mcx settings slow

[Lindsay Robertso]

Howdy.

We’re using 10.4.11 server (MERLIN) on an xserve G5 2GHz to roll out mcx settings to about 30 mac clients.
When the clients boot up, it can take as long as 3 to 4 minutes (average of probably 2 minutes) for the blue progress bar to go across the screen and get the login screen.
No users are authenticating to the osx server.

If i disable ldap on the clients teh progress bar takes about 7 seconds reliably
if i enable ldap, and take the client out of the managed computer list on the server, the progress bar takes about 13 seconds.
if i put the mac back into the list, the long delay comes back.

The xserve isn’t doing anything else that could slow it down.

The ldap log is shing a lot of errors though….

Jan 22 15:30:24 MERLIN slapd[47]: <= bdb_equality_candidates: (apple-computers) index_param failed (18)\n Jan 22 15:30:25 MERLIN slapd[47]: <= bdb_equality_candidates: (apple-computers) index_param failed (18)\n Jan 22 15:34:20 MERLIN slapd[47]: <= bdb_equality_candidates: (apple-computers) index_param failed (18)\n Jan 22 15:34:20 MERLIN slapd[47]: <= bdb_equality_candidates: (apple-computers) index_param failed (18)\n Jan 22 15:34:20 MERLIN slapd[47]: <= bdb_equality_candidates: (apple-computers) index_param failed (18)\n Jan 22 15:34:20 MERLIN slapd[47]: <= bdb_equality_candidates: (apple-computers) index_param failed (18)\n Jan 22 15:34:20 MERLIN slapd[47]: <= bdb_equality_candidates: (apple-computers) index_param failed (18)\n Jan 22 15:34:20 MERLIN slapd[47]: <= bdb_equality_candidates: (apple-computers) index_param failed (18)\n Jan 22 15:34:20 MERLIN slapd[47]: <= bdb_equality_candidates: (apple-computers) index_param failed (18)\n Jan 22 15:34:20 MERLIN slapd[47]: <= bdb_equality_candidates: (apple-computers) index_param failed (18)\n Jan 22 15:34:20 MERLIN slapd[47]: <= bdb_equality_candidates: (apple-computers) index_param failed (18)\n Jan 22 15:34:20 MERLIN slapd[47]: <= bdb_equality_candidates: (apple-computers) index_param failed (18)\n Jan 22 15:34:20 MERLIN slapd[47]: <= bdb_equality_candidates: (apple-computers) index_param failed (18)\n Jan 22 15:34:20 MERLIN slapd[47]: <= bdb_equality_candidates: (apple-computers) index_param failed (18)\n Jan 22 15:34:20 MERLIN slapd[47]: <= bdb_equality_candidates: (apple-computers) index_param failed (18)\n Jan 22 15:34:20 MERLIN slapd[47]: <= bdb_equality_candidates: (apple-computers) index_param failed (18)\n Jan 22 15:34:20 MERLIN slapd[47]: <= bdb_equality_candidates: (apple-computers) index_param failed (18)\n Jan 22 15:34:20 MERLIN slapd[47]: <= bdb_equality_candidates: (apple-computers) index_param failed (18)\n Jan 22 15:34:20 MERLIN slapd[47]: <= bdb_equality_candidates: (apple-computers) index_param failed (18)\n Jan 22 15:34:20 MERLIN slapd[47]: <= bdb_equality_candidates: (apple-computers) index_param failed (18)\n Jan 22 15:34:20 MERLIN slapd[47]: <= bdb_equality_candidates: (apple-computers) index_param failed (18)\n Jan 22 15:34:20 MERLIN slapd[47]: <= bdb_equality_candidates: (apple-computers) index_param failed (18)\n Jan 22 15:34:20 MERLIN slapd[47]: <= bdb_equality_candidates: (apple-computers) index_param failed (18)\n Jan 22 15:34:20 MERLIN slapd[47]: <= bdb_equality_candidates: (apple-computers) index_param failed (18)\n Jan 22 15:34:20 MERLIN slapd[47]: <= bdb_equality_candidates: (apple-computers) index_param failed (18)\n Jan 22 15:34:20 MERLIN slapd[47]: <= bdb_equality_candidates: (apple-computers) index_param failed (18)\n Jan 22 15:34:20 MERLIN slapd[47]: <= bdb_equality_candidates: (apple-computers) index_param failed (18)\n Jan 22 15:34:21 MERLIN slapd[47]: <= bdb_equality_candidates: (apple-computers) index_param failed (18)\n Jan 22 15:34:21 MERLIN slapd[47]: <= bdb_equality_candidates: (apple-computers) index_param failed (18)\n Jan 22 15:40:25 MERLIN slapd[47]: <= bdb_equality_candidates: (apple-computers) index_param failed (18)\n Jan 22 15:40:26 MERLIN slapd[47]: <= bdb_equality_candidates: (apple-computers) index_param failed (18)\n l.

[Lindsay Robertso]

Yep, it was upgraded from 10.3

thanks,

[Lindsay Robertso]

Well… it didn’t dramatically fix the problem, So I checked the log and now…

Jan 30 14:54:48 MERLIN slapd[24184]: bdb_back_initialize: Sleepycat Software: Berkeley DB 4.2.52: (December 3, 2003)\n
Jan 30 14:54:48 MERLIN slapd[24184]: bdb_db_init: Initializing BDB database\n
Jan 30 14:54:49 MERLIN slapd[24184]: slapd starting\n
Jan 30 14:58:01 MERLIN slapd[24184]: <= bdb_substring_candidates: (apple-mcxflags) index_param failed (18)\n Jan 30 15:00:36 MERLIN slapd[24184]: <= bdb_substring_candidates: (apple-mcxflags) index_param failed (18)\n Jan 30 15:03:02 MERLIN slapd[24184]: <= bdb_substring_candidates: (apple-mcxflags) index_param failed (18)\n l.

[Lindsay Robertso]

We’ve had big problems with very slow boot processes on 30 macs. The blue progress bar can take up to 5 minutes to go across.

From http://www.macwindows.com/AD.html#021907e i found this

March 5, 2007
Dan Ball found that the problem wasn’t with Active Diretory, but with the LDAP version 3 plugin. A reconfiguration fixed the problem:

When we first switched to Tiger at the Mac OS 10.4.6 revision. I thought things were running great in testing until I re-imaged a lab. If I rebooted the lab of roughly 30 machines randomly they would take forever to startup. Each one would hang for roughly 5 minutes or so before showing the login window.

For us the issue wasn’t the connection to Active Directory, it was the connection to our OS X (10.4.6) server.

The fix for us was in the LDAPv3 plugin under the “LDAP Mapping” column, I had to set it to “Open Directory Server” instead of the default of “From Server.” I switched this setting and haven’t had an issue since then.

It fixed my problem!

[kamil]

I tried to create indices for some ldap objects I’ve been getting errors for:
Feb 29 10:24:06 server slapd[23495]: <= bdb_equality_candidates: (uniqueMember) index_param failed (18) Feb 29 10:24:13 server slapd[23495]: <= bdb_substring_candidates: (authAuthority) index_param failed (18) I added the following to /etc/slapd.conf: index authAuthority sub index uniqueMember eq And then ran the slapindex as recommended, but I continue to get the errors. Ideas?

[eholtam]

You didn’t say what OS version your clients are on so I’ll assume Tiger because we’ve seen this issue with our Tiger build.
Are your clients also bound to AD for authentication? If so check to see what order the Authentication paths are in in /Applications/Utilities/Directory Access. In our case we had to switch them from what our Panther build had to the opposite order. I don’t recall if that was to move AD on top of LDAP or vice versa. But play around with that setting and see if that makes a difference. It did for us.

-Eric

[Lindsay Robertso]

We’re not using AD…

[Author]

Posts