Strange error, only w/ gssapi

[sjh@zorak.net]

Hello,

I have a server (with a pretty large DB), that has worked fine for
a long time.  Just the other day it started giving errors like:

sjh@lokar% ldapsearch -h ldap cn=guest 
SASL/GSSAPI authentication started
SASL username: sjh@UNIX.CORP
SASL SSF: 56
SASL installing layers
# extended LDIF
#
# LDAPv3
# base <> with scope sub
# filter: cn=guest
# requesting: ALL
#
ldap_result: Can't contact LDAP server (81)


If I turn off gssapi (and use annon, or plain password) it works fine.
It's only 2 groups, the largest 2 in the dir) that do this.  Also,
searches with very big replies will do it also, so it seems to
be a result len problem.  Looking at strace:

[pid 31685] write(2, "ber_flush: 70529 bytes to sd 7\n", 31ber_flush: 70529 byte
s to sd 7
) = 31
[pid 31685] time(NULL)                  = 1075332631
[pid 31685] brk(0)                      = 0x8278000
[pid 31685] brk(0x8288000)              = 0x8288000
[pid 31685] brk(0)                      = 0x8288000
[pid 31685] brk(0x8298000)              = 0x8298000
[pid 31685] brk(0)                      = 0x8298000
[pid 31685] brk(0)                      = 0x8298000
[pid 31685] brk(0x8278000)              = 0x8278000
[pid 31685] brk(0)                      = 0x8278000
[pid 31685] brk(0)                      = 0x8278000
[pid 31685] brk(0x8288000)              = 0x8288000
[pid 31685] write(7, "\0\1\0\234`\203\1\0\227\6\t*\206H\206\367\22\1\2\2\2\1"...
, 65696) = 13032
[pid 31685] write(7, "2EgN\17gj*#\5\177\302\3309\tY\265\0\313\210\3334h\266\1"..
., 52664) = -1 EAGAIN (Resource temporarily unavailable)
[pid 31685] write(2, "ber_flush failed errno=11 reason"..., 68ber_flush failed e
rrno=11 reason="Resource temporarily unavailable"
) = 68


It writes out ~13k of ~65k, then tries to write the rest and gets 
EAGAIN for some reason.


This is on linux, with both 2.2.5 and 2.1.22

I can see how you might hit a bug with large return results, but I
can't imagine how GSSAPI would factor into this.  Any ideas?


-Seth