ClearFoundation Tracker - ClearOS
View Issue Details
IDProjectCategoryView StatusDate SubmittedLast Update
0000082ClearOSpublic2010-05-19 10:282011-04-04 13:38
Reporteruser2 
Assigned Tojterpstra 
PrioritynormalSeverityfeatureReproducibilityN/A
StatusclosedResolutionfixed 
PlatformOSOS Version
Product Version 
Target Version5.2Fixed in Version5.2 
Summary0000082: Fine tune LDAP settings to handle larger deployments
DescriptionClearOS Enterprise 5.x is designed for deployments of 250 users or less. However, there are already a significant number of sites with 1000 or more users. This type of deployment will be supported in version 6.0, but we can make some adjustments in the current 5.x version to ease today's larger deployments.
Steps To Reproduce
Additional Information
TagsNo tags attached.
Relationships
Attached Files
Issue History
Date ModifiedUsernameFieldChange
2010-05-19 10:28user2New Issue
2010-05-19 10:28user2Statusnew => assigned
2010-05-19 10:28user2Assigned To => jterpstra
2010-05-19 10:32user2Note Added: 0000125
2010-05-19 10:39user2Note Edited: 0000125
2010-05-19 10:41user2Checkin
2010-05-19 10:41user2Note Added: 0000126
2010-05-19 10:41user2Statusassigned => resolved
2010-05-19 10:41user2Resolutionopen => fixed
2010-05-19 11:26user2Fixed in Version => 5.2
2010-06-17 21:04user2Checkin
2010-06-17 21:04user2Note Added: 0000187
2010-07-14 16:41user2Statusresolved => closed
2010-08-18 15:15user2Note Edited: 0000126
2010-08-18 15:15user2Note Edited: 0000187
2011-04-04 13:38dloperNote Added: 0000348

Notes
(0000125)
user2   
2010-05-19 10:32   
(edited on: 2010-05-19 10:39)
/etc/ldap.conf
----------------------------------------------------

- Changed "timelimit" from 30 to 50
- Added "pagesize 20000" parameter

/etc/openldap/slapd.conf
----------------------------------------------------

- Bumped "cachesize" and "idlcachesize" to 20000
- Added sambaSIDList index
- Added sambaGroupType index

/etc/openldap/ldap.conf
----------------------------------------------------

- Set "SIZELIMIT" to 0 (i.e. let the server handle it)
(0000126)
user2   
2010-05-19 10:41   
(edited on: 2010-08-18 15:15)
Source Code Changelog
---------------------------------------------------
- Fine tuned LDAP settings for larger deployments [fixed tracker 0000082]

File Changes
---------------------------------------------------
U legacy/modules/trunk/app-ldap/ldap.conf.template
U legacy/modules/trunk/app-ldap/nss_ldap.conf.template
U legacy/modules/trunk/app-ldap/slapd.conf.template
(0000187)
user2   
2010-06-17 21:04   
(edited on: 2010-08-18 15:15)
Source Code Changelog
---------------------------------------------------
- Added Samba/LDAP timeout: ldap connection timeout [tracker 0000082]

File Changes
---------------------------------------------------
U legacy/modules/trunk/app-samba-api/smb.ldap.conf.template
(0000348)
dloper   
2011-04-04 13:38   
cachesize 1000000

check the 'log level' and make sure it is 0

also, in ldap.conf 'REFERRALS no' can be useful as reported here: http://www.linuxquestions.org/questions/red-hat-31/cpu-usage-of-processes-when-authenticating-against-ldap-on-rehat-enterprise-4-with-mp-388546/ [^] but might be resolved already.