Using memcached for authentication
Currently I use pam with pam_mysql for authenticating cyrus accounts But I frequently run into the issue of mysql connections exceeding limit. Can I simply use something like Memcached or Redis to authenticate users Cyrus Home Page: http://www.cyrusimap.org/ List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ To Unsubscribe: https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
Re: Using memcached for authentication
Hello Ram and Cyrus-imap friends, On Wed, Jul 09, 2014 at 01:32:50PM +0530, Ram wrote: Currently I use pam with pam_mysql for authenticating cyrus accounts But I frequently run into the issue of mysql connections exceeding limit. Can I simply use something like Memcached or Redis to authenticate users You could also simply increase the connections limit in MySQL. I cannot get to my notes at the moment, but I'm pretty sure that you find the needed info somewhere on the net. duckduckgo is your friend as long as Google is tracking your interests. -- Met vriendelijke groeten, With kind regards, Mit freundlichen Gruessen, De jrus wah, Wiel * W.K. Offermans Powered by (__) \\\'',) \/ \ ^ .\._/_) www.FreeBSD.org Cyrus Home Page: http://www.cyrusimap.org/ List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ To Unsubscribe: https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
Re: Using memcached for authentication
On 07/09/2014 02:49 PM, Willy Offermans wrote: Hello Ram and Cyrus-imap friends, On Wed, Jul 09, 2014 at 01:32:50PM +0530, Ram wrote: Currently I use pam with pam_mysql for authenticating cyrus accounts But I frequently run into the issue of mysql connections exceeding limit. Can I simply use something like Memcached or Redis to authenticate users You could also simply increase the connections limit in MySQL. I did .. I have now set it to unreasonable limits. But I think that is not a good idea anyway. Most of these these webmail products they really jam the imap servers with too many authentication requests I run cyrus-sasl with caching on but still see too many connections going to mysql servers , when actually they are not needed at all I cannot get to my notes at the moment, but I'm pretty sure that you find the needed info somewhere on the net. duckduckgo is your friend as long as Google is tracking your interests. Cyrus Home Page: http://www.cyrusimap.org/ List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ To Unsubscribe: https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
Re: Using memcached for authentication
Am Mittwoch, 9. Juli 2014, 11:19:08 schrieb Willy Offermans: On Wed, Jul 09, 2014 at 01:32:50PM +0530, Ram wrote: Currently I use pam with pam_mysql for authenticating cyrus accounts But I frequently run into the issue of mysql connections exceeding limit. Can I simply use something like Memcached or Redis to authenticate users may be pam-memcache or similiar is your friend - means: if you really want to use memcache - or take a look at alternatives like saslauthd's cache feature or overthinking your MySQL (caching/buffering/connection handling etc.) setup: https://github.com/intersvyaz/pam-memcache2 hth cheerioh, Niels. -- --- Niels Dettenbach Syndicat IT Internet http://www.syndicat.com PGP: https://syndicat.com/pub_key.asc --- signature.asc Description: This is a digitally signed message part. Cyrus Home Page: http://www.cyrusimap.org/ List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ To Unsubscribe: https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
Re: Using memcached for authentication
Am Mittwoch, 9. Juli 2014, 15:06:16 schrieb Ram: Most of these these webmail products they really jam the imap servers with too many authentication requests I run cyrus-sasl with caching on but still see too many connections going to mysql servers , when actually they are not needed at all hmm, i use pam_mysql instead of cyrus mysql for authentication in most scenarios with webmail etc. - i can't see more then one auth record request per login over saslauthd pam... -- --- Niels Dettenbach Syndicat IT Internet http://www.syndicat.com PGP: https://syndicat.com/pub_key.asc --- signature.asc Description: This is a digitally signed message part. Cyrus Home Page: http://www.cyrusimap.org/ List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ To Unsubscribe: https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
Re: Using memcached for authentication
On Wed, July 9, 2014 11:36 am, Ram wrote: Most of these these webmail products they really jam the imap servers with too many authentication requests imapproxyd Eric Luyten, Computing Centre VUB/ULB. Cyrus Home Page: http://www.cyrusimap.org/ List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ To Unsubscribe: https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
Re: Using memcached for authentication
Hello Ram and Cyrus-imap friends, On Wed, Jul 09, 2014 at 03:06:16PM +0530, Ram wrote: On 07/09/2014 02:49 PM, Willy Offermans wrote: Hello Ram and Cyrus-imap friends, On Wed, Jul 09, 2014 at 01:32:50PM +0530, Ram wrote: Currently I use pam with pam_mysql for authenticating cyrus accounts But I frequently run into the issue of mysql connections exceeding limit. Can I simply use something like Memcached or Redis to authenticate users You could also simply increase the connections limit in MySQL. I did .. I have now set it to unreasonable limits. But I think that is not a good idea anyway. Most of these these webmail products they really jam the imap servers with too many authentication requests I run cyrus-sasl with caching on but still see too many connections going to mysql servers , when actually they are not needed at all I cannot get to my notes at the moment, but I'm pretty sure that you find the needed info somewhere on the net. duckduckgo is your friend as long as Google is tracking your interests. If this is the case, then one should look to these authentication requests as well. If they are not necessary, then the amount of requests should be drastically decreased. As a matter of fact, our imap-server also requests a lot of authentications. It will be about 200 times an hour per user. I noticed this before and I never understood why, but it also never led to an unworkable situation. So I did not spent much time on it. -- Met vriendelijke groeten, With kind regards, Mit freundlichen Gruessen, De jrus wah, Wiel * W.K. Offermans Powered by (__) \\\'',) \/ \ ^ .\._/_) www.FreeBSD.org Cyrus Home Page: http://www.cyrusimap.org/ List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ To Unsubscribe: https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
Re: Using memcached for authentication
Hello Cyrus-imap friends, On Wed, Jul 09, 2014 at 12:05:02PM +0200, Willy Offermans wrote: Hello Ram and Cyrus-imap friends, On Wed, Jul 09, 2014 at 03:06:16PM +0530, Ram wrote: On 07/09/2014 02:49 PM, Willy Offermans wrote: Hello Ram and Cyrus-imap friends, On Wed, Jul 09, 2014 at 01:32:50PM +0530, Ram wrote: Currently I use pam with pam_mysql for authenticating cyrus accounts But I frequently run into the issue of mysql connections exceeding limit. Can I simply use something like Memcached or Redis to authenticate users You could also simply increase the connections limit in MySQL. I did .. I have now set it to unreasonable limits. But I think that is not a good idea anyway. Most of these these webmail products they really jam the imap servers with too many authentication requests I run cyrus-sasl with caching on but still see too many connections going to mysql servers , when actually they are not needed at all I cannot get to my notes at the moment, but I'm pretty sure that you find the needed info somewhere on the net. duckduckgo is your friend as long as Google is tracking your interests. If this is the case, then one should look to these authentication requests as well. If they are not necessary, then the amount of requests should be drastically decreased. As a matter of fact, our imap-server also requests a lot of authentications. It will be about 200 times an hour per user. I noticed this before and I never understood why, but it also never led to an unworkable situation. So I did not spent much time on it. I had another look to it and figured out that the amount of requests strongly depends on the used e-mail client. In that case it is worth to investigate the option imapproxyd in more detail, since the choice of e-mail client cannot be dictated. -- Met vriendelijke groeten, With kind regards, Mit freundlichen Gruessen, De jrus wah, Wiel * W.K. Offermans Powered by (__) \\\'',) \/ \ ^ .\._/_) www.FreeBSD.org Cyrus Home Page: http://www.cyrusimap.org/ List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ To Unsubscribe: https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
