[389-users] Re: Limiting connections from openLDAP Clients to 389 Directory Server

[William Brown]

>  On 28 Sep 2019, at 05:38, Abhisheyk Deb
> <abhisheykdeb(a)gmail.com&gt; wrote:
>  
>  Hi,
>  
>  I know this might be a very vague question, but is there any way I can limit the number
> of connections that a 389 Directory Server Instance accepts from OpenLDAP Clients (for
> example like 10) running nslcd.
>  Once this maximum number of connections are achieved, any further requests will not be
> worked upon. Any help would be greatly appreciated. 

There are a few ways to achieve this.

There is a "per connection" thread limit you can use. 

https://access.redhat.com/documentation/en-us/red_hat_directory_server/10...

You can limit "maximum connections" by the file-descriptor limit in the systemd
unit file.

You can also set different limits for the connection based on the user that bind. 

https://access.redhat.com/documentation/en-us/red_hat_directory_server/9....

IE
https://access.redhat.com/documentation/en-us/red_hat_directory_server/9....

Hope that helps,



>  
>  Thank you
>  Abhishek Deb
>  _______________________________________________
>  389-users mailing list -- 389-users(a)lists.fedoraproject.org
>  To unsubscribe send an email to 389-users-leave(a)lists.fedoraproject.org
>  Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
>  List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
>  List Archives:
> https://lists.fedoraproject.org/archives/list/[e-mail]... 
—
Sincerely,

William Brown

Senior Software Engineer, 389 Directory Server
SUSE Labs