AFP548 Changing the world one server at a time.

Directory Service’s LDAP habit

Home › Forums › OS X Server and Client Discussion › Open Directory › Directory Service’s LDAP habit

Viewing 1 post (of 1 total)
  • Author
    Posts
  • #361722
    glhs116
    Participant

    We have been tracking down a persistent failure of the Sun LDAP servers. They seem to be getting a query promptly on the minute every six minutes on the minute. The search is of the groups node. When all machines do this at once the LDAP server runs out of connections.

    I don’t have any cron jobs or anything doing anything on a six minute basis. It seems to be something internal to DirectoryService. Any ideas? My LDAP administrator is cursing because all of these queries happen at the same second.

    Here is the DirectoryAccess debug log for one of these. “.38” is a Mac Open Directory master. “.36” is our Sun LDAP server which holds all the school’s accounts. (not our real IP addresses)

    2005-05-19 15:11:00 AST - Client: lookupd, PID: 219, API: dsVerifyDirRefNum(), Server Used : DAC : Dir Ref 16777228
    2005-05-19 15:11:00 AST - Client: lookupd, PID: 219, API: dsVerifyDirRefNum(), Server Used : DAR : Dir Ref 16777228 : Result code = 0
    2005-05-19 15:11:00 AST - Client: lookupd, PID: 219, API: dsVerifyDirRefNum(), Server Used : DAC : Dir Ref 16777228
    2005-05-19 15:11:00 AST - Client: lookupd, PID: 219, API: dsVerifyDirRefNum(), Server Used : DAR : Dir Ref 16777228 : Result code = 0
    2005-05-19 15:11:00 AST - Client: lookupd, PID: 219, API: dsDoAttributeValueSearchWithData(), Search Used : DAC : 1 : Node Ref = 16777229 : Requested Attr Type = dsAttrTypeStandard:GroupMembership : Attr Match String = root : Attr Pattern Match = 8193 : Requested Rec Types = dsRecTypeStandard:Groups
    2005-05-19 15:11:00 AST - Client: lookupd, PID: 219, API: dsDoAttributeValueSearchWithData(), Search Used : DAC : 2 : Node Ref = 16777229 : Requested Attrs = dsAttrTypeStandard:RecordName;dsAttrTypeStandard:Password;dsAttrTypeStandard:PrimaryGroupID;dsAttrTypeStandard:GroupMembership : Attr Type Only Flag = 0 : Record Count Limit = 0 : Continue Data = 0
    2005-05-19 15:11:00 AST - Internal Dispatch, API: dsDoAttributeValueSearchWithData(), NetInfo Used : DAC : 1 : Node Ref = 16777254 : Requested Attr Type = dsAttrTypeStandard:GroupMembership : Attr Match String = root : Attr Pattern Match = 8193 : Requested Rec Types = dsRecTypeStandard:Groups
    2005-05-19 15:11:00 AST - Internal Dispatch, API: dsDoAttributeValueSearchWithData(), NetInfo Used : DAC : 2 : Node Ref = 16777254 : Requested Attrs = dsAttrTypeStandard:RecordName;dsAttrTypeStandard:Password;dsAttrTypeStandard:PrimaryGroupID;dsAttrTypeStandard:GroupMembership : Attr Type Only Flag = 0 : Record Count Limit = 0 : Continue Data = 0
    2005-05-19 15:11:00 AST - Internal Dispatch, API: dsDoAttributeValueSearchWithData(), NetInfo Used : DAR : Node Ref = 16777254 : Number of Found Records = 9 : Continue Data = 0 : Result code = 0
    2005-05-19 15:11:00 AST - Internal Dispatch, API: dsGetRecordList(), NetInfo Used : DAC : 1 : Node Ref = 16777254 : Requested Rec Names = dsRecordsAll : Rec Name Pattern Match = 8193 : Requested Rec Types = dsRecTypeStandard:GroupAliases
    2005-05-19 15:11:00 AST - Internal Dispatch, API: dsGetRecordList(), NetInfo Used : DAC : 2 : Node Ref = 16777254 : Requested Attrs = dsAttrTypeStandard:AppleAliasData : Attr Type Only Flag = 0 : Record Count Limit = 0 : Continue Data = 0
    2005-05-19 15:11:00 AST - Internal Dispatch, API: dsGetRecordList(), NetInfo Used : DAR : Node Ref = 16777254 : Number of Found Records = 0 : Continue Data = 0  : Result code = 0
    2005-05-19 15:11:00 AST - Client: lookupd, PID: 219, API: dsDoAttributeValueSearchWithData(), Search Used : DAR : Node Ref = 16777229 : Number of Found Records = 9 : Continue Data = 3314464 : Result code = 0
    2005-05-19 15:11:00 AST - Client: lookupd, PID: 219, API: dsDoAttributeValueSearchWithData(), Search Used : DAC : 1 : Node Ref = 16777229 : Requested Attr Type = dsAttrTypeStandard:GroupMembership : Attr Match String = root : Attr Pattern Match = 8193 : Requested Rec Types = dsRecTypeStandard:Groups
    2005-05-19 15:11:00 AST - Client: lookupd, PID: 219, API: dsDoAttributeValueSearchWithData(), Search Used : DAC : 2 : Node Ref = 16777229 : Requested Attrs = dsAttrTypeStandard:RecordName;dsAttrTypeStandard:Password;dsAttrTypeStandard:PrimaryGroupID;dsAttrTypeStandard:GroupMembership : Attr Type Only Flag = 0 : Record Count Limit = 9 : Continue Data = 3314464
    2005-05-19 15:11:00 AST - Internal Dispatch, API: dsDoAttributeValueSearchWithData(), LDAPv3 Used : DAC : 1 : Node Ref = 16777255 : Requested Attr Type = dsAttrTypeStandard:GroupMembership : Attr Match String = root : Attr Pattern Match = 8193 : Requested Rec Types = dsRecTypeStandard:Groups
    2005-05-19 15:11:00 AST - Internal Dispatch, API: dsDoAttributeValueSearchWithData(), LDAPv3 Used : DAC : 2 : Node Ref = 16777255 : Requested Attrs = dsAttrTypeStandard:RecordName;dsAttrTypeStandard:Password;dsAttrTypeStandard:PrimaryGroupID;dsAttrTypeStandard:GroupMembership : Attr Type Only Flag = 0 : Record Count Limit = 0 : Continue Data = 0
    2005-05-19 15:11:00 AST - CLDAPv3PlugIn::HandleRequest-ActiveConn-156
    2005-05-19 15:11:00 AST - CLDAPNode::EstablishConnection - Previous replica with IP Address = 167.192.254.38 responded for read
    2005-05-19 15:11:00 AST - CLDAPNode::EstablishConnection - Using replica with IP Address = 167.192.254.38 for read
    2005-05-19 15:11:00 AST - CLDAPNode::Skipping SASL methods for server.
    2005-05-19 15:11:00 AST - CLDAPNode::SASL Authentication didn't work, failing through to bind
    2005-05-19 15:11:00 AST - CLDAPv3PlugIn::HandleRequest-IdleConn-156
    2005-05-19 15:11:00 AST - Internal Dispatch, API: dsDoAttributeValueSearchWithData(), LDAPv3 Used : DAR : Node Ref = 16777255 : Number of Found Records = 1 : Continue Data = 0 : Result code = 0
    2005-05-19 15:11:00 AST - Internal Dispatch, API: dsGetRecordList(), LDAPv3 Used : DAC : 1 : Node Ref = 16777255 : Requested Rec Names = dsRecordsAll : Rec Name Pattern Match = 8193 : Requested Rec Types = dsRecTypeStandard:GroupAliases
    2005-05-19 15:11:00 AST - Internal Dispatch, API: dsGetRecordList(), LDAPv3 Used : DAC : 2 : Node Ref = 16777255 : Requested Attrs = dsAttrTypeStandard:AppleAliasData : Attr Type Only Flag = 0 : Record Count Limit = 0 : Continue Data = 0
    2005-05-19 15:11:00 AST - CLDAPv3PlugIn::HandleRequest-ActiveConn-133
    2005-05-19 15:11:00 AST - CLDAPv3PlugIn::HandleRequest-IdleConn-133
    2005-05-19 15:11:00 AST - Internal Dispatch, API: dsGetRecordList(), LDAPv3 Used : DAR : Node Ref = 16777255 : Number of Found Records = 0 : Continue Data = 0  : Result code = -14130
    2005-05-19 15:11:00 AST - Plug-in call "dsGetRecordList()" failed with error = -14130.
    2005-05-19 15:11:00 AST - Port: 0 Call: dsGetRecordList() == -14130
    2005-05-19 15:11:00 AST - Client: lookupd, PID: 219, API: dsDoAttributeValueSearchWithData(), Search Used : DAR : Node Ref = 16777229 : Number of Found Records = 1 : Continue Data = 3360736 : Result code = 0
    2005-05-19 15:11:00 AST - Client: lookupd, PID: 219, API: dsDoAttributeValueSearchWithData(), Search Used : DAC : 1 : Node Ref = 16777229 : Requested Attr Type = dsAttrTypeStandard:GroupMembership : Attr Match String = root : Attr Pattern Match = 8193 : Requested Rec Types = dsRecTypeStandard:Groups
    2005-05-19 15:11:00 AST - Client: lookupd, PID: 219, API: dsDoAttributeValueSearchWithData(), Search Used : DAC : 2 : Node Ref = 16777229 : Requested Attrs = dsAttrTypeStandard:RecordName;dsAttrTypeStandard:Password;dsAttrTypeStandard:PrimaryGroupID;dsAttrTypeStandard:GroupMembership : Attr Type Only Flag = 0 : Record Count Limit = 1 : Continue Data = 3360736
    2005-05-19 15:11:00 AST - Internal Dispatch, API: dsDoAttributeValueSearchWithData(), LDAPv3 Used : DAC : 1 : Node Ref = 16777256 : Requested Attr Type = dsAttrTypeStandard:GroupMembership : Attr Match String = root : Attr Pattern Match = 8193 : Requested Rec Types = dsRecTypeStandard:Groups
    2005-05-19 15:11:00 AST - Internal Dispatch, API: dsDoAttributeValueSearchWithData(), LDAPv3 Used : DAC : 2 : Node Ref = 16777256 : Requested Attrs = dsAttrTypeStandard:RecordName;dsAttrTypeStandard:Password;dsAttrTypeStandard:PrimaryGroupID;dsAttrTypeStandard:GroupMembership : Attr Type Only Flag = 0 : Record Count Limit = 0 : Continue Data = 0
    2005-05-19 15:11:00 AST - CLDAPv3PlugIn::HandleRequest-ActiveConn-156
    2005-05-19 15:11:00 AST - CLDAPNode::EstablishConnection - Previous replica with IP Address = 167.192.254.36 responded for read
    2005-05-19 15:11:00 AST - CLDAPNode::EstablishConnection - Using replica with IP Address = 167.192.254.36 for read
    2005-05-19 15:11:00 AST - CLDAPNode::Skipping SASL methods for server.
    2005-05-19 15:11:00 AST - CLDAPNode::SASL Authentication didn't work, failing through to bind
    2005-05-19 15:11:00 AST - CLDAPv3PlugIn::HandleRequest-IdleConn-156
    2005-05-19 15:11:00 AST - Internal Dispatch, API: dsDoAttributeValueSearchWithData(), LDAPv3 Used : DAR : Node Ref = 16777256 : Number of Found Records = 0 : Continue Data = 0 : Result code = 0
    2005-05-19 15:11:00 AST - Internal Dispatch, API: dsGetRecordList(), LDAPv3 Used : DAC : 1 : Node Ref = 16777256 : Requested Rec Names = dsRecordsAll : Rec Name Pattern Match = 8193 : Requested Rec Types = dsRecTypeStandard:GroupAliases
    2005-05-19 15:11:00 AST - Internal Dispatch, API: dsGetRecordList(), LDAPv3 Used : DAC : 2 : Node Ref = 16777256 : Requested Attrs = dsAttrTypeStandard:AppleAliasData : Attr Type Only Flag = 0 : Record Count Limit = 0 : Continue Data = 0
    2005-05-19 15:11:00 AST - CLDAPv3PlugIn::HandleRequest-ActiveConn-133
    2005-05-19 15:11:00 AST - CLDAPv3PlugIn::HandleRequest-IdleConn-133
    2005-05-19 15:11:00 AST - Internal Dispatch, API: dsGetRecordList(), LDAPv3 Used : DAR : Node Ref = 16777256 : Number of Found Records = 0 : Continue Data = 0  : Result code = -14130
    2005-05-19 15:11:00 AST - Plug-in call "dsGetRecordList()" failed with error = -14130.
    2005-05-19 15:11:00 AST - Port: 0 Call: dsGetRecordList() == -14130
    2005-05-19 15:11:00 AST - Client: lookupd, PID: 219, API: dsDoAttributeValueSearchWithData(), Search Used : DAR : Node Ref = 16777229 : Number of Found Records = 0 : Continue Data = 0 : Result code = 0
    2005-05-19 15:11:00 AST - Client: lookupd, PID: 219, API: dsVerifyDirRefNum(), Server Used : DAC : Dir Ref 16777228
    2005-05-19 15:11:00 AST - Client: lookupd, PID: 219, API: dsVerifyDirRefNum(), Server Used : DAR : Dir Ref 16777228 : Result code = 0
    2005-05-19 15:11:00 AST - Client: lookupd, PID: 219, API: dsVerifyDirRefNum(), Server Used : DAC : Dir Ref 16777228
    2005-05-19 15:11:00 AST - Client: lookupd, PID: 219, API: dsVerifyDirRefNum(), Server Used : DAR : Dir Ref 16777228 : Result code = 0
    2005-05-19 15:11:00 AST - Client: lookupd, PID: 219, API: dsGetRecordList(), Search Used : DAC : 1 : Node Ref = 16777229 : Requested Rec Names = root : Rec Name Pattern Match = 8193 : Requested Rec Types = dsRecTypeStandard:Users
    2005-05-19 15:11:00 AST - Client: lookupd, PID: 219, API: dsGetRecordList(), Search Used : DAC : 2 : Node Ref = 16777229 : Requested Attrs = dsAttrTypeStandard:RecordName;dsAttrTypeStandard:Password;dsAttrTypeStandard:PasswordPlus;dsAttrTypeStandard:RealName;dsAttrTypeStandard:NFSHomeDirectory;dsAttrTypeStandard:UserShell;dsAttrTypeStandard:UniqueID;dsAttrTypeStandard:PrimaryGroupID;dsAttrTypeStandard:Change;dsAttrTypeStandard:Expire : Attr Type Only Flag = 0 : Record Count Limit = 1 : Continue Data = 0
    2005-05-19 15:11:00 AST - Internal Dispatch, API: dsGetRecordList(), NetInfo Used : DAC : 1 : Node Ref = 16777254 : Requested Rec Names = root : Rec Name Pattern Match = 8193 : Requested Rec Types = dsRecTypeStandard:Users
    2005-05-19 15:11:00 AST - Internal Dispatch, API: dsGetRecordList(), NetInfo Used : DAC : 2 : Node Ref = 16777254 : Requested Attrs = dsAttrTypeStandard:RecordName;dsAttrTypeStandard:Password;dsAttrTypeStandard:PasswordPlus;dsAttrTypeStandard:RealName;dsAttrTypeStandard:NFSHomeDirectory;dsAttrTypeStandard:UserShell;dsAttrTypeStandard:UniqueID;dsAttrTypeStandard:PrimaryGroupID;dsAttrTypeStandard:Change;dsAttrTypeStandard:Expire : Attr Type Only Flag = 0 : Record Count Limit = 1 : Continue Data = 0
    2005-05-19 15:11:00 AST - Internal Dispatch, API: dsGetRecordList(), NetInfo Used : DAR : Node Ref = 16777254 : Number of Found Records = 1 : Continue Data = 0  : Result code = 0
    2005-05-19 15:11:00 AST - Client: lookupd, PID: 219, API: dsGetRecordList(), Search Used : DAR : Node Ref = 16777229 : Number of Found Records = 1 : Continue Data = 0  : Result code = 0
    
    

    Has anyone else seen this and if so what does it mean? More importantly, can I stop it?

    Sam Agnew
    IT
    Weill Cornell Medical College in Qatar

Viewing 1 post (of 1 total)
  • You must be logged in to reply to this topic.