideas as to how to begin to troubleshoot this? Thanks very much. >> >> 1806 ldap 15 0 517m 33m 14m S 90.6 3.3 4:56.21 ns-slapd >> >> > Do you have a lot of delete operations? It could be that the tombstone > reaping thread is working overtime. You can turn on replication logging > > and look for tombstone messages. > >> Confidentiality Notice: >> The information contained in this electronic message is intended for >> > the exclusive use of the individual or entity named above and may > contain privileged or confidential information. If the reader of this > message is not the intended recipient or the employee or agent > responsible to deliver it to the intended recipient, you are hereby > notified that dissemination, distribution or copying of this information > is prohibited. If you have received this communication in error, please > notify the sender immediately by telephone and destroy the copies you > received. > >> -- >> Fedora-directory-users mailing list >> Fedora-directory-users@redhat.com >> https://www.redhat.com/mailman/listinfo/fedora-directory-users >> >> > > > -- > Fedora-directory-users mailing list > Fedora-directory-users@redhat.com > https://www.redhat.com/mailman/listinfo/fedora-directory-users >
Graham Freeman
2006-Aug-07 19:51 UTC
Re: [Fedora-directory-users] High cpu utilizaton by slapd
Is this a publicly-queryable server? Any chance you''re getting nailed by directory harvester bots? What does that server''s bandwidth consumption look like? Graham Freeman Cernio Technology Cooperative http://cernio.com/cooperative/ (Sent from my handheld - pardon my brevity.) ...... Original Message ....... On Mon, 7 Aug 2006 14:51:23 -0400 "Bliss, Aaron" <ABliss@preferredcare.org> wrote:>Hi everyone, >I''m running fds on 2 servers, a supplier and consumer, both are running >redhat ES 4; I noticed today and for the last few days that the supplier >directory server is running very, very slow, top reveals that ns-slapd >is killing the cpu; these are running on server class hardware, roughly >1.5 GHZ hp proliant servers; the consumer directory server cpu >utilization is almost 0 (99 % idol); I don''t really know how to being to >troubleshoot this problem; I''ve seen similar issues on oracle database >servers when database indexes were corrupt and had to be rebuilt....Any >ideas as to how to begin to troubleshoot this? Thanks very much. > >1806 ldap 15 0 517m 33m 14m S 90.6 3.3 4:56.21 ns-slapd >
Bliss, Aaron
2006-Aug-07 19:53 UTC
RE: [Fedora-directory-users] High cpu utilizaton by slapd
No, this isn''t publicly query able. -----Original Message----- From: fedora-directory-users-bounces@redhat.com [mailto:fedora-directory-users-bounces@redhat.com] On Behalf Of Graham Freeman Sent: Monday, August 07, 2006 3:52 PM To: General discussion list for the Fedora Directory server project. Subject: Re: [Fedora-directory-users] High cpu utilizaton by slapd Is this a publicly-queryable server? Any chance you''re getting nailed by directory harvester bots? What does that server''s bandwidth consumption look like? Graham Freeman Cernio Technology Cooperative http://cernio.com/cooperative/ (Sent from my handheld - pardon my brevity.) ..... Original Message ....... On Mon, 7 Aug 2006 14:51:23 -0400 "Bliss, Aaron" <ABliss@preferredcare.org> wrote:>Hi everyone, >I''m running fds on 2 servers, a supplier and consumer, both are running >redhat ES 4; I noticed today and for the last few days that thesupplier>directory server is running very, very slow, top reveals that ns-slapd >is killing the cpu; these are running on server class hardware, roughly >1.5 GHZ hp proliant servers; the consumer directory server cpu >utilization is almost 0 (99 % idol); I don''t really know how to beingto>troubleshoot this problem; I''ve seen similar issues on oracle database >servers when database indexes were corrupt and had to be rebuilt....Any >ideas as to how to begin to troubleshoot this? Thanks very much. > >1806 ldap 15 0 517m 33m 14m S 90.6 3.3 4:56.21 ns-slapd >-- Fedora-directory-users mailing list Fedora-directory-users@redhat.com https://www.redhat.com/mailman/listinfo/fedora-directory-users Confidentiality Notice: The information contained in this electronic message is intended for the exclusive use of the individual or entity named above and may contain privileged or confidential information. If the reader of this message is not the intended recipient or the employee or agent responsible to deliver it to the intended recipient, you are hereby notified that dissemination, distribution or copying of this information is prohibited. If you have received this communication in error, please notify the sender immediately by telephone and destroy the copies you received.
Bliss, Aaron
2006-Aug-07 20:32 UTC
RE: [Fedora-directory-users] High cpu utilizaton by slapd
I''m attempting to turn the logging level back to zero, however I''m having much difficulty using both the bundled ldapmodify as well as the ldapmodify that is part of openldap; here is the syntax that I''m using: /ldapmodify -D "cn=diretory manager" -w mypassword -f /tmp/errors.ldif Here is the contents of /tmp/errors.ldif dn: cn=config changetype: modify replace: nsslapd-errorlog-level nsslapd-errorlog-level: 0 This results in ldap_simple_bind: No such object Please advise and thanks. Aaron -----Original Message----- From: fedora-directory-users-bounces@redhat.com [mailto:fedora-directory-users-bounces@redhat.com] On Behalf Of Richard Megginson Sent: Monday, August 07, 2006 3:20 PM To: General discussion list for the Fedora Directory server project. Subject: Re: [Fedora-directory-users] High cpu utilizaton by slapd Bliss, Aaron wrote:> Replication logging: > Is this the "Enable Changelog" checkbox? It''s currently enabled; does > this need to be enabled? Thanks again. >No, not the changelog. http://directory.fedora.redhat.com/wiki/FAQ#Troubleshooting> Aaron > > -----Original Message----- > From: fedora-directory-users-bounces@redhat.com > [mailto:fedora-directory-users-bounces@redhat.com] On Behalf OfRichard> Megginson > Sent: Monday, August 07, 2006 3:06 PM > To: General discussion list for the Fedora Directory server project. > Subject: Re: [Fedora-directory-users] High cpu utilizaton by slapd > > Bliss, Aaron wrote: > >> Hi everyone, >> I''m running fds on 2 servers, a supplier and consumer, both are >> > running > >> redhat ES 4; I noticed today and for the last few days that the >> > supplier > >> directory server is running very, very slow, top reveals thatns-slapd>> is killing the cpu; these are running on server class hardware, >> > roughly > >> 1.5 GHZ hp proliant servers; the consumer directory server cpu >> utilization is almost 0 (99 % idol); I don''t really know how to being >> > to > >> troubleshoot this problem; I''ve seen similar issues on oracledatabase>> servers when database indexes were corrupt and had to be >> > rebuilt....Any > >> ideas as to how to begin to troubleshoot this? Thanks very much. >> >> 1806 ldap 15 0 517m 33m 14m S 90.6 3.3 4:56.21 ns-slapd >> >> > Do you have a lot of delete operations? It could be that thetombstone> reaping thread is working overtime. You can turn on replicationlogging> > and look for tombstone messages. > >> Confidentiality Notice: >> The information contained in this electronic message is intended for >> > the exclusive use of the individual or entity named above and may > contain privileged or confidential information. If the reader of this > message is not the intended recipient or the employee or agent > responsible to deliver it to the intended recipient, you are hereby > notified that dissemination, distribution or copying of thisinformation> is prohibited. If you have received this communication in error,please> notify the sender immediately by telephone and destroy the copies you > received. > >> -- >> Fedora-directory-users mailing list >> Fedora-directory-users@redhat.com >> https://www.redhat.com/mailman/listinfo/fedora-directory-users >> >> > > > -- > Fedora-directory-users mailing list > Fedora-directory-users@redhat.com > https://www.redhat.com/mailman/listinfo/fedora-directory-users >
George Holbert
2006-Aug-07 20:33 UTC
Re: [Fedora-directory-users] High cpu utilizaton by slapd
Double-check your bind DN. Looks like you''re missing a ''c'': "cn=directory manager" instead of: "cn=diretory manager" Bliss, Aaron wrote:> I''m attempting to turn the logging level back to zero, however I''m > having much difficulty using both the bundled ldapmodify as well as the > ldapmodify that is part of openldap; here is the syntax that I''m using: > /ldapmodify -D "cn=diretory manager" -w mypassword -f /tmp/errors.ldif > > Here is the contents of /tmp/errors.ldif > > dn: cn=config > changetype: modify > replace: nsslapd-errorlog-level > nsslapd-errorlog-level: 0 > > This results in ldap_simple_bind: No such object > > Please advise and thanks. > > Aaron > > -----Original Message----- > From: fedora-directory-users-bounces@redhat.com > [mailto:fedora-directory-users-bounces@redhat.com] On Behalf Of Richard > Megginson > Sent: Monday, August 07, 2006 3:20 PM > To: General discussion list for the Fedora Directory server project. > Subject: Re: [Fedora-directory-users] High cpu utilizaton by slapd > > Bliss, Aaron wrote: > >> Replication logging: >> Is this the "Enable Changelog" checkbox? It''s currently enabled; does >> this need to be enabled? Thanks again. >> >> > No, not the changelog. > http://directory.fedora.redhat.com/wiki/FAQ#Troubleshooting > >> Aaron >> >> -----Original Message----- >> From: fedora-directory-users-bounces@redhat.com >> [mailto:fedora-directory-users-bounces@redhat.com] On Behalf Of >> > Richard > >> Megginson >> Sent: Monday, August 07, 2006 3:06 PM >> To: General discussion list for the Fedora Directory server project. >> Subject: Re: [Fedora-directory-users] High cpu utilizaton by slapd >> >> Bliss, Aaron wrote: >> >> >>> Hi everyone, >>> I''m running fds on 2 servers, a supplier and consumer, both are >>> >>> >> running >> >> >>> redhat ES 4; I noticed today and for the last few days that the >>> >>> >> supplier >> >> >>> directory server is running very, very slow, top reveals that >>> > ns-slapd > >>> is killing the cpu; these are running on server class hardware, >>> >>> >> roughly >> >> >>> 1.5 GHZ hp proliant servers; the consumer directory server cpu >>> utilization is almost 0 (99 % idol); I don''t really know how to being >>> >>> >> to >> >> >>> troubleshoot this problem; I''ve seen similar issues on oracle >>> > database > >>> servers when database indexes were corrupt and had to be >>> >>> >> rebuilt....Any >> >> >>> ideas as to how to begin to troubleshoot this? Thanks very much. >>> >>> 1806 ldap 15 0 517m 33m 14m S 90.6 3.3 4:56.21 ns-slapd >>> >>> >>> >> Do you have a lot of delete operations? It could be that the >> > tombstone > >> reaping thread is working overtime. You can turn on replication >> > logging > >> and look for tombstone messages. >> >> >>> Confidentiality Notice: >>> The information contained in this electronic message is intended for >>> >>> >> the exclusive use of the individual or entity named above and may >> contain privileged or confidential information. If the reader of this >> message is not the intended recipient or the employee or agent >> responsible to deliver it to the intended recipient, you are hereby >> notified that dissemination, distribution or copying of this >> > information > >> is prohibited. If you have received this communication in error, >> > please > >> notify the sender immediately by telephone and destroy the copies you >> received. >> >> >>> -- >>> Fedora-directory-users mailing list >>> Fedora-directory-users@redhat.com >>> https://www.redhat.com/mailman/listinfo/fedora-directory-users >>> >>> >>> >> -- >> Fedora-directory-users mailing list >> Fedora-directory-users@redhat.com >> https://www.redhat.com/mailman/listinfo/fedora-directory-users >> >> > > > -- > Fedora-directory-users mailing list > Fedora-directory-users@redhat.com > https://www.redhat.com/mailman/listinfo/fedora-directory-users > >
Bliss, Aaron
2006-Aug-07 20:37 UTC
RE: [Fedora-directory-users] High cpu utilizaton by slapd
Yep, still having that cpu issue though; it''s so weird that the supplier is running at such a high cpu rate and the consumer is 100% idol..... -----Original Message----- From: fedora-directory-users-bounces@redhat.com [mailto:fedora-directory-users-bounces@redhat.com] On Behalf Of George Holbert Sent: Monday, August 07, 2006 4:33 PM To: General discussion list for the Fedora Directory server project. Subject: Re: [Fedora-directory-users] High cpu utilizaton by slapd Double-check your bind DN. Looks like you''re missing a ''c'': "cn=directory manager" instead of: "cn=diretory manager" Bliss, Aaron wrote:> I''m attempting to turn the logging level back to zero, however I''m > having much difficulty using both the bundled ldapmodify as well asthe> ldapmodify that is part of openldap; here is the syntax that I''musing:> /ldapmodify -D "cn=diretory manager" -w mypassword -f /tmp/errors.ldif> > Here is the contents of /tmp/errors.ldif > > dn: cn=config > changetype: modify > replace: nsslapd-errorlog-level > nsslapd-errorlog-level: 0 > > This results in ldap_simple_bind: No such object > > Please advise and thanks. > > Aaron > > -----Original Message----- > From: fedora-directory-users-bounces@redhat.com > [mailto:fedora-directory-users-bounces@redhat.com] On Behalf OfRichard> Megginson > Sent: Monday, August 07, 2006 3:20 PM > To: General discussion list for the Fedora Directory server project. > Subject: Re: [Fedora-directory-users] High cpu utilizaton by slapd > > Bliss, Aaron wrote: > >> Replication logging: >> Is this the "Enable Changelog" checkbox? It''s currently enabled;does>> this need to be enabled? Thanks again. >> >> > No, not the changelog. > http://directory.fedora.redhat.com/wiki/FAQ#Troubleshooting > >> Aaron >> >> -----Original Message----- >> From: fedora-directory-users-bounces@redhat.com >> [mailto:fedora-directory-users-bounces@redhat.com] On Behalf Of >> > Richard > >> Megginson >> Sent: Monday, August 07, 2006 3:06 PM >> To: General discussion list for the Fedora Directory server project. >> Subject: Re: [Fedora-directory-users] High cpu utilizaton by slapd >> >> Bliss, Aaron wrote: >> >> >>> Hi everyone, >>> I''m running fds on 2 servers, a supplier and consumer, both are >>> >>> >> running >> >> >>> redhat ES 4; I noticed today and for the last few days that the >>> >>> >> supplier >> >> >>> directory server is running very, very slow, top reveals that >>> > ns-slapd > >>> is killing the cpu; these are running on server class hardware, >>> >>> >> roughly >> >> >>> 1.5 GHZ hp proliant servers; the consumer directory server cpu >>> utilization is almost 0 (99 % idol); I don''t really know how tobeing>>> >>> >> to >> >> >>> troubleshoot this problem; I''ve seen similar issues on oracle >>> > database > >>> servers when database indexes were corrupt and had to be >>> >>> >> rebuilt....Any >> >> >>> ideas as to how to begin to troubleshoot this? Thanks very much. >>> >>> 1806 ldap 15 0 517m 33m 14m S 90.6 3.3 4:56.21 ns-slapd >>> >>> >>> >> Do you have a lot of delete operations? It could be that the >> > tombstone > >> reaping thread is working overtime. You can turn on replication >> > logging > >> and look for tombstone messages. >> >> >>> Confidentiality Notice: >>> The information contained in this electronic message is intended for >>> >>> >> the exclusive use of the individual or entity named above and may >> contain privileged or confidential information. If the reader ofthis>> message is not the intended recipient or the employee or agent >> responsible to deliver it to the intended recipient, you are hereby >> notified that dissemination, distribution or copying of this >> > information > >> is prohibited. If you have received this communication in error, >> > please > >> notify the sender immediately by telephone and destroy the copies you >> received. >> >> >>> -- >>> Fedora-directory-users mailing list >>> Fedora-directory-users@redhat.com >>> https://www.redhat.com/mailman/listinfo/fedora-directory-users >>> >>> >>> >> -- >> Fedora-directory-users mailing list >> Fedora-directory-users@redhat.com >> https://www.redhat.com/mailman/listinfo/fedora-directory-users >> >> > > > -- > Fedora-directory-users mailing list > Fedora-directory-users@redhat.com > https://www.redhat.com/mailman/listinfo/fedora-directory-users > >-- Fedora-directory-users mailing list Fedora-directory-users@redhat.com https://www.redhat.com/mailman/listinfo/fedora-directory-users
Bliss, Aaron
2006-Aug-07 20:50 UTC
RE: [Fedora-directory-users] High cpu utilizaton by slapd
I think I figured out why, I''m not sure, but the servers are getting pounded with queries for a particular test user; do you guys have any idea what is the best way to handle this scenario? Perhaps it would be best just to delete the test user from the directory and create it locally? Aaron -----Original Message----- From: fedora-directory-users-bounces@redhat.com [mailto:fedora-directory-users-bounces@redhat.com] On Behalf Of Bliss, Aaron Sent: Monday, August 07, 2006 4:32 PM To: General discussion list for the Fedora Directory server project. Subject: RE: [Fedora-directory-users] High cpu utilizaton by slapd I''m attempting to turn the logging level back to zero, however I''m having much difficulty using both the bundled ldapmodify as well as the ldapmodify that is part of openldap; here is the syntax that I''m using: /ldapmodify -D "cn=diretory manager" -w mypassword -f /tmp/errors.ldif Here is the contents of /tmp/errors.ldif dn: cn=config changetype: modify replace: nsslapd-errorlog-level nsslapd-errorlog-level: 0 This results in ldap_simple_bind: No such object Please advise and thanks. Aaron -----Original Message----- From: fedora-directory-users-bounces@redhat.com [mailto:fedora-directory-users-bounces@redhat.com] On Behalf Of Richard Megginson Sent: Monday, August 07, 2006 3:20 PM To: General discussion list for the Fedora Directory server project. Subject: Re: [Fedora-directory-users] High cpu utilizaton by slapd Bliss, Aaron wrote:> Replication logging: > Is this the "Enable Changelog" checkbox? It''s currently enabled; does > this need to be enabled? Thanks again. >No, not the changelog. http://directory.fedora.redhat.com/wiki/FAQ#Troubleshooting> Aaron > > -----Original Message----- > From: fedora-directory-users-bounces@redhat.com > [mailto:fedora-directory-users-bounces@redhat.com] On Behalf OfRichard> Megginson > Sent: Monday, August 07, 2006 3:06 PM > To: General discussion list for the Fedora Directory server project. > Subject: Re: [Fedora-directory-users] High cpu utilizaton by slapd > > Bliss, Aaron wrote: > >> Hi everyone, >> I''m running fds on 2 servers, a supplier and consumer, both are >> > running > >> redhat ES 4; I noticed today and for the last few days that the >> > supplier > >> directory server is running very, very slow, top reveals thatns-slapd>> is killing the cpu; these are running on server class hardware, >> > roughly > >> 1.5 GHZ hp proliant servers; the consumer directory server cpu >> utilization is almost 0 (99 % idol); I don''t really know how to being >> > to > >> troubleshoot this problem; I''ve seen similar issues on oracledatabase>> servers when database indexes were corrupt and had to be >> > rebuilt....Any > >> ideas as to how to begin to troubleshoot this? Thanks very much. >> >> 1806 ldap 15 0 517m 33m 14m S 90.6 3.3 4:56.21 ns-slapd >> >> > Do you have a lot of delete operations? It could be that thetombstone> reaping thread is working overtime. You can turn on replicationlogging> > and look for tombstone messages. > >> Confidentiality Notice: >> The information contained in this electronic message is intended for >> > the exclusive use of the individual or entity named above and may > contain privileged or confidential information. If the reader of this > message is not the intended recipient or the employee or agent > responsible to deliver it to the intended recipient, you are hereby > notified that dissemination, distribution or copying of thisinformation> is prohibited. If you have received this communication in error,please> notify the sender immediately by telephone and destroy the copies you > received. > >> -- >> Fedora-directory-users mailing list >> Fedora-directory-users@redhat.com >> https://www.redhat.com/mailman/listinfo/fedora-directory-users >> >> > > > -- > Fedora-directory-users mailing list > Fedora-directory-users@redhat.com > https://www.redhat.com/mailman/listinfo/fedora-directory-users >-- Fedora-directory-users mailing list Fedora-directory-users@redhat.com https://www.redhat.com/mailman/listinfo/fedora-directory-users
Bliss, Aaron
2006-Aug-07 21:12 UTC
RE: [Fedora-directory-users] High cpu utilizaton by slapd
Found some bad code on a database server; it was querying the ldap servers to death !!! Thanks everyone for your help. Aaron -----Original Message----- From: Bliss, Aaron Sent: Monday, August 07, 2006 4:50 PM To: Bliss, Aaron; General discussion list for the Fedora Directory server project. Subject: RE: [Fedora-directory-users] High cpu utilizaton by slapd I think I figured out why, I''m not sure, but the servers are getting pounded with queries for a particular test user; do you guys have any idea what is the best way to handle this scenario? Perhaps it would be best just to delete the test user from the directory and create it locally? Aaron -----Original Message----- From: fedora-directory-users-bounces@redhat.com [mailto:fedora-directory-users-bounces@redhat.com] On Behalf Of Bliss, Aaron Sent: Monday, August 07, 2006 4:32 PM To: General discussion list for the Fedora Directory server project. Subject: RE: [Fedora-directory-users] High cpu utilizaton by slapd I''m attempting to turn the logging level back to zero, however I''m having much difficulty using both the bundled ldapmodify as well as the ldapmodify that is part of openldap; here is the syntax that I''m using: /ldapmodify -D "cn=diretory manager" -w mypassword -f /tmp/errors.ldif Here is the contents of /tmp/errors.ldif dn: cn=config changetype: modify replace: nsslapd-errorlog-level nsslapd-errorlog-level: 0 This results in ldap_simple_bind: No such object Please advise and thanks. Aaron -----Original Message----- From: fedora-directory-users-bounces@redhat.com [mailto:fedora-directory-users-bounces@redhat.com] On Behalf Of Richard Megginson Sent: Monday, August 07, 2006 3:20 PM To: General discussion list for the Fedora Directory server project. Subject: Re: [Fedora-directory-users] High cpu utilizaton by slapd Bliss, Aaron wrote:> Replication logging: > Is this the "Enable Changelog" checkbox? It''s currently enabled; does > this need to be enabled? Thanks again. >No, not the changelog. http://directory.fedora.redhat.com/wiki/FAQ#Troubleshooting> Aaron > > -----Original Message----- > From: fedora-directory-users-bounces@redhat.com > [mailto:fedora-directory-users-bounces@redhat.com] On Behalf OfRichard> Megginson > Sent: Monday, August 07, 2006 3:06 PM > To: General discussion list for the Fedora Directory server project. > Subject: Re: [Fedora-directory-users] High cpu utilizaton by slapd > > Bliss, Aaron wrote: > >> Hi everyone, >> I''m running fds on 2 servers, a supplier and consumer, both are >> > running > >> redhat ES 4; I noticed today and for the last few days that the >> > supplier > >> directory server is running very, very slow, top reveals thatns-slapd>> is killing the cpu; these are running on server class hardware, >> > roughly > >> 1.5 GHZ hp proliant servers; the consumer directory server cpu >> utilization is almost 0 (99 % idol); I don''t really know how to being >> > to > >> troubleshoot this problem; I''ve seen similar issues on oracledatabase>> servers when database indexes were corrupt and had to be >> > rebuilt....Any > >> ideas as to how to begin to troubleshoot this? Thanks very much. >> >> 1806 ldap 15 0 517m 33m 14m S 90.6 3.3 4:56.21 ns-slapd >> >> > Do you have a lot of delete operations? It could be that thetombstone> reaping thread is working overtime. You can turn on replicationlogging> > and look for tombstone messages. > >> Confidentiality Notice: >> The information contained in this electronic message is intended for >> > the exclusive use of the individual or entity named above and may > contain privileged or confidential information. If the reader of this > message is not the intended recipient or the employee or agent > responsible to deliver it to the intended recipient, you are hereby > notified that dissemination, distribution or copying of thisinformation> is prohibited. If you have received this communication in error,please> notify the sender immediately by telephone and destroy the copies you > received. > >> -- >> Fedora-directory-users mailing list >> Fedora-directory-users@redhat.com >> https://www.redhat.com/mailman/listinfo/fedora-directory-users >> >> > > > -- > Fedora-directory-users mailing list > Fedora-directory-users@redhat.com > https://www.redhat.com/mailman/listinfo/fedora-directory-users >-- Fedora-directory-users mailing list Fedora-directory-users@redhat.com https://www.redhat.com/mailman/listinfo/fedora-directory-users