User Ident

[c0i0t3]

Hi, I am with high problem of load and it happens when it appears the user ident executing, this ident is normal to be executed?


16:22:51 up 1:01, 1 user, load average: 22.46, 10.51, 6.68
479 processes: 470 sleeping, 9 running, 0 zombie, 0 stopped
CPU states: cpu user nice system irq softirq iowait idle
total 46.9% 0.0% 6.3% 0.0% 16.8% 27.4% 2.3%
cpu00 65.6% 0.0% 2.1% 0.1% 7.3% 20.9% 3.7%
cpu01 55.9% 0.0% 3.9% 0.0% 6.7% 28.6% 4.7%
cpu02 28.9% 0.0% 14.2% 0.0% 21.3% 35.5% 0.0%
cpu03 37.2% 0.0% 4.9% 0.0% 32.2% 24.6% 0.9%
Mem: 2075332k av, 2023284k used, 52048k free, 0k shrd, 17332k buff
1505800k active, 419856k inactive
Swap: 2040212k av, 1111824k used, 928388k free 134672k cached

PID USER PRI NI SIZE RSS SHARE STAT %CPU %MEM TIME CPU COMMAND
31907 ident 16 0 5292 976 796 R 15.7 0.0 0:08 3 in.authd
157 root 15 0 0 0 0 RW 4.2 0.0 4:26 1 kswapd0
4191 nobody 15 0 29312 14M 2052 S 0.9 0.7 0:17 0 httpd
157 root 15 0 0 0 0 SW 0.8 0.0 4:26 2 kswapd0
4376 nobody 15 0 28932 13M 2240 S 0.8 0.6 0:17 0 httpd
4423 nobody 15 0 28532 13M 2756 S 0.8 0.6 0:16 0 httpd
4495 nobody 15 0 28680 13M 2248 S 0.6 0.6 0:17 2 httpd
28115 nobody 15 0 26416 11M 2148 S 0.6 0.5 0:03 1 httpd
4256 nobody 15 0 28876 11M 2508 S 0.5 0.5 0:16 1 httpd


in the APF I configured not to be executed, exactly thus still ident appears this, has moments that it appears in all top processes

# Block all ident (tcp 113) requests in and out of the server IF the
# port is not opened in *_TCP_CPORTS. This uses a reject target to
# make sure the ident requests terminate quickly. You can see a marked
# increase in irc and ftp connection performance with this feature.
BLK_IDENT="1"

the server all is brought up to date, apf, php, mysql, mod_evasive, etc...

at some moment with load very high he appears nobody executing netstat, what I can make to verify these problems? What it can be this? Tranks!

[chirpy]

Shutdown the ident service. IIRC, it's called auth on most RH derivatives and is controlled by editing /etc/xinetd.d/auth and setting disable = yes and then restart xinetd.