ejabberd - Comments for "LDAP auth -&amp;gt; web_admin enumerates all users" https://www.ejabberd.im/node/2559 en links which are slow (requesting LDAP users) https://www.ejabberd.im/node/2559#comment-50512 <div class="quote-msg"> <div class="quote-author"><em>badlop</em> wrote:</div> <p>Can you please specify exactly which URIs provoke the problem in Web Admin with that patch applied?</p></div> <p>When clicking on "Virtual Hosts" in main menu.<br /> Then after selecting one virtual host, when clicking in its submenu on "Users", "Last Activity", "Statistics".<br /> In all other cases AFAIK the response is normal.</p> Mon, 27 Aug 2007 15:31:19 +0000 risa2000 comment 50512 at https://www.ejabberd.im Can you please specify https://www.ejabberd.im/node/2559#comment-50473 <p>Can you please specify exactly which URIs provoke the problem in Web Admin with that patch applied?</p> Sat, 25 Aug 2007 09:37:10 +0000 mfoss comment 50473 at https://www.ejabberd.im Just FYI it does work for https://www.ejabberd.im/node/2559#comment-50459 <p>Just FYI it does work for node statistics, but it does not work for virtual nodes (menu item and any subitem).</p> Fri, 24 Aug 2007 10:46:27 +0000 risa2000 comment 50459 at https://www.ejabberd.im Bug tracked, includes untested patch https://www.ejabberd.im/node/2559#comment-48842 <div class="quote-msg"> <div class="quote-author"><em>risa2000</em> wrote:</div> <p>My point is, I do not need to list (or count) all users in LDAP, since I have them already in LDAP. What concerns me only are online users. It would be great if LDAP search (or offline users) could be somehow disabled in ejabberd config.</p></div> <p>I've reported your problem to the bug tracker: <noindex><a href="https://support.process-one.net/browse/EJAB-331" title="https://support.process-one.net/browse/EJAB-331" rel="nofollow" >https://support.process-one.net/browse/EJAB-331</a></noindex></p> <p>I included a quick patch that does exactly what you want :)<br /> The patch is for ejabberd SVN, since it benefits from recent code not present in ejabberd 1.1.3.</p> <p>Another drawback is that I can't test it myself. If you try it, let me know if it works correctly.</p> Tue, 21 Aug 2007 22:27:04 +0000 mfoss comment 48842 at https://www.ejabberd.im LDAP auth -> web_admin enumerates all users https://www.ejabberd.im/node/2559#comment-47369 <div class="quote-msg"> <div class="quote-author"><em>badlop</em> wrote:</div> <p>The number of registered accounts is calculated in those URLs:<br /> <noindex><a href="http://example.org:5280/admin/vhosts/" title="http://example.org:5280/admin/vhosts/" rel="nofollow" >http://example.org:5280/admin/vhosts/</a></noindex><br /> <noindex><a href="http://example.org:5280/admin/server/example.org/users/" title="http://example.org:5280/admin/server/example.org/users/" rel="nofollow" >http://example.org:5280/admin/server/example.org/users/</a></noindex><br /> <noindex><a href="http://example.org:5280/admin/server/example.org/stats/" title="http://example.org:5280/admin/server/example.org/stats/" rel="nofollow" >http://example.org:5280/admin/server/example.org/stats/</a></noindex></p> <p>Are only those URLs the ones that are problematic to you?</p></div> <p>Yes.</p> <p>My LDAP server is set to limit number of users in one shot to 400. Even those 400 may take 1 minute or more.</p> <div class="quote-msg"> <div class="quote-author"><em>badlop</em> wrote:</div> <p>What are the exact symptoms that you can see: CRASH, ERROR, slow response of the web admin, 100% CPU consumed...?</p></div> <p>The only symptom is that web_admin interface is not responsive for certain time and then there are just (first) 400 users. And visually, communication with LDAP also seems to be slow.</p> <p>My point is, I do not need to list (or count) all users in LDAP, since I have them already in LDAP. What concerns me only are online users. It would be great if LDAP search (or offline users) could be somehow disabled in ejabberd config.</p> Mon, 20 Aug 2007 22:04:54 +0000 risa2000 comment 47369 at https://www.ejabberd.im risa2000 wrote: When I https://www.ejabberd.im/node/2559#comment-46980 <div class="quote-msg"> <div class="quote-author"><em>risa2000</em> wrote:</div> <p>When I access ejabberd web admin interface and go into Virtual Host section it seems that the server tries to enumerate all users from LDAP directory and does it quite often on different occasions.</p></div> <p>The number of registered accounts is calculated in those URLs:<br /> <noindex><a href="http://example.org:5280/admin/vhosts/" title="http://example.org:5280/admin/vhosts/" rel="nofollow" >http://example.org:5280/admin/vhosts/</a></noindex><br /> <noindex><a href="http://example.org:5280/admin/server/example.org/users/" title="http://example.org:5280/admin/server/example.org/users/" rel="nofollow" >http://example.org:5280/admin/server/example.org/users/</a></noindex><br /> <noindex><a href="http://example.org:5280/admin/server/example.org/stats/" title="http://example.org:5280/admin/server/example.org/stats/" rel="nofollow" >http://example.org:5280/admin/server/example.org/stats/</a></noindex></p> <p>Are only those URLs the ones that are problematic to you?</p> <p>What are the exact symptoms that you can see: CRASH, ERROR, slow response of the web admin, 100% CPU consumed...?</p> <p>BTW, if you can't even access your vhost subpages, put this URL directly in your browser:<br /> <noindex><a href="http://example.org:5280/admin/server/atenea/" title="http://example.org:5280/admin/server/atenea/" rel="nofollow" >http://example.org:5280/admin/server/atenea/</a></noindex></p> Mon, 20 Aug 2007 15:57:40 +0000 mfoss comment 46980 at https://www.ejabberd.im