#4011 sssd_be performs write I/O continuously
Closed: Invalid 4 years ago by wtnb75. Opened 4 years ago by wtnb75.

  • configure authentication using OpenLDAP(server) + SSSD(clients)
  • process sssd_be continues disk-write (about 80-100KB/s)
    • even there are no changes on server/client
    • from strace, written file is /var/lib/sss/db/cache_LDAP.ldb

I create repo to build simple test environment -> https://github.com/wtnb75/sssd-test

  • server
    • CentOS 7, openldap-servers-2.4.44-21.el7_6.x86_64
  • client
    • CentOS 7, sssd-1.16.2-13.el7_6.8.x86_64
    • Fedora 31, sssd-2.1.0-2.fc31.x86_64

HI,

in sssd.conf on the client you have

entry_cache_timeout = 1
ldap_sudo_full_refresh_interval = 1
ldap_sudo_smart_refresh_interval = 1

entry_cache_timeout = 1 will only add a short lifetime to cached object like user and group data, so typically this data will be read from the server for every new request.

But ldap_sudo_full_refresh_interval = 1 tells SSSD to re-read all sudo-rules once every second and write them to the cache. I guess this is responsible for the I/O you are seeing.

Is there a reason setting such low values to those options?

bye,
Sumit

@sbose thank you!
it was my misconfiguration.

Metadata Update from @wtnb75:
- Issue close_status updated to: Invalid
- Issue status updated to: Closed (was: Open)

4 years ago

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/4982

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.

Login to comment on this ticket.

Metadata