Open socket not connected to any real process

2018-03-07 Thread David Parker
Hello, I have an SMTP server running Debian Wheezy (64-bit). A few weeks ago, I stopped nscd on it, because it was holding a connection open to our LDAP server and sending a ton of unnecessary queries to it. Even though nscd is not running, I am once again seeing nscd-type queries on the LDAP se

Re: Open socket not connected to any real process

2018-03-07 Thread David Parker
Well, crap. It turns out this isn't a problem. PAM is configured for LDAP authentication and so it opens a connection each time I log in, owned by my sshd process, even though it's not using LDAP authentication for root. And the other LDAP queries I'm seeing are being sent when users authenticat

Re: Open socket not connected to any real process

2018-03-07 Thread Sven Hartge
David Parker wrote: > Well, crap. It turns out this isn't a problem. PAM is configured for > LDAP authentication and so it opens a connection each time I log in, > owned by my sshd process, even though it's not using LDAP > authentication for root. And the other LDAP queries I'm seeing are > b

Re: Open socket not connected to any real process

2018-03-07 Thread Roberto C . Sánchez
On Wed, Mar 07, 2018 at 11:08:05PM +0100, Sven Hartge wrote: > > This is why you use libpam-ldapd (instead of libpam-ldap) in combination > with libnss-ldapd (instead of libnss-ldap). > > Its design with a separate daemon (nslcd) doing the actual LDAP > connection is far superior compared to the

Re: Open socket not connected to any real process

2018-03-08 Thread Sven Hartge
Roberto C. Sánchez wrote: > On Wed, Mar 07, 2018 at 11:08:05PM +0100, Sven Hartge wrote: >> This is why you use libpam-ldapd (instead of libpam-ldap) in >> combination with libnss-ldapd (instead of libnss-ldap). >> >> Its design with a separate daemon (nslcd) doing the actual LDAP >> connection