[rhelv6-list] Intermittent Mozilla NSS/LDAP client failures in PHP

[John Haxby]

On 8 September 2011 13:13, Rich Graves <rgraves at carleton.edu> wrote:

> Server running Moodle 1.9 on fully patched RHEL 6.1.
>
> >From time to time, a specific Apache child process loses the ability to
> connect to any LDAP server over SSL. It is not clear how processes get into
> this state (lsof, and adding %P %k %T %X to LogFormat, show no obvious
> differences), but once they do, all attempts to reach ldaps:// URLs via
> either ldap_connect/ldap_bind or curl_init/curl_exec from that specific
> httpd child process fail.
>
>
I came across this once before where the LDAP server couldn't accept more
connections from a particular host because there weren't any available
ports.   Basically there were a lot (huge numbers) of sockets on the LDAP
server in a CLOSE_WAIT or FIN_WAIT (or similar) state.

It's worth checking I guess.

jch
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/rhelv6-list/attachments/20110908/966616a0/attachment.htm>