[pubcookie-dev] open key file...

[Allan E. Johannesen]

I was debugging a web process and stumbled across a bunch of open descriptors.
It looks like my web client inherited them from httpd.

I tried lsof and found hundreds of descriptors open like these:

httpd     30022 nobody  352r   REG   0,19 2048 11543451 /usr/local/pubcookie/keys/www.wpi.edu
httpd     30022 nobody  353r   REG   0,19 2048 11543451 /usr/local/pubcookie/keys/www.wpi.edu
httpd     30022 nobody  354r   REG   0,19 2048 11543451 /usr/local/pubcookie/keys/www.wpi.edu
httpd     30022 nobody  355r   REG   0,19 2048 11543451 /usr/local/pubcookie/keys/www.wpi.edu
httpd     30022 nobody  356r   REG   0,19 2048 11543451 /usr/local/pubcookie/keys/www.wpi.edu
httpd     30022 nobody  357r   REG   0,19 2048 11543451 /usr/local/pubcookie/keys/www.wpi.edu
httpd     30022 nobody  358r   REG   0,19 2048 11543451 /usr/local/pubcookie/keys/www.wpi.edu
httpd     30022 nobody  359r   REG   0,19 2048 11543451 /usr/local/pubcookie/keys/www.wpi.edu

Looking across the system, it looks like this:

SEETHE:/www/apache-linux/cgi-bin# lsof /usr/local/pubcookie/keys/www.wpi.edu|cut -c 1-16|uniq -c
      1 COMMAND     PID 
    294 httpd       537 
    273 ldaputil   1050 
    294 httpd      1108 
    294 httpd      1406 
    294 httpd      1913 
    294 httpd      1941 
    294 httpd      2149 
    294 httpd     18958 
    273 rotatelog 23515 
    273 rotatelog 23516 
    273 rotatelog 23517 
    273 rotatelog 23518 
    273 rotatelog 23519 
    273 rotatelog 23520 
    273 rotatelog 23521 
    273 rotatelog 23522 
    273 rotatelog 23523 
    273 rotatelog 23524 
    273 rotatelog 23525 
    273 rotatelog 23526 
    273 rotatelog 23527 
    273 rotatelog 23528 
    273 rotatelog 23529 
    273 rotatelog 23530 
    273 rotatelog 23531 
    273 rotatelog 23532 
    273 rotatelog 23533 
    273 rotatelog 23534 
    273 rotatelog 23535 
    273 rotatelog 23536 
    273 rotatelog 23537 
    273 rotatelog 23538 
    273 rotatelog 23539 
    273 rotatelog 23540 
    273 rotatelog 23541 
    273 rotatelog 23542 
    273 rotatelog 23543 
    273 rotatelog 23544 
    273 rotatelog 23545 
    273 rotatelog 23546 
    273 rotatelog 23547 
    273 rotatelog 23548 
    273 rotatelog 23549 
    273 rotatelog 23550 
    273 httpd     23551 

The thing I was going to debug was ldaputil, above.

It must be that rotatelog is spawned from httpd, which would explain why it has
those descriptors open...

Anyway, has anyone seen this?  I took a quick look and all the pbc_fopen's
appear to be followed by pbc_fclose's.