[Fedora-directory-users] looking for some insight into configuring FDS for an enterprise environment of 10k users

[George Holbert]

> Running this script will generate "can't contact the LDAP server" errors.

Does this happen immediately, or does the script run for a while first?
When you start seeing this message, what shows up in the server's access 
and error logs?

> Max file descriptors: 4096

If you're running on machines dedicated to the directory service, you 
can increase this quite a bit... in fact, this is probably the limit 
you're hitting.



Anderson, Cary wrote:
> I have been doing some stress tests on the FDS in order to try and 
> configure the server for an enterprise wide deployment.  My goal is to 
> recommend the number of slave/master servers and the appropriate 
> configuration for an environment with 10k users.
>  
> Starting with a default FDS installation I have modified the directory 
> accordingly:
> 10k users id's
> the max cache size: 63Mb
> Lookthrough limit:  15000
> Max file descriptors: 4096
> memory avail. for cache: 100Mb
> Created an index for uidnumber
>  
> I have created a php script to stress test the server.
> The script has the following parameters:
>  
> processes 500      # number of simultaneous connections
> binds 5                 #number of times the script will loop
> query 50               # number of queries to make
> min sleep 1           # min time between queries
> max sleep 5          # max time between queries
> uid_number 50000 # search for this uidnumber
> server 10.27.1.104 #host ldap server
>  
> Running this script will generate "can't contact the LDAP server" 
> errors.  My question is should I be looking at some other parameters 
> to modify in order to have the server handle more simultaneous 
> connections.  500 connections doesn't seem like an unreasonable number 
> of connections for an enterprise directory server, yet the server is 
> rolling over at what seems to be a pretty light load...
>  
> Any insights on how best to configure the server to handle a larger 
> number of connections would be greatly appreciated.
>  
> Thanks
>