Systems performing excessive LDAP queries

Solution Verified - Updated -

Issue

Our RHEL6 servers are configured to use LDAP authentication against our LDAP server.The problem we have is that every hour (exactly on the hour) the systems run a query to receive information on every LDAP user available which is causing excessive load on the LDAP server.
The LDAP server sees the following requests from the server

base=cn=Users,dc=example,dc=com scope=2 filter=(&(objectClass=posixAccount)(uidNumber=*)(HomeDirectory=*)(isdomainuser=yes))

whereas the standard user queries (during a login) would appear as follows

base=cn=Users,dc=example,dc=comscope=2 filter=(&(&(objectClass=posixAccount)(uidNumber=*)(HomeDirectory=*)(isdomainuser=yes))(uidNumber=12345))

We would like to identify what is causing this hourly update so that we may stop it and reduce the load on the LDAP server

Environment

  • Red Hat Enterprise Linux 6
  • Using nslcd as LDAP client
  • nss-pam-ldapd

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.

Current Customers and Partners

Log in for full access

Log In
Close

Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.