IT18295: OPEN DATABASE HAS REDUNDANT DBSA CHECKING AND SHOULD LEVERAGE NS_CACHE GROUP CACHE IF ADMIN_USER_MODE_WITH_DBSA SET TO 1

APAR status

• Closed as fixed if next.

Error description

• A slow nss/ldap can be exasperated by redundant dbsa group
  checking and the need for us to
  leverage the NS_CACHE group cache when checking if user belongs
  to dbsa group when opening a database
  and setting session limits from onconfig settings.  This dbsa
  checking is only set if the onconfig param
  ADMIN_USER_MODE_WITH_DBSA is set to 1.
  
  In an environment with many rapid connections opening databases
  and while the nss/ldap
  problem occurs, it is very common to see stacks like these below
  running on cpu vps:
  
  
  #0  in __poll_nocancel () from /lib64/libc.so.6
  #1  in tio_wait () from /lib64/libnss_ldap.so.2
  #2  in tio_read () from /lib64/libnss_ldap.so.2
  #3  in read_group () from /lib64/libnss_ldap.so.2
  #4  in _nss_ldap_getgrent_r () from /lib64/libnss_ldap.so.2
  #5  in __nss_getent_r () from /lib64/libc.so.6
  #6  in getgrent_r@@GLIBC_2.2.5 () from /lib64/libc.so.6
  #7  in __nss_getent () from /lib64/libc.so.6
  #8  in getgrent () from /lib64/libc.so.6
  #9  in atdbsal ()
  #10 in isAdminuser ()
  #11 in set_session_limit ()
  #12 in set_session_limits ()
  #13 in sqopendb ()
  #14 in excommand ()
  #15 in sq_execute ()
  #16 in sqmain ()
  #17 in spawn_thread ()
  #18 in th_init_initgls ()
  #19 in startup ()
  #20 in ?? ()
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * Users setting tenant limits with  ADMIN_USER_MODE_WITH_DBSA  *
  * = 1                                                          *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * See Error Description                                        *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * Upgrade to 12.10.xC9.                                        *
  ****************************************************************
  

Problem conclusion

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

Applicable component levels

• RB10 PSN

     UP

• RB10 PSY

     UP