X-Recipient: archive-cygwin AT delorie DOT com DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id :list-unsubscribe:list-subscribe:list-archive:list-post :list-help:sender:content-type:mime-version:subject:from :in-reply-to:date:content-transfer-encoding:message-id :references:to; q=dns; s=default; b=Z6Y5XU2dP5gXWn0Xjbn+gkwm7maZ DLG6bXWprqWNmzlbT19lmCWum79IJDY/L4Yo20h14m50feo/mTcoxwyGO/cm9hT5 dwcolFjWfoojKiw5SvHiPS9Zv7ar5+76AfhtSoSVc9Mu7e+JDhAEXzHVUFJb8tyx dF6HNX3foOl2x2c= DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id :list-unsubscribe:list-subscribe:list-archive:list-post :list-help:sender:content-type:mime-version:subject:from :in-reply-to:date:content-transfer-encoding:message-id :references:to; s=default; bh=kX/3xDnOIgo+6IARAZ3ACGR/Y5Y=; b=yl VBt8dxcGO0Yx+lhZRNr0hj527sSareRGoImkZMeg6QEkVQnB7shCun8u1Wiv1iwe kt+DTFiz33tbPs6n/aI2HoT/EpcN3iVy+wgi9UmlBhA4mXigPZ7cLkfOJqf7oyUn 56fMvLW4km1u82Lm5w63QFLIIo0o8dyc7lWWHfRXs= Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner AT cygwin DOT com Mail-Followup-To: cygwin AT cygwin DOT com Delivered-To: mailing list cygwin AT cygwin DOT com Authentication-Results: sourceware.org; auth=none X-Virus-Found: No X-Spam-SWARE-Status: No, score=-1.6 required=5.0 tests=AWL,BAYES_00,FREEMAIL_FROM,RCVD_IN_DNSWL_NONE autolearn=ham version=3.3.2 X-HELO: smtp4-g21.free.fr Content-Type: text/plain; charset=windows-1252 Mime-Version: 1.0 (Mac OS X Mail 7.3 \(1878.6\)) Subject: Re: timeout in LDAP access From: Denis Excoffier In-Reply-To: <20140625211355.GA25116@calimero.vinschen.de> Date: Thu, 3 Jul 2014 22:56:56 +0200 Message-Id: References: <20140617100011 DOT GL23700 AT calimero DOT vinschen DOT de> <20140618083304 DOT GV23700 AT calimero DOT vinschen DOT de> <20140618180102 DOT GA27055 AT calimero DOT vinschen DOT de> <20140623090959 DOT GA1803 AT calimero DOT vinschen DOT de> <20140624155851 DOT GJ1803 AT calimero DOT vinschen DOT de> <20140625101526 DOT GO1803 AT calimero DOT vinschen DOT de> <20140625211355 DOT GA25116 AT calimero DOT vinschen DOT de> To: cygwin AT cygwin DOT com Content-Transfer-Encoding: 8bit X-MIME-Autoconverted: from quoted-printable to 8bit by delorie.com id s63KvJK3014476 On 2014-06-25 23:13 Corinna Vinschen wrote: > > You asked for errors being propagated up the chain to the > getpwent/getgrent calls and that's exactly what happens now. There are > a lot of LDAP error codes. How is Cygwin supposed to handle every one > of them? Do we need a list of ignorable and non-ignorable error codes? I don’t know. IMHO: - a server which is down can be ignored (unless explicitly requested) - a timeout, when some output has already been received, must be reported - all servers should be treated independently since they are independent For the time being, i have added LDAP_SERVER_DOWN in map_ldaperr_to_errno at the same place as LDAP_SUCCESS. > >> Also, there was a large delay (more than 2 min, say at least 8 minutes) between >> the end of output and the end of getent. I got one single system_printf >> message (see above). > > I can't observe this. It needs debugging in your environment so I know > which part of the source is responsible for this delay under what > circumstances. I forgot to test it again. I’ll do it soon. > >> More than that, i added system_printf("starting open in domain %W", domain) >> immediately at the beginning of cyg_ldap::open, and run ‘getent passwd’ now during >> one minute (wait 60s, then Control-C). I got 1080 ‘starting open in domain (null)’ >> messages on stderr and 1016 normal passwd entries on stdout. The discrepancy >> 1016 vs 1080 is ok because stdout was not properly flushed out. > > 60 seconds for 1016 user entries? That sounds incredibly slow. I’m pretty sure that this is due to the non-buffering of stderr. In fact, system_printf() is incredibly slow ;-) >> - there are as many open() calls as passwd entries in the output? > > The open function is called for every account, but that doesn't mean it > really needs opening. That's what the early return is for. The code > starts like this: > > [...] > > Did you add the system_printf before the "/* Already open? */" comment, > by any chance? You’re right. It was before. Now i have it after and there is only one such message for the primary domain. However, for the non-primary domains the result is the same: i get as many cyg_ldap::open()s as accounts. Even more strange, for all these open’s (except the first one) the domain variable is printed as (null). Perhaps something uncontrolled within pg_ent::enumerate_ad()? Simple suggestion, i was not able to understand the logic there. > > Corinna Denis. -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple