15 Sep
2016
15 Sep
'16
10:22 a.m.
On Sep 15, 2016, at 10:21 AM, Matthew Newton <mcn4@leicester.ac.uk> wrote:
In my experience, around 30-40... but does depend on hardware.
Could try using libwbclient with recent FreeRADIUS - see winbind_username/winbind_domain in mods-available/mschap. It might help; it should be a bit quicker than calling out to ntlm_auth.
Recent versions of Samba should be better as well IIRC.
Even better, enable TLS session caching. It's easier to do in v3.1.x, but even v3.0.x should be OK. That takes the load off of AD, and also FreeRADIUS. I've seen many 1000's of sessions resumed per second. Alan DeKok.