ehlo,
Details are in commit message. BTW it would be good to have at least two
reviews.
Reproducer which I used for
https://fedorahosted.org/sssd/ticket/2792:
Setup:
* two active directories with sites; so sometimes sssd connect to server A
and sometims to server B.
* block connection to one server
[root@host sssd]# iptables -n -L
Chain INPUT (policy ACCEPT)
target prot opt source destination
Chain FORWARD (policy ACCEPT)
target prot opt source destination
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
DROP tcp -- 0.0.0.0/0 10.12.0.158 tcp dpt:389
* force sssd to go offline (-USR1) and online (-USR2)
You might be able to reproduce ti even with plan LDAP.
It might help if set value of options that
dns_resolver_timeout < ldap_network_timeout
Do you have an idea how to test such fd leak?
(either using cmocka or integration tests)
LS