I've attached the script I use on linux... We run this every 15-30 minutes
(could run less frequently w/o any negative effect) and it does a excellent
job keeping the pags under control. Might not be perfect, but it beats
rebooting machine all the time.
-- Nathan
> -----Original Message-----
> From: David Thompson [mailto:[EMAIL PROTECTED]]
> Sent: Monday, June 11, 2001 12:02 PM
> To: Neulinger, Nathan
> Cc: '[EMAIL PROTECTED]'
> Subject: Re: [OpenAFS-devel] token/pag cleanup on i386_linux*
>
>
>
> Yeah I'd be interested. We are pondering an
> afs-authenticated web server for
> some of our needs. The "1 pag per second" rule and the performance
> degredation under thousands of pags make recycling of pags
> necessary, but I
> didn't think you could scan the whole process table
> effeciently enough to be
> useful. I'm thinking of a list of "known pags" that could be
> allocated, used,
> and later reused when all the processes using them are known
> to be gone.
> Anyone gotten further into this?
>
> I would really like to see the GCPAGS code enabled if
> possible for other
> things, but it won't help us for this. We need the *web
> server* (not the afs
> client) to verify that no processes are using a given pag anymore.
>
> "Neulinger, Nathan" wrote:
> >On my heavy-authentication-activity clients, I have to run a
> token cleanup
> >script that gets rid of tokens for processes that have gone
> away/etc. It's
> >my understanding that the GCPAGS code does this
> automatically. What is
> >preventing this from being enabled on linux?
> >
> >(If anyone wants the script, I'll be happy to send it to
> you, it uses a
> >combination of processing kdump output and examining
> auxgroup membershup
> >from /proc.)
> >
> >If you don't run this, and you have a server that does a lot of token
> >activity, you get into a situation where the afs_users
> structure in the
> >kernel is HUGE and very very very slow, which impacts
> everything on the
> >machine. I'm running scripts to handle this on hpux (poorly)
> and linux.
> >
> >-- Nathan
> >
> >------------------------------------------------------------
> >Nathan Neulinger EMail: [EMAIL PROTECTED]
> >University of Missouri - Rolla Phone: (573) 341-4841
> >Computing Services Fax: (573) 341-4216
> >_______________________________________________
> >OpenAFS-devel mailing list
> >[EMAIL PROTECTED]
> >https://lists.openafs.org/mailman/listinfo/openafs-devel
>
>
clean-tokens-redhat.pl
