Systems performing excessive LDAP queries
Issue
Our RHEL6 servers are configured to use LDAP authentication against our LDAP server.The problem we have is that every hour (exactly on the hour) the systems run a query to receive information on every LDAP user available which is causing excessive load on the LDAP server.
The LDAP server sees the following requests from the server
base=cn=Users,dc=example,dc=com scope=2 filter=(&(objectClass=posixAccount)(uidNumber=*)(HomeDirectory=*)(isdomainuser=yes))
whereas the standard user queries (during a login) would appear as follows
base=cn=Users,dc=example,dc=comscope=2 filter=(&(&(objectClass=posixAccount)(uidNumber=*)(HomeDirectory=*)(isdomainuser=yes))(uidNumber=12345))
We would like to identify what is causing this hourly update so that we may stop it and reduce the load on the LDAP server
Environment
- Red Hat Enterprise Linux 6
- Using nslcd as LDAP client
- nss-pam-ldapd
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.
Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.
