Russ Allbery stanford.edu> writes:
>
> Fletcher Cocquyt stanford.edu> writes:
>
> > [Wed Feb 18 13:32:43 2009] [error] webauthldap(SUNetID): cannot get ticket:
> > Too many open files (24)
>
I was able to reduce the descriptor use by removing redundant
Logfile
Fletcher Cocquyt writes:
> [Wed Feb 18 13:32:43 2009] [error] webauthldap(SUNetID): cannot get ticket:
> Too many open files (24)
Aha. It's the MIT Kerberos keytab code. src/lib/krb5/keytab/kt_file.c
uses stdio.
mod_webauthldap might potentially be able to work around this by
day - we have maxed out our file descriptors
> > hard and soft limits at 64k and verified with running plimit.
> >
> > webauthldap(SUNetID): cannot get ticket: Too many open files (24)
> >
> > Env: Solaris 9, apache 2.0.52, webauth 3.5.4, MIT kerberos krb5-1.4.1
> &
with running plimit.
>
> webauthldap(SUNetID): cannot get ticket: Too many open files (24)
>
> Env: Solaris 9, apache 2.0.52, webauth 3.5.4, MIT kerberos krb5-1.4.1
>
> Our apache threads are now approaching 250-300 open files (as reported
> by lsof).
What does lsof say that th
ified with running plimit.
>
> webauthldap(SUNetID): cannot get ticket: Too many open files (24)
>
> Env: Solaris 9, apache 2.0.52, webauth 3.5.4, MIT kerberos krb5-1.4.1
>
> Our apache threads are now approaching 250-300 open files (as reported by
> lsof).
>
> I suspect
ticket cache operations. this suspicion is based on:
1) error only occurs on mod_webauth protected URLs
2) error is always associated with webauthldap(SUNetID): cannot get ticket: Too
many open files (24) messages
Hypothesis: This version of webauth & kerberos is somehow not using the 64k
