<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<p>nscd, nslcd, and sssd all provide the same functionality, so you
should never have more than one of them running at once. RHEL5
used nscd. RHEL 6 eliminate nscd and replaced it with sssd, but
included nslcd. I'm no expert on nslcd (because I switched to sssd
as soon as RHEL 6 came out), but it appears to be the same or
very similar to nscd, but only for LDAP. <br>
</p>
<pre class="moz-signature" cols="72">Prentice </pre>
<div class="moz-cite-prefix">On 10/26/2018 10:13 PM, John Hearns via
Beowulf wrote:<br>
</div>
<blockquote type="cite"
cite="mid:CAPqNE2WNObFD7imyv5pfnqP2HF--YsLXxzJU_0i5E05d0gTHKQ@mail.gmail.com">
<meta http-equiv="content-type" content="text/html; charset=utf-8">
<div dir="ltr">
<div dir="ltr">
<div>Skylar, I believe that nscd does not work well with sssd
and I disabled it.</div>
<div>See <a
href="https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/6/html/deployment_guide/usingnscd-sssd"
moz-do-not-send="true">https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/6/html/deployment_guide/usingnscd-sssd</a></div>
<div><br>
</div>
<div>I believe that nscd is the work of Auld Nick himself and
causes more problems than it is worth on HPC nodes.</div>
<div>If you want to speed up cacheing with sssd itself you can
put its local caches on a RAMdisk. This has the cost of no
persistence of course and uses up RAM which you may prefer
to put to better use. </div>
<div><br>
</div>
<div><br>
</div>
<div><br>
</div>
<div><br>
</div>
<div><br>
</div>
<div><br>
</div>
<div><br>
</div>
<div><br>
</div>
</div>
</div>
<br>
<div class="gmail_quote">
<div dir="ltr">On Sat, 27 Oct 2018 at 00:59, Skylar Thompson
<<a href="mailto:skylar.thompson@gmail.com"
moz-do-not-send="true">skylar.thompson@gmail.com</a>>
wrote:<br>
</div>
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">On Fri, Oct
26, 2018 at 08:44:28PM +0000, Ryan Novosielski wrote:<br>
> Our LDAP is very small, compared to the sorts of things
some people run.<br>
> <br>
> We added indexes today on uid, uidNumber, and gidNumber
and the problem went away. Didn’t try it earlier as it had
virtually no impact on our testing system for whatever reason,
but on a different testing system and on production, it
dropped “ls -al /home/“ from ~90s to ~5s. I’m not sure if all
three were necessary, but I’ll look back at that later.<br>
> <br>
> We’ve run SSSD from day one, so that eliminates the nscld
question. We also moved CentOS 5.x to SSSD, FYI (I believe
there was someone else with some old systems around). Was
pretty painless, and SSSD eliminates a lot of problems that
exist with the older stuff (including some really boneheaded
very large LDAP queries that were happening routinely with the
older nss-ldap software if I’m remembering its name
correctly).<br>
<br>
Have you experimented with client-side caching services like
nscd? nscd has<br>
its quirks (in particular, it does very poorly with caching
spurious negative<br>
results from transient network failures), but it also is a big
performance<br>
improvement since you don't even have to hit the network or
the directory<br>
services.<br>
<br>
-- <br>
Skylar<br>
_______________________________________________<br>
Beowulf mailing list, <a href="mailto:Beowulf@beowulf.org"
target="_blank" moz-do-not-send="true">Beowulf@beowulf.org</a>
sponsored by Penguin Computing<br>
To change your subscription (digest mode or unsubscribe) visit
<a href="http://www.beowulf.org/mailman/listinfo/beowulf"
rel="noreferrer" target="_blank" moz-do-not-send="true">http://www.beowulf.org/mailman/listinfo/beowulf</a><br>
</blockquote>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
Beowulf mailing list, <a class="moz-txt-link-abbreviated" href="mailto:Beowulf@beowulf.org">Beowulf@beowulf.org</a> sponsored by Penguin Computing
To change your subscription (digest mode or unsubscribe) visit <a class="moz-txt-link-freetext" href="http://www.beowulf.org/mailman/listinfo/beowulf">http://www.beowulf.org/mailman/listinfo/beowulf</a>
</pre>
</blockquote>
<br>
</body>
</html>