https://bugzilla.novell.com/show_bug.cgi?id=446233
User roland.kletzing@materna.de added comment
https://bugzilla.novell.com/show_bug.cgi?id=446233#c7
roland kletzing changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |roland.kletzing@materna.de
--- Comment #7 from roland kletzing 2008-11-22 10:16:41 MST ---
side-note:
there`s a drop-in replacement for nscd at http://busybox.net/~vda/unscd/
it`s trying to adress issues like these - maybe worth to take a look at.
description:
nscd problems are not exactly unheard of. Over the years, there were
quite a bit of bugs in it. This leads people to invent babysitters
which restart crashed/hung nscd. This is ugly.
After looking at nscd source in glibc I arrived to the conclusion
that its desidn is contributing to this significantly. Even if nscd's
code is 100.00% perfect and bug-free, it can still suffer from bugs
in libraries it calls.
As designed, it's a multithreaded program which calls NSS libraries.
These libraries are not part of libc, they may be provided
by third-party projects (samba, ldap, you name it).
Thus nscd cannot be sure that libraries it calls do not have memory
or file descriptor leaks and other bugs.
Since nscd is multithreaded program with single shared cache,
any resource leak in any NSS library has cumulative effect.
Even if an NSS library leaks a file descriptor 0.01% of the time,
this will make nscd crash or hang after some time.
Of course bugs in NSS .so modules should be fixed, but meanwhile
I do want nscd which does not crash or lock up.
So I went ahead and wrote a replacement.
It is a single-threaded server process which offloads all NSS
lookups to worker children (not threads, but fully independent
processes). Cache hits are handled by parent. Only cache misses
start worker children. This design is immune against
resource leaks and hangs in NSS libraries.
It is also many times smaller.
Currently (v0.34) it emulates glibc nscd pretty closely
(handles same command line flags and config file), and is moderately tested.
Please note that as of 2008-08 it is not in wide use (yet?).
If you have trouble compiling it, see an incompatibility with
"standard" one or experience hangs/crashes, please report it to
vda.linux@googlemail.com
--
Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.