I think that only mass users must be authenticated using LDAP.

And heavy load on LDAP server shows that You create new session for every new operation.

On Jan 7, 2008 3:33 PM, florian.engelmann@bt.com wrote:

Hi, We just migrated our unix/linux accounts to LDAP. We decided to migrate every user account that can login (except root) to LDAP. Now we have heavy load on our LDAP systems and I think this is because we also migrated the oracle users that are running our oracle databases. This is because the oracle admins log on the systems using the user the database is running with. I do not know that much about oracle but is it mandatory to administrate an oracle database with the same user? Does it make sense to migrate systemusers to ldap?

Florian Engelmann

Hi,

thank you for your answer. I was toled by the project leader of our LDAP migration that the LDAP clients are caching the authentication information and users like the oracle user or apache won't create new sessions for every operation. I also was toled that the clients cache those information for 12 hours so we will never have any hanging oracle databases due to a crash of our LDAP servers. Is that true?

Hi!

I'm not sure.

And new Oracle session creation (or not ) for every new operation (and necessary new user authentication) depends from your solution. How did You set up this authentication? I think that Oracle doesn't cache user password or data .