On Wed, 22 Aug 2001 at 18:04, Orlando Andico wrote:
> I'm planning to use LDAP for UNIX user authentication through RFC2307.
> I recall reading a NetworkWorldFusion article where they stated that
> OpenLDAP is dog-slow..
For quite some time now I've been hoping to do that, too, with the
objective of not having to use NIS/YP and yet have a single user database
for a bunch of Linux boxes. Never got around to deployment, though. Aside
from some problem with libnss-ldap I had, it was so slow that doing an ls
would make you feel like you were behind a dial-up connection. :(
> They were not kidding!! updating the posixAccount hierarchy (analogous
> to /etc/passwd) takes about 0.46 seconds PER ENTRY!! that's horribly
> slow!! Querying takes about 0.04 seconds (23 queries per second
> maximum) which is still very slow! there's no way I can deploy this in
> a production environment with my user load!!
Not just yours. On any decent system those statistics are going to slow up
life like hell. :(
> Hmmm.. anyone tried the iPlanet LDAP server?
Is this free? I haven't, obviously. Maybe you can share the URL?
BTW, libpam-pgsql has been out for awhile, and libnss-pgsql was just
released awhile ago (first beta). This is nowhere near the supposed
stability of authentication with LDAP, but some of you out there might
wanna play around and give it a shot. :)
--> Jijo
--
Federico Sevilla III :: [EMAIL PROTECTED]
Network Administrator :: The Leather Collection, Inc.
GnuPG Key: <http://jijo.leathercollection.ph/jijo.gpg>
_
Philippine Linux Users Group. Web site and archives at http://plug.linux.org.ph
To leave: send "unsubscribe" in the body to [EMAIL PROTECTED]
To subscribe to the Linux Newbies' List: send "subscribe" in the body to
[EMAIL PROTECTED]
