[Pkg-sssd-devel] Bug#842038: sssd-common: sssd_be memory leak

[Aled Jones]

Package: sssd-common
Version: 1.11.7-3
Severity: important

Dear Maintainer,
Since configuring a web server to authenticate against MS Active Directory, I have noticed that the sssd_be process is constantly increasing memory usage.
After 14 days, memory usage by this process has increased as detailed below:

from
  PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  940 root      20   0  552016  83852  15664 S   0.7  4.1  14:23.81 sssd_be          

to
  PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND                                                                                 
  940 root      20   0 1302356 818916  10792 S   2.7 39.8 261:25.80 sssd_be  

(1272 MB virtual, 800 MB resident)


sssd.conf:

[sssd]
domains = some.domain
config_file_version = 2
services = nss, pam

[domain/some.domain]
ad_domain = SOME.DOMAIN
krb5_realm = SOME.DOMAIN
realmd_tags = manages-system joined-with-adcli
cache_credentials = True
id_provider = ad
krb5_store_password_if_offline = True
default_shell = /bin/bash
override_shell = /bin/bash
ldap_id_mapping = True
use_fully_qualified_names = False
fallback_homedir = /home/%u
access_provider = simple
simple_allow_groups = no-such-group-exists



-- System Information:
Debian Release: 8.6
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.16.0-4-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages sssd-common depends on:
ii  init-system-helpers  1.22
ii  libbasicobjects0     0.4.0-1
ii  libc-ares2           1.10.0-2+deb8u1
ii  libc6                2.19-18+deb8u6
ii  libcollection4       0.4.0-1
ii  libcomerr2           1.42.12-2
ii  libdbus-1-3          1.8.20-0+deb8u1
ii  libdhash1            0.4.0-1
ii  libglib2.0-0         2.42.1-1+b1
ii  libini-config5       0.4.0-1
ii  libk5crypto3         1.12.1+dfsg-19+deb8u2
ii  libkeyutils1         1.5.9-5+b1
ii  libkrb5-3            1.12.1+dfsg-19+deb8u2
ii  libldap-2.4-2        2.4.40+dfsg-1+deb8u2
ii  libldb1              2:1.1.20-0+deb8u1
ii  libnl-3-200          3.2.24-2
ii  libnl-route-3-200    3.2.24-2
ii  libnspr4             2:4.12-1+debu8u1
ii  libnss3              2:3.26-1+debu8u1
ii  libpam0g             1.1.8-3.1+deb8u1+b1
ii  libpcre3             2:8.35-3.3+deb8u4
ii  libpopt0             1.16-10
ii  libref-array1        0.4.0-1
ii  libselinux1          2.3-2
ii  libsemanage1         2.3-1+b1
ii  libsss-idmap0        1.11.7-3
ii  libtalloc2           2.1.2-0+deb8u1
ii  libtdb1              1.3.6-0+deb8u1
ii  libtevent0           0.9.25-0+deb8u1
ii  python               2.7.9-1
ii  python-sss           1.11.7-3

Versions of packages sssd-common recommends:
ii  bind9-host   1:9.9.5.dfsg-9+deb8u7
ii  libnss-sss   1.11.7-3
ii  libpam-sss   1.11.7-3
ii  libsss-sudo  1.11.7-3

Versions of packages sssd-common suggests:
pn  apparmor    <none>
ii  sssd-tools  1.11.7-3

-- no debconf information