Does anyone use nscd?
Dan Nelson
dnelson at allantgroup.com
Thu Oct 6 06:00:19 UTC 2011
In the last episode (Oct 04), Trond Endrestol said:
> On Tue, 4 Oct 2011 18:51+0200, Dag-Erling Smorgrav wrote:
> > Trond Endrestol <Trond.Endrestol at fagskolen.gjovik.no> writes:
> > > It's in daily use at Gjovik Technical College (Fagskolen i Gjovik),
> > > here in Norway. Both the mail and web servers authenticates our users
> > > by LDAP, and nscd certainly speeds up the lookups.
> >
> > OK. No trouble with clients dying of SIGPIPE? I could never reproduce
> > the bug, but both users who reported problems used ldap, and I don't
> > have an LDAP server to test against, so I thought it might be specific
> > to LDAP.
>
> Not in my (somewhat limited) experience.
On a tangent, I also heavily recommend using the nss-pam-ldapd port instead
of nss_ldap. It includes a daemon called nslcd which is the only process
that links to the ldap libary. The nss module is a tiny plug that talks to
nslcd using a simple protocol. It really reduces the socket count to your
ldap server, and removes the potential namespace problems caused by
dlopening libldap.so in every process.
--
Dan Nelson
dnelson at allantgroup.com
More information about the freebsd-hackers
mailing list