Quantcast
Channel: All Centrify Express posts
Viewing all articles
Browse latest Browse all 1833

adclient taking lots of CPU and debug log shows an NSSGetPasswdDataByName for all operations

$
0
0

Hello, I'm having an issue where adclient was taking about 80% of one CPU on an Oracle Linux server. When I stop the centrifydc service, the adclient's usage, predictably, falls off until it goes away. Upon restart of the centrifydc service, the process is back at the top of the list.

 

I should also mention that this is an Oracle Linux server with an Oracle database engine installed. It is one of six such instances, and this server is the only one misbehaving.

 

To troubleshoot the behavior, I enabled the debug log on this server (call it node1) and it's failover companion (node2). Within the /var/log/centrifydc.log file of node1, I found that  the adclient was running against what seems to be all server and database operations:

 

Aug 11 18:38:20 node1 adclient[814]: DEBUG <fd:21 NSSGetPasswdDataByName > base.bind.cache ADCB::search base , filter (&(objectClass=User)(|(objectCategory=Person)(objectCategory=Computer))(displayName=df.sh)), attrs 1e (cacheOps=7, GC=1)
Aug 11 18:38:20 node1 adclient[814]: DEBUG <fd:21 NSSGetPasswdDataByName > base.adagent findByAttr: Not Found:df.sh category:user attr=displayName
Aug 11 18:38:20 node1 adclient[814]: DEBUG <fd:21 NSSGetPasswdDataByName > base.bind.cache ADCB::search base , filter (&(objectClass=User)(|(objectCategory=Person)(objectCategory=Computer))(displayName=FuelReport)), attrs 2 (cacheOps=7, GC=0)
Aug 11 18:38:20 node1 adclient[814]: DEBUG <fd:21 NSSGetPasswdDataByName > base.bind.cache ADCB::search base , filter (&(objectClass=User)(|(objectCategory=Person)(objectCategory=Computer))(displayName=FuelReport)), attrs 1e (cacheOps=7, GC=1)
Aug 11 18:38:20 node1 adclient[814]: DEBUG <fd:21 NSSGetPasswdDataByName > base.adagent findByAttr: Not Found:FuelReport category:user attr=displayName
Aug 11 18:38:20 node1 adclient[814]: DEBUG <fd:21 NSSGetPasswdDataByName > base.bind.cache ADCB::search base , filter (&(objectClass=User)(|(objectCategory=Person)(objectCategory=Computer))(displayName=ExcelAll.sql)), attrs 2 (cacheOps=7, GC=0)
Aug 11 18:38:20 node1 adclient[814]: DEBUG <fd:21 NSSGetPasswdDataByName > base.bind.cache ADCB::search base , filter (&(objectClass=User)(|(objectCategory=Person)(objectCategory=Computer))(displayName=ExcelAll.sql)), attrs 1e (cacheOps=7, GC=1)

These entries aren't on node2.The debug log file was growing so quickly that it was 30 GB after about 10 minutes. 

 

To troubleshoot, I uninstalled and reinstalled the centrifydc software with no effect.

 

I found KB-3517, and the symptoms are similar, but it's for a different version and the fixes given to alliviate the issue don't apply.

 

Any help is appreciated.

 

OS: Oracle Linux 5.11

Centrify DirectControl Version: 5.2.1.-301


Viewing all articles
Browse latest Browse all 1833

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>