Re: getpwnam LDAP cache problem

nscd(8) says:

Nscd provides cacheing for the passwd(5) ... databases through standard libc interfaces, such as getpwnam(3), getpwuid(3), ... and others. Each cache has a separate TTL (time-to-live) for its data; modifying the local database (/etc/passwd, and so forth) causes the cache to become invalidated within fifteen seconds.

So one possibility is that after changing the LDAP directory, waiting 15 seconds will give you the right data. Another possibility is that touching /etc/passwd (or another file configured in nscd.conf) after making the change will cause the cache to be invalidated, at least after 15 seconds.

You could also consider getting the UID directly from LDAP.

And, the reason your run of getent avoids the cache is that it doesn't call getpwnam or getpwuid, but instead goes through the entire passwd database, probably with getpwent. You could probably get the same effect without running a seperate utility by just calling that function repeatedly from within Perl.

It looks like you can control how long nscd caches data in /etc/nscd.conf; see nscd.conf(5).

As to whether it's a bug, that depends on what you expect from your system. Caching is a trade-off of speed for accuracy; if you don't want that trade-off, you can avoid running nscd, or configure it for very short timeouts.

Comment on Re: getpwnam LDAP cache problem Select or Download Code

Replies are listed 'Best First'.
Re^2: getpwnam LDAP cache problem by mandog (Curate) on Dec 12, 2004 at 13:17 UTC
Thank you sgifford ! or perhaps should I say sgifford nscd does indeed seem to be the "problem" When I apt-get install nscd on a non LDAPified system, the "problem" begins to occur. An interesting bit, getent does actually seem to be going to the LDAP directory --at least it is listing things that aren't in /etc/passwd For what it is worth, We'll probably be talking directly to the LDAP directory for our getpwnam purposes. Caching is a "feature" for 86370 seconds in our day. email: mandog	[reply]

Replies are listed 'Best First'.

Re^2: getpwnam LDAP cache problem
by mandog (Curate) on Dec 12, 2004 at 13:17 UTC

Thank you sgifford ! or perhaps should I say sgifford

nscd does indeed seem to be the "problem" When I apt-get install nscd on a non LDAPified system, the "problem" begins to occur.

An interesting bit, getent does actually seem to be going to the LDAP directory --at least it is listing things that aren't in /etc/passwd

For what it is worth, We'll probably be talking directly to the LDAP directory for our getpwnam purposes. Caching is a "feature" for 86370 seconds in our day.

email: mandog

[reply]

In Section Seekers of Perl Wisdom