Jaehwan Kim via FreeIPA-users wrote: > Hello. > > I verified that this disconnection happens because new hosts are continuously > added into a SINGLE BIG host-group by automembership, which results in slow > response of ldap search. > I also verified that the disconnection does't happen if ldap_search_timeout > is changed from 6 sec to 60 sec, in client side. > In my simplified condition with ldap_search_timeout = 6 sec, disconnection > happens when # of hosts of the hostgroup is more than 4K. > Can you guide me if there is a recommended hostgroup size and sss > ldap_search_timeout value?
It is not recommended that any group exceed 3K members. Beyond this the memberof calculations required noticeably slows down as you are experiencing. What is the reason to have a single hostgroup will hosts as members? Perhaps there is another way to achieve what you want. rob -- _______________________________________________ FreeIPA-users mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/[email protected] Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
