Reduce the influence of ldap server trouble

To: openldap-technical@openldap.org

Subject: Reduce the influence of ldap server trouble

From: Yuki Takase <takase99@gmail.com>

Date: Fri, 26 Apr 2013 18:50:01 +0900

Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:x-received:date:message-id:subject:from:to :content-type; bh=h7g3dKd0LlPIg9YmvLX6Uyh9nko6ew/Eh9dasWuIAgk=; b=T4nMhK3h4d+XEsbhoi0QwuUntOc5Hb7zHcqh/BxbH74ZTstV8eG3YDCz9OklsuK+4o rGGjq0qWmjux0C01KL556t/xul+GEjuwIfrgkyTawrYFDaqtqeJUS60nhemyEhn8J3SV f4qlzXwz1IxKZDIEItYR9T6o8V5oWkZvX9R6THjjiGt5NaxO8HLFkL6EyVqb9iRXN0vr HoDhpCQgYNCs05hjKaN7gX3PHgdsit3fgD+wAxSYeI8fGWvKrFclQ2PnWJ0CPjQ6TH13 55M/6HpsO+wqqJIz6bQblCJ9zx8jan8AyymUGx2UpvWWht91KAG+DW5HPUM/0VyWTY/U s+Sw==

Hi all

I'm a beginner of openldap.
When I can't use a ldap server because of hardware or network trouble, I want to reduce the influence of ldap client.
I changed the following configration of ldap.conf.

bind_policy soft
bind_timelimit 10
nss_initgroups_ignoreusers [local users...]

Are there other solutions to reduce the influence?

I use WebSphereMQ on Linux server.
I added MQ's startup user 'mqm' to nss_initgroups_ignoreusers.
But WebSphereMQ's startup command 'strmqm' always tries to connect to a ldap server. (I think that's a specification.)

I use a ldap server to authentification of server maintenance members.
But in some case such as above is it better not to use ldap?