[Auth_ldap] False negatives from auth_ldap 1.6.0

Dave Carrigan dave at rudedog.org
Wed Feb 23 14:21:49 PST 2005


On Wed, Feb 23, 2005 at 02:07:45PM -0500, Joe Formoso wrote:
> ... we could turn off persistent connections to the
> LDAP server (forcing a new bind for every user authentication) without taking
> a real performance hit.  Assuming that's possible.

You could probably do this by setting Apache's MaxRequestsPerChild
directive. By tuning it carefully, you could probably ensure that the
child process exits before the cached ldap connection has aged
sufficiently to trigger the server bug.

-- 
Dave Carrigan
Seattle, WA, USA
dave at rudedog.org | http://www.rudedog.org/ | ICQ:161669680
UNIX-Apache-Perl-Linux-Firewalls-LDAP-C-C++-DNS-PalmOS-PostgreSQL-MySQL

Dave is currently listening to The Clash - No Justice Tonight (1980-03-08)
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://www.rudedog.org/pipermail/auth_ldap/attachments/20050223/5f240343/attachment.pgp 


More information about the Auth_ldap mailing list