Highlighted
Respected Contributor.. Respected Contributor..
Respected Contributor..
580 views

Ldap Trhead

Jump to solution

Dear Experts,

When we have some sessions opened (more than 5 users ldap authenticated), the concurrent threads grows really fast. As you can see 4223 live threads!

 Any idea or advice why is this happening?

Thanks, Miquel

Pd: Kudo's assured!

0 Likes
1 Solution

Accepted Solutions
Highlighted
Respected Contributor.. Respected Contributor..
Respected Contributor..

Re: Ldap Trhead

Jump to solution

If anyone is interested, was solved with a hotfix from support.

 

Regards, Miquel

View solution in original post

0 Likes
7 Replies
Highlighted
Acclaimed Contributor.
Acclaimed Contributor.

Re: Ldap Trhead

Jump to solution

Hi there,

 

I think you don't have a problem with thread count but with failure to close the unnecessary threads which done their job.
Do you have the LDAP FQDN behind an LB?

How many LDAP servers are behind that VIP?

Do you run special operations behind LDAP users?

What's the UCMDB repository priority? Should be 1 but you can chnage it unfortunaltelly.

 

Keep in mind that discussing LDAP problems over a public forum it's the best approach.

Kind regards,
Bogdan Mureșan

EMEA Technical Success
Highlighted
Respected Contributor.. Respected Contributor..
Respected Contributor..

Re: Ldap Trhead

Jump to solution

First of all, thanks for asnswering!!

For now I can fast answer

- Threads reaches ten's of thousands and finally ucmdb die --> Is for that we are worried, most of them are ldap threads.

- Isn't a FQDN is an IP address.

- We don't know really how many servers are behind, I'll ask.

- We don't run any special operations.

- Priority is 1

Regards, Miquel

0 Likes
Highlighted
Acclaimed Contributor.
Acclaimed Contributor.

Re: Ldap Trhead

Jump to solution

In 10.3x we had a lot of LDAP changes. In 11.x also a few.
In the TreadDumps you will see what flow is starting those calls. Slow.log can reveal if the LDAP threads are also tied to some slow running flows.

LDAP is not easy to debug, Frontline Support will have fun with it.

Kind regards,
Bogdan Mureșan

EMEA Technical Success
Highlighted
Acclaimed Contributor.
Acclaimed Contributor.

Re: Ldap Trhead

Jump to solution

If you see in cmdb.authentication.log messages like 

Authenticate user : sysadmin on user repository: UCMDB. Flow  isInteractive: true, isLdapAuthenticationInNonInteractiveFlowEnabled: true

Then we have a patch (https://softwaresupport.softwaregrp.com/group/softwaresupport/search-result/-/facetsearch/document/LID/QCCR1H118054) and use setGlobalSettingValue to set enable.ldap.authentication.in.non.interactive.flow to false 

Kind regards,
Bogdan Mureșan

EMEA Technical Success
Highlighted
Contributor.
Contributor.

Re: Ldap Trhead

Jump to solution

Hi,

We already set the value to "false", but the number of  LDAP threads is still very high. Early in the morning the number is not very high but this number increases during the day.

 

Captura2.JPG

Thanks

 

Highlighted
Respected Contributor.. Respected Contributor..
Respected Contributor..

Re: Ldap Trhead

Jump to solution

I attach the screen Jordi has already answered.

0 Likes
Highlighted
Respected Contributor.. Respected Contributor..
Respected Contributor..

Re: Ldap Trhead

Jump to solution

If anyone is interested, was solved with a hotfix from support.

 

Regards, Miquel

View solution in original post

0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.