Date: Mon, 25 Apr 2005 12:00:23 -0500 From: Dan Nelson <dnelson@allantgroup.com> To: freebsd-stable@freebsd.org Subject: Re: nss_ldap / top startup Message-ID: <20050425170023.GB53806@dan.emsphone.com> In-Reply-To: <20050425105919.GA95908@e-Gitt.NET> References: <20050425105919.GA95908@e-Gitt.NET>
next in thread | previous in thread | raw e-mail | index | archive | help
In the last episode (Apr 25), Oliver Brandmueller said: > I have some servers running running on 5.4-STABLE as of Apr 5th. I > use nss_ldap for a userbase of currently about 24000 accounts (will > be growing to approx 60000 in the next weeks). I don't use pam_ldap > currently, because users only need to login by IMAP, POP, SMTP and > FTP, for all of these services daemons are used which natively auth > against the LDAP server. > > The more accounts there are in the LDAP directory, the longer the > startup of "top" takes. With the current userbase top takes about 3-4 > seconds to start (on a mostly idle Dual Xeon 2.8GHz with fast disks > and local slapd). > > The startup time is not any different, sometimes I feel (did not try > to measure) it's even longer, if I use "top -u" to not map uids. The > running processes are only from a few uids, all the LDAP users > usually don't have processes running under thier IDs. You can benchmark top by running "time top -d1", which will print one page then immediately exit. > Any ideas, why this is happening? Will I need 10 seconds, when there > are 60000 accounts in LDAP? :-) Try editing /usr/src/usr.bin/top/Makefile, add -DRANDOM_PW, and rebuild. That should probably be the default on FreeBSD anyway. -- Dan Nelson dnelson@allantgroup.com
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20050425170023.GB53806>