RE: [ActiveDir] LDAP Query Response Time

[Marcus.Oh]

Title: LDAP Query Response Time

Thanks everyone for the suggestions – even the shameless plugs from Gil… J   You know… at first all we had to worry about was Exchange.  It has some fail safes (that don’t always work) for unresponsive or slow responding domain controllers.  Here lately, we’re connecting anything with a pulse requiring authentication to Active Directory.  Unfortunately, a lot of the applications don’t have any legitimate failsafe (timeouts, etc).  So basically, I’m just looking for a way to measure a simple ldap query to determine how responsive a server is or has been – to assist in troubleshooting and CYA of course.   Again thanks all…   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Eric Fleischman Sent: Friday, May 28, 2004 4:40 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] LDAP Query Response Time   So a few ideas have been floated out on this thread. I can float a few myself if you can answer a question first: what is your goal?   Common goals I’ve heard of: I want to understand all queries my DCs are seeing I want to identify queries bogging me down I want to try and spot DC perf issues generally before they become major problems   Or do you have another goal?   ~Eric     From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joe Sent: Friday, May 28, 2004 3:16 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] LDAP Query Response Time   One way to do this is set up "stations" that on some frequency will send ldap queries to your DCs. You will then simply record the time it took to process the query. Obviously do something that is consistent (rootdse or specific attribs from the default context) so your times don't deviate based on amount of information returned. This gives you data you can track long term for how fast or slow a given DC is. If you exceed some average you define as bad, you alert on it. This could warn you of network issues (say a virus is eating up more and more bandwidth) or your DC is getting overloaded or hurting.       joe     From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Friday, May 28, 2004 2:23 PM To: [EMAIL PROTECTED] Subject: [ActiveDir] LDAP Query Response Time Anyone found a clever way to monitor and alert on this stuff?  J  Counters maybe?