Marvin & Scott, Marvin, you recommendation is already being executed. It seems a good approach and I did a quick test to be sure I removed the appropriate elements since I have not used that Authentication Handler since I took it out of the box.
I will let you know how it goes. Scott, I am forwarding your comment to the SA managing that portion. I can provide details of the CAS configuration files, but I can tell I have not modified any CAS configurations beyond what was needed to use the service registry DB, adding a service administrator, assertions for AD LDAP and appropriate passwords, etc. We set those up very specific to interact with Ellucian. Linda Linda Toth University of Alaska - Office of Information Technology (OIT) - Identity and Access Management 910 Yukon Drive, Suite 103 907-450-8320 Fairbanks, Alaska 99775 [email protected] | www.alaska.edu/oit/ On Tue, Nov 19, 2013 at 9:04 AM, Marvin Addison <[email protected]>wrote: > > Tests show that CAS plateaus at 9 simultaneous login attempts. At that > > point, the tester will aggregate logins and continue to push them > through, > > but at some point the multi-tasking slows down to the point that Apache > > times out. The tests were isolated to authentication to confirm that > > communicating to client services did not affect the login rate. > > I would recommend testing against a cloned instance of your prod VM > where you substitute SimpleTestUsernamePasswordAuthenticationHandler > for your BindLdapAuthenticationHandler. That should give you a good > sense of whether the authentication subsystem is the bottleneck, which > is what I expect. I'm fairly certain that tuning your LDAP connection > pools will provide improved performance regardless, but it would be > helpful to compare with the stub handler to get a sense of the > magnitude of the problem. > > M > > -- > You are currently subscribed to [email protected] as: > [email protected] > To unsubscribe, change settings or access archives, see > http://www.ja-sig.org/wiki/display/JSG/cas-user > -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
