[389-users] Query blocking server

[Rich Megginson]

Juan Asensio Sánchez wrote:
> Hi
>
> Samba is making a query to our 389 DS (v. 1.2.2, and too older
> versions) that makes the servers freeze. The server is running, and
> accepting connections, although the next queries are not processed
> until the Samba query is returned. This Samba query takes a long time
> to be returned, because it is searching all databases and all objects
> in the directory (more than 20000). The filter is
> "(&(uid=*)(objectClass=sambaSamAccount))". This query is done when
> executing the command "net user" from a Windows or Linux machine. This
> queries are executed manually, and intentionally, but should not make
> the server freeze. Why is this happening? Is there any option to avoid
> this?
>   
I think you need to increase your nsslapd-idlistscanlimit - see
http://www.redhat.com/docs/manuals/dir-server/8.1/cli/Configuration_Command_File_Reference-Plug_in_Implemented_Server_Functionality_Reference-Database_Plug_in_Attributes.html#Configuration_Command_File_Reference-Database_Attributes_under_cnconfig_cnldbm_database_cnplugins_cnconfig-nsslapd_idlistscanlimit
and
http://www.redhat.com/docs/manuals/dir-server/8.1/admin/Managing_Indexes.html#Managing_Indexes-About_Indexes
> Regards.
>
> --
> 389 users mailing list
> 389-users at redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-directory-users
>   


-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3258 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://listman.redhat.com/archives/fedora-directory-users/attachments/20091026/4d5cce2f/attachment.bin>