<br><br><div class="gmail_quote">On Wed, Dec 8, 2010 at 4:23 PM, Dan White <span dir="ltr"><<a href="mailto:dwhite@olp.net">dwhite@olp.net</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
<div class="im">On 08/12/10 15:33 -0400, D G Teed wrote:<br>
<blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
Here is what one of the directories looked like:<br>
<br>
ls -l 15950/fd<br>
<br>
total 0<br>
lrwx------ 1 root root 64 Dec 8 13:52 0 -> /dev/null<br>
lrwx------ 1 root root 64 Dec 8 13:52 1 -> /dev/null<br>
lrwx------ 1 root root 64 Dec 7 15:47 10 -> socket:[38109596]<br>
lrwx------ 1 root root 64 Dec 7 15:47 11 -> socket:[38112677]<br>
lrwx------ 1 root root 64 Dec 8 13:52 12 -> socket:[38129166]<br>
lrwx------ 1 root root 64 Dec 8 13:52 13 -> socket:[38177341]<br>
lrwx------ 1 root root 64 Dec 8 13:52 14 -> socket:[38198508]<br>
lrwx------ 1 root root 64 Dec 8 13:52 15 -> socket:[38256709]<br>
lrwx------ 1 root root 64 Dec 8 13:52 16 -> socket:[38307912]<br>
lrwx------ 1 root root 64 Dec 8 13:52 17 -> socket:[38351349]<br>
lrwx------ 1 root root 64 Dec 8 13:52 18 -> socket:[38378460]<br>
</blockquote>
<br></div>
Try doing a 'netstat -e' and see if you can match some of those sockets up<br>
with a connection, and see if you can determine what it's being used for,<br>
and what connection state it's in.<br>
<br>
I'm hoping you can tie the down to a particular type of connection, say,<br>
your pam_winbind attempts. If that's the case, then the problem might be<br>
due to a bug in that specific pam module, or could be due to a bug in the<br>
way saslauthd uses pam.<br></blockquote></div><br>OK...<br><br>I've checked one process and here is what the matches look like:<br><br>/proc/15951/fd# for socket in `ls -l | cut -d' ' -f12 | sed 's/socket:\[// ; s/\]//'`<br>
> do<br>> netstat -e | grep $socket<br>> done<br>unix 2 [ ] STREAM CONNECTED 38129397<br>unix 3 [ ] STREAM CONNECTED 40572411<br>unix 3 [ ] STREAM CONNECTED 40583464<br>
unix 3 [ ] STREAM CONNECTED 40602800<br>unix 3 [ ] STREAM CONNECTED 40649673<br>unix 3 [ ] STREAM CONNECTED 40667667<br>unix 2 [ ] STREAM CONNECTED 38134508<br>
unix 2 [ ] STREAM CONNECTED 38137874<br>unix 2 [ ] STREAM CONNECTED 38144166<br>unix 2 [ ] STREAM CONNECTED 38145796<br>unix 2 [ ] STREAM CONNECTED 38164643<br>
unix 2 [ ] STREAM CONNECTED 38182983<br>unix 2 [ ] STREAM CONNECTED 38198634<br>unix 2 [ ] STREAM CONNECTED 38212091<br>unix 2 [ ] STREAM CONNECTED 38284314<br>
unix 2 [ ] STREAM CONNECTED 38310069<br>unix 2 [ ] STREAM CONNECTED 38337364<br>unix 2 [ ] STREAM CONNECTED 38378155<br>unix 2 [ ] STREAM CONNECTED 38401805<br>
unix 2 [ ] STREAM CONNECTED 38411640<br>unix 2 [ ] STREAM CONNECTED 38427190<br>unix 2 [ ] STREAM CONNECTED 38437192<br>unix 2 [ ] STREAM CONNECTED 38494440<br>
unix 2 [ ] STREAM CONNECTED 38522319<br>unix 2 [ ] STREAM CONNECTED 38548115<br>unix 2 [ ] DGRAM 38091087<br>unix 2 [ ] STREAM CONNECTED 38554551<br>
unix 2 [ ] STREAM CONNECTED 38561940<br>unix 2 [ ] STREAM CONNECTED 38581911<br>unix 2 [ ] STREAM CONNECTED 38596779<br>unix 2 [ ] STREAM CONNECTED 38618951<br>
unix 2 [ ] STREAM CONNECTED 38751702<br>unix 2 [ ] STREAM CONNECTED 38790002<br>unix 2 [ ] STREAM CONNECTED 38796236<br>unix 2 [ ] STREAM CONNECTED 38840751<br>
unix 2 [ ] STREAM CONNECTED 38867792<br>unix 2 [ ] STREAM CONNECTED 38892274<br>unix 2 [ ] STREAM CONNECTED 38934651<br>unix 2 [ ] STREAM CONNECTED 38951610<br>
unix 2 [ ] STREAM CONNECTED 38978113<br>unix 2 [ ] STREAM CONNECTED 38994165<br>unix 2 [ ] STREAM CONNECTED 39011149<br>unix 2 [ ] STREAM CONNECTED 39018267<br>
unix 2 [ ] STREAM CONNECTED 39028043<br>unix 2 [ ] STREAM CONNECTED 39031157<br>unix 2 [ ] STREAM CONNECTED 39075371<br>unix 2 [ ] STREAM CONNECTED 39135341<br>
unix 2 [ ] STREAM CONNECTED 39386630<br>unix 2 [ ] STREAM CONNECTED 39513199<br>unix 2 [ ] STREAM CONNECTED 39530596<br>unix 2 [ ] STREAM CONNECTED 39543718<br>
unix 2 [ ] STREAM CONNECTED 39550671<br>unix 2 [ ] STREAM CONNECTED 39597986<br>unix 2 [ ] STREAM CONNECTED 39691351<br>unix 2 [ ] STREAM CONNECTED 39693413<br>
unix 2 [ ] STREAM CONNECTED 39715649<br>unix 2 [ ] STREAM CONNECTED 39721749<br>unix 2 [ ] STREAM CONNECTED 39763508<br>unix 2 [ ] STREAM CONNECTED 39796730<br>
unix 3 [ ] STREAM CONNECTED 39858211<br>unix 3 [ ] STREAM CONNECTED 39890377<br>unix 3 [ ] STREAM CONNECTED 39895914<br>unix 3 [ ] STREAM CONNECTED 39923296<br>
unix 3 [ ] STREAM CONNECTED 39976002<br>unix 3 [ ] STREAM CONNECTED 39991611<br>unix 3 [ ] STREAM CONNECTED 40002931<br>unix 3 [ ] STREAM CONNECTED 40075158<br>
unix 3 [ ] STREAM CONNECTED 40111837<br>unix 3 [ ] STREAM CONNECTED 40128040<br>unix 3 [ ] STREAM CONNECTED 40130041<br>unix 3 [ ] STREAM CONNECTED 40137946<br>
unix 3 [ ] STREAM CONNECTED 40139446<br>unix 3 [ ] STREAM CONNECTED 40158597<br>unix 3 [ ] STREAM CONNECTED 40166365<br>unix 3 [ ] STREAM CONNECTED 40187017<br>
unix 3 [ ] STREAM CONNECTED 40198012<br>unix 3 [ ] STREAM CONNECTED 40211699<br>unix 3 [ ] STREAM CONNECTED 40220735<br>unix 3 [ ] STREAM CONNECTED 40233742<br>
unix 3 [ ] STREAM CONNECTED 40248500<br>unix 3 [ ] STREAM CONNECTED 40260919<br>unix 3 [ ] STREAM CONNECTED 40271543<br>unix 3 [ ] STREAM CONNECTED 40287296<br>
unix 3 [ ] STREAM CONNECTED 40342695<br>unix 3 [ ] STREAM CONNECTED 40346798<br>unix 3 [ ] STREAM CONNECTED 40352869<br>unix 3 [ ] STREAM CONNECTED 40370449<br>
unix 3 [ ] STREAM CONNECTED 40381003<br>unix 3 [ ] STREAM CONNECTED 40393520<br>unix 3 [ ] STREAM CONNECTED 40407420<br>unix 3 [ ] STREAM CONNECTED 40448726<br>
unix 3 [ ] STREAM CONNECTED 40453216<br>unix 3 [ ] STREAM CONNECTED 40509251<br>unix 3 [ ] STREAM CONNECTED 40527597<br>unix 3 [ ] STREAM CONNECTED 40539324<br>
unix 3 [ ] STREAM CONNECTED 40553666<br><br><br>I also count 200 connections like this:<br><br>unix 3 [ ] STREAM CONNECTED 39854981 /var/run/samba/winbindd_privileged/pipe<br><br>
Most users are simply using port 25 and would not be authenticating,<br>so I know these numbers cannot be current connections.<br><br>Regards,<br><br>--Donald<br> <br>