Rafael Barrera Oro <rafael akyasociados.com.ar>
posted
44CA56C7.1040804 akyasociados.com.ar, excerpted below, on
Fri, 28 Jul
2006 15:26:15 -0300:
> For now i have decided to try downgrade to the 239-r1
version and see what
> happens, but anyhow here is the output of "cat
/var/log/messages |grep
> ldap":
>
> if this does not work i will try Richard's approach
>
> i cant make anything out of this file since most of it
is i am not an ldap
> expert, but if anyone recognizes something suspicious,
feel free to tell
> me :P
If you are running LDAP, the downgrade will almost certainly
fix the
problem. Read on for some detail and alternative
workarounds.
There's an open bug and several known complications related
to LDAP, with the current setup. I don't run it (thus
didn't make the
connection until someone else mentioned LDAP or I would have
posted), but
I've seen discussion of it a couple times on the dev list
and the like.
The following is relayed from those discussions. Again, I
don't run it so
may get terminology wrong, but the below is the gist. Search
on bugzilla
if you need more details.
In addition to the downgrade, there's a couple other
workarounds that work
for some people. Possibly the easiest, if your setup allows
it, is to
ensure that all users have an entry in your local passwd and
group files,
and/or tweaking the lookup order to ensure that it's
checked first, rather
than checking the remote LDAP files first. The slowdown is
apparently due
to a quirk in init order, whereby LDAP permissions are being
checked
before LDAP is actually up and running, thereby resulting in
everything
coming to a halt, until the LDAP query times out and the
next one
starts... and times out... with several such timeouts
occurring during a
typical boot sequence. Thus, ensuring that the local files
are checked
first and have the required information, so the request
to not-yet-functional LDAP is avoided, avoids the problem.
--
Duncan - List replies preferred. No HTML msgs.
"Every nonfree program has a lord, a master --
and if you use the program, he is your master."
Richard Stallman
--
gentoo-amd64 gentoo.org mailing list
|