On Jan 22, 2015, at 5:18 PM, John Douglass <john.douglass@oit.gatech.edu> wrote:
Hehe, I've been doing EXTENSIVE tweaking on our end and I still haven't found any magic numbers. Currently on Samba 3.6 but moving to 4.1.14 VERY soon to address some performance issues. Namely that the number of winbind processes only increases, only after 4.1.12 does the fix exist to kill off connections idle more the X (default 60s) time. When you hit the max number of DC connections winbind stops being able to authenticate and just crashes and burns. Restarting winbind when it gets near its threshold seems to help.
That’s just sad. We’ve done testing with FreeRADIUS and OpenLDAP. We get 30K auths/s. Using just an OpenLDAP client, 60K or more.
We have been working very closely with Cisco and have a pre-alpha 8.x controller release we are testing that directly addresses this issue, but does not completely fix it. We have seen a definite decrease on the issues between controllers and radius servers but the back end seems to be the issue now (the Radius -> AD),
It’s something which should have been fixed 10 years ago TBH. But… that’s another story. Alan DeKok.