[389-users] Connections not closing

[Jim Tyrrell]

Hi,

I have an issue with our Fedora Consumers running 1.2.0 on Fedora 10 in 
that they don't seem to be closing old connections and so the open 
connections are building up until performance is impacted and eventually 
we run out of file handles. 

Looking at one consumer netstat is showing 711 Established connections 
to port 389 from a Radius server, and the console is also reporting over 
700 "Open Connections".  Yet on the Radius server I see 3 Established 
connections which is what I would expect.  It seems each time the Radius 
server restarts (which it does often to pickup config changes) then the 
old connections timeout on the Radius server but remain Established on 
the Fedora side.  We do see the same behaviour from other services such 
as mail and web servers but Radius is the worst due to it restarting 
regularly.

On the console I have currently configured an Idle Timeout of 300 
seconds and added timeout config to the Fedora OS:

tcp_keepalive_time = 600
tcp_keepalive_intvl = 75
tcp_keepalive_probes = 9

Why are these connections not timing out after the Idle time?   At the 
moment I am having to regularly restart the directory service in order 
to clear the connections down.

Thanks.

Jim.