On Thu, 2002-12-05 at 22:12, Nick Urbanik wrote:
> 
> > > There are about 8000 user accounts, and the system
> > > has worked for a couple of years.  It all works fine until we get requests like
> > > this at the rate of up to 345/second:
> > >
> > > base="uid=020526238,ou=People,dc=tyict,dc=vtc,dc=edu,dc=hk" scope=0
> > > filter="(objectClass=*)
> > > (many other user ids in the base for other queries)
> >
> > Well, that's odd, isn't it?  Why would it expect there to be such a uid?
> 
> I am unclear why it is going though the student IDs, but all our student IDs are
> their student numbers; this is just one of them.

If the uid's are valid, that settles my curiosity.  Generally, you can't
add usernames that don't start with an alpha character... such names
break things like quotas (on some systems, at least).

> One problem that fam has is that it runs as root, so cannot read the NFS automounted
> user directories; perhaps this is part of its problem?

I doubt it.  Tell me... you obviously have portmap running on the NFS
server, do you also have FAM running there?  If so, then FAM on the
clients should use that FAM daemon for its service, rather than polling
the NFS directories.  I don't know if that changes anything.

Also, are you mounting /home to the clients, or automounting their
individual home directories?  What file manager are the clients using? 
Are the clients viewing /home?

> > Offhand, I'd say that it would be helpful to index the presence of the
> > uid attribute, if those uid's are invalid.
> >
> > AFAIK, you'll have to modify slapd.conf to specify:
> > index   uid     pres,eq
> > This is a change from it's predefined index of just "eq".  After that
> > you'll have to shut down the directory server and run
> > /usr/sbin/slapindex
> 
> Thanks, but yes, we already have indexing set on a presence and equality search for
> the objectClass attribute.

I said the "uid" attribute... but only if the queries were for invalid
uid's.  Since they're not, it won't help.  Don't bother.




-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]?subject=unsubscribe
https://listman.redhat.com/mailman/listinfo/redhat-list

Reply via email to