Thanks, I can't view the bug either but I'll pass it on in my support case.
Erinn, in case it helps my support case # is 00646841.

Oh and sorry for the mail formatting, Outlook at work...


-----Original Message-----
[] On Behalf Of Rich Megginson
Sent: den 2 november 2012 17:44
To: Erinn Looney-Triggs
Cc: FreeIPAUsers
Subject: Re: [Freeipa-users] Process open FD table is full.

On 11/02/2012 10:41 AM, Erinn Looney-Triggs wrote:
> On 11/02/12 07:28, Rich Megginson wrote:
>> On 11/02/2012 09:06 AM, Simo Sorce wrote:
>>> On Fri, 2012-11-02 at 08:38 +0000, Johan Sunnerstig wrote:
>>>> Looks a lot like a problem I have as well.
>>>> Check out the /proc/xxx/fd directory of the dirsrv process for your 
>>>> IPA realm, in my case it's full of dead pointers to 
>>>> /var/tmp/ldap_xxx where xxx will be the same on one IPA server(I 
>>>> have two in a multi-master setup).
>>>> These don't clear out until I restart the dirsrv process, so 
>>>> eventually they'll fill up to the FD limit. For now I have a cron 
>>>> job performing a staggered IPA restart on the two servers and a 
>>>> case open with RH, but I haven't gotten any solution yet.
>>>> This is also RHEL 6.3 by the way, though the problem appeared in 
>>>> 6.2 for me.
>>> This looks a memory leak in libkrb5 or dirsrv leaving around so krb 
>>> context.
>>> Those files are replay caches.
>>> Rich, can you investigate the use of libkrb5 in dirsrv ?
>>> Simo.
> Oops missed this, though this is a private bug so I will have to take 
> y'alls word for it being the thing.
Sorry about that.  It appears to be a problem with either krb5 or selinux, and 
there is a proposed fix for RHEL 6.4
> I hate private bugs. I am going to open a RH support case, just in 
> case that helps in any way.
Yes, please.
> -Erinn

Freeipa-users mailing list

Freeipa-users mailing list

Reply via email to