Re: Does anyone use nscd?

2011-10-13 Thread Andrey Zonov
Nope, because of http://www.freebsd.org/cgi/query-pr.cgi?pr=kern/130749 -- Andrey Zonov 04.10.2011 19:20, Dag-Erling Smørgrav пишет: Does anyone actually use nscd? ___ freebsd-hackers@freebsd.org mailing list

Re: Does anyone use nscd?

2011-10-11 Thread Michael Bushkov
On Tue, Oct 11, 2011 at 1:42 PM, per...@pluto.rain.com wrote: Doug Barton do...@freebsd.org wrote: On 10/10/2011 11:55, David Brodbeck wrote: Is there any reason to cache negative hits? It's very important for DNS since there are a fairly large number of misbehaving applications that

Re: Does anyone use nscd?

2011-10-11 Thread Stefan Esser
Am 11.10.2011 10:32, schrieb Michael Bushkov: On Tue, Oct 11, 2011 at 1:42 PM, per...@pluto.rain.com wrote: Doug Barton do...@freebsd.org wrote: On 10/10/2011 11:55, David Brodbeck wrote: Is there any reason to cache negative hits? It's very important for DNS since there are a fairly large

Re: Does anyone use nscd?

2011-10-10 Thread David Brodbeck
On Fri, Oct 7, 2011 at 3:30 AM, Michael Bushkov bush...@freebsd.org wrote: While I agree that nscd negative caching bug should be fixed, it won't help with the problem that users encounter during ports installation. When, for example, user x is added during port install, the following steps

Re: Does anyone use nscd?

2011-10-10 Thread Doug Barton
On 10/10/2011 11:55, David Brodbeck wrote: Is there any reason to cache negative hits? It's very important for DNS since there are a fairly large number of misbehaving applications that don't stop querying until they get some kind of answer. And speaking of DNS, while I think that improving

Re: Does anyone use nscd?

2011-10-10 Thread David Brodbeck
On Mon, Oct 10, 2011 at 1:09 PM, Doug Barton do...@freebsd.org wrote: On 10/10/2011 11:55, David Brodbeck wrote: Is there any reason to cache negative hits? It's very important for DNS since there are a fairly large number of misbehaving applications that don't stop querying until they get

Re: Does anyone use nscd?

2011-10-10 Thread perryh
Doug Barton do...@freebsd.org wrote: On 10/10/2011 11:55, David Brodbeck wrote: Is there any reason to cache negative hits? It's very important for DNS since there are a fairly large number of misbehaving applications that don't stop querying until they get some kind of answer. Would this

Re: Does anyone use nscd?

2011-10-08 Thread Jilles Tjoelker
On Wed, Oct 05, 2011 at 03:54:00PM -0700, Artem Belevich wrote: 2011/10/5 Dag-Erling Sm?rgrav d...@des.no: Michael Bushkov bush...@freebsd.org writes: 2. Consequences of the aforementioned problem can probably be corrected by using _setsockopt(..., SO_NOSIGPIPE) in

Re: Does anyone use nscd?

2011-10-07 Thread perryh
Ivan Voras ivo...@freebsd.org wrote: On 05/10/2011 09:38, Trond Endrest??l wrote: On Wed, 5 Oct 2011 12:54+1030, Daniel O'Connor wrote: In my experience ncsd seems to cache negative hits forever, regardless of the setting for negative-time-to-live. I'm glad to see I'm not the only one

Re: Does anyone use nscd?

2011-10-07 Thread Tom Evans
On Fri, Oct 7, 2011 at 3:05 PM, per...@pluto.rain.com wrote: Ivan Voras ivo...@freebsd.org wrote: On 05/10/2011 09:38, Trond Endrest??l wrote: On Wed, 5 Oct 2011 12:54+1030, Daniel O'Connor wrote: In my experience ncsd seems to cache negative hits forever, regardless of the setting for

Re: Does anyone use nscd?

2011-10-07 Thread Michael Bushkov
While I agree that nscd negative caching bug should be fixed, it won't help with the problem that users encounter during ports installation. When, for example, user x is added during port install, the following steps are involved: 1. Script checks if x is present in the users list. Nscd is

Re: Does anyone use nscd?

2011-10-07 Thread Ulrich Spörlein
On Thu, 2011-10-06 at 00:44:10 -0500, Dan Nelson wrote: In the last episode (Oct 04), Trond Endrestol said: On Tue, 4 Oct 2011 18:51+0200, Dag-Erling Smorgrav wrote: Trond Endrestol trond.endres...@fagskolen.gjovik.no writes: It's in daily use at Gjovik Technical College (Fagskolen i

Re: Does anyone use nscd?

2011-10-07 Thread Chris Rees
On 7 Oct 2011 08:13, per...@pluto.rain.com wrote: Ivan Voras ivo...@freebsd.org wrote: On 05/10/2011 09:38, Trond Endrest??l wrote: On Wed, 5 Oct 2011 12:54+1030, Daniel O'Connor wrote: In my experience ncsd seems to cache negative hits forever, regardless of the setting for

Re: Does anyone use nscd?

2011-10-06 Thread Dan Nelson
In the last episode (Oct 04), Trond Endrestol said: On Tue, 4 Oct 2011 18:51+0200, Dag-Erling Smorgrav wrote: Trond Endrestol trond.endres...@fagskolen.gjovik.no writes: It's in daily use at Gjovik Technical College (Fagskolen i Gjovik), here in Norway. Both the mail and web servers

Re: Does anyone use nscd?

2011-10-06 Thread Ivan Voras
On 05/10/2011 09:38, Trond Endrestøl wrote: On Wed, 5 Oct 2011 12:54+1030, Daniel O'Connor wrote: On 05/10/2011, at 2:30, Michel Talon wrote: Des wrote: Does anyone actually use nscd? I am using it since a lot of time. I have not experienced annoying bugs in all that time. The last time

Re: Does anyone use nscd?

2011-10-06 Thread Lawrence Stewart
On 10/05/11 19:43, Dag-Erling Smørgrav wrote: [snip] While we're at it, I'd be very grateful if someone could email me a quick and dirty guide to setting up an LDAP server for testing. I have too much on my plate right now to start reading documentation... A bit dated, but this build guide

Re: Does anyone use nscd?

2011-10-05 Thread Dag-Erling Smørgrav
Lawrence Stewart lstew...@freebsd.org writes: If the machine running nscd loses connectivity with the DNS server for a while and does a DNS lookup during that time, nscd will cache the -ve reply indefinitely for all users, which breaks all sorts of crap. Have to forcibly run nscd -I all to

Re: Does anyone use nscd?

2011-10-05 Thread Dag-Erling Smørgrav
Daniel O'Connor docon...@gsoft.com.au writes: I'd be interested in testing your workaround(s) :) It wasn't a workaround, actually, just a one-line change that enables additional logging (when running with from the console -nst) which might help me figure out why it crashes. See my reply to

Re: Does anyone use nscd?

2011-10-05 Thread Daniel O'Connor
On 05/10/2011, at 19:13, Dag-Erling Smørgrav wrote: Daniel O'Connor docon...@gsoft.com.au writes: I'd be interested in testing your workaround(s) :) It wasn't a workaround, actually, just a one-line change that enables additional logging (when running with from the console -nst) which might

Re: Does anyone use nscd?

2011-10-05 Thread Matthew Seaman
On 05/10/2011 09:43, Dag-Erling Smørgrav wrote: While we're at it, I'd be very grateful if someone could email me a quick and dirty guide to setting up an LDAP server for testing. I have too much on my plate right now to start reading documentation... The Quick Start guide on the OpenLDAP

Re: Does anyone use nscd?

2011-10-05 Thread Eugene Grosbein
04.10.2011 22:47, Sean M. Collins пишет: I've never heard of the utility until you mentioned it. I'd nuke it, since really there are more popular alternatives like Redis and Memcached in the ports tree that most people will reach for first. Please look at

Re: Does anyone use nscd?

2011-10-05 Thread Pegasus Mc Cleaft
On Wednesday 05 October 2011 10:46:47 Eugene Grosbein wrote: 04.10.2011 22:47, Sean M. Collins пишет: I've never heard of the utility until you mentioned it. I'd nuke it, since really there are more popular alternatives like Redis and Memcached in the ports tree that most people will

Re: Does anyone use nscd?

2011-10-05 Thread Artem Belevich
2011/10/4 Dag-Erling Smørgrav d...@des.no: Any chance of getting a backtrace from an unpatched nscd?  Ideally with the change described here: http://www.freebsd.org/cgi/query-pr.cgi?pr=bin/136073#reply1 To test, stop nscd, then run it from the command line like so: $ su - # cd /tmp #

Re: Does anyone use nscd?

2011-10-05 Thread Artem Belevich
2011/10/5 Michael Bushkov bush...@freebsd.org: There are probably 2 things here: 1. There's some error in nsswitch-nscd communication protocol that causes nsswitch to write into the closed socket. This is not trivial to investigate and will require analyzing nscd and client process logs side

Re: Does anyone use nscd?

2011-10-05 Thread Michael Bushkov
There are probably 2 things here: 1. There's some error in nsswitch-nscd communication protocol that causes nsswitch to write into the closed socket. This is not trivial to investigate and will require analyzing nscd and client process logs side by side (and possibly adding some more logging). 2.

Re: Does anyone use nscd?

2011-10-05 Thread Dag-Erling Smørgrav
Michael Bushkov bush...@freebsd.org writes: 2. Consequences of the aforementioned problem can probably be corrected by using _setsockopt(..., SO_NOSIGPIPE) in __open_cached_connection() in nscachedcli.c That sounds like a workaround rather than a fix... DES -- Dag-Erling Smørgrav -

Re: Does anyone use nscd?

2011-10-05 Thread Artem Belevich
2011/10/5 Dag-Erling Smørgrav d...@des.no: Michael Bushkov bush...@freebsd.org writes: 2. Consequences of the aforementioned problem can probably be corrected by using _setsockopt(..., SO_NOSIGPIPE) in __open_cached_connection() in nscachedcli.c That sounds like a workaround rather than a

Re: Does anyone use nscd?

2011-10-05 Thread Trond Endrestøl
On Tue, 4 Oct 2011 18:51+0200, Dag-Erling Smørgrav wrote: Trond Endrestøl trond.endres...@fagskolen.gjovik.no writes: It's in daily use at Gjøvik Technical College (Fagskolen i Gjøvik), here in Norway. Both the mail and web servers authenticates our users by LDAP, and nscd certainly

Re: Does anyone use nscd?

2011-10-05 Thread Trond Endrestøl
On Wed, 5 Oct 2011 12:54+1030, Daniel O'Connor wrote: On 05/10/2011, at 2:30, Michel Talon wrote: Des wrote: Does anyone actually use nscd? I am using it since a lot of time. I have not experienced annoying bugs in all that time. The last time i have been hit is when installing some

Re: Does anyone use nscd?

2011-10-05 Thread Trond Endrestøl
On Tue, 4 Oct 2011 17:20+0200, Dag-Erling Smørgrav wrote: Does anyone actually use nscd? It's in daily use at Gjøvik Technical College (Fagskolen i Gjøvik), here in Norway. Both the mail and web servers authenticates our users by LDAP, and nscd certainly speeds up the lookups. Trond. --

Does anyone use nscd?

2011-10-04 Thread Dag-Erling Smørgrav
Does anyone actually use nscd? I ask because when I cleaned up a slew of aliasing bugs a couple of years ago, I believe I may have introduced a bug; I got exactly two complaints, and neither of the complainants could be bothered to try the workaround I suggested and report back. Although the

Does anyone use nscd?

2011-10-04 Thread Michel Talon
Des wrote: Does anyone actually use nscd? I am using it since a lot of time. I have not experienced annoying bugs in all that time. The last time i have been hit is when installing some new softs which require adding some user and some group with pw. Of course this doesn't work well with caching

Re: Does anyone use nscd?

2011-10-04 Thread Dirk-Willem van Gulik
On 4 Oct 2011, at 17:00, Michel Talon wrote: Des wrote: Does anyone actually use nscd? I am using it since a lot of time. I have not experienced annoying bugs in all that time. The last time i have been hit is when installing some new softs which require adding some user and some group

Re: Does anyone use nscd?

2011-10-04 Thread Sean M. Collins
I've never heard of the utility until you mentioned it. I'd nuke it, since really there are more popular alternatives like Redis and Memcached in the ports tree that most people will reach for first. -- Sean M. Collins ___ freebsd-hackers@freebsd.org

Re: Does anyone use nscd?

2011-10-04 Thread Dag-Erling Smørgrav
Trond Endrestøl trond.endres...@fagskolen.gjovik.no writes: It's in daily use at Gjøvik Technical College (Fagskolen i Gjøvik), here in Norway. Both the mail and web servers authenticates our users by LDAP, and nscd certainly speeds up the lookups. OK. No trouble with clients dying of

Re: Does anyone use nscd?

2011-10-04 Thread Julian Elischer
On 10/4/11 9:51 AM, Dag-Erling Smørgrav wrote: Trond Endrestøltrond.endres...@fagskolen.gjovik.no writes: It's in daily use at Gjøvik Technical College (Fagskolen i Gjøvik), here in Norway. Both the mail and web servers authenticates our users by LDAP, and nscd certainly speeds up the lookups.

Re: Does anyone use nscd?

2011-10-04 Thread Artem Belevich
2011/10/4 Dag-Erling Smørgrav d...@des.no: Trond Endrestøl trond.endres...@fagskolen.gjovik.no writes: It's in daily use at Gjøvik Technical College (Fagskolen i Gjøvik), here in Norway. Both the mail and web servers authenticates our users by LDAP, and nscd certainly speeds up the lookups.

Re: Does anyone use nscd?

2011-10-04 Thread Jos Backus
On Tue, Oct 4, 2011 at 8:47 AM, Sean M. Collins s...@coreitpro.com wrote: I've never heard of the utility until you mentioned it. I'd nuke it, since really there are more popular alternatives like Redis and Memcached in the ports tree that most people will reach for first. Fwiw, nscd serves

Re: Does anyone use nscd?

2011-10-04 Thread Michael Bushkov
Hi, Disclaimer: I've written the nscd utility, so I can be a bit biased. On Tue, Oct 4, 2011 at 5:47 PM, Sean M. Collins s...@coreitpro.com wrote: I've never heard of the utility until you mentioned it. I'd nuke it, since really there are more popular alternatives like Redis and Memcached in

Re: Does anyone use nscd?

2011-10-04 Thread Dag-Erling Smørgrav
Artem Belevich a...@freebsd.org writes: And I do have a way to reproduce the SIGPIPE problem. Populate ~30K entries in NIS passwd database, enable nscd and then run top. In my case top used to die with SIGPIPE pretty reliably. I've fixed the issue locally by setting SO_NOSIGPIPE on the socket

Re: Does anyone use nscd?

2011-10-04 Thread Sean M. Collins
Oops - I latched on to the wrong parts of the manpage when I was reading and sent my first message. Thanks for pointing this out. However: How useful is the caching of users and groups? I still believe that for caching DNS, BIND or another DNS server running locally or on the same LAN is the

Re: Does anyone use nscd?

2011-10-04 Thread Michael Bushkov
Users/groups caching can be pretty much useful when you have large LDAP or NIS setup. -- Michael On Tue, Oct 4, 2011 at 7:56 PM, Sean M. Collins s...@coreitpro.com wrote: Oops - I latched on to the wrong parts of the manpage when I was reading and sent my first message. Thanks for pointing

Re: Does anyone use nscd?

2011-10-04 Thread Sean M. Collins
On 10/4/11 2:02 PM, Michael Bushkov wrote: Users/groups caching can be pretty much useful when you have large LDAP or NIS setup. Agreed, and forgive me for hammering you (I freely admit I don't have any significant contributions to FreeBSD) but it would be far more useful if it was cached

Re: Does anyone use nscd?

2011-10-04 Thread Samuel Martín Moro
Using it since a few, almost without any problem. Just one thing: while connected to some external intranet, nscd still try to contact my LDAP. So I made a few tests using sssd instead but I'm quite disapointed: even being in my office, I often get the 'authenticated using cached credentials'

Re: Does anyone use nscd?

2011-10-04 Thread Michael Bushkov
On Tue, Oct 4, 2011 at 8:14 PM, Sean M. Collins s...@coreitpro.com wrote: On 10/4/11 2:02 PM, Michael Bushkov wrote: Users/groups caching can be pretty much useful when you have large LDAP or NIS setup. Agreed, and forgive me for hammering you (I freely admit I don't have any significant

Re: Does anyone use nscd?

2011-10-04 Thread Dag-Erling Smørgrav
Samuel Martín Moro faus...@gmail.com writes: Using it since a few, almost without any problem. Just one thing: while connected to some external intranet, nscd still try to contact my LDAP. Well, by default, nscd caches hits for an hour and misses for a minute. One could imagine an option to

Re: Does anyone use nscd?

2011-10-04 Thread Uffe Jakobsen
On 2011-10-04 19:02, Julian Elischer wrote: On 10/4/11 9:51 AM, Dag-Erling Smørgrav wrote: Trond Endrestøltrond.endres...@fagskolen.gjovik.no writes: It's in daily use at Gjøvik Technical College (Fagskolen i Gjøvik), here in Norway. Both the mail and web servers authenticates our users by

Re: Does anyone use nscd?

2011-10-04 Thread David Brodbeck
On Tue, Oct 4, 2011 at 9:00 AM, Michel Talon ta...@lpthe.jussieu.fr wrote: Des wrote: Does anyone actually use nscd? I am using it since a lot of time. I have not experienced annoying bugs in all that time. The last time i have been hit is when installing some new softs which require

Re: Does anyone use nscd?

2011-10-04 Thread Daniel O'Connor
On 05/10/2011, at 2:30, Michel Talon wrote: Des wrote: Does anyone actually use nscd? I am using it since a lot of time. I have not experienced annoying bugs in all that time. The last time i have been hit is when installing some new softs which require adding some user and some group with

Re: Does anyone use nscd?

2011-10-04 Thread Daniel O'Connor
On 05/10/2011, at 1:50, Dag-Erling Smørgrav wrote: I ask because when I cleaned up a slew of aliasing bugs a couple of years ago, I believe I may have introduced a bug; I got exactly two complaints, and neither of the complainants could be bothered to try the workaround I suggested and report

Re: Does anyone use nscd?

2011-10-04 Thread Lawrence Stewart
On 10/05/11 02:20, Dag-Erling Smørgrav wrote: Does anyone actually use nscd? Yes, particularly for caching LDAP data. I ask because when I cleaned up a slew of aliasing bugs a couple of years ago, I believe I may have introduced a bug; I got exactly two complaints, and neither of the