Gerrard Geldenhuis wrote: >> -----Original Message----- >> From: 389-users-boun...@lists.fedoraproject.org [mailto:389-users- >> boun...@lists.fedoraproject.org] On Behalf Of Rich Megginson >> Sent: 12 November 2010 16:32 >> To: General discussion list for the 389 Directory server project. >> Subject: Re: [389-users] Slow response from server >> >> Gerrard Geldenhuis wrote: >> >>> Hi >>> >>> We are getting a slow responses from one of our LDAP servers and I am >>> not sure what is causing the problem I have run a logconv.pl -j and >>> the following is interesting: >>> >>> > > > >>> Connections Reset By Peer: 0 >>> >>> Resource Unavailable: 136 >>> >>> - 136 (T1) Idle Timeout Exceeded >>> >>> >> does logconv.pl -V show anything like unindexed searches, admin limit >> exceeded, long operation times? >> >>> >>> > > No admin limit exceeded or long operation times. > > Stricly spoken we don't have unindexed searches but my test bash script > caused quite a number of. We are seeing random timeouts to this specific > server when doing a search like the following: > while true ; do ldapsearch -h ldapserver.company -ZZ -x -W -D > "uid=johndoe,ou=people,dc=company" -b "dc=company" -L -y pwd ; sleep 0.5; done > > Watching the performance figures in the console does not highlight any > specific problems. > > I am fairly certain that it is an internal network issue but I need to have > proof which is why we are currently doing tcpdumps. > You're using TLS - if you remove the -ZZ, do you still have the same problem? > We have only seen the problem on one of our consumer servers. The only > difference being the order of servers in the nsfarmserverurl. Changing the > order seems to fix the problem but as it is intermittent we can't really say > that conclusively. > > Our chaining settings is quite aggressive though and might need further > tuning. > nsbindconnectionslimit: 5 > nsconcurrentoperationslimit: 5 > nsconnectionlife: 130 > nsbindtimeout: 3 > nsbindretrylimit: 3 > nsmaxresponsedelay: 3 > nsmaxtestresponsedelay: 5 > > Any thoughts on those values? Should/Could some values be increased? > Not sure. Sounds like you're going about collecting data correctly. > Best Regards > > ________________________________________________________________________ > In order to protect our email recipients, Betfair Group use SkyScan from > MessageLabs to scan all Incoming and Outgoing mail for viruses. > > ________________________________________________________________________ > -- > 389 users mailing list > 389-users@lists.fedoraproject.org > https://admin.fedoraproject.org/mailman/listinfo/389-users >
-- 389 users mailing list 389-users@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/389-users
