Author |
Topic |
plumb
Starting Member
9 Posts |
Posted - 2008-05-30 : 06:28:12
|
Hi, I have miscrosoft sql server 2000 on windows server 2003 for small business. It's linked to a web server which register more than 5000 unique visitors every hours. The connection to sql server is more than 20 contemporary.I would like to know if is it normal that lsass.exe keep from 1% to 50% of the cpu. I think to remember that it'snt so before.Could you help me? |
|
sodeep
Master Smack Fu Yak Hacker
7174 Posts |
Posted - 2008-05-30 : 09:51:27
|
check this out:http://support.microsoft.com/kb/843557 |
|
|
plumb
Starting Member
9 Posts |
Posted - 2008-05-31 : 17:39:31
|
In this article he said that lsass take 50 - 100 % of the processor resources. In my case it'snt so hexose. Is there someone who can confirm that in this configuration (Win Server 2003, sql server 2000 with 20 - 30 connections contemporary) lsass take from 1% to 50% of cpu (celeron 2,66 GHz). I listen from some other DBA that this process is next to 1%-2% of cpu consuption. But maybe they have less connections to autenticate. Could it be depend on security settings of Sql Server? Now I have:Authentication --> Sql Server and WindowsAudit level --> noneStart and run sql server in the following account --> System account |
|
|
plumb
Starting Member
9 Posts |
Posted - 2008-06-02 : 13:55:17
|
Could someone post the cpu range usage of lsass with other data as conteporary connections, system features... So that I can understand if my parametres is right. |
|
|
rmiao
Master Smack Fu Yak Hacker
7266 Posts |
Posted - 2008-06-02 : 20:28:50
|
Depends on how many apps on the server need go through security policy. |
|
|
plumb
Starting Member
9 Posts |
Posted - 2008-06-03 : 04:44:41
|
In my case the only application is sql server. |
|
|
rmiao
Master Smack Fu Yak Hacker
7266 Posts |
Posted - 2008-06-03 : 15:30:51
|
It takes almost nothing on most of my sql servers. |
|
|
plumb
Starting Member
9 Posts |
Posted - 2008-06-03 : 16:41:50
|
How many conteporary connections do you have? executing sp_who you can see it. |
|
|
rmiao
Master Smack Fu Yak Hacker
7266 Posts |
Posted - 2008-06-03 : 16:46:59
|
Varies, some servers have thousands of connections. |
|
|
plumb
Starting Member
9 Posts |
Posted - 2008-06-03 : 17:33:39
|
Really????Could you help me to identify where is the problem? How can I understand where lsass process goes wrong? |
|
|
rmiao
Master Smack Fu Yak Hacker
7266 Posts |
Posted - 2008-06-03 : 18:25:56
|
This is os issue, it'll cause high cpu usage when server has problem to talk to domain controller as I know. |
|
|
plumb
Starting Member
9 Posts |
Posted - 2008-06-04 : 08:26:26
|
Is there a log file where I can find these problems? Or is there a tool that could help me to solve this problem? |
|
|
plumb
Starting Member
9 Posts |
Posted - 2008-06-04 : 10:04:53
|
Logging with administrator account in my windows server 2003 i cannot see in computer management under System tools, "Local user and Groups". Is it strange? It could be possible that this thing is related with problem with windows authentication of lsass ? |
|
|
rmiao
Master Smack Fu Yak Hacker
7266 Posts |
Posted - 2008-06-04 : 22:54:21
|
Check windows system event log to find out if have any domain related errors, maybe time to reboot your server. By the way, did you apply any win2k3 sp? |
|
|
tripodal
Constraint Violating Yak Guru
259 Posts |
Posted - 2008-06-06 : 17:08:37
|
Lsass is used to assign permissions to files when people log int. If for example you are using a Active Directory Login as the credentials for your website, each page, and each image will create a seperate login.Also, If you are using an active directory username in order to access sql, each query will use lsass in order to find its permissions.It is possible with 5000 users per hour for that to be normal CPU usage, Depending on your your site is coded.I would suggest looking at your IIS logs and see how many hits per second your server is processing.There is an excellent log parsing utility from microsoft, http://www.microsoft.com/downloads/details.aspx?FamilyID=890cd06b-abf8-4c25-91b2-f8d975cf8c07&displaylang=enThis can be of extreme help on a busy site while you try to nail down errors. |
|
|
plumb
Starting Member
9 Posts |
Posted - 2008-06-11 : 06:26:06
|
thank you everybody. I'm going to check this |
|
|
|