[Samba] Samba 2.2.5 + OpenLDAP 2.x - Caveats?

[Andrew Bartlett]

werner maes wrote:
> 
>  >Samba can hit your LDAP server *hard*. I would suggest keeping LDAP on
>  >localhost if at all possible - and use LDAP replication from there. So
>  >make the on-site machines BDCs, and have one PDC centrally. This type
>  >of solution has been implemented.
>  >Watch out your version of nss_ldap - some are buggy and cause a lot of
> '>connection reset by peer' stuff.
>  >Andrew Bartlett
> 
> Hello,
> 
> Could you tell me wich versions of nss_ldap are buggy are which are not?
> I sometime face these "connection by peer" messages and have no idea what
> causes them.
> 
> I use nss_ldap-189.

It appears that nss_ldap < 200 does not correctly reset the signal
handler.  This may or may not be related to your problems, becouse this
bug would imply termination *without* messages in the logs.  (and
therefore weird oplock troubles).

Either way, an upgrade may be warranted.

Andrew Bartlett

-- 
Andrew Bartlett                                 abartlet at pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet at samba.org
Student Network Administrator, Hawker College   abartlet at hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net