RE: accesslog purge starves kerberos kdc authentications

["Paul B. Henson" <henson@acm.org>]

> From: Quanah Gibson-Mount
> Sent: Wednesday, November 04, 2015 6:34 PM
> 
> I set up my accesslog to do the purges every 4 hours by default, rather
> than once a day, to get around this.  You may want to do it more frequently
> than that.  I would say once a day clearly isn't often enough for the
> amount of write traffic you have.

I wasn't sure if doing it more frequently would amortize the load to the point where it did not impact production, or simply break production more often :). I guess I'll have to give it a try and see.

> You also don't note what slapd backend you're using (bdb, hdb, mdb).  bdb &
> hdb in particular are much slower, write wise, than mdb.  And you don't
> note your OpenLDAP version, either...

Sorry, we are running the latest and greatest 2.4.41 with the latest and greatest mdb backend :).

Thanks…