Rafael Barrera Oro <[EMAIL PROTECTED]> posted
[EMAIL PROTECTED], excerpted below, on  Fri, 28 Jul
2006 15:26:15 -0300:

> For now i have decided to try downgrade to the 239-r1 version and see what
> happens, but anyhow here is the output of "cat /var/log/messages |grep
> ldap":
> 
> if this does not work i will try Richard's approach
> 
> i cant make anything out of this file since most of it is i am not an ldap
> expert, but if anyone recognizes something suspicious, feel free to tell
> me :P

If you are running LDAP, the downgrade will almost certainly fix the
problem.  Read on for some detail and alternative workarounds.

There's an open bug and several known complications related
to LDAP, with the current setup.  I don't run it (thus didn't make the
connection until someone else mentioned LDAP or I would have posted), but
I've seen discussion of it a couple times on the dev list and the like.
The following is relayed from those discussions. Again, I don't run it so
may get terminology wrong, but the below is the gist. Search on bugzilla
if you need more details.

In addition to the downgrade, there's a couple other workarounds that work
for some people.  Possibly the easiest, if your setup allows it, is to
ensure that all users have an entry in your local passwd and group files,
and/or tweaking the lookup order to ensure that it's checked first, rather
than checking the remote LDAP files first.  The slowdown is apparently due
to a quirk in init order, whereby LDAP permissions are being checked
before LDAP is actually up and running, thereby resulting in everything
coming to a halt, until the LDAP query times out and the next one
starts... and times out... with several such timeouts occurring during a
typical boot sequence.  Thus, ensuring that the local files are checked
first and have the required information, so the request
to not-yet-functional LDAP is avoided, avoids the problem.

-- 
Duncan - List replies preferred.   No HTML msgs.
"Every nonfree program has a lord, a master --
and if you use the program, he is your master."  Richard Stallman

-- 
[email protected] mailing list

Reply via email to