&nbsp;<style type="text/css"> <!--@import url(scrollbar.css); --></style><style type="text/css">@import url( C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\scrollbar.css );
</style><link rel="stylesheet" href="BLOCKQUOTE%7Bmargin-Top:%200px;%20margin-Bottom:%200px;%20margin-Left:%202em%7D"><div><font face="Verdana" size="2">Hi List,</font></div>
<div>&nbsp;</div>
<div>OS: centos5.3 x86_64</div>
<div>OpenLDAP is installed using yum.</div>
<div>&nbsp;</div>
<div>I find that when all the ldap servers are down and offline, the operations 
on the client is slow.</div>
<div>When I try to do `ls` on the directories on the client as root, it waits 
there for some seconds.(root is not local account not via ldap)</div>
<div>But when I power on the openldap servers, it is much better.</div>
<div>&nbsp;</div>
<div>The configuration on the client:</div>
<div>&nbsp;</div>
<div>
<div>[root@xxxx&nbsp;~]#&nbsp;cat&nbsp;/etc/ldap.conf&nbsp;</div>
<div></div>
<div>base&nbsp;dc=xxxx,dc=com</div>
<div>timelimit&nbsp;1</div>
<div>bind_timelimit&nbsp;1</div>
<div>nss_initgroups_ignoreusers&nbsp;root,ldap,named,avahi,haldaemon,dbus,radvd,tomcat,radiusd,news,mailman,nscd,gdm</div>
<div>uri&nbsp;<a href="ldaps://auth1.xa.xxxx.com:636">ldaps://auth1.xa.xxxx.com:636</a>&nbsp;<a href="ldaps://auth2.xa.xxxx.com:636">ldaps://auth2.xa.xxxx.com:636</a></div>
<div>ssl&nbsp;on</div>
<div>tls_checkpeer&nbsp;yes</div>
<div>tls_cacertdir&nbsp;/etc/openldap/cacerts</div>
<div>tls_cacertfile&nbsp;/etc/openldap/cacerts/cacert.pem</div>
<div>pam_password&nbsp;md5</div>
<div>bind_policy&nbsp;soft</div></div>
<div>&nbsp;</div>
<div><font face="Verdana" size="2">
<div>[root@xxxx&nbsp;~]#&nbsp;cat&nbsp;/etc/openldap/ldap.conf&nbsp;</div>
<div></div>
<div>URI&nbsp;<a href="ldaps://auth1.xa.xxxx.com:636">ldaps://auth1.xa.xxxx.com:636</a>&nbsp;<a href="ldaps://auth2.xa.xxxx.com:636">ldaps://auth2.xa.xxxx.com:636</a></div>
<div>BASE&nbsp;dc=xxxx,dc=com</div>
<div>TLS_CACERTDIR&nbsp;/etc/openldap/cacerts</div>
<div>TLS_CACERT&nbsp;/etc/openldap/cacerts/cacert.pem</div>
<div>TLS_REQCERT&nbsp;demand</div>
<div>&nbsp;</div>
<div>
<div>[root@xxxx&nbsp;~]#&nbsp;cat&nbsp;/etc/nsswitch.conf&nbsp;</div>
<div></div>
<div>
<div>passwd:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;files&nbsp;ldap</div>
<div>shadow:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;files&nbsp;ldap</div>
<div>group:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;files&nbsp;ldap</div>
<div></div>
<div>hosts:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;files&nbsp;dns</div>
<div></div>
<div></div>
<div>bootparams:&nbsp;nisplus&nbsp;[NOTFOUND=return]&nbsp;files</div>
<div></div>
<div>ethers:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;files</div>
<div>netmasks:&nbsp;&nbsp;&nbsp;files</div>
<div>networks:&nbsp;&nbsp;&nbsp;files</div>
<div>protocols:&nbsp;&nbsp;files</div>
<div>rpc:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;files</div>
<div>services:&nbsp;&nbsp;&nbsp;files</div>
<div></div>
<div>netgroup:&nbsp;&nbsp;&nbsp;files&nbsp;ldap</div>
<div></div>
<div>publickey:&nbsp;&nbsp;nisplus</div>
<div></div>
<div>automount:&nbsp;&nbsp;files&nbsp;ldap</div>
<div>aliases:&nbsp;&nbsp;&nbsp;&nbsp;files&nbsp;nisplus</div></div>
<div>&nbsp;</div></div>
<div>&nbsp;</div>
<div>Any suggestions?</div></font></div>