top button
Flag Notify
    Connect to us
      Site Registration

Site Registration

Dovecot SLOW with sssd in centos 6

0 votes
340 views

I have a big performance problem with a mail server using dovecot and authenticating users via ldap.
The architecture of the machine is a local ldap and mysql server, they are used by dovecot for authenticating the mail users.

If i use pam_sss the mail server has about 1/8 - 1/10 the performances it has if i use the pam_ldap.
Even doing a 'time ls -l' on the mail tree (there are about 3000 ldap users in that directory) it is very very slow, the first time I try to do it after a reboot, it takes about 6 minutes with sssd, and about 8 seconds
with ldap.

Since I know sssd is recommended, anyone knows that there is anything in configuration I can try to increase the speed, avoiding me to use the old pam_ldap module?

posted Jul 1, 2013 by anonymous

Share this question
Facebook Share Button Twitter Share Button LinkedIn Share Button

2 Answers

0 votes

1) If i use pam_sss the mail server has about 1/8 - 1/10 the performances it has if i use the pam_ldap.

What exactly does this mean? Is this dovecot performance or something else?

2) Even doing a 'time ls -l' on the mail tree (there are about 3000 ldap users in that directory) it is very very slow, the first time I try to do it after a reboot, it takes about 6 minutes with sssd, and about 8 seconds with ldap.
Did you specify enumerate = True in sssd.conf? This may cause delays when you have many users in the directory...

answer Jul 1, 2013 by anonymous
0 votes

--- Even doing a 'time ls -l' on the mail tree (there are about 3000 ldap users in that directory) it is very very slow, the first time I try to do it after a reboot, it takes about 6 minutes with sssd, and about 8 seconds with ldap.

If this time lag only occurs at boot sssd maybe having trouble creating or managing its cache. Do subsequent ls commands run quicker once the cache is established?

I've seen similar behaviour on some of my machines but I've got fewer users and don't reboot often so I've never really chased the issue down. Particularly as the times drop to essentially zero after the first run.

answer Jul 1, 2013 by anonymous
Similar Questions
0 votes

I want to set up dovecot on a CentOS server. I did this before, some time ago, but it seems to have become much more complicated, involving postfix, amavisd-new and clamav (for spamassassin).

What puzzles me is the role, if any, of procmail and .procmailrc in this new system.
Is procmail no longer used/needed?

+3 votes

I'm looking to setup a git server under CentOS 6.5 x64 that will serve 2-5 .NET developers using Visual Studio Pro 2013. I've been reading that Visual Studio 2013 now has 'native git support', but as I've been reading into this more and more, it appears to me that the 'native git support' is really the fact that Team Foundation Server has git support on it and that I'd need to setup TFS in order to use the Visual Studio 2013's native git support. Can anyone either confirm and/or deny this for me? My personal suspicion is that I will need to implement TortiseGIT to do what I want to do, but wanted to throw this question.

If, in actuality, I can use a CentOS git server with Visual Studio 2013, can anyone point me in the direction of an FAQ/directions/YouTube video/book/anything for how to setup something like this? I have the resources to setup a CentOS git server (which will also host some DreamWeaver CC users as well on other projects), but setting up a dedicated TFS server isn't an option, hence why I'm looking into this.

0 votes

I need to create a real-time replication of a partition between two servers with centos 6.4, I am researching and finding difficulty with drbd, corosync, someone indicate material, do not need to run script automatically if a node drops only replicate.

0 votes

I am using CentOS 6.0 with Apache 2.2.15, and set up Apache with virtual host. The SSI works fine on the first VH, but ssi on the other virtual hosts does not work. I got the following message in the error log:

mod_include: Options +Includes (or IncludesNoExec) wasnt set, INCLUDES filter removed

Does anyone know how to resolve this problem?

+2 votes

I tried to install CentOS 7 on a new system. It works.

However, I'm noticing small things:
1. system-config-network-tui is not installed and yum cannot find it. I realized for this -- nmtui
2. What about firewall? I can't seem to understand the replacement from system-config-firewall-tui

...