As I’m on an upgrade roll I decided to upgrade my new server too. It is
configured with kerberos and ldap… and this is were the
trouble.
ldap
When a service is upgraded in Ubuntu/Debian it is first stopped and than
later restarted when the new files are there. When all your user
information is kept in ldap, the following sucks:
Preparing to replace slapd 2.4.11-0ubuntu6.1 (using
.../slapd_2.4.15-1ubuntu3_i386.deb) ...
Stopping OpenLDAP: slapd.
Dumping to /var/backups/slapd-2.4.11-0ubuntu6.1:
- directory dc=atoom,dc=net... done.
Unpacking replacement slapd ...
And there goes the neighborhood… everything slows to a crawl, because
every getpwnam call needs to timeout before /etc/passwd and friends
are consulted.