Hello openldap users!<div><br></div><div>I&#39;ve got Openldap 2.4.23 that used as authentication and authorization server for about 40-50 servers.</div><div>OS - FreeBSD 8.1.</div><div><br></div><div>It&#39;s not heavy loaded.</div>
<div><br></div><div><div>openldap# top -SP</div><div>last pid: 45647;  load averages:  0.15,  0.15,  0.07                                                                                                     up 81+22:29:21  15:18:57</div>
<div>99 processes:  3 running, 80 sleeping, 16 waiting</div><div>CPU 0:  0.7% user,  0.0% nice,  0.0% system,  0.0% interrupt, 99.3% idle</div><div>CPU 1:  0.4% user,  0.0% nice,  0.7% system,  0.0% interrupt, 98.9% idle</div>
<div>Mem: 79M Active, 1402M Inact, 379M Wired, 84M Cache, 213M Buf, 31M Free</div><div>Swap: 4060M Total, 8K Used, 4060M Free</div><div><br></div><div>  PID USERNAME   THR PRI NICE   SIZE    RES STATE   C   TIME   WCPU COMMAND</div>
<div>   11 root         2 171 ki31     0K    32K CPU0    0 3874.8 200.00% idle</div><div> 4773 ldap        18  44    0   398M 53748K ucond   1  41.1H  0.00% slapd</div></div><div><br></div><div>But on my servers sometimes I see in logs something like</div>
<div><br></div><div>on FTP-server:</div><div><div>Mar 25 21:55:32 someftp ftpd: nss_ldap: could not search LDAP server - Server is unavailable</div></div><div><br></div><div>Authentication works fine, no problems. But want to find out what can be wrong.</div>
<div><br></div><div>To understand this problem I installed ldap-stats utility and made it run:</div><div><br></div><div>/var/log/debug.log - it&#39;s half day openldap server usage log.</div><div><div><br></div><div>openldap# ldap-stats -c 1000 /var/log/debug.log</div>
<div><br></div><div><br></div><div>Report Generated on Tue Apr  5 15:16:47 2011</div><div>--------------------------------------------</div><div>Processed &quot;/var/log/debug.log&quot;:  Apr  5 00:00:00 - Apr  5 15:17:33</div>
<div><br></div><div><br></div><div>Operation totals</div><div>----------------</div><div>Total operations              : 913845</div><div>Total connections             : 101226</div><div>Total authentication failures : 2</div>
<div>Total binds                   : 99700</div><div>Total unbinds                 : 99181</div><div>Total searches                : 714964</div><div>Total compares                : 7</div><div>Total modifications           : 0</div>
<div>Total modrdns                 : 0</div><div>Total additions               : 0</div><div>Total deletions               : 0</div><div>Unindexed attribute requests  : 0</div><div>Operations per connection     : 9.03</div>
</div><div><br></div><div><br></div><div><div># Uses        Filter</div><div>----------    -----------------------------------------------------------</div><div>  615504      (&amp;(objectClass=posixAccount)(uid=mailer-daemon))</div>
<div>  90699       (&amp;(objectClass=posixGroup))</div><div>  6833        (&amp;(objectClass=posixAccount)(uid=root))</div><div>  2236        (&amp;(objectClass=posixAccount)(uid=hiddenuser1))</div><div>  669         (&amp;(objectClass=posixGroup)(memberUid=root))</div>
<div>  318         (&amp;(objectClass=posixAccount)(uid=testacc))</div><div>  87          (&amp;(objectClass=posixGroup)(memberUid=postfix))</div><div>  87          (&amp;(objectClass=posixAccount)(uid=postfix))</div><div>
  81          (objectClass=posixAccount)</div><div>  68          (&amp;(objectClass=posixAccount)(uid=debian-exim))</div><div>  68          (&amp;(objectClass=posixGroup)(memberUid=Debian-exim))</div><div>  39          (&amp;(objectClass=posixAccount)(uid=normaluser))</div>
<div>  34          (&amp;(objectClass=posixAccount)(uidNumber=7333))</div><div>  30          (&amp;(objectClass=posixGroup)(memberUid=hiddenuser1))</div><div>  29          (&amp;(objectClass=posixGroup)(memberUid=chelovek))</div>
<div>  29          (&amp;(objectClass=posixAccount)(uid=chelovek))</div><div>  27          (&amp;(objectClass=posixAccount)(uid=user0))</div><div>  23          (&amp;(objectClass=posixAccount)(uid=nobody))</div><div>  21          (&amp;(objectClass=posixAccount)(uid=user1))</div>
<div>  18          (&amp;(objectClass=posixAccount)(uid=user2))</div><div>  16          (&amp;(objectClass=posixAccount)(uid=user3))</div><div>  15          (&amp;(objectClass=posixAccount)(uid=user4))</div><div>  12          (&amp;(objectClass=posixAccount)(uid=user5))</div>
<div>  11          (&amp;(objectClass=posixAccount)(uidNumber=7330))</div><div>  10          (&amp;(objectClass=posixAccount)(uid=user15))</div><div>  9           (&amp;(objectClass=posixAccount)(uid=user16))</div><div>  8           (&amp;(objectClass=posixAccount)(uidNumber=7333))</div>
<div>  6           (&amp;(objectClass=posixAccount)(uid=user6))</div><div>  5           (&amp;(objectClass=posixAccount)(uid=user7))</div><div>  5           (cn=defaults)</div><div>  4           (&amp;(objectClass=posixAccount)(uidNumber=7228))</div>
<div>  4           (&amp;(objectClass=shadowAccount)(uid=user1))</div><div>  4           (&amp;(objectClass=posixAccount)(uid=user9))</div><div>  4           (&amp;(objectClass=posixAccount)(uid=user10))</div><div>  4           (&amp;(objectClass=posixAccount)(uid=user11))</div>
<div>  3           (&amp;(objectClass=posixAccount)(uid=user12))</div><div>  3           (&amp;(objectClass=posixAccount)(uid=user13))</div><div>  3           (&amp;(objectClass=posixAccount)(uid=user14))</div></div><div>
...............</div><div>and MANY others that has 1 use in this stats.</div><div>I think this many queries from mail relay server.</div><div>* user1 and etc - just hidden real users.</div><div><br></div><div>What can I do to tune nss? Can you point me in a right direction? Do not know what to look at.</div>
<div>If you need any additional information, logs and etc - I&#39;ll provide it.</div><div><br></div><div>Thanks in advance!</div><div><br></div>