I've recently configured Postgres (8.3) to authenticate against OpenLDAP this is my pg_hba.conf entry: host all all 0.0.0.0/0 ldap "ldap://ldapserver/dc=mydomain,dc=com;uid=;,ou=postgresql,dc=mydomain,dc=com";
Things are working fine most of the time. However, every once in a while i'm getting something along the lines of: Dec 6 08:17:24 devcell-db1 postgres[12401]: [2-1] user=xxx.yyyyyyy,db=userdb,trans=0[] LOG: LDAP login failed for user "uid=xxx.yyyyyyy,ou=postgresql,dc=mydomain,dc=com" on Dec 6 08:17:24 devcell-db1 postgres[12401]: [2-2] server "ldapserver": error code -1 The problem is, i'm not seeing a corresponding error on the OpenLDAP side. Also, it seems like this only happens under load, like if someone does a unit test that connects to the database 100 times in a few seconds. Has anyone dealt with this? I've been trying to tune OpenLDAP to handle more concurrent connections, but without much success. i've set in my /etc/openldap/slapd.conf threads 32 concurrency 100 and in /etc/ldap.conf threads 100 idle_timelimit 60 bind_timelimit 120 The fact that it's not even logging the failure worries me, like something's causing the request not even to hit the server. Any ideas would be greatly appreciated. Thanks Dave -- Sent via pgsql-general mailing list (pgsql-general@postgresql.org) To make changes to your subscription: http://www.postgresql.org/mailpref/pgsql-general
