Am 29.03.2015 um 13:53 schrieb Dieter Klünter: > Am Fri, 27 Mar 2015 20:17:12 +0100 > schrieb Timo Eissler <[email protected]>: > >> Which search filters do you mean? >> >> I didn't executed any ldapsearch commands while i got the messages. >> There's just sssd on my two notebooks and pam_ldap/nss_ldap on the >> server itself. > It is not you, performing a search, but pam-ldap. > The nsswitch and pam configuration file is /etc/ldap.conf or, > depending on the distribution, /etc/pam-ldap.conf. Have a look at > filters and search base. If these are nor configured properly and > indexed, it may raise a high server load. > > -Dieter > I know that, but i assumed you mean't something else, because i already posted my /etc/ldap.conf with the initial mail to the list.
But here is it again: host 127.0.0.1 base dc=foobar,dc=local uri ldap://localhost/ ldap_version 3 scope one bind_policy soft idle_timelimit 3600 pam_filter objectclass=posixAccount pam_member_attribute memberuid pam_min_uid 1000 pam_password exop nss_base_passwd ou=People,dc=foobar,dc=local?one nss_base_shadow ou=People,dc=foobar,dc=local?one nss_base_group ou=Groups,dc=foobar,dc=local?one nss_base_hosts ou=Hosts,dc=foobar,dc=local?one ssl start_tls nss_initgroups_ignoreusers root,bin,daemon,adm,lp,sync,shutdown,halt,news,uucp,operator,portage,nobody,man,sshd,cron,mail,postmaster,ldap,m ysql,mediatomb,dovecot,dovenull,apache,openvpn,clamav,bacula,asterisk,ntp -Timo >> -Timo >> >> Am 26.03.2015 um 23:23 schrieb Dieter Klünter: >>> Am Thu, 26 Mar 2015 19:16:05 +0100 >>> schrieb Timo Eissler <[email protected]>: >>> >>>> I have no custom threads settings in my slapd.conf. >>>> >>>> Currently slapd is running with 12 threads on my system with 8 >>>> cores (with hyperthreading). >>> [...] >>> >>> I have seen this before. Could you provide an example of your search >>> filters an the number of connections within a given time? >>> >>> -Dieter >>> > > -- Timo Eissler Senior Project Engineer / Consultant Am Zuckerberg 54 D-71640 Ludwigsburg Tel.: +49 7141 4094003 Mobil.: +49 151 20650311 Email: [email protected]
signature.asc
Description: OpenPGP digital signature
