-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi Danilo,

this would be great.
I will apply the patch as soon as phpLDAPadmin provides a fix.


Best regards

Roland


Am 02.03.2012 10:33, schrieb Danilo Godec:
> 
> I just tried the stand-alone installation of the latest phpLdapAdmin - 
> it has the same issue.
> 
> I guess I'll join their mailing list and report the issue there...
> 
>     D.
> 
> 
> 
> On 03/02/2012 10:19 AM, Danilo Godec wrote:
>> On 03/01/2012 03:15 PM, Hansen Tanjung wrote:
>>> On Thu, Mar 1, 2012 at 8:57 PM, Danilo Godec<[email protected]>   
>>> wrote:
>>>> I couldn't find *any* mentioning of 120 second time limit anywhere - not
>>>> in php.ini, not in Apache config, not in LAM.
>>> Maybe at openldap limit? See http://www.openldap.org/doc/admin24/limits.html
>>>
>> Time limit is not explicitly set and according to OpenLDAP manual, the
>> default is 3600 seconds.
>>
>> I also tried setting soft and hard size limits (size.soft=200
>> size.hard=none), to see if it would help, but it didn't. Instead, this
>> weird error appeared:
>>
>>> [02-Mar-2012 09:04:23] PHP Fatal error:  Maximum execution time of 30
>>> seconds exceeded in
>>> /srv/www/htdocs/ldap-account-manager-3.5.0/templates/3rdParty/pla/lib/ds_myldap.php
>>> on line 411
>> The PHP max_execution_time was still set to 300 - where did it get the
>> 30 seconds limit!?
>>
>> Anyway, I then changed PHP max_execution_time to '0', which should stand
>> for 'unlimited' and tried the tree view again:
>>
>>> [02-Mar-2012 09:15:04] PHP Fatal error:  Maximum execution time of 120
>>> seconds exceeded in
>>> /srv/www/htdocs/ldap-account-manager-3.5.0/templates/3rdParty/pla/lib/TreeItem.php
>>> on line 167
>> Again - where did it get hte 120 seconds time limit?
>>
>>
>> I then changed OpenLDAP loggin to 'stats', so I could see what searches
>> it does. First it does a general search with '
>> base="ou=People,dc=my,dc=org" scope=1 deref=0 filter="(objectClass=*)"
>> ', ' SRCH attr=dn'.
>>
>> Then it does a search with ' base="DN" scope=0 deref=0
>> filter="(&(objectClass=*))" ', ' SRCH attr=* + ' for every DN it found
>> before (that's about 25000 DN's).
>>
>> Obviously, this would take some time, but when I try to replicate that
>> in a Bash script using 'ldapsearch' and redirecting results to a file,
>> the whole thing takes 58 seconds with logging turned off and 90 seconds
>> with logging turned on.
>>
>> I used this bash script for testing, if anyone's interested:
>>
>>> #!/bin/bash
>>>
>>> ldapsearch -x -D cn=administrator,dc=my,dc=org -w password -b
>>> ou=People,dc=my,dc=org "(objectClass=*)" dn>  temp_file
>>>
>>> for DN in $(cat temp_file | grep 'dn: ' | sed s/dn:\ //g); do
>>>          ldapsearch -x -D cn=administrator,dc=my,dc=org -w password -b
>>> $DN "(&(objectClass=*))" "* +"
>>> done
>>
>>       D.
>>
>>
> 
> 

- -- 

Mit freundlichen Grüßen

Roland Gruber
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk9RJ/4ACgkQq/ywNCsrGZ7WZwCeKw56m3oa5S2rJNEekKMCYSfq
EnYAn1oZoz1/pjALUbf2EIzYaGYVP/dv
=PhI0
-----END PGP SIGNATURE-----

------------------------------------------------------------------------------
Virtualization & Cloud Management Using Capacity Planning
Cloud computing makes use of virtualization - but cloud computing 
also focuses on allowing computing to be delivered as a service.
http://www.accelacomm.com/jaw/sfnl/114/51521223/
_______________________________________________
Lam-public mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/lam-public

Reply via email to