Connections to LDAP

[Sreekanth Makam_1]

Hi Folks,

There is some applications X which uses ldap for authentication. Iam using Netscape LDAP Server. After some time LDAP will stop working, When I moniter the connections between LDAP port and my App X, It will start from 10 and reaches 1000 very rapidly and LDAP will stop working.

Is any of you faced this problem? So how to increase this limit, i.e. 1000. I guess some kernel parameter is related to this limit?. Atleast as a work around i can increase this limit and start my load testing for now.

The Next question is , Why is this happening? Is this Application X's problem or some LDAP settings problem?

Please folks, Fast...

Thanks in advance...

[Steven E. Protter]

There should be error messages in the log files for hte Netscape LDAP server. It should happen when functionality dumps.

There may be messages in /var/adm/syslog/syslog.log depending on the nature of teh failure.

Do you really have 1000 users, or is it possible that processes are failing and piling up.

SEP

[Sreekanth Makam_1]

Hi Folks,

I got the solution. This is simple..
When a client closes a ldap connection and some problem happens in network, the ldap server will not close it. By this, all the idle connections will remain and filedescriptor limit will be reached. Once it reaches(in my case itis 1024), ldap will stop working.

In the ldap config file, idletimeout parameter will solve this.

idletimeout =0 # never close idle connections.

Changes i made is
idletimeout = 30# close idle connections after 30 secs.

Thats it...
Thanks..