Re: [Fwd: constant lookups causing a lot of load]

[Jeremy Hansen <jeremy@methanesea.com>]

On Tue, 9 Sep 2003, Adam Williams wrote:

> > -------- Original Message --------
> > Subject: constant lookups causing a lot of load
> > Date: Mon, 8 Sep 2003 12:34:14 -0700 (PDT)
> > From: Jeremy Hansen <jeremy@methanesea.com>
> > To: openldap-software@OpenLDAP.org
> > I'm running a fairly busy webserver that's authenticating over ldap to
> > another server.  I'm getting constant lookups on the 'nobody' group that
> > the webserver is running as and I'm not sure why nscd isn't caching it or
> > why it's even happening.
> > Any suggestions?  It's causing a fair amount of load.
> 
> Have you tried bouncing NSCD?  Some versions were a bit buggy.
> 
> What does nscd --statistic look like?  Can you increase the cache size
> perhaps?

Increasing the cache doesn't seem to help.  Let me ask a question here.  I 
thought that depending on the ordering of what you have in your 
nsswitch.conf was supposed to determine at what level things get passed 
off to get a positive resolution.  So, if I have:

	group: files ldap

nss_ldap should check files, if it finds what it needs in files then it 
stop there and ldap doesn't get touched.  If files fails, then it moves on 
to ldap.  This doesn't seems to be the case.  Every person that touches 
the web server and every thread that gets spawned causes a lookup in the 
ldap database.  

Let me know what I'm missing.  I really need to get this fixed as it's 
just causing load for no reason at this point.

-jeremy