Monitoring and restarting secldapclntd daemon in AIX
The AIX service secldapclntd "Provides and manages connection between the AIX LDAP load module of the local host and LDAP Security Information Server, and handles transactions from the LDAP load module to the LDAP Security Information Server."
This services fails too often. Each new version of AIX, brings new failures in this services. Failures appear more often if the LDAP server has a lot of users and groups.
When it fails:
sometimes does not reply, its hung
sometimes it consumes all CPU and lasts a lot to reply
sometimes it simply dies with a core.
This script will check and monitor it and restart it if necesary.
You can test this script stoping the service:
kill -STOP $(ps -fea| grep -v grep |grep /usr/sbin/secldapclntd| awk '{print $2}' )
You can add an entry to cron to execute it:
if crontab -l | grep /usr/local/bin/check-secldapclntd.sh; then
echo "Already configured."
else
crontab -l > /tmp/$$.crontab
cat >> /tmp/$$.crontab <<EOF
# Check secldapclntd each 5 minutes
5,10,15,20,25,30,35,40,45,50,55 * * * * /usr/local/bin/check-secldapclntd.sh check-and-restart > /dev/null
EOF
crontab /tmp/$$.crontab
rm /tmp/$$.crontab
fi
And here goes the script (/usr/local/bin/check-secldapclntd.sh):