[Courier-imap] Re: Random Imap Login Failures

[Sam V. <mr...@co...>]

cme...@cc... writes:

> Thanks Sam.  We have tried increasing daeomins in the authdaemonrc file in the
> past, but it didn't seem to help.  The problem is very wierd.  It doesn't
> happen during peak times, in fact there may only be about 40 users on the
> front-end Webmail Server when the timeout occurs.  Other times we have 500-1000
> concurrent users with no problems.
> 
> I am using Kerberos authentication to the Windows 2000 Active Directory, and was
> thinking that maybe the timeouts are being caused by some communication issue
> to the KDC, or the KDC is unable to respond due to other load.
> 
> I just wanted to validate that the s_connect() failed message outlined in my
> previous message could be generated by authdaemon if the Authorization resource
> is unavailable.

The message is generated when authdaemon does not reply within 15 seconds to 
an authentication request.

An authentication request taking more than 15 seconds is NOT an acceptable 
situation in production use.

If your Windows 2000 AD does not reply within 15 seconds, it must be fixed.