Hi Sarah, Not sure if the same cause, but I experienced something like this following too many open file descriptors/connections.
Cause for me was LDAP connections being opened but never closed by a client, essentially DDOSing me. On phone with thumbs, so I can't recall if it was lsof or netstat that showed the culprit for me, but something like lsof | grep 10.0.0.0 | wc -l (Where 10.0.0.0 was the eyeballed common host). Showed an ever increasing number of connections until LDAP/389 would bomb and need manually restarting. We identified the errant client service and stopped that replica from getting hosed! Hope this helps, David On Fri, 21 Feb 2020, 09:01 Sarah PETER via FreeIPA-users, < [email protected]> wrote: > Hello, > > > > on one of our FreeIPA servers we recently got the following error messages: > > > > [05/Feb/2020:22:51:44.078229410 +0100] - ERR - write_function - > PR_Write(392) Netscape Portable Runtime error -5999 (Invalid file > descriptor.) > > [21/Feb/2020:08:25:39.507298208 +0100] - ERR - write_function - > PR_Write(273) Netscape Portable Runtime error -5999 (Invalid file > descriptor.) > > > > On the second incident, one of the other replicas shortly lost connection > to the server with the above error: > > > > [21/Feb/2020:08:25:39.619051486 +0100] - ERR - NSMMReplicationPlugin - > bind_and_check_pwp - agmt="cn=meTolPA2" (IPA2:389) - Replication bind > with GSSAPI auth failed: LDAP error -1 (Can't contact LDAP server) () > > [21/Feb/2020:08:25:43.220221699 +0100] - INFO - NSMMReplicationPlugin - > bind_and_check_pwp - agmt="cn=meToIPA2" (IPA2:389): Replication bind with > GSSAPI auth resumed > > > > Does anyone know what these errors mean and if there's anything we should > do about them? I tried searching for them, but came up with nothing. So far > it seems it hasn't affected the operation of our FreeIPA infrastructure. > > > > Thanks in advance for your help. > > > > Best regards, > > Sarah > > > > ---- > > Sarah Peter > > LCSB Bioinformatics Core & UL HPC Team > > > > UNIVERSITÉ DU LUXEMBOURG > > > > LUXEMBOURG CENTRE FOR SYSTEMS BIOMEDICINE > > Campus Belval | Biotech II > > 6, avenue du Swing > > L-4371 Belvaux > > T +352 46 66 44 5360 > > [email protected] http://lcsb.uni.lu > > ----- > > This message is confidential and may contain privileged information. It is > intended for the named recipient only. If you receive it in error please > notify me and permanently delete the original message and any copies. > > ----- > > > _______________________________________________ > FreeIPA-users mailing list -- [email protected] > To unsubscribe send an email to [email protected] > Fedora Code of Conduct: > https://docs.fedoraproject.org/en-US/project/code-of-conduct/ > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > List Archives: > https://lists.fedorahosted.org/archives/list/[email protected] >
_______________________________________________ FreeIPA-users mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/[email protected]
