[Samba] winbindd: Exceeding 200 client connections, no idle connection found
azurepancake at gmail.com
Fri Feb 19 14:46:19 UTC 2016
Hello! This is my first email to the Samba mailing list :)
We have been having an issue on our servers where the winbind service
begins to utilize 100%~ CPU and logs the following error:
*winbindd: Exceeding 200 client connections, no idle connection found*
We have been running Samba *3.6.3-0.52.5*, however when originally
investigating the problem, it was found that *3.6.3-0.58.1* included a
patch for the following:
*Prune idle or hung connections older than "winbind request
*BSO #3204* covers what appears to be the exact problem we're having. The
Bugzilla report is here: https://bugzilla.samba.org/show_bug.cgi?id=3204.
So we've been deploying this patch slowly to all the servers that are
having this problem (around 1500 physical servers running the same image).
I've been keeping a close eye on my email, because the machines will send
an email every time this error occurs. We have deployed it to about 1/3 of
the machines, and today I just got a email from a system that already
installed that patch.
The patch is being deployed via a script that stops the Samba services
(smb, nmb, winbind), installs the RPMs and then starts the services.
*The winbindd service stopped: 2:00:04 AM*
*The patch installed: 2/18 02:00:08 AM*
*The winbindd service started: 2/18 02:00:49 AM*
The error was reported in the logs: 2/18 12:56 PM
Now it could be the service wasn't restarted fully, however it logged as if
*[2016/02/18 02:00:04.379281, 0]
* Got sig terminate (is_parent=1)*
*[2016/02/18 02:00:49.910364, 0]
* initialize_winbindd_cache: clearing cache and re-creating with version
Unfortunately I don't have the system in it's bad state right now (we have
a support team who connects and restarts the service when these emails roll
in, so that our customers do not experience problems).
The next time this happens, I will try to preserve it's state for a bit,
and get stuff like the winbind processes FDs. However, is there anything
else that I should be looking for that would assist with an issue like this?
More information about the samba