No Node Left Behind

Currently Being Moderated

Tip of the Month: Improving LDAP Performance

Posted by shuckins on Sep 19, 2008 7:57:10 PM

Community member Nathaniel McCallum’s provided instructions for making Zenoss use HowTo use LDAP/ActiveDirectory for Authentication and Authorization recently had a very important update from Scott Haskell. Users were reporting very slow UI response times and Scott narrowed it down to those installations using LDAP. He tracked down the Zope RAM Cache Manager and updated the documentation on how to greatly improve performance:

 

Enabling Caching

 

LDAPMultiPlugins has the ability to cache expensive LDAP look-ups and other operations. This ability, however, is not enabled by default. To enable caching:

 

  • Login to the ZMI (Zope Management Interface) at http://servername:8080/zport/manage
  • Click on ‘acl_users(PAS)’ from the center pane or the top-level ‘acl_users’ from the left navigation pane
  • From the drop-down list in the upper right, select ‘RAM Cache Manager’ and click add.
  • Give the RAM Cache Object a name; e.g. – LDAP Cache
  • Click on the newly created object to configure it
  • Tweak the properties as needed
  • Click on the ‘Associate’ tab
  • Click ‘Locate’
  • Your LDAPMultiPlugins object (whatever you named it) and userManager will appear as objects that you can associate with the RAM Cache.
  • Check your LDAPMultiPlugin object and select ‘Save Changes’.

 

Caching is now enabled for LDAP.

 

Scott went even further and documented his debugging and troubleshooting of the problem. Thanks again to Scott for this great tip!

3,926 Views Tags: zenoss, community, ldap, zope, tip


Sep 14, 2009 12:06 PM Guest Gavin Henry  says:

Maybe try using a decent LDAP Directory server...not AD. Try OpenLDAP.

Sep 14, 2009 12:06 PM Guest Scott Haskell  says:

I don't really think the LDAP implementation is the issue here. My issue was authenticating over a site-to-site VPN. Anything over 75ms RTT average was painfully slow, due to checking credentials on nearly every page (and action), in Zenoss. You don't realize how many look-ups are done until you notice a slow down in the UI. You're hitting your LDAP server constantly unless you've got the RAM Cache Manager enabled. You're not going to notice this on the LAN, but definitely over a VPN.