On Jun 4, 2010, at 3:14 PM, Ryan Manikowski wrote:
> On 6/4/2010 3:09 PM, Paul Heinlein wrote:
>> On Fri, 4 Jun 2010, aurfalien@xxxxxxxxx wrote:
>>
>>
>>> Hi all,
>>>
>>> I have a few ldap servers slaved to a primary via syncrepl, all is
>>> well.
>>>
>>> I've set my clients to auth against a few and there /etc/ldap.conf
>>> looks like so;
>>>
>>> uri ldap://primary.domain.com ldap://secondary.domain.com
>>>
>>> However when either primary or slaves go down, while the clients can
>>> log in, access is very slow, ls of any dir is painful.
>>>
>> I've had less than good luck using the "uri" directive with redundant
>> servers. I think that "host" is deprecated, but it's worked better
>> for
>> me. I also decrease some timelimit settings.
>>
>> ----- %< -----
>> host ldap1.domain ldap2.domain
>> bind_timelimit 30
>> idle_timelimit 120
>> timelimit 30
>> ----- %< -----
>>
>>
>
> Decreasing 'timelimit' in ldap.conf will help. Enabling nscd for
> caching
> and setting sane dns timeout values in /etc/resolv.conf is recommended
> as well.
>
> Ryan Manikowski
>
Nice, a best practice of sorts. Eager to try em out and report back.
_______________________________________________
CentOS mailing list
CentOS@xxxxxxxxxx
http://lists.centos.org/mailman/listinfo/centos
