Zitat von [EMAIL PROTECTED]:
Hello Enrique,
1) Please try pam_mysql-0.7-pre1-1.i386.rpm (I've compiled it foe
SLES 9, but should also work on SuSE 9.3)
and post here if the problem still exists.
2) If that won't help, try solution from
http://www.livejournal.com/users/realgreendragon/ (of Howard Shere)
Quote:
"The biggest optimization I found was to allow saslauthd to cache
stuff so it didn't have to do a mysql query each time someone checked
their mail. We now use the following flags when starting saslauthd:
FLAGS='-n0 -s 2048 -t 3600 -c'
The -n0 forces sasl to fork every time it invokes pam. This is
important because there seems to be a memory leak somewhere in pam
and if you don't do this your machine will run out of memory. My own
server was having this problem every few months, but the load on my
server is light. The load on the new server was making the memory run
out in less than day.
The other options cause sasl to cache stuff and that has been
significant in terms of performance.
The other thing about sasl is that there is an oddness to how it is
started. Part of the problem we ran into was after rebooting the
machine after putting new RAM in. Authentication was working
sometimes before the reboot and we were pretty sure it was load
related and possibly lack of memory related. So we put RAM in and
rebooted and then no authentication was working.
It turns out that sasl is startd two different ways. One way (which I
am pretty sure is what happens on startup) is:
/etc/init.d/saslauthd start
That is normal and in the above file is a place for the sasl FLAGS as
well as the authentication mechanism (MECH) that should be used. But
it turns out that while the system is running, something else
launches saslauthd as well and it gets its params from:
/etc/sysconfig/saslauthd
That file also has a place for FLAGS and for MECH.
This is the "SuSE way" to do it. In /etc/sysconfig/<service-name> the settings
are stored if you configure by YAST. With "SuSEconfig" this settings are
"translated" to the according startup-scripts or config files. If you change
the config files by hand you have to take care on both ends.
Regards
Andreas
_______________________________________________
This mailing list is hosted and supported
by bit-heads GmbH | http://www.bit-heads.ch
_______________________________________________
Web-cyradm mailing list
[email protected]
http://www.web-cyradm.org/mailman/listinfo/web-cyradm
