I am using Dovecot 2.2.13, which doesn't yet seem to have the $auth_cache_negative parameter. Should the negative cache value honor $auth_cache_ttl then? I had a problem where some of our ldap systems were reinitialized. Some users, presumably those who tried to login while their records were returning a failure, became unable to login after the records were once again returning normally. I currently have: auth_cache_size = 5 M auth_cache_ttl = 5 mins # Not yet implemented #auth_cache_negative = 2 mins yet the problem seemed to persist for more than an hour. Also, how can I flush the cache for a non-default instance's cache using doveadm -- "doveadm auth cache flush" doesn't seem to have an '-a' option AFAICT. # doveadm auth usage: doveadm [-Dv] [-f <formatter>] auth <command> [<args>] cache flush w
Am 19.09.2014 um 02:09 schrieb Will Yardley:> I am using Dovecot 2.2.13, which doesn't yet seem to have the > $auth_cache_negative parameter. Should the negative cache value honor > $auth_cache_ttl then? > > I had a problem where some of our ldap systems were reinitialized. Some > users, presumably those who tried to login while their records were > returning a failure, became unable to login after the records were once > again returning normally. > > I currently have: > auth_cache_size = 5 M > auth_cache_ttl = 5 mins > # Not yet implemented > #auth_cache_negative = 2 mins > > yet the problem seemed to persist for more than an hour. > > Also, how can I flush the cache for a non-default instance's cache using > doveadm -- "doveadm auth cache flush" doesn't seem to have an '-a' > option AFAICT. > > # doveadm auth > usage: doveadm [-Dv] [-f <formatter>] auth <command> [<args>] > cache flushjust hard restart dovecot the auth cache is not persistent -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 181 bytes Desc: OpenPGP digital signature URL: <http://dovecot.org/pipermail/dovecot/attachments/20140919/a00e70dd/attachment-0001.sig>
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Thu, 18 Sep 2014, Will Yardley wrote:> Also, how can I flush the cache for a non-default instance's cache using > doveadm -- "doveadm auth cache flush" doesn't seem to have an '-a' > option AFAICT. > > # doveadm auth > usage: doveadm [-Dv] [-f <formatter>] auth <command> [<args>] > cache flushmhm: -a does not have no relationship to (Dovecot) "instance". doveadm auth cache flush flushes all the auth cache, no selection of an user possible, no need for - -a. doveadm -i instance_name auth cache flush should flush all the auth cache of the specified instance. Note the "-i" preceeds the command. - -- Steffen Kaiser -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) iQEVAwUBVBvLf3z1H7kL/d9rAQKNiggAiNDAsp6rsiaG/UYT3hsQi8zwjTNUtfcy 3e2Joe6nRo+7ie9Uuy3P3qqY63q113cEaPEjhu+bGPyNHkMeLOAw7/l3RB+YomJo DMqke+Yyb5I3GlZOHmWtZlFDSN9qW/B7YFu8YhXSRy4+g4hWzJl/zTbcmx4uBZnM Ii0Cy5qN1BLqXKhmsYeY4YQibVHvRslxRxLKXU/aLokARin9M4eUocZ79gvG9MIu BM2PmvArvNtCE9+lafkDgr8rqVxfdh5nt2pWVdswtNra/5OWrUH0U3ks2+/WZ2lw U+0iLsL4gnadYY7cBGo0XexGUX7ZlU1+Nb1+I9Oj+HJPx2C9IF1h0Q==Wmo2 -----END PGP SIGNATURE-----