Hanspeter Kunz
2010-Aug-16 20:31 UTC
[Puppet Users] strange interaction between ldap and puppet
Hi all, today I restricted the maximal number of results of my openldap server to 50. As a result, on all of my client machines puppetd hanged (indefinitely, i.e. longer than 5mins). After restoring the number of results to 500 (the original setting), all worked well again. Other than that, I experienced no issues, e.g. nscd/ldap was working fine. Note also, that I do not storing node configuration data in ldap. My entire puppet configuration is in plain files. It would be great, if anybody could shed some light on this. cheers, Hp puppet version: 0.25.4-2~bpo50 (debian) openldap version: 2.4.11-1+lenny -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscribe@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
Rob McBroom
2010-Aug-17 18:34 UTC
Re: [Puppet Users] strange interaction between ldap and puppet
On Aug 16, 2010, at 4:31 PM, Hanspeter Kunz wrote:> today I restricted the maximal number of results of my openldap server > to 50. As a result, on all of my client machines puppetd hanged > (indefinitely, i.e. longer than 5mins). After restoring the number of > results to 500 (the original setting), all worked well again.So what are you using LDAP for? Users, groups and authentication? From what I''ve seen, those types of searches only expect one result, so a limit of 50 shouldn''t hold anything up. Are there any clues in the LDAP server''s logs? (Maybe where `nentries` is 50 or more during a Puppet run.) -- Rob McBroom <http://www.skurfer.com/> -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscribe@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.