Mailing List Archive

Cherokee ldap auth doesn't close the connections
Hello,

we have configured a virtual server on Cherokee with ldap authentication
for all site.

We have detected that server doesn't close the ldap connections and
grows a lot. For example, this is a netstat:

# netstat -an | grep ESTA | grep 389 | wc -l
1103

These connections never disappear and after a few minutes, the Cherokee
web server is very slow.

How can we configure Cherokee for close ldap connections?. This is the
cherokee.conf part of configure auth:

-----
vserver!412!rule!500!auth = ldap
vserver!412!rule!500!auth!base_dn = o=Junta de Castilla-La Mancha,c=es
vserver!412!rule!500!auth!bind_dn = uid=search,o=Junta de Castilla-La
Mancha,c=es
vserver!412!rule!500!auth!bind_pw = password
vserver!412!rule!500!auth!filter = (uid=${user})
vserver!412!rule!500!auth!methods = basic
vserver!412!rule!500!auth!realm = LDAP
vserver!412!rule!500!auth!server = ldap.jccm.es
vserver!412!rule!500!auth!tls = 0
vserver!412!rule!500!disabled = 0
vserver!412!rule!500!match = directory
vserver!412!rule!500!match!directory = /
vserver!412!rule!500!match!final = 0
vserver!412!rule!500!no_log = 0
vserver!412!rule!500!only_secure = 0
-----

This same virtual web server configured in Apache normally does not
exceed 60 ldap connections

Regards.

--
_ ____ ____ __ __
| |/ ___/ ___| \/ | Jose Illescas Perez. Linux User #73559
_ | | | | | | |\/| | TFNO: +34 925 266 219 FAX: +34 925 266 300
| |_| | |__| |___| | | | El Webteam de http://www.jccm.es
\___/ \____\____|_| |_| Junta de Comunidades de Castilla-La Mancha
_______________________________________________
Cherokee mailing list
Cherokee@lists.octality.com
http://lists.octality.com/listinfo/cherokee
Re: Cherokee ldap auth doesn't close the connections [ In reply to ]
El 19/12/11 18:21, Stefan de Konink escribió:
> On Mon, 19 Dec 2011, Jos? Illescas P?rez wrote:
>
>> How can we configure Cherokee for close ldap connections?. This is the
>> cherokee.conf part of configure auth:
>
> Could you log a bug for this?
>
>
> Stefan

I've opened a bug in http://code.google.com/p/cherokee/issues. Issue 1319.

Regards!.

--
_ ____ ____ __ __
| |/ ___/ ___| \/ | Jose Illescas Perez. Linux User #73559
_ | | | | | | |\/| | TFNO: +34 925 266 219 FAX: +34 925 266 300
| |_| | |__| |___| | | | El Webteam de http://www.jccm.es
\___/ \____\____|_| |_| Junta de Comunidades de Castilla-La Mancha
_______________________________________________
Cherokee mailing list
Cherokee@lists.octality.com
http://lists.octality.com/listinfo/cherokee
Re: Cherokee ldap auth doesn't close the connections [ In reply to ]
El 19/12/11 19:15, José Illescas Pérez escribió:
> El 19/12/11 18:21, Stefan de Konink escribió:
>> On Mon, 19 Dec 2011, Jos? Illescas P?rez wrote:
>>
>>> How can we configure Cherokee for close ldap connections?. This is the
>>> cherokee.conf part of configure auth:
>>
>> Could you log a bug for this?
>>
>>
>> Stefan
>
> I've opened a bug in http://code.google.com/p/cherokee/issues. Issue 1319.
>
> Regards!.
>

I think that for every click in links in the web page with ldap auth,
Cherokee opens a new connection in ldap server and don't close.

Regards.

--
_ ____ ____ __ __
| |/ ___/ ___| \/ | Jose Illescas Perez. Linux User #73559
_ | | | | | | |\/| | TFNO: +34 925 266 219 FAX: +34 925 266 300
| |_| | |__| |___| | | | El Webteam de http://www.jccm.es
\___/ \____\____|_| |_| Junta de Comunidades de Castilla-La Mancha
_______________________________________________
Cherokee mailing list
Cherokee@lists.octality.com
http://lists.octality.com/listinfo/cherokee
Re: Cherokee ldap auth doesn't close the connections [ In reply to ]
Is it possible to create an LDAP connection pool and use only these?.

Regards.

El 20/12/11 09:52, José Illescas Pérez escribió:
> El 19/12/11 19:15, José Illescas Pérez escribió:
>> El 19/12/11 18:21, Stefan de Konink escribió:
>>> On Mon, 19 Dec 2011, Jos? Illescas P?rez wrote:
>>>
>>>> How can we configure Cherokee for close ldap connections?. This is the
>>>> cherokee.conf part of configure auth:
>>>
>>> Could you log a bug for this?
>>>
>>>
>>> Stefan
>>
>> I've opened a bug in http://code.google.com/p/cherokee/issues. Issue 1319.
>>
>> Regards!.
>>
>
> I think that for every click in links in the web page with ldap auth,
> Cherokee opens a new connection in ldap server and don't close.
>
> Regards.
>


--
_ ____ ____ __ __
| |/ ___/ ___| \/ | Jose Illescas Perez. Linux User #73559
_ | | | | | | |\/| | TFNO: +34 925 266 219 FAX: +34 925 266 300
| |_| | |__| |___| | | | El Webteam de http://www.jccm.es
\___/ \____\____|_| |_| Junta de Comunidades de Castilla-La Mancha
_______________________________________________
Cherokee mailing list
Cherokee@lists.octality.com
http://lists.octality.com/listinfo/cherokee