[Date Prev][Date Next]
[Chronological]
[Thread]
[Top]
DO NOT USE MIT KRB5 WITH CYRUS-SASL & OPENLDAP (And here is why)
Hopefully that has got peoples attention, and now I will detail why this is
the case.
I have run 2 tests against the same replica, with the same database.
Test 1)
openssl-0.9.6h
db4-4.1.25
heimdal (CVS from 01/27/2003)
cyrus-sasl-2.1.12
openldap-head (CVS from 02/19/2003)
Test 2)
openssl-0.9.6h
db4-4.1.25
krb5-1.2.7
cyrus-sasl-2.1.12
openldap-head (CVS from 02/19/2003)
The test:
On a client machine, read in the password file of our users. Continuously
do a query of the maildrop of our users from the DB by uid. Continue to
add client machines.
The results:
Heimdal: Added 72 machines. Had a sustained query rate of 63
queries/second. Machine load peaked at 4.72. slapd grew from 111MB
resident to 115MB resident. slapd remained responsive and up for the next
day before being stopped for the MIT krb5 test.
MIT: Hit a max of 38 hosts. Some hosts dropped. Had a sustained query
rate of 8.8987 queries/second. Machine load peaked at 20 (when slapd
died). Slapd grew from 111MB to 300MB (when slapd died).
Here are the result numbers from the queries per second for each test. I
suggest paying attention to the number of hosts and query rate. It is
abysmal for MIT Krb5.
It might be helpful to post this to the openldap website and link it in so
people can see WHY you shouldn't use mit krb5. (Or create a link from there
to my website, I'll keep these results around).
Full Heimdal results at:
http://www.stanford.edu/~quanah/openldap/heimdal-results.html
Full MIT KRB5 results at:
http://www.stanford.edu/~quanah/opendap/mit-results.html
HEIMDAL SUMMARY RESULTS:
============================== SUMMARY DATA ==============================
Start Time: Fri Feb 21 11:34:40 2003
End Time: Fri Feb 21 12:11:37 2003
Elapsed: 2218 seconds
Number Test Queries Answered: 140066
Overall Average: 63.1497 answers/second
Overall Distribution (Number of hosts active varies):
: 5 answers/second: 1 occurrences
: 6 answers/second: 1 occurrences
: 7 answers/second: 2 occurrences
: 9 answers/second: 6 occurrences
: 10 answers/second: 1 occurrences
: 11 answers/second: 3 occurrences
: 13 answers/second: 1 occurrences
: 15 answers/second: 1 occurrences
: 16 answers/second: 1 occurrences
: 17 answers/second: 2 occurrences
: 18 answers/second: 1 occurrences
: 19 answers/second: 4 occurrences
: 20 answers/second: 4 occurrences
: 25 answers/second: 1 occurrences
: 27 answers/second: 1 occurrences
: 29 answers/second: 1 occurrences
: 30 answers/second: 1 occurrences
: 31 answers/second: 2 occurrences
: 32 answers/second: 2 occurrences
: 33 answers/second: 1 occurrences
: 34 answers/second: 3 occurrences
: 36 answers/second: 1 occurrences
: 37 answers/second: 2 occurrences
: 38 answers/second: 2 occurrences
: 40 answers/second: 1 occurrences
: 41 answers/second: 3 occurrences
: 42 answers/second: 1 occurrences
: 43 answers/second: 1 occurrences
: 44 answers/second: 2 occurrences
: 46 answers/second: 3 occurrences
: 47 answers/second: 4 occurrences
: 49 answers/second: 1 occurrences
: 50 answers/second: 2 occurrences
: 51 answers/second: 7 occurrences
: 52 answers/second: 9 occurrences
: 53 answers/second: 13 occurrences
: 54 answers/second: 7 occurrences
: 55 answers/second: 8 occurrences
: 56 answers/second: 23 occurrences
: 57 answers/second: 25 occurrences
: 58 answers/second: 48 occurrences
: 59 answers/second: 52 occurrences
: 60 answers/second: 62 occurrences
: 61 answers/second: 103 occurrences
: 62 answers/second: 155 occurrences
: 63 answers/second: 242 occurrences
: 64 answers/second: 286 occurrences
: 65 answers/second: 299 occurrences
: 66 answers/second: 300 occurrences
: 67 answers/second: 261 occurrences
: 68 answers/second: 127 occurrences
: 69 answers/second: 73 occurrences
: 70 answers/second: 39 occurrences
: 71 answers/second: 14 occurrences
: 72 answers/second: 2 occurrences
MIT KRB5 SUMMARY RESULTS:
============================== SUMMARY DATA ==============================
Start Time: Sat Feb 22 15:26:32 2003
End Time: Sat Feb 22 17:05:35 2003
Elapsed: 5944 seconds
Number Test Queries Answered: 52894
Overall Average: 8.8987 answers/second
Overall Distribution (Number of hosts active varies):
: 0 answers/second: 28 occurrences
: 1 answers/second: 44 occurrences
: 2 answers/second: 84 occurrences
: 3 answers/second: 149 occurrences
: 4 answers/second: 237 occurrences
: 5 answers/second: 347 occurrences
: 6 answers/second: 440 occurrences
: 7 answers/second: 609 occurrences
: 8 answers/second: 708 occurrences
: 9 answers/second: 723 occurrences
: 10 answers/second: 700 occurrences
: 11 answers/second: 615 occurrences
: 12 answers/second: 468 occurrences
: 13 answers/second: 337 occurrences
: 14 answers/second: 250 occurrences
: 15 answers/second: 119 occurrences
: 16 answers/second: 55 occurrences
: 17 answers/second: 18 occurrences
: 18 answers/second: 9 occurrences
: 19 answers/second: 3 occurrences
: 26 answers/second: 1 occurrences
--Quanah
--
Quanah Gibson-Mount
Senior Systems Administrator
ITSS/TSS/Computing Systems
Stanford University
GnuPG Public Key: http://www.stanford.edu/~quanah/pgp.html