----- Original Message ----- From: "Kostas Kalevras" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thursday, September 18, 2003 12:26 AM Subject: Re: ldap connection
> On Wed, 17 Sep 2003, Rohaizam Abu Bakar wrote: > > > my radius (0.90) giving a lot of below error.... > > currently below is the setting > > > > max_servers = 1024 > > > > in ldap module: > > timeout = 5 > > timelimit = 5 > > net_timeout = 5 > > ldap_connections_number = 10 > > This seems a little bit low Which one is low?? Can u give suggestion for above value... > > Wed Sep 17 16:31:23 2003 : Error: rlm_ldap: All ldap connections are in use > > Wed Sep 17 16:31:23 2003 : Error: rlm_ldap: All ldap connections are in use > > Wed Sep 17 16:32:50 2003 : Error: WARNING: Unresponsive child (id 137382912) for request 421 > > Wed Sep 17 16:32:50 2003 : Error: WARNING: Unresponsive child (id 137196544) for request 424 > > The main question is how many radius requests does your radius server handle per > sec and how well is your ldap server responding to the corresponding queries. I don't have the figure for request per second.. But this radius is connected to 10 NASes for dialup connection for our customer... When using ldapsearch from my RADIUS to my LDAP server.. respond is very fast... But when testing using radtest .. the respond is quite slow... During the time this problem happen (currently OK)... from top command.. the CPU usage even reached 99% for radiusd daemon... > Have you indexed the uid attribute? Yes... see below from my slapd.conf ##### index objectClass,uid,uniqueIdentifier,cn,member eq ##### > From the above logs it seems that your ldap server is not responding in a timely > manner. I'm using the same configuration of LDAP for my sendmail,maildrop & courier imap and seems working well with high load... but for radius .. seems not so good... Currently using Openldap 2.0.X ... should I upgrade to Openldap 2.1.X that will work better with freeradius ?? thanks.. --haizam - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
