Package: sssd
Version: 1.13.1-2~eebpo80+1
Severity: important
Tags: ipv6

Dear Maintainer,


my computer receive DNS IPv6 RA updates and maintain resolv.conf using rdnssd.
Ra updates are frequent so the resolv.conf mtime is updated every few seconds.
sssd then load the computer up to 50% of cpu usage due to this change, even
there is no content change in resolv.conf.

Stopping rdnssd prevent sssd from producing this high cpu usage.

I'm not sure if the bug is that sssd should check for content change of
resolv.conf or if rdnssd shouldn't update it because RA received contains no
change. So feel free to reassign if needed.

I tried this with jessie sssd and with a backport of sid one, no change.

here is my ssd.conf for instance:


[sssd]
config_file_version = 2
reconnection_retries = 3
sbus_timeout = 30
services = nss, pam
domains = foo.bar

[nss]
filter_groups = root
filter_users = root
reconnection_retries = 3

[pam]
reconnection_retries = 3

[domain/foo.bar]
min_id = 1000
max_id = 1000000
use_fully_qualified_names = false
; Using enumerate = true leads to high load and slow response
enumerate = false
cache_credentials = true

id_provider = ldap
auth_provider = ldap
chpass_provider = ldap

ldap_uri = ldap://ldap.foo.bar,ldap://ldap1.foo.bar
ldap_search_base = o=foo-bar
ldap_tls_reqcert = demand
ldap_tls_cacert = /etc/ssl/certs/ca-certificates.crt
ldap_schema = rfc2307bis
ldap_user_search_base = ou=users,o=foo-bar
ldap_user_object_class = eeuser
ldap_group_member = uniquemember
ldap_access_filter = o=foo-bar



-- System Information:
Debian Release: 8.2
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.16.0-4-amd64 (SMP w/4 CPU cores)
Locale: LANG=fr_FR.utf8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages sssd depends on:
ii  python-sss   1.13.1-2~eebpo80+1
ii  sssd-ad      1.13.1-2~eebpo80+1
ii  sssd-common  1.13.1-2~eebpo80+1
ii  sssd-ipa     1.13.1-2~eebpo80+1
ii  sssd-krb5    1.13.1-2~eebpo80+1
ii  sssd-ldap    1.13.1-2~eebpo80+1
ii  sssd-proxy   1.13.1-2~eebpo80+1

sssd recommends no packages.

sssd suggests no packages.

-- no debconf information

Reply via email to