Hi, Since our servers are on the LDAP (NIS before), we have many time response problem. We i launch the command ps -ef, it can be very very slow. If i restart the nscd daemon, this is better. How can i monitor the nscd daemon, or directly passwd cache with DTrace ? Thanks, Sylvain. -- This message posted from opensolaris.org
Hi Sylvain, V ?t, 27. 01. 2009 v 14:10, Sylvain D. p??e:> Hi, > > Since our servers are on the LDAP (NIS before), we have many time response problem. We i launch the command ps -ef, it can be very very slow. If i restart the nscd daemon, this is better.Interesting. Yes, LDAP as naming consumes more power than NIS, by design. But that''s for different discussion list. Before looking at nscd, look at LDAP server and snoop (how much time it takes to process one naming question from LDAP client to LDAP server).> How can i monitor the nscd daemon, or directly passwd cache with DTrace ? >You will need to look at nscd sources. Some inspiration you can take from http://opensolaris.org/os/project/sparks/dtrace/> Thanks, > Sylvain.Best regards, Milan
I found a major problem with my LDAP use : netgroup don''t use nscd cache ! So each time i make a request for an account, it doesn''t use cache but make a search in the directory ! -- This message posted from opensolaris.org
I have tried the nscd.d script, but it doesn''t work with Solaris 10, it seem to work only with opensolaris. Do you know how i can do ? When i execute it,i have : dtrace: failed to compile script ./nscd.d: line 77: probe description pid25726::switcher:entry does not match any probes where 25726 is the nscd pid. -- This message posted from opensolaris.org
Hi Sylvain, I Bcced dtrace-discuss and moved it to sparks-discuss@ Sylvain D. p??e v P? 30. 01. 2009 v 00:42 -0800:> I found a major problem with my LDAP use : netgroup don''t use nscd cache ! So each time i make a request for an account, it doesn''t use cache but make a search in the directory !Yes, netgroups are not cached (not in NIS nor in LDAP) and processing of netgroups is much harder in LDAP than in NIS. You are using passwd_compat mode, aren''t you? On Solaris 10 update 6 you can use pam_list for similar things. Usage of passwd_compat mode is not recommended. Best regards, Milan
Sylvain,> I have tried the nscd.d script, but it doesn''t work with Solaris 10, it seem to work only with opensolaris. Do you know how i can do ? > When i execute it,i have : > dtrace: failed to compile script ./nscd.d: line 77: probe description pid25726::switcher:entry does not match any probes > > where 25726 is the nscd pid.I cannot give you more hints for Solaris 10 on opensolaris.org. Please, contact support services. Best regards, Milan