Gerrard Geldenhuis wrote:
> -----Original Message-----
> From: 389-users-bounces(a)lists.fedoraproject.org [mailto:389-users-
> bounces(a)lists.fedoraproject.org] On Behalf Of Rich Megginson
> Sent: 12 November 2010 16:32
> To: General discussion list for the 389 Directory server project.
> Subject: Re: [389-users] Slow response from server
>
> Gerrard Geldenhuis wrote:
>
>> Hi
>>
>> We are getting a slow responses from one of our LDAP servers and I am
>> not sure what is causing the problem I have run a logconv.pl -j and
>> the following is interesting:
>>
>>
>
>> Connections Reset By Peer: 0
>>
>> Resource Unavailable: 136
>>
>> - 136 (T1) Idle Timeout Exceeded
>>
>>
> does logconv.pl -V show anything like unindexed searches, admin limit
> exceeded, long operation times?
>
>>
>>
No admin limit exceeded or long operation times.
Stricly spoken we don't have unindexed searches but my test bash script caused quite
a number of. We are seeing random timeouts to this specific server when doing a search
like the following:
while true ; do ldapsearch -h ldapserver.company -ZZ -x -W -D
"uid=johndoe,ou=people,dc=company" -b "dc=company" -L -y pwd ; sleep
0.5; done
Watching the performance figures in the console does not highlight any specific
problems.
I am fairly certain that it is an internal network issue but I need to have proof which
is why we are currently doing tcpdumps.
You're using TLS - if you remove the -ZZ, do you still have the same
problem?
We have only seen the problem on one of our consumer servers. The
only difference being the order of servers in the nsfarmserverurl. Changing the order
seems to fix the problem but as it is intermittent we can't really say that
conclusively.
Our chaining settings is quite aggressive though and might need further tuning.
nsbindconnectionslimit: 5
nsconcurrentoperationslimit: 5
nsconnectionlife: 130
nsbindtimeout: 3
nsbindretrylimit: 3
nsmaxresponsedelay: 3
nsmaxtestresponsedelay: 5
Any thoughts on those values? Should/Could some values be increased?
Not sure. Sounds like you're going about collecting data correctly.
Best Regards
________________________________________________________________________
In order to protect our email recipients, Betfair Group use SkyScan from
MessageLabs to scan all Incoming and Outgoing mail for viruses.
________________________________________________________________________
--
389 users mailing list
389-users(a)lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users