Puppet users - Aug 2010 - strange interaction between ldap and puppet

Hi all,

today I restricted the maximal number of results of my openldap server
to 50. As a result, on all of my client machines puppetd hanged
(indefinitely, i.e. longer than 5mins). After restoring the number of
results to 500 (the original setting), all worked well again.

Other than that, I experienced no issues, e.g. nscd/ldap was working
fine.

Note also, that I do not storing node configuration data in ldap. My
entire puppet configuration is in plain files.

It would be great, if anybody could shed some light on this. 

cheers,
Hp

puppet version: 0.25.4-2~bpo50 (debian)
openldap version: 2.4.11-1+lenny



-- 
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to
puppet-users+unsubscribe@googlegroups.com.
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en.

On Aug 16, 2010, at 4:31 PM, Hanspeter Kunz wrote:
> today I restricted the maximal number of results of my openldap server
> to 50. As a result, on all of my client machines puppetd hanged
> (indefinitely, i.e. longer than 5mins). After restoring the number of
> results to 500 (the original setting), all worked well again.
So what are you using LDAP for? Users, groups and authentication? From what
I''ve seen, those types of searches only expect one result, so a limit
of 50 shouldn''t hold anything up.

Are there any clues in the LDAP server''s logs? (Maybe where `nentries`
is 50 or more during a Puppet run.)

-- 
Rob McBroom
<http://www.skurfer.com/>


-- 
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to
puppet-users+unsubscribe@googlegroups.com.
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en.