Re: ldap performance a load problems

[Jeremy Hansen <jeremy@methanesea.com>]

On Mon, 11 Aug 2003, Alan Sparks wrote:

> Jeremy Hansen said:
> >
> > What can be done about this load?  Is there any tuning parameters I
> > can  take advantage of that will lessen the load of slapd running on
> > this  server?  I want ldap to be my center of auth for logins, apache,
> > etc.
> 
> Much depends on indexing and caching.  You do not state what Apache
> version you are using or what Apache module you are using for LDAP-based
> lookups.  If you use auth_ldap, consider the caching directives it
> provides to minimize your load.  In some circumstances (especially with
> your non-webserver services), you might consider running the nscd
> caching daemon if provided in whatever OS you're running.

So actually the load isn't related to auth_ldap because I'm not using that 
anywhere public yet.  It's related to the amount of lookups on the user 
nobody that apache runs as.  Every time a child process is spawned to 
answer a request, there is a lookup on user nobody and root through ldap.  
This is outside of auth_ldap.

> And be sure you've indexed whatever attributes you're searching on (such
> as uid).
> 
> Not much else can be said without knowing more of your setup.  You may
> also wish to post to groups more focused on the individual tools you're using
> (like the one for your web server auth module).

again, forget auth_ldap.  It isn't even being touched yet.

Here is my current index:

index   objectClass,uid,uidNumber,gidNumber,memberUid   eq
index   cn,mail,surname,givenname                       eq,subinitial
cachesize 1000000
dbcachesize 10000000

This is all I have as far as tuning.  I also do have nscd running.

-jeremy

> -Alan
> 
> ===========
> Alan Sparks, UNIX/Linux Systems Administrator
> <asparks@doublesparks.net>
> 
> 
> 
> 
>