authentication problem causes log to fill up disk.

[Mark London]

Hi - I'm using SSSD 1.8.93 on redhat, which has worked great for many 
many months.  Recently, the certificate for our ldap server expired, and 
then an incorrect one was installed.  This is has caused SSSD 
authentications to intermittently fail, and the SSSD log files start to 
fill up with constant messages, like the following:

(Mon Feb 18 14:00:15 2013) [sssd[nss]] [accept_fd_handler] (0x0020): 
Accept failed [Too many open files]

This caused the system disk to be totally filled up, breaking everything 
else running on the server.  Perhaps SSSD could try to automatically 
restart, when this error message is encountered?  Or perhaps someone can 
suggest a better solution to this problem.  Thanks. - Mark

[Jakub Hrozek]

On Tue, Feb 19, 2013 at 08:37:37AM -0500, Mark London wrote:
> Hi - I'm using SSSD 1.8.93 on redhat, which has worked great for

^^^^^^^^^^^
Are you sure about the version? This sounds like some 1.9 pre-release in
which case you should definitely upgrade.
> many many months.  Recently, the certificate for our ldap server
> expired, and then an incorrect one was installed.  This is has
> caused SSSD authentications to intermittently fail, and the SSSD log
> files start to fill up with constant messages, like the following:
>
> (Mon Feb 18 14:00:15 2013) [sssd[nss]] [accept_fd_handler] (0x0020):
> Accept failed [Too many open files]

I think you are hitting https://fedorahosted.org/sssd/ticket/1655.
Anyhow, the 1.9 series contains quite a couple of fixes related to f
leaks. I recommend upgrading.
> This caused the system disk to be totally filled up, breaking
> everything else running on the server.  Perhaps SSSD could try to
> automatically restart, when this error message is encountered?  Or
> perhaps someone can suggest a better solution to this problem.
> Thanks. - Mark
>
> sssd-devel mailing list
> [e-mail]
> https://lists.fedorahosted.org/mailman/listinfo/sssd-devel