[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: broken pipe - serious problem with OpenLDAP 2.0.21

Michael Torrie wrote:
> We're trying to run OpenLDAP 2.0.21 in a production environment
> supporting unix logins and samba.  We have a serious problem thats
> started to happen more and more in the last few weeks (probably load
> related).
> About 3 times a day, the LDAP server just stops responding.  The log
> files of clients complain they can't contact the LDAP server.  The
> server is still running, it's just that no one can connect.  Many
> commands on the clients just return "broken pipe."  This is a serious
> problem and it's causing a lot of problems, especially with our mail
> server.  Users are getting bumped from mailing lists because these
> periodic outages cause sendmail to report "Unknown users."
> Has anyone experienced this?  Is it just that OpenLDAP doesn't scale?
> We only support about 4000 users on one server.  I'd turn on debugging
> but I don't know what level would be appropriate.  Too much debugging
> output slows OpenLDAP way down and the users notice very slow logins.

I suggest you use different replicas for different tasks, e.g. one
for mail routing and one for unix/samba auth, so you can use heavy log
on the auth replica only and try to find more useful hints on the


Dr. Pierangelo Masarati               | voice: +39 02 2399 8309
Dip. Ing. Aerospaziale                | fax:   +39 02 2399 8334
Politecnico di Milano                 |
via La Masa 34, 20156 Milano, Italy   |