Hello, We noted similar on a heavily used RHEL8 server.
But a recent patch for RHEL8 seemed to resolve this problem for us (sssd-2.9.4-5.el8_10.1.x86_64). Whilst it was occurring, the temporary fix for us was clearing the cache periodically. Cheers Mark ------------------------------------------------------------------------ Mark Sangster Server Infrastructure Specialist Information Technology Services | University of Aberdeen t: +44 (0)1224 27-3315 | e: [email protected] | u: http://www.abdn.ac.uk/it/ -----Original Message----- From: John Beranek via sssd-users <[email protected]> Sent: 03 February 2025 10:20 To: [email protected] Cc: John Beranek <[email protected]> Subject: [SSSD-users]sssd-kcm high memory usage on EL9 CAUTION: External email. Ensure this message is from a trusted source and exercise caution before clicking links/opening attachments. Hi, We've recently spotted an issue on some of our EL9 servers, where sssd-kcm becomes long-running, and high in RAM usage. After sssd-kcm has been running for a week or more, it can easily reach, say, 680MiB. (We've seen it as high as 1.5GiB, consuming all the server's RAM and swap) The issue particularly seems to affect FTP servers of ours which are configured with sssd (Active Directory) authentication, which will be doing a lot of authentications. Details: OS: Oracle Linux 9.5 $ rpm -qa|grep sssd sssd-nfs-idmap-2.9.5-4.0.1.el9_5.4.x86_64 sssd-client-2.9.5-4.0.1.el9_5.4.x86_64 sssd-common-2.9.5-4.0.1.el9_5.4.x86_64 sssd-krb5-common-2.9.5-4.0.1.el9_5.4.x86_64 sssd-common-pac-2.9.5-4.0.1.el9_5.4.x86_64 sssd-ad-2.9.5-4.0.1.el9_5.4.x86_64 sssd-krb5-2.9.5-4.0.1.el9_5.4.x86_64 sssd-kcm-2.9.5-4.0.1.el9_5.4.x86_64 $ ps auxww|egrep "RSS|kcm" USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND root 1354320 0.8 37.9 1847812 587088 ? Ss Jan23 130:39 /usr/libexec/sssd/sssd_kcm --uid 0 --gid 0 --logger=files $ ls /etc/krb5.conf.d crypto-policies@ enable_sssd_conf_dir kcm_default_ccache Any ideas what could be causing this behaviour? Cheers, John -- _______________________________________________ sssd-users mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/[email protected] Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue The University of Aberdeen is a charity registered in Scotland, No SC013683. Tha Oilthigh Obar Dheathain na charthannas clàraichte ann an Alba, Àir. SC013683. -- _______________________________________________ sssd-users mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/[email protected] Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
