We're looking at replacing our mysql auth and userdb, with a set of Red Hat Directory servers, and I see dovecot supports either authentication binds, or "password lookups": http://wiki.dovecot.org/AuthDatabase/LDAP I'm curious if anybody can give any insight as to what kind of performance to expect from authentication binds ? How many POP3s/second should we expect from it ? Our directory servers will be 2 blades with 4 cores of 2GHz each, and we expect to keep the full directory in memory on both servers. -jf
On Wed, 2009-01-14 at 23:36 +0100, Jan-Frode Myklebust wrote:> I'm curious if anybody can give any insight as to what kind of > performance to expect from authentication binds ? How many > POP3s/second should we expect from it ?Try yourself with imaptest (http://imapwiki.org/ImapTest): imaptest - select=0 clients=<try different values> It'll authenticate the same user, but as long as you don't enable auth cache it'll still do the LDAP lookups and you can get a pretty good idea of the performance. My guess is that the performance bottleneck won't be authentication binds, as long as the latency between Dovecot and LDAP server is small. -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 197 bytes Desc: This is a digitally signed message part URL: <http://dovecot.org/pipermail/dovecot/attachments/20090114/1acfab14/attachment-0002.bin>
On Wed, Jan 14, 2009 at 05:43:51PM -0500, Timo Sirainen wrote:> > Try yourself with imaptest (http://imapwiki.org/ImapTest): > > imaptest - select=0 clients=<try different values>Cool, thanks!> My guess is that the performance bottleneck won't be authentication > binds, as long as the latency between Dovecot and LDAP server is small.OK, the servers are pretty close network-wise. Will try to run some tests, and post some numbers when I have them. -jf