Hi Sarah,
Not sure if the same cause, but I experienced something like this following
too many open file descriptors/connections.
Cause for me was LDAP connections being opened but never closed by a
client, essentially DDOSing me.
On phone with thumbs, so I can't recall if it was lsof or netstat that
showed the culprit for me, but something like
lsof | grep 10.0.0.0 | wc -l
(Where 10.0.0.0 was the eyeballed common host). Showed an ever increasing
number of connections until LDAP/389 would bomb and need manually
restarting. We identified the errant client service and stopped that
replica from getting hosed!
Hope this helps,
David
On Fri, 21 Feb 2020, 09:01 Sarah PETER via FreeIPA-users, <
freeipa-users(a)lists.fedorahosted.org> wrote:
Hello,
on one of our FreeIPA servers we recently got the following error messages:
[05/Feb/2020:22:51:44.078229410 +0100] - ERR - write_function -
PR_Write(392) Netscape Portable Runtime error -5999 (Invalid file
descriptor.)
[21/Feb/2020:08:25:39.507298208 +0100] - ERR - write_function -
PR_Write(273) Netscape Portable Runtime error -5999 (Invalid file
descriptor.)
On the second incident, one of the other replicas shortly lost connection
to the server with the above error:
[21/Feb/2020:08:25:39.619051486 +0100] - ERR - NSMMReplicationPlugin -
bind_and_check_pwp - agmt="cn=meTolPA2" (IPA2:389) - Replication bind
with GSSAPI auth failed: LDAP error -1 (Can't contact LDAP server) ()
[21/Feb/2020:08:25:43.220221699 +0100] - INFO - NSMMReplicationPlugin -
bind_and_check_pwp - agmt="cn=meToIPA2" (IPA2:389): Replication bind with
GSSAPI auth resumed
Does anyone know what these errors mean and if there's anything we should
do about them? I tried searching for them, but came up with nothing. So far
it seems it hasn't affected the operation of our FreeIPA infrastructure.
Thanks in advance for your help.
Best regards,
Sarah
----
Sarah Peter
LCSB Bioinformatics Core & UL HPC Team
UNIVERSITÉ DU LUXEMBOURG
LUXEMBOURG CENTRE FOR SYSTEMS BIOMEDICINE
Campus Belval | Biotech II
6, avenue du Swing
L-4371 Belvaux
T +352 46 66 44 5360
sarah.peter(a)uni.lu
http://lcsb.uni.lu
-----
This message is confidential and may contain privileged information. It is
intended for the named recipient only. If you receive it in error please
notify me and permanently delete the original message and any copies.
-----
_______________________________________________
FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedoraho...