Anonymous_User Absent Member.
Absent Member.
991 views

Ldap AFPTCP HELP!

We are a school district using ldap and afptcp to allow our mac users access to the file servers. They can login the mac login and get their desktop sent down to them from the home directory mounts.

Our problems:

CPU: Pegs out a 100% and login fail (AFP is not multi processor aware so this is a problem)

It seems after a few logins 100-150 the server does not accept any more connections.

Being a very newbie to this I have a couple a question:

Is there a limit (max) to concurrent afptcp logins? we are having 5 labs (30 computers in each) trying to log in (sometimes a few will attempt at the same time, mostly random times)

We have added some parameters to AFPTCP: (afpstrt)

%if !loaded nfap4nrm.nlm then cmd load nfap4nrm.nlm
load afptcp.nlm threads 12 cleartext noSharing NoUnloadCheck guest log

Any help or direction will be a great help.

We are running on Novell 6.5 sp5 , server has 6 gigs, duel zeons

We have the contexts set in ctxs.cfg

We can get it to work - but the CPU maxes out or the logins fail - No shaking (which would lead us to unable to authenticate) just grayed out, waiting to connect but not fully connect.
Labels (1)
0 Likes
7 Replies
Anonymous_User Absent Member.
Absent Member.

Re: Ldap AFPTCP HELP!

I suggest you apply nw65sp5upd1.exe and n65nss5b to get the latest AFP
updates.

Also make sure there's no AV app on the Macs scanning the NetWare
volumes. I also remember there used to be an option in the Mac file
manager which calculated folder sizes continually on the fly, having
multiple Macs doing that to the same volume can also cause high util.
--
Andrew C Taubman
Novell Support Forums Volunteer SysOp
http://support.novell.com/forums
(Sorry, support is not provided via e-mail)

Opinions expressed above are not
necessarily those of Novell Inc.
0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: Ldap AFPTCP HELP!

We have just put on nw65sp5ud1 Today and installed n65nss5b to get the AFP. had problems with the n65nss5b patch.

I'll have to check the AV I didn't even think of going there, thanks - let you know what I find.

I also saw a thread on here about spotlight - anyone else recommend removing it?

Any one know away I can spread the AFP Threads over multiple processors? - We keep trying to tweak the Threads parameter on AFPTCP to keep processor 0 from hitting 100 % utilization, and then preventing log ins - or as the Mac users call it "Spinning Wheels"

Thanks for the quick reply!

>>> On Tuesday, September 19, 2006 at 6:30 PM, in message <1c_Pg.298$0w1.189@prv-forum2.provo.novell.com>, Andrew C Taubman<ataubman.RemoveThisToMailMe@novell.AndThis.com> wrote:


I suggest you apply nw65sp5upd1.exe and n65nss5b to get the latest AFP
updates.

Also make sure there's no AV app on the Macs scanning the NetWare
volumes. I also remember there used to be an option in the Mac file
manager which calculated folder sizes continually on the fly, having
multiple Macs doing that to the same volume can also cause high util.
--
Andrew C Taubman
Novell Support Forums Volunteer SysOp
http://support.novell.com/forums
(Sorry, support is not provided via e-mail)

Opinions expressed above are not
necessarily those of Novell Inc.
0 Likes
Highlighted
Anonymous_User Absent Member.
Absent Member.

Re: Ldap AFPTCP HELP!

George,

Is it AFPTCP.NLM that is consuming the CPU or another process?

Also, is the entire home directory on the server? There are a number of
subdirectories that can be excluded (caches and the like) which would improve
performance.

When our login times began to slow we added an eDirectory index to the
ObjectClass attribute as this is typically used in the ldap query when users log
into a Mac.

Spotlight can slow things down, as it will try to index all of the files in the
user's home directory as they are retrieved from the server
(http://www.afp548.com/article.php?story=20050916145708141). Spotlight is
typically disabled for server volumes; you can check with

mdutil /Volumes/[volumename] -s

ajs

George Armstrong wrote:
> We have just put on nw65sp5ud1 Today and installed n65nss5b to get the
> AFP. had problems with the n65nss5b patch.
>
> I'll have to check the AV I didn't even think of going there, thanks -
> let you know what I find.
>
> I also saw a thread on here about spotlight - anyone else recommend
> removing it?
>
> Any one know away I can spread the AFP Threads over multiple processors?
> - We keep trying to tweak the Threads parameter on AFPTCP to keep
> processor 0 from hitting 100 % utilization, and then preventing log ins
> - or as the Mac users call it "Spinning Wheels"
>
> Thanks for the quick reply!
>
> >>> On Tuesday, September 19, 2006 at 6:30 PM, in message

> <1c_Pg.298$0w1.189@prv-forum2.provo.novell.com>, Andrew C
> Taubman<ataubman.RemoveThisToMailMe@novell.AndThis.com> wrote:
> I suggest you apply nw65sp5upd1.exe and n65nss5b to get the latest AFP
> updates.
>
> Also make sure there's no AV app on the Macs scanning the NetWare
> volumes. I also remember there used to be an option in the Mac file
> manager which calculated folder sizes continually on the fly, having
> multiple Macs doing that to the same volume can also cause high util.
> --
> Andrew C Taubman
> Novell Support Forums Volunteer SysOp
> http://support.novell.com/forums
> (Sorry, support is not provided via e-mail)
>
> Opinions expressed above are not
> necessarily those of Novell Inc.
>
>



--
Tony Skalski
Systems Administrator
ajs.NOSPAM@stolaf.edu
-------------------------------------------------------
St. Olaf College 1510 St. Olaf Avenue
Information and Northfield, MN
Instructional Technologies 55057-1097
=======================================================
0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: Ldap AFPTCP HELP!

On 20/09/06 George Armstrong wrote:
> Any one know away I can spread the AFP Threads over multiple
> processors?


Rewrite it to be multi-threaded?

It's always best to identify the source of high util and fix it, rather
than mask it by throwing more processing power at it.
--
Andrew C Taubman
Novell Support Forums Volunteer SysOp
http://support.novell.com/forums
(Sorry, support is not provided via e-mail)

Opinions expressed above are not
necessarily those of Novell Inc.
0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: Ldap AFPTCP HELP!

Thanks for the response!

I noticed AFPTCP Threads as the most busiest, and all are on the 1 processor that max out. Most of the times the ABEND log will show it is the AFPTCP.NLM (And this happens on all three servers we have set up, handling different users (Students, Staff, K-5 Labs)

The entire home directory is on the server with all the Mac .files (.DS, Lib etc), Some of the Apps (Office) is run locally on the Mac, but the Home Directory is on the server.

Will look at Spotlight, I checked AV (Symantec) but it's not loaded on a few lab machines I looked at.

I guess what we are trying to learn, is there a limit to the number of connection to a sever through AFPTCP?

We have 3 servers for the OSX System, one has 6 labs (30+ computers each) + about 20-50 classrooms at any one time) Another has all the students 6-12 250 or so login (90 are on windows machines using a Novell client (and have no problems) and the third handling the staff logins. all with their home folders on one of the three servers.

We had (Last year) a server in each of the 3 2-5 schools and we didn't have this problem (We did have it on the student and staff) We consolidatedthe servers and set up one power house for the k-12's.

I haven't found any type of limitation to amount of logins.

Thanks for all your help!


>>> On Wednesday, September 20, 2006 at 10:27 AM, in message <45114FC5.1070808@stolaf.edu>, Tony Skalski<ajs@stolaf.edu> wrote:


George,

Is it AFPTCP.NLM that is consuming the CPU or another process?

Also, is the entire home directory on the server? There are a number of
subdirectories that can be excluded (caches and the like) which would improve
performance.

When our login times began to slow we added an eDirectory index to the
ObjectClass attribute as this is typically used in the ldap query when users log
into a Mac.

Spotlight can slow things down, as it will try to index all of the files in the
user's home directory as they are retrieved from the server
(http://www.afp548.com/article.php?story=20050916145708141). Spotlight is
typically disabled for server volumes; you can check with

mdutil /Volumes/[volumename] -s

ajs

George Armstrong wrote:
> We have just put on nw65sp5ud1 Today and installed n65nss5b to get the
> AFP. had problems with the n65nss5b patch.
>
> I'll have to check the AV I didn't even think of going there, thanks -
> let you know what I find.
>
> I also saw a thread on here about spotlight - anyone else recommend
> removing it?
>
> Any one know away I can spread the AFP Threads over multiple processors?
> - We keep trying to tweak the Threads parameter on AFPTCP to keep
> processor 0 from hitting 100 % utilization, and then preventing log ins
> - or as the Mac users call it "Spinning Wheels"
>
> Thanks for the quick reply!
>
> >>> On Tuesday, September 19, 2006 at 6:30 PM, in message

> <1c_Pg.298$0w1.189@prv-forum2.provo.novell.com>, Andrew C
> Taubman<ataubman.RemoveThisToMailMe@novell.AndThis.com> wrote:
> I suggest you apply nw65sp5upd1.exe and n65nss5b to get the latest AFP
> updates.
>
> Also make sure there's no AV app on the Macs scanning the NetWare
> volumes. I also remember there used to be an option in the Mac file
> manager which calculated folder sizes continually on the fly, having
> multiple Macs doing that to the same volume can also cause high util.
> --
> Andrew C Taubman
> Novell Support Forums Volunteer SysOp
> http://support.novell.com/forums
> (Sorry, support is not provided via e-mail)
>
> Opinions expressed above are not
> necessarily those of Novell Inc.
>
>



--
Tony Skalski
Systems Administrator
ajs.NOSPAM@stolaf.edu
-------------------------------------------------------
St. Olaf College 1510 St. Olaf Avenue
Information and Northfield, MN
Instructional Technologies 55057-1097
=======================================================
0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: Ldap AFPTCP HELP!

This also came to mind last night:

http://docs.info.apple.com/article.html?artnum=301711

ajs

George Armstrong wrote:
> Thanks for the response!
>
> I noticed AFPTCP Threads as the most busiest, and all are on the 1
> processor that max out. Most of the times the ABEND log will show it is
> the AFPTCP.NLM (And this happens on all three servers we have set up,
> handling different users (Students, Staff, K-5 Labs)
>
> The entire home directory is on the server with all the Mac .files (.DS,
> Lib etc), Some of the Apps (Office) is run locally on the Mac, but the
> Home Directory is on the server.
>
> Will look at Spotlight, I checked AV (Symantec) but it's not loaded on a
> few lab machines I looked at.
>
> I guess what we are trying to learn, is there a limit to the number of
> connection to a sever through AFPTCP?
>
> We have 3 servers for the OSX System, one has 6 labs (30+ computers
> each) + about 20-50 classrooms at any one time) Another has all the
> students 6-12 250 or so login (90 are on windows machines using a
> Novell client (and have no problems) and the third handling the staff
> logins. all with their home folders on one of the three servers.
>
> We had (Last year) a server in each of the 3 2-5 schools and we didn't
> have this problem (We did have it on the student and staff) We
> consolidated the servers and set up one power house for the k-12's.
>
> I haven't found any type of limitation to amount of logins.
>
> Thanks for all your help!
>



--
Tony Skalski
Systems Administrator
ajs.NOSPAM@stolaf.edu
-------------------------------------------------------
St. Olaf College 1510 St. Olaf Avenue
Information and Northfield, MN
Instructional Technologies 55057-1097
=======================================================
0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: Ldap AFPTCP HELP!

This was our problem. It sounds similar to what you describe. Breaking the student home
folders into subdirectories fixed us right up.

http://www.novell.com/support/search.do?
cmd=displayKC&docType=kc&externalId=10097049&sliceId=&dialogID=16126638&stateId=0%
200%2016128481

Josh

> This also came to mind last night:
>
> http://docs.info.apple.com/article.html?artnum=301711
>
> ajs
>
> George Armstrong wrote:
> > Thanks for the response!
> >
> > I noticed AFPTCP Threads as the most busiest, and all are on the 1
> > processor that max out. Most of the times the ABEND log will show it is
> > the AFPTCP.NLM (And this happens on all three servers we have set up,
> > handling different users (Students, Staff, K-5 Labs)
> >
> > The entire home directory is on the server with all the Mac .files (.DS,
> > Lib etc), Some of the Apps (Office) is run locally on the Mac, but the
> > Home Directory is on the server.
> >
> > Will look at Spotlight, I checked AV (Symantec) but it's not loaded on a
> > few lab machines I looked at.
> >
> > I guess what we are trying to learn, is there a limit to the number of
> > connection to a sever through AFPTCP?
> >
> > We have 3 servers for the OSX System, one has 6 labs (30+ computers
> > each) + about 20-50 classrooms at any one time) Another has all the
> > students 6-12 250 or so login (90 are on windows machines using a
> > Novell client (and have no problems) and the third handling the staff
> > logins. all with their home folders on one of the three servers.
> >
> > We had (Last year) a server in each of the 3 2-5 schools and we didn't
> > have this problem (We did have it on the student and staff) We
> > consolidated the servers and set up one power house for the k-12's.
> >
> > I haven't found any type of limitation to amount of logins.
> >
> > Thanks for all your help!
> >

>
>
> --
> Tony Skalski
> Systems Administrator
> ajs.NOSPAM@stolaf.edu
> -------------------------------------------------------
> St. Olaf College 1510 St. Olaf Avenue
> Information and Northfield, MN
> Instructional Technologies 55057-1097
> =======================================================


0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.