On Jun 4, 2010, at 3:14 PM, Ryan Manikowski wrote: > On 6/4/2010 3:09 PM, Paul Heinlein wrote: >> On Fri, 4 Jun 2010, aurfalien at gmail.com wrote: >> >> >>> Hi all, >>> >>> I have a few ldap servers slaved to a primary via syncrepl, all is >>> well. >>> >>> I've set my clients to auth against a few and there /etc/ldap.conf >>> looks like so; >>> >>> uri ldap://primary.domain.com ldap://secondary.domain.com >>> >>> However when either primary or slaves go down, while the clients can >>> log in, access is very slow, ls of any dir is painful. >>> >> I've had less than good luck using the "uri" directive with redundant >> servers. I think that "host" is deprecated, but it's worked better >> for >> me. I also decrease some timelimit settings. >> >> ----- %< ----- >> host ldap1.domain ldap2.domain >> bind_timelimit 30 >> idle_timelimit 120 >> timelimit 30 >> ----- %< ----- >> >> > > Decreasing 'timelimit' in ldap.conf will help. Enabling nscd for > caching > and setting sane dns timeout values in /etc/resolv.conf is recommended > as well. > > Ryan Manikowski > Nice, a best practice of sorts. Eager to try em out and report back.