Timo Sirainen wrote:
On 6.12.2010, at 7.32, Jorgen Lundman wrote:

Dec 06 08:46:28 deliver([email protected]): Error: userdb 
lookup([email protected]) failed: Internal failure

auth process should log an error about this too?

It does? I guess we do not have that enabled. Only have these two set:

log_path = /var/log/dovecot_error.log
info_log_path = /var/log/dovecot_info.log

Perhaps you mean I should enable "auth_verbose" ? That I can do.



This is all handled by OpenLDAP code internally. I've no idea how it works.


Ah yes, I see that you just pass "LDAP hosts" directly to ldap_init().
So it really is up to LDAP there.



src/auth/db-ldap.h :

/* Maximum number of pending requests before delaying new requests. */
#define DB_LDAP_MAX_PENDING_REQUESTS 128

That's probably too large, because for v2.0 I've dropped it to 8:
http://hg.dovecot.org/dovecot-2.0/rev/3cda9f2f48bd

Yeah, by default slapd starts 16 threads, but only half of those are allowed to come from the same IP.

Thanks, I will keep digging.

Lund


--
Jorgen Lundman       | <[email protected]>
Unix Administrator   | +81 (0)3 -5456-2687 ext 1017 (work)
Shibuya-ku, Tokyo    | +81 (0)90-5578-8500          (cell)
Japan                | +81 (0)3 -3375-1767          (home)

Reply via email to