OK, so here's an odd behaviour..

/etc/hosts has:

127.0.0.1   localhost localhost.localdomain localhost4
localhost4.localdomain4
::1         localhost localhost.localdomain localhost6
localhost6.localdomain6

Commenting out the IPv6 line fixed the issue - ldapsearch AND
self-service-password are super fast.

On Wed, Feb 8, 2017 at 9:24 AM, jdelisle <jdeli...@gmail.com> wrote:

> I have more information - I noticed from my OpenLDAP logs that they LDAP
> activity begins and ends an instant before the browser reports success.
> This made me wonder if the script was having some sort of issue with
> connectivity to LDAP.  I ran some ldapsearch'es by hand, and discovered
> that using "-h localhost" is SUPER slow, while "-h 127.0.0.1" is instant.
>
> Oddly, localhost resolves immediately and correctly to 127.0.0.1 using
> dig, ping, etc.. so I'm not sure what's going on, but I'll run this to
> ground and report back.
>
> On Wed, Feb 8, 2017 at 9:12 AM, jdelisle <jdeli...@gmail.com> wrote:
>
>> Here's a packet-capture:  http://imgur.com/a/53iL9
>>
>> I was wrong about this being browser-side.  Now that I've tested via HTTP
>> and watched with Wireshark, I can see the client-side issues a POST, and
>> waits a long time for the server's 200 OK response.  (took 130 seconds...
>> ugggh)
>>
>> What can I do from the server-side to determine where the holdup is?  I'd
>> be happy to provide any logs that would help.  All other LDAP operations
>> from PHP sites I host work great, so it seems to be isolated to this.
>>
>> Thanks
>>
>> On Wed, Feb 8, 2017 at 8:58 AM, Clément OUDOT <
>> clement.ou...@savoirfairelinux.com> wrote:
>>
>>>
>>>
>>> Le 08/02/2017 à 15:51, jdelisle a écrit :
>>>
>>>> All other PHP-based applications work great. Again, I really don't
>>>> think the issue is happening server-side, it appears to be the browser
>>>> doing *something*, but I have no idea what or how to provide more info
>>>> about what's happening.
>>>>
>>>> I can move the site to HTTP and provide packet captures during a
>>>> password-reset of a test account, if that helps.
>>>>
>>>
>>> Any log/capture can help to understand your problem. You can also use
>>> your browser devtools to see how requests are sent and analyze what took so
>>> long (DNS, SSL, etc.)
>>>
>>>
>>>
>>> Clément.
>>>
>>> _______________________________________________
>>> ltb-users mailing list
>>> ltb-users@lists.ltb-project.org
>>> http://lists.ltb-project.org/listinfo/ltb-users
>>>
>>
>>
>
_______________________________________________
ltb-users mailing list
ltb-users@lists.ltb-project.org
http://lists.ltb-project.org/listinfo/ltb-users

Reply via email to