I've had problems with nscd crashing every few days on my CentOS 4 mail server for a while now. The problems started maybe around CentOS 4.2, although I don't remember for sure. My debugging efforts let me to disable nscd's persistent cache, and that seemed to work for a while, but since upgrading to CentOS 4.4, the crashes have started again. When nscd crashes, the rest of the system becomes unreliable. Dovecot hangs when new users attempt to log in (fixed or worked around by switching Dovecot versions), and MIMEDefang (which we use for mail filtering) starts failing when it tries to process mail. A bit more information about our configuration: We use nss_ldap and pam_ldap against a failover pair of Fedora Directory Servers. nscd is also crashing on another of our servers (a fileserver) but with less regularlity; on our other servers, it works fine, even without disabling the persistent cache. Has anyone seen similar problems with nscd? Any tips for debugging it? I can use gdb, strace, etc. if I have to, but that can be time consuming, and it's hard to take the time to do that when people are yelling about the mail server being down. (Does CentOS provide debuginfo RPMs?) Thanks. Josh Kelley
On Saturday 07 October 2006 13:34, Josh Kelley wrote:> A bit more information about our configuration: We use nss_ldap and > pam_ldap against a failover pair of Fedora Directory Servers. nscd is > also crashing on another of our servers (a fileserver) but with less > regularlity; on our other servers, it works fine, even without > disabling the persistent cache. > > Has anyone seen similar problems with nscd?yes, me ^_^ i quit nscd services in ALL my servers at charge. I use LDAP too, for several services (samba, mail, dns, proxy, etc) and i prefer to install slave ldap servers in all my network instead of depend on nscd. nscd was always a pain to use, for example, some users change their password in samba, and some services continue to use the old password cached in nscd. i change some users from an ldap group to another, to give permissions to some things (samba shares, mail properties or proxy access rights) but the stupid nscd dont refresh the changes (i need to restart the nscd service) i prefer slave ldap servers, and use systems that are ldap aware. -- Black Hand Amiga Addicts
Josh Kelley wrote:> I've had problems with nscd crashing every few days on my CentOS 4 > mail server for a while now. The problems started maybe around CentOS > 4.2, although I don't remember for sure. My debugging efforts let me > to disable nscd's persistent cache, and that seemed to work for a > while, but since upgrading to CentOS 4.4, the crashes have started > again....> Has anyone seen similar problems with nscd?Yup, another me-too. Disabling nscd was the only reliable workaround/fix. :( -- rex