On Wed, Dec 8, 2010 at 4:23 PM, Dan White <dwh...@olp.net> wrote: > On 08/12/10 15:33 -0400, D G Teed wrote: > >> Here is what one of the directories looked like: >> >> ls -l 15950/fd >> >> total 0 >> lrwx------ 1 root root 64 Dec 8 13:52 0 -> /dev/null >> lrwx------ 1 root root 64 Dec 8 13:52 1 -> /dev/null >> lrwx------ 1 root root 64 Dec 7 15:47 10 -> socket:[38109596] >> lrwx------ 1 root root 64 Dec 7 15:47 11 -> socket:[38112677] >> lrwx------ 1 root root 64 Dec 8 13:52 12 -> socket:[38129166] >> lrwx------ 1 root root 64 Dec 8 13:52 13 -> socket:[38177341] >> lrwx------ 1 root root 64 Dec 8 13:52 14 -> socket:[38198508] >> lrwx------ 1 root root 64 Dec 8 13:52 15 -> socket:[38256709] >> lrwx------ 1 root root 64 Dec 8 13:52 16 -> socket:[38307912] >> lrwx------ 1 root root 64 Dec 8 13:52 17 -> socket:[38351349] >> lrwx------ 1 root root 64 Dec 8 13:52 18 -> socket:[38378460] >> > > Try doing a 'netstat -e' and see if you can match some of those sockets up > with a connection, and see if you can determine what it's being used for, > and what connection state it's in. > > I'm hoping you can tie the down to a particular type of connection, say, > your pam_winbind attempts. If that's the case, then the problem might be > due to a bug in that specific pam module, or could be due to a bug in the > way saslauthd uses pam. >
OK... I've checked one process and here is what the matches look like: /proc/15951/fd# for socket in `ls -l | cut -d' ' -f12 | sed 's/socket:\[// ; s/\]//'` > do > netstat -e | grep $socket > done unix 2 [ ] STREAM CONNECTED 38129397 unix 3 [ ] STREAM CONNECTED 40572411 unix 3 [ ] STREAM CONNECTED 40583464 unix 3 [ ] STREAM CONNECTED 40602800 unix 3 [ ] STREAM CONNECTED 40649673 unix 3 [ ] STREAM CONNECTED 40667667 unix 2 [ ] STREAM CONNECTED 38134508 unix 2 [ ] STREAM CONNECTED 38137874 unix 2 [ ] STREAM CONNECTED 38144166 unix 2 [ ] STREAM CONNECTED 38145796 unix 2 [ ] STREAM CONNECTED 38164643 unix 2 [ ] STREAM CONNECTED 38182983 unix 2 [ ] STREAM CONNECTED 38198634 unix 2 [ ] STREAM CONNECTED 38212091 unix 2 [ ] STREAM CONNECTED 38284314 unix 2 [ ] STREAM CONNECTED 38310069 unix 2 [ ] STREAM CONNECTED 38337364 unix 2 [ ] STREAM CONNECTED 38378155 unix 2 [ ] STREAM CONNECTED 38401805 unix 2 [ ] STREAM CONNECTED 38411640 unix 2 [ ] STREAM CONNECTED 38427190 unix 2 [ ] STREAM CONNECTED 38437192 unix 2 [ ] STREAM CONNECTED 38494440 unix 2 [ ] STREAM CONNECTED 38522319 unix 2 [ ] STREAM CONNECTED 38548115 unix 2 [ ] DGRAM 38091087 unix 2 [ ] STREAM CONNECTED 38554551 unix 2 [ ] STREAM CONNECTED 38561940 unix 2 [ ] STREAM CONNECTED 38581911 unix 2 [ ] STREAM CONNECTED 38596779 unix 2 [ ] STREAM CONNECTED 38618951 unix 2 [ ] STREAM CONNECTED 38751702 unix 2 [ ] STREAM CONNECTED 38790002 unix 2 [ ] STREAM CONNECTED 38796236 unix 2 [ ] STREAM CONNECTED 38840751 unix 2 [ ] STREAM CONNECTED 38867792 unix 2 [ ] STREAM CONNECTED 38892274 unix 2 [ ] STREAM CONNECTED 38934651 unix 2 [ ] STREAM CONNECTED 38951610 unix 2 [ ] STREAM CONNECTED 38978113 unix 2 [ ] STREAM CONNECTED 38994165 unix 2 [ ] STREAM CONNECTED 39011149 unix 2 [ ] STREAM CONNECTED 39018267 unix 2 [ ] STREAM CONNECTED 39028043 unix 2 [ ] STREAM CONNECTED 39031157 unix 2 [ ] STREAM CONNECTED 39075371 unix 2 [ ] STREAM CONNECTED 39135341 unix 2 [ ] STREAM CONNECTED 39386630 unix 2 [ ] STREAM CONNECTED 39513199 unix 2 [ ] STREAM CONNECTED 39530596 unix 2 [ ] STREAM CONNECTED 39543718 unix 2 [ ] STREAM CONNECTED 39550671 unix 2 [ ] STREAM CONNECTED 39597986 unix 2 [ ] STREAM CONNECTED 39691351 unix 2 [ ] STREAM CONNECTED 39693413 unix 2 [ ] STREAM CONNECTED 39715649 unix 2 [ ] STREAM CONNECTED 39721749 unix 2 [ ] STREAM CONNECTED 39763508 unix 2 [ ] STREAM CONNECTED 39796730 unix 3 [ ] STREAM CONNECTED 39858211 unix 3 [ ] STREAM CONNECTED 39890377 unix 3 [ ] STREAM CONNECTED 39895914 unix 3 [ ] STREAM CONNECTED 39923296 unix 3 [ ] STREAM CONNECTED 39976002 unix 3 [ ] STREAM CONNECTED 39991611 unix 3 [ ] STREAM CONNECTED 40002931 unix 3 [ ] STREAM CONNECTED 40075158 unix 3 [ ] STREAM CONNECTED 40111837 unix 3 [ ] STREAM CONNECTED 40128040 unix 3 [ ] STREAM CONNECTED 40130041 unix 3 [ ] STREAM CONNECTED 40137946 unix 3 [ ] STREAM CONNECTED 40139446 unix 3 [ ] STREAM CONNECTED 40158597 unix 3 [ ] STREAM CONNECTED 40166365 unix 3 [ ] STREAM CONNECTED 40187017 unix 3 [ ] STREAM CONNECTED 40198012 unix 3 [ ] STREAM CONNECTED 40211699 unix 3 [ ] STREAM CONNECTED 40220735 unix 3 [ ] STREAM CONNECTED 40233742 unix 3 [ ] STREAM CONNECTED 40248500 unix 3 [ ] STREAM CONNECTED 40260919 unix 3 [ ] STREAM CONNECTED 40271543 unix 3 [ ] STREAM CONNECTED 40287296 unix 3 [ ] STREAM CONNECTED 40342695 unix 3 [ ] STREAM CONNECTED 40346798 unix 3 [ ] STREAM CONNECTED 40352869 unix 3 [ ] STREAM CONNECTED 40370449 unix 3 [ ] STREAM CONNECTED 40381003 unix 3 [ ] STREAM CONNECTED 40393520 unix 3 [ ] STREAM CONNECTED 40407420 unix 3 [ ] STREAM CONNECTED 40448726 unix 3 [ ] STREAM CONNECTED 40453216 unix 3 [ ] STREAM CONNECTED 40509251 unix 3 [ ] STREAM CONNECTED 40527597 unix 3 [ ] STREAM CONNECTED 40539324 unix 3 [ ] STREAM CONNECTED 40553666 I also count 200 connections like this: unix 3 [ ] STREAM CONNECTED 39854981 /var/run/samba/winbindd_privileged/pipe Most users are simply using port 25 and would not be authenticating, so I know these numbers cannot be current connections. Regards, --Donald
