Public bug reported:
Binary package hint: libnss-ldap
We have a OpenLDAP server with more than 50.000 user accounts and almost
5.000 groups. Some of these groups may refer to more than 20.000 users.
When a user, which is a member of one of the big groups, tries to logon
from an LDAP client host i
** Attachment added: "Dependencies.txt"
https://bugs.launchpad.net/bugs/616719/+attachment/1485780/+files/Dependencies.txt
--
slow group indexing when using huge ldap
https://bugs.launchpad.net/bugs/616719
You received this bug notification because you are a member of Ubuntu
Server Team, whi
** Tags added: ldap
** Tags removed: amd64 apport-bug lucid
--
slow group indexing when using huge ldap
https://bugs.launchpad.net/bugs/616719
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to libnss-ldap in ubuntu.
--
Ubuntu-server-bugs m
Hi Scott, thanks for looking into this.
I have never used Ubuntu in a environment like this before (actually I'v
never really used Ubuntu) so I cant say for sure. But this guy
http://ubuntuforums.org/showthread.php?t=1238322 might have been hit by
the same issue in August last year.
I do not kno
Yes. Based on a few tests done by hand on OpenSUSE, nscd speeds up the process
a lot:
When nscd is running I get a response within 100 mSec in average, sometimes
down to 8 mSec and maximum 2.2 seconds. If I stop nscd, answer times ranges
between 400 mSec and 2 seconds - the average around 800 mS
By reducing the number of groups in our setup we have managed to improve
log on time a little. But login and using the id command is still
terribly slow. This is a showstopper for us in offering Ubuntu as a
choice in our university virtual hosting service.
Please let me know if I can be of further
Philipp: Thanks for notifying about the other ldap possibility. While I
am not sure that I agree on libnss-ldap is the cource of the problem
(see timing on OpenSUSE above) replacing it with nslcd and libnss-ldapd
certainly improves login time to an acceptable level:
m...@myserver:~$ time id tfp696