Re: redundant ldap - client config

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]



On 6/4/2010 3:09 PM, Paul Heinlein wrote:
> On Fri, 4 Jun 2010, aurfalien@xxxxxxxxx wrote:
>
>    
>> Hi all,
>>
>> I have a few ldap servers slaved to a primary via syncrepl, all is well.
>>
>> I've set my clients to auth against a few and there /etc/ldap.conf
>> looks like so;
>>
>> uri ldap://primary.domain.com ldap://secondary.domain.com
>>
>> However when either primary or slaves go down, while the clients can
>> log in, access is very slow, ls of any dir is painful.
>>      
> I've had less than good luck using the "uri" directive with redundant
> servers. I think that "host" is deprecated, but it's worked better for
> me. I also decrease some timelimit settings.
>
> ----- %<  -----
> host ldap1.domain ldap2.domain
> bind_timelimit 30
> idle_timelimit 120
> timelimit 30
> ----- %<  -----
>
>    

Decreasing 'timelimit' in ldap.conf will help. Enabling nscd for caching 
and setting sane dns timeout values in /etc/resolv.conf is recommended 
as well.

Ryan Manikowski


_______________________________________________
CentOS mailing list
CentOS@xxxxxxxxxx
http://lists.centos.org/mailman/listinfo/centos


[Index of Archives]     [CentOS]     [CentOS Announce]     [CentOS Development]     [CentOS ARM Devel]     [CentOS Docs]     [CentOS Virtualization]     [Carrier Grade Linux]     [Linux Media]     [Asterisk]     [DCCP]     [Netdev]     [Xorg]     [Linux USB]
  Powered by Linux