Hi Sarah,

Not sure if the same cause, but I experienced something like this following too many open file descriptors/connections. 

Cause for me was LDAP connections being opened but never closed by a client, essentially DDOSing me.

On phone with thumbs, so I can't recall if it was lsof or netstat that showed the culprit for me, but something like
lsof | grep 10.0.0.0 | wc -l 
 (Where 10.0.0.0 was the eyeballed common host). Showed an ever increasing number of connections until LDAP/389 would bomb and need manually restarting. We identified the errant client service and stopped that replica from getting hosed!

Hope this helps,

David


On Fri, 21 Feb 2020, 09:01 Sarah PETER via FreeIPA-users, <freeipa-users@lists.fedorahosted.org> wrote:

Hello,

 

on one of our FreeIPA servers we recently got the following error messages:

 

[05/Feb/2020:22:51:44.078229410 +0100] - ERR - write_function - PR_Write(392) Netscape Portable Runtime error -5999 (Invalid file descriptor.)

[21/Feb/2020:08:25:39.507298208 +0100] - ERR - write_function - PR_Write(273) Netscape Portable Runtime error -5999 (Invalid file descriptor.)

 

On the second incident, one of the other replicas shortly lost connection to the server with the above error:

 

[21/Feb/2020:08:25:39.619051486 +0100] - ERR - NSMMReplicationPlugin - bind_and_check_pwp - agmt="cn=meTolPA2" (IPA2:389) - Replication bind with GSSAPI auth failed: LDAP error -1 (Can't contact LDAP server) ()

[21/Feb/2020:08:25:43.220221699 +0100] - INFO - NSMMReplicationPlugin - bind_and_check_pwp - agmt="cn=meToIPA2" (IPA2:389): Replication bind with GSSAPI auth resumed

 

Does anyone know what these errors mean and if there's anything we should do about them? I tried searching for them, but came up with nothing. So far it seems it hasn't affected the operation of our FreeIPA infrastructure.

 

Thanks in advance for your help.

 

Best regards,

Sarah

 

----

Sarah Peter

LCSB Bioinformatics Core & UL HPC Team

 

UNIVERSITÉ DU LUXEMBOURG

 

LUXEMBOURG CENTRE FOR SYSTEMS BIOMEDICINE

Campus Belval | Biotech II

6, avenue du Swing

L-4371 Belvaux

T +352 46 66 44 5360

sarah.peter@uni.lu     http://lcsb.uni.lu

-----

This message is confidential and may contain privileged information. It is intended for the named recipient only. If you receive it in error please notify me and permanently delete the original message and any copies.

-----

 

_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-leave@lists.fedorahosted.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org