On Tue, Feb 21, 2017 at 07:48:25AM -0500, Alan DeKok wrote:
On Feb 21, 2017, at 7:10 AM, David Hartburn <D.J.Hartburn@kent.ac.uk> wrote:
For our LDAP queries, we have specified the forest DNS name as the LDAP server, so that we achieve via DNS a random distribution of queries against our AD servers. Previously we had hammered the first server on the list.
But the underlying problem is likely that your AD system is returning redirects. A LOT of them.
If the data is in the Global Catalogue, point FreeRADIUS at port 3269 on the DCs instead of 636. It should stop the referrals, and therefore also speed up LDAP searches. Otherwise, just chuck BIND on the box and point at that for DNS. Matthew -- Matthew Newton, Ph.D. <mcn4@leicester.ac.uk> Systems Specialist, Infrastructure Services, I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom For IT help contact helpdesk extn. 2253, <ithelp@le.ac.uk>