In order to solve this problem I am looking at upgrading my version
of
fedora-ds which is :
fedora-ds-1.0.4-1.RHEL4
to the latest version which is 1.1.
Is there anything I need to look out for in this kind of upgrade ?
I don't think upgrading will solve your problem.
The large number of 2743 (T1) Idle Timeout Exceeded errors is really
strange. I think
logconv.pl -V /opt/fedora-ds/slapd-ldap1/logs/access
may provide more information about those connections. I'd like to see
what the etime is for those operations. If those errors really are
caused by some application just hanging attempting to read from the
directory server, you might be able to increase the ioblocktimeout
setting in the server, but that will work only if those operations are
hanging.
Thank you in advance.
On Wed, Feb 20, 2008 at 12:20 PM, Low Kian Seong <ipvx.low(a)gmail.com> wrote:
> this is what i got
>
>
> Access Log Analyzer 6.0
>
> Command : logconv.pl /opt/fedora-ds/slapd-ldap1/logs/access
>
> Processing 1 Access Log(s)...
>
> Filename Total Lines Lines processed
> ---------------------------------------------------------------
> /opt/fedora-ds/slapd-ldap1/logs/access 162024 162024
>
>
> ----------- Access Log Output ------------
>
> Restarts: 0
>
> Total Connections: 20511
> Peak Concurrent Connections: 278
> Total Operations: 57545
> Total Results: 57600
> Overall Performance: 100.0%
>
> Searches: 33737
> Modifications: 2
> Adds: 0
> Deletes: 0
> Mod RDNs: 0
>
> 6.x Stats
> Persistent Searches: 0
> Internal Operations: 0
> Entry Operations: 0
> Extended Operations: 0
> Abandoned Requests: 0
> Smart Referrals Received: 0
>
> VLV Operations: 3
> VLV Unindexed Searches: 1
> SORT Operations: 41
> SSL Connections: 0
>
> Entire Search Base Queries: 20
> Unindexed Searches: 43
>
> FDs Taken: 20511
> FDs Returned: 20277
> Highest FD Taken: 1404
>
> Broken Pipes: 0
> Connections Reset By Peer: 0
> Resource Unavailable: 2743
> - 2743 (T1) Idle Timeout Exceeded
>
> Binds: 23806
> Unbinds: 6044
>
> LDAP v2 Binds: 711
> LDAP v3 Binds: 23095
> SSL Client Binds: 0
> Failed SSL Client Binds: 0
> SASL Binds: 0
>
> Directory Manager Binds: 13372
> Anonymous Binds: 2670
> Other Binds: 7764
>
>
>
>
>
> On Feb 20, 2008 2:20 AM, Rich Megginson <rmeggins(a)redhat.com> wrote:
> > Low Kian Seong wrote:
> > > This is running on a rhel4 and during this time it doesn't respond to
> > > ldap queries.
> > >
> > run /opt/fedora-ds/bin/slapd/admin/bin/logconf.pl
> > /opt/fedora-ds/slapd-yourinstance/logs/access
> >
> > > On Feb 18, 2008 12:08 PM, Satish Chetty <satish(a)suburbia.org.au>
wrote:
> > >
> > >> Low,
> > >> What is the load on the system? Also, when you see this error,
does the
> > >> LDAP respond to any ldap queries (getent or ladpsearch)?
> > >>
> > >> -Satish.
> > >>
> > >>
> > >> Low Kian Seong wrote:
> > >>
> > >>> Dear all,
> > >>>
> > >>> I have installed fedora directory server version :
> > >>> fedora-ds-1.0.4-1.RHEL4. This ldap server integrates with postfix
and
> > >>> our radius server. My problem is when I check the access log I
see
> > >>> this error
> > >>>
> > >>> .[18/Feb/2008:11:04:51 +0800] conn=72887 op=-1 fd=593 closed error
11
> > >>> (Resource temporarily unavailable) - T1
> > >>> [18/Feb/2008:11:04:54 +0800] conn=72898 op=-1 fd=666 closed error
11
> > >>> (Resource temporarily unavailable) - T1
> > >>> [18/Feb/2008:11:05:22 +0800] conn=72895 op=-1 fd=605 closed error
11
> > >>> (Resource temporarily unavailable) - T1
> > >>>
> > >>> occuring again and again very frequently. I have already tuned
the
> > >>> server according to the tuning guide on fedora directory server
site.
> > >>> This is my sysctl.conf :
> > >>>
> > >>>
> > >>> # Kernel sysctl configuration file for Red Hat Linux
> > >>> #
> > >>> # For binary values, 0 is disabled, 1 is enabled. See sysctl(8)
and
> > >>> # sysctl.conf(5) for more details.
> > >>>
> > >>> # Controls IP packet forwarding
> > >>> net.ipv4.ip_forward = 0
> > >>>
> > >>> # Controls source route verification
> > >>> net.ipv4.conf.default.rp_filter = 1
> > >>>
> > >>> # Do not accept source routing
> > >>> net.ipv4.conf.default.accept_source_route = 0
> > >>>
> > >>> # Controls the System Request debugging functionality of the
kernel
> > >>> kernel.sysrq = 0
> > >>>
> > >>> # Controls whether core dumps will append the PID to the core
filename.
> > >>> # Useful for debugging multi-threaded applications.
> > >>> kernel.core_uses_pid = 1
> > >>> net.ipv4.ip_local_port_range = 1024 65000
> > >>> fs.file-max = 128000
> > >>> net.ipv4.tcp_keepalive_time = 300
> > >>>
> > >>> Am I missing something that I haven't done ?
> > >>>
> > >>> --
> > >>> Fedora-directory-users mailing list
> > >>> Fedora-directory-users(a)redhat.com
> > >>>
https://www.redhat.com/mailman/listinfo/fedora-directory-users
> > >>>
> > >>>
> > >> --
> > >> Fedora-directory-users mailing list
> > >> Fedora-directory-users(a)redhat.com
> > >>
https://www.redhat.com/mailman/listinfo/fedora-directory-users
> > >>
> > >>
> > >
> > > --
> > > Fedora-directory-users mailing list
> > > Fedora-directory-users(a)redhat.com
> > >
https://www.redhat.com/mailman/listinfo/fedora-directory-users
> > >
> >
> >
> > --
> > Fedora-directory-users mailing list
> > Fedora-directory-users(a)redhat.com
> >
https://www.redhat.com/mailman/listinfo/fedora-directory-users
> >
> >
>
>
--
Fedora-directory-users mailing list
Fedora-directory-users(a)redhat.com
https://www.redhat.com/mailman/listinfo/fedora-directory-users