On Tue, Dec 02, 2014 at 05:31:16PM +0100, Roy Sigurd Karlsbakk wrote:
On Thu, Nov 27, 2014 at 07:36:28PM +0100, Roy Sigurd Karlsbakk
> Hi all.
> I just upgraded some servers to RHEL7 and saw some really, really bad performance
and found ssse_pac to be the badguy. After disabling PAC, the system worked well. Before
that, server had a load at 200 with only 3-400 users. This is with sssd 1.11.2. After
removing pac, it was down to a calm load of 1.2 or so, similar to that of Samba 3 with
winbind. Any ideas what might have cause this?
Do you have any log files from the pac responder? Are you using the PAC
responder with IPA or AD provider? Did you see multiple sssd_pac
processes in the process list or just one?
Not sure which logs to look for. I only saw one sssd_pac process, and that had used a
helluva lot of time.
The lgo file is /var/log/sssd/sssd_pac.log. By default it should be
pretty empty, you can increade the debug level by setting e.g.
debug_level = 4
in the [pac] section of /etc/sssd/sssd.conf. If there is no [pac]
section, just add it. The maximum debug level is 10 but 4 should be
sufficient for a start.
sssd-users mailing list