Title: LDAP Query Response Time

I am looking for the same thing. We are having more and more applications bagging against the directory. I hate nothing more then a 2am call “I think AD is Slow”.  I know there are a few Tool$ that do LDAP query response time tracking very well. I’m look for FREE. Did I miss the suggestions?

 

I’m looking for a command or script that I can point at DC’s and it give me LDAP query time (with a given query) and even maybe a average?  If anyone has seen this please let me know.

 

Thanks!

 

 

 


From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED]
Sent: Tuesday, June 01, 2004 8:14 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] LDAP Query Response Time

 

Thanks everyone for the suggestions – even the shameless plugs from Gil… J

 

You know… at first all we had to worry about was Exchange.  It has some fail safes (that don’t always work) for unresponsive or slow responding domain controllers.  Here lately, we’re connecting anything with a pulse requiring authentication to Active Directory.  Unfortunately, a lot of the applications don’t have any legitimate failsafe (timeouts, etc).  So basically, I’m just looking for a way to measure a simple ldap query to determine how responsive a server is or has been – to assist in troubleshooting and CYA of course.

 

Again thanks all…

 


From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Eric Fleischman
Sent: Friday, May 28, 2004 4:40 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] LDAP Query Response Time

 

So a few ideas have been floated out on this thread. I can float a few myself if you can answer a question first: what is your goal?

 

Common goals I’ve heard of:

  • I want to understand all queries my DCs are seeing
  • I want to identify queries bogging me down
  • I want to try and spot DC perf issues generally before they become major problems

 

Or do you have another goal?

 

~Eric

 

 


From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joe
Sent: Friday, May 28, 2004 3:16 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] LDAP Query Response Time

 

One way to do this is set up "stations" that on some frequency will send ldap queries to your DCs. You will then simply record the time it took to process the query. Obviously do something that is consistent (rootdse or specific attribs from the default context) so your times don't deviate based on amount of information returned. This gives you data you can track long term for how fast or slow a given DC is. If you exceed some average you define as bad, you alert on it. This could warn you of network issues (say a virus is eating up more and more bandwidth) or your DC is getting overloaded or hurting.

 

 

  joe

 

 


From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED]
Sent: Friday, May 28, 2004 2:23 PM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] LDAP Query Response Time

Anyone found a clever way to monitor and alert on this stuff?  J  Counters maybe?

Attachment: smime.p7s
Description: S/MIME cryptographic signature

Reply via email to