I've verified that the same fault happens on 2.3.30-5 on a clean Etch install. With nfiles set to 8192 the following will occur quite easily in testing:

slapd[5574]: daemon: 4096 beyond descriptor table size 4096

When this happens the connection is still accepted so the client will wait until its timeout kicks in.

Because slapd is compiled with tcp wrappers this also causes these messages:
 slapd[2871]: warning: cannot open /etc/hosts.deny: Too many open files

(Does it still make sense for slapd to use tcp wrappers? It seems like that'd be accomplished with less overhead using iptables for sites which need it.)

Attachment: smime.p7s
Description: S/MIME cryptographic signature

Reply via email to