Re: kern/48098 (panic: kernel diagnostic assertion "cred != NULL": sys/kern/kern_auth.c)

[Brian Marcotte <marcotte%panix.com@localhost>]

The following reply was made to PR kern/48098; it has been noted by GNATS.

From: Brian Marcotte <marcotte%panix.com@localhost>
To: gnats-bugs%NetBSD.org@localhost
Cc: 
Subject: Re: kern/48098 (panic: kernel diagnostic assertion "cred != NULL":
 sys/kern/kern_auth.c)
Date: Wed, 6 Nov 2013 20:02:45 -0500

 > Modified Files:
 >      src/sys/kern: uipc_socket.c
 
 Okay, I can now drop these connections without causing a panic.
 
 Within the next week, I need to get this onto one of our busier machines.
 Over there, apache occasionally seems to stop accepting SOME connections
 when there are a large number of these stale established connections.
 With this patch, I hope to work around that problem by automatically
 dropping them. Right now, I must restart apache (which clears all the
 stuck established connections).
 
 Any guess why these pile up? I've only seen this behavior on some of our
 web servers. It does not happen on our web servers which are protected
 by a Squid box, nor the Squid box itself. It doesn't happen on our mail
 servers which also handle lots of connections.
 
 Thanks.
 
 --
 - brian