Beefy Boxes and Bandwidth Generously Provided by pair Networks
"be consistent"

Re: getpwnam LDAP cache problem

by sgifford (Prior)
on Dec 12, 2004 at 08:33 UTC ( #414216=note: print w/replies, xml ) Need Help??

in reply to getpwnam LDAP cache problem

nscd(8) says:
Nscd provides cacheing for the passwd(5) ... databases through standard libc interfaces, such as getpwnam(3), getpwuid(3), ... and others. Each cache has a separate TTL (time-to-live) for its data; modifying the local database (/etc/passwd, and so forth) causes the cache to become invalidated within fifteen seconds.

So one possibility is that after changing the LDAP directory, waiting 15 seconds will give you the right data. Another possibility is that touching /etc/passwd (or another file configured in nscd.conf) after making the change will cause the cache to be invalidated, at least after 15 seconds.

You could also consider getting the UID directly from LDAP.

And, the reason your run of getent avoids the cache is that it doesn't call getpwnam or getpwuid, but instead goes through the entire passwd database, probably with getpwent. You could probably get the same effect without running a seperate utility by just calling that function repeatedly from within Perl.

It looks like you can control how long nscd caches data in /etc/nscd.conf; see nscd.conf(5).

As to whether it's a bug, that depends on what you expect from your system. Caching is a trade-off of speed for accuracy; if you don't want that trade-off, you can avoid running nscd, or configure it for very short timeouts.

Replies are listed 'Best First'.
Re^2: getpwnam LDAP cache problem
by mandog (Curate) on Dec 12, 2004 at 13:17 UTC

    Thank you sgifford ! or perhaps should I say sgifford

    nscd does indeed seem to be the "problem" When I apt-get install nscd on a non LDAPified system, the "problem" begins to occur.

    An interesting bit, getent does actually seem to be going to the LDAP directory --at least it is listing things that aren't in /etc/passwd

    For what it is worth, We'll probably be talking directly to the LDAP directory for our getpwnam purposes. Caching is a "feature" for 86370 seconds in our day.

Log In?

What's my password?
Create A New User
Domain Nodelet?
Node Status?
node history
Node Type: note [id://414216]
and the web crawler heard nothing...

How do I use this? | Other CB clients
Other Users?
Others scrutinizing the Monastery: (5)
As of 2021-10-22 13:58 GMT
Find Nodes?
    Voting Booth?
    My first memorable Perl project was:

    Results (85 votes). Check out past polls.