webadmin-list — Webmin users mailing list

Re: [webmin-l] server time

[<bo...@de...>]

> 
> You may need to restart Cron .. If updated timezone files were installed
> on your system after Cron was started, it will still be caching the old
> DST information in memory. To flush this, login to Webmin, go to the 
> Bootup and Shutdown module, click on the 'cron' entry, and click the button
> to restart it.
> 
>  - Jamie


i see what you mean i'll try it manually i dont see any cron entry in that module only restart and shutdown

Re: [webmin-l] server time

[Jamie C. <jca...@we...>]

On 12/Mar/2007 08:27 bo...@de... wrote ..
> not sure where is the issue?
> 
> since sunday change to DST my system did not change by itself,
> i manually change via webmin and i am noticing that the email on cron jobs
> shows different time then when the job runs
> 
> i have a cron job to run at 10:45 set thru webmin
> currently my server shows correct time 
> 
> System hostname 	pepino
> Operating system 	Slackware Linux 11.0.0
> Webmin version 	1.330
> Time on server 	Mon Mar 12 12:22:04 2007
> CPU load averages 	1.78 (1 min) 0.59 (5 mins) 0.20 (15 mins)
> Real memory 	503 MB total, 340 MB used
> 
> yet the email is showing normal time instead of DST
> 
> see email notification of job  
> Server Time: Mon, 12 Mar 2007 11:45:04 -0400<<<<<<<  seems wrong 
> yet i just notice the date in usermin shows 
> 12/03/2007 10:45  <<<<<<
> 
> where is this discrepency comming from  the correct time is 10:45 not 11:45

You may need to restart Cron .. If updated timezone files were installed
on your system after Cron was started, it will still be caching the old
DST information in memory. To flush this, login to Webmin, go to the 
Bootup and Shutdown module, click on the 'cron' entry, and click the button
to restart it.

 - Jamie

Re: [webmin-l] server time

[<bo...@de...>]

John Hinton wrote ..
> The date that the time changes changed this year. If I understand it 
> right, the sync to like a NTP server will produce the proper UTC time 
> which is unaffected by DST, but instead is 'world time' so to speak.
> 
> So, the adjustment to that time is made on individual machines.. time 
> zones, if they use DST, and the dates that DST goes on and off.
> 
> I'm betting you did not do the updates to your server which carried the
> new DST information, in particular, the change to the date that DST begins.
> 
> Best,
> John Hinton
>

one more detail i forgot

system time in webmin shows correct time as well

Re: [webmin-l] server time

[<bo...@de...>]

John Hinton wrote ..
> The date that the time changes changed this year. If I understand it 
> right, the sync to like a NTP server will produce the proper UTC time 
> which is unaffected by DST, but instead is 'world time' so to speak.
> 
> So, the adjustment to that time is made on individual machines.. time 
> zones, if they use DST, and the dates that DST goes on and off.
> 
> I'm betting you did not do the updates to your server which carried the
> new DST information, in particular, the change to the date that DST begins.
> 
> Best,
> John Hinton
>


but date on the server shows correct info
bash-3.1# date
Mon Mar 12 12:45:04 EDT 2007


while even dansguardian log is showing 1 hour off

Re: [webmin-l] server time

[John H. <web...@ew...>]

The date that the time changes changed this year. If I understand it 
right, the sync to like a NTP server will produce the proper UTC time 
which is unaffected by DST, but instead is 'world time' so to speak.

So, the adjustment to that time is made on individual machines.. time 
zones, if they use DST, and the dates that DST goes on and off.

I'm betting you did not do the updates to your server which carried the 
new DST information, in particular, the change to the date that DST begins.

Best,
John Hinton

bo...@de... wrote:
> not sure where is the issue?
>
> since sunday change to DST my system did not change by itself,
> i manually change via webmin and i am noticing that the email on cron jobs shows different time then when the job runs
>
> i have a cron job to run at 10:45 set thru webmin
> currently my server shows correct time 
>
> System hostname 	pepino
> Operating system 	Slackware Linux 11.0.0
> Webmin version 	1.330
> Time on server 	Mon Mar 12 12:22:04 2007
> CPU load averages 	1.78 (1 min) 0.59 (5 mins) 0.20 (15 mins)
> Real memory 	503 MB total, 340 MB used
>
> yet the email is showing normal time instead of DST
>
> see email notification of job  
> Server Time: Mon, 12 Mar 2007 11:45:04 -0400<<<<<<<  seems wrong 
> yet i just notice the date in usermin shows 
> 12/03/2007 10:45  <<<<<<
>
>
> where is this discrepency comming from  the correct time is 10:45 not 11:45
>
>
> !DSPAM:45f57f8d274706962421434!
>   
> ------------------------------------------------------------------------
>
> -------------------------------------------------------------------------
> Take Surveys. Earn Cash. Influence the Future of IT
> Join SourceForge.net's Techsay panel and you'll get the chance to share your
> opinions on IT & business topics through brief surveys-and earn cash
> http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
>
> !DSPAM:45f57f8d274706962421434!
>   
> ------------------------------------------------------------------------
>
> -
> Forwarded by the Webmin mailing list at web...@li...
> To remove yourself from this list, go to
> http://lists.sourceforge.net/lists/listinfo/webadmin-list
>
>
> !DSPAM:45f57f8d274706962421434!
>   

[webmin-l] server time

[<bo...@de...>]

not sure where is the issue?

since sunday change to DST my system did not change by itself,
i manually change via webmin and i am noticing that the email on cron jobs shows different time then when the job runs

i have a cron job to run at 10:45 set thru webmin
currently my server shows correct time 

System hostname 	pepino
Operating system 	Slackware Linux 11.0.0
Webmin version 	1.330
Time on server 	Mon Mar 12 12:22:04 2007
CPU load averages 	1.78 (1 min) 0.59 (5 mins) 0.20 (15 mins)
Real memory 	503 MB total, 340 MB used

yet the email is showing normal time instead of DST

see email notification of job  
Server Time: Mon, 12 Mar 2007 11:45:04 -0400<<<<<<<  seems wrong 
yet i just notice the date in usermin shows 
12/03/2007 10:45  <<<<<<


where is this discrepency comming from  the correct time is 10:45 not 11:45

Re: [webmin-l] LDAP Users and Groups module performance

[Jamie C. <jca...@we...>]

On 11/Mar/2007 23:46 Murray Trainer wrote ..
> On Sun, 2007-03-11 at 21:19 -0700, Jamie Cameron wrote:
> > On 11/Mar/2007 17:25 Murray Trainer wrote ..
> > > On Fri, 2007-03-09 at 09:43 -0800, Jamie Cameron wrote:
> > > > On 8/Mar/2007 15:37 Murray Trainer wrote ..
> > > > > On Thu, 2007-03-08 at 13:00 -0800, Jamie Cameron wrote:
> > > > > > On 7/Mar/2007 23:16 Murray Trainer wrote ..
> > > > > > > On Mon, 2007-02-26 at 15:19 +0900, Murray Trainer wrote:
> > > > > > > > On Sun, 2007-01-21 at 22:27 -0800, Jamie Cameron wrote:
> > > > > > > > > On 21/Jan/2007 16:11 Murray Trainer wrote ..
> > > > > > > > > > On Fri, 2007-01-19 at 00:23 -0800, Jamie Cameron wrote:
> > > > > > > > > > > On 18/Jan/2007 22:46 Murray Trainer wrote ..
> > > > > > > > > > > > Hi Jamie
> > > > > > > > > > > > 
> > > > > > > > > > > > We now have over 1000 users we manage with the LDAP
> Users
> > > > > module.
> > > > > > > > > > I
> > > > > > > > > > > > have noticed lately that it is becoming very slow
> bringing
> > > > > up
> > > > > > > the
> > > > > > > > > > > > initial screen.  I can imagine things only getting
> worse
> > > > > as the
> > > > > > > > > > > > directory gets larger.  I haven't checked the queries
> > > My
> > > > > guess
> > > > > > > is that
> > > > > > > > > > > > the module tries to search the LDAP directory for
> the
> > > whole
> > > > > list
> > > > > > > of
> > > > > > > > > > > > users, then after realising there are too many, it
> then
> > > says
> > > > > > > there
> > > > > > > > > > are
> > > > > > > > > > > > too many to display and fails.  Even if I set the
> maximum
> > > > > number
> > > > > > > of
> > > > > > > > > > > > users or groups to display to 0 or 1 it still takes
> a
> > > fair
> > > > > few
> > > > > > > seconds
> > > > > > > > > > > > to display the opening screen.  
> > > > > > > > > > > > 
> > > > > > > > > > > > The recommed method is to process each LDAP user
> entry
> > > one
> > > > > at
> > > > > > > a time
> > > > > > > > > > as
> > > > > > > > > > > > they are returned. The module would stop when it
> reached
> > > > > the
> > > > > > > limit
> > > > > > > > > > of
> > > > > > > > > > > > users for that page which could be a configuration
> value.
> > > > > The
> > > > > > > module
> > > > > > > > > > > > appears to be using the NET::LDAP library.  I had
> a look
> > > > > at the
> > > > > > > > > > > > documentation below and they recommend processing
> each
> > > entry
> > > > > > > as it
> > > > > > > > > > is
> > > > > > > > > > > > returned:  
> > > > > > > > > > > > 
> > > > > > > > > > > > http://search.cpan.org/~gbarr/perl-ldap-0.33/lib/Net/LDAP/FAQ.pod#USING_THE_CALLBACK_SUBROUTINE_APPROACH
> > > > > > > > > > > > 
> > > > > > > > > > > > If we want 100 users to be displayed on the page
> we print
> > > > > the
> > > > > > > first
> > > > > > > > > > 100
> > > > > > > > > > > > entries then quit.  If we want users 100-200 we would
> > > ignore
> > > > > > > the first
> > > > > > > > > > > > hundred entries and print the second hundred, and
> so
> > > on.
> > > > > > > > > > > > 
> > > > > > > > > > > > Hope the above idea has merit and its possible for
> you
> > > to
> > > > > implement
> > > > > > > > > > at
> > > > > > > > > > > > some stage.
> > > > > > > > > > > 
> > > > > > > > > > > Actually, that is what the module already does. The
> main
> > > page
> > > > > does
> > > > > > > an
> > > > > > > > > > > LDAP search for matching users, and then checks the
> number
> > > > > of results
> > > > > > > > > > available.
> > > > > > > > > > > If this is higher than the maximum set on the Module
> Config
> > > > > page,
> > > > > > > it
> > > > > > > > > > just
> > > > > > > > > > > displays the search form without fetching the full
> user
> > > list.
> > > > > > > > > > > 
> > > > > > > > > > > Of course, for this to be useful I assume that the
> LDAP
> > > server
> > > > > > > doesn't
> > > > > > > > > > > fetch users from it's database until actually asked
> to..
> > > > > > > > > > > 
> > > > > > > > > > >  - Jamie
> > > > > > > > > > > 
> > > > > > > > > > 
> > > > > > > > > > If it does things in the sequential manner then I am
> not
> > > sure
> > > > > why
> > > > > > > it is
> > > > > > > > > > so slow for me.  There is nothing wrong with the performance
> > > > > of the
> > > > > > > ldap
> > > > > > > > > > server.  I can do an ldapsearch from a client machine
> and
> > > dump
> > > > > the
> > > > > > > whole
> > > > > > > > > > list of users into a text file in less than a second.
> Going
> > > > > into
> > > > > > > the
> > > > > > > > > > first ldap users and groups screen with the list of users
> > > takes
> > > > > >
> > > > > > > 10
> > > > > > > > > > secs even with the amount of users to display set to
> 0. I
> > > am
> > > > > not
> > > > > > > sure
> > > > > > > > > > where the bottleneck in performance is?
> > > > > > > > > 
> > > > > > > > > I took another look at the code for this module, and it
> seems
> > > that
> > > > > > > even
> > > > > > > > > though Webmin just calls the Net::LDAP module's search
> function,
> > > > > this
> > > > > > > > > takes a long time to respond on large LDAP databases even
> though
> > > > > no
> > > > > > > > > actual results are requested!
> > > > > > > > > 
> > > > > > > > > However, I managed to find another way to reduce the search
> > > size,
> > > > > by
> > > > > > > > > specifying a maximum result size to the LDAP server. This
> will
> > > > > go into
> > > > > > > > > the next (1.330) Webmin release.
> > > > > > > > > 
> > > > > > > > >  - Jamie
> > > > > > > > 
> > > > > > > > Hi Jamie,
> > > > > > > > 
> > > > > > > > I noticed that you had added the fix above to the 1.328 version.
> > > > > I
> > > > > > > > downloaded it and tested it.  It displays the initial list
> of
> > > > > > > > users/groups immediately if it exceeds the limit for the
> page.
> > > Thanks
> > > > > > > > for your work on that - it will improve things a lot in our
> setup.
> > > > > > > 
> > > > > > > Hi Jamie,
> > > > > > > 
> > > > > > > I have installed 1.330 and the initial list of users displays
> quickly
> > > > > as
> > > > > > > for the earlier test version but I noticed that when clicking
> on
> > > create
> > > > > > > a new ldap user or opening an existing one, the screen takes
> a
> > > fair
> > > > > > > while to display (15-20 secs).  Not sure why that should be
> so
> > > slow?
> > > > > -
> > > > > > > in the first case it only needs to look up the next available
> uid.
> > > > > > > Bringing up an existing user might be a bit slower but the
> ldap
> > > search
> > > > > > > should be pretty quick.
> > > > > > 
> > > > > > I'll have to look into this .. do you have a large number of
> groups
> > > too?
> > > > > > 
> > > > > >  - Jamie
> > > > > 
> > > > > We have about 1500 users.  We don't have a large number of groups
> but
> > > a
> > > > > few groups have lots of members ie. 1000+.
> > > > 
> > > > Ok, I found another bug in the code that can cause a slowdown - it
> tries
> > > > to scan all users in LDAP to get a free UID, and to find uses shells.
> > > The
> > > > former is un-needed for editing existing users, and the latter can
> be
> > > disabled
> > > > on the Module Config page.
> > > > 
> > > > Let me know if you'd like a beta version of the fixed module to try
> out..
> > > > 
> > > >  - Jamie
> > > > 
> > > 
> > > Thanks, a beta version would be great.
> > 
> > The 1.333 development version of Webmin from http://www.webmin.com/devel.html
> > includes this fix. Just make sure that on the Module Config page, you
> have
> > 'System users' unchecked for the 'Build list of shells from' setting.
> > 
> >  - Jamie
> 
> I just downloaded and tested the 1.334 version.  Editing an existing
> user is now pretty quick.  It still takes quite a while to bring up the
> new user screen.  I suppose the performance of that all comes down to
> the algorithm used to find the next available uid. Did a google and
> found the library below has a function to get the next free uid.  Not
> sure how well that performs but it might be worth looking at the code.
> 
> http://www.pingworks.de/upload/pics/ldaputils.html#OTHER_METHODS

The current method scans through all users to build up a map of used
UIDs, and then picks the next free one above some base. I suppose some
algorithm could be created to query IDs using a binary search, but
I'm not sure if that would be any faster..

 - Jamie

Re: [webmin-l] LDAP Users and Groups module performance

[Murray T. <mtr...@ce...>]

On Sun, 2007-03-11 at 21:19 -0700, Jamie Cameron wrote:
> On 11/Mar/2007 17:25 Murray Trainer wrote ..
> > On Fri, 2007-03-09 at 09:43 -0800, Jamie Cameron wrote:
> > > On 8/Mar/2007 15:37 Murray Trainer wrote ..
> > > > On Thu, 2007-03-08 at 13:00 -0800, Jamie Cameron wrote:
> > > > > On 7/Mar/2007 23:16 Murray Trainer wrote ..
> > > > > > On Mon, 2007-02-26 at 15:19 +0900, Murray Trainer wrote:
> > > > > > > On Sun, 2007-01-21 at 22:27 -0800, Jamie Cameron wrote:
> > > > > > > > On 21/Jan/2007 16:11 Murray Trainer wrote ..
> > > > > > > > > On Fri, 2007-01-19 at 00:23 -0800, Jamie Cameron wrote:
> > > > > > > > > > On 18/Jan/2007 22:46 Murray Trainer wrote ..
> > > > > > > > > > > Hi Jamie
> > > > > > > > > > > 
> > > > > > > > > > > We now have over 1000 users we manage with the LDAP Users
> > > > module.
> > > > > > > > > I
> > > > > > > > > > > have noticed lately that it is becoming very slow bringing
> > > > up
> > > > > > the
> > > > > > > > > > > initial screen.  I can imagine things only getting worse
> > > > as the
> > > > > > > > > > > directory gets larger.  I haven't checked the queries
> > My
> > > > guess
> > > > > > is that
> > > > > > > > > > > the module tries to search the LDAP directory for the
> > whole
> > > > list
> > > > > > of
> > > > > > > > > > > users, then after realising there are too many, it then
> > says
> > > > > > there
> > > > > > > > > are
> > > > > > > > > > > too many to display and fails.  Even if I set the maximum
> > > > number
> > > > > > of
> > > > > > > > > > > users or groups to display to 0 or 1 it still takes a
> > fair
> > > > few
> > > > > > seconds
> > > > > > > > > > > to display the opening screen.  
> > > > > > > > > > > 
> > > > > > > > > > > The recommed method is to process each LDAP user entry
> > one
> > > > at
> > > > > > a time
> > > > > > > > > as
> > > > > > > > > > > they are returned. The module would stop when it reached
> > > > the
> > > > > > limit
> > > > > > > > > of
> > > > > > > > > > > users for that page which could be a configuration value.
> > > > The
> > > > > > module
> > > > > > > > > > > appears to be using the NET::LDAP library.  I had a look
> > > > at the
> > > > > > > > > > > documentation below and they recommend processing each
> > entry
> > > > > > as it
> > > > > > > > > is
> > > > > > > > > > > returned:  
> > > > > > > > > > > 
> > > > > > > > > > > http://search.cpan.org/~gbarr/perl-ldap-0.33/lib/Net/LDAP/FAQ.pod#USING_THE_CALLBACK_SUBROUTINE_APPROACH
> > > > > > > > > > > 
> > > > > > > > > > > If we want 100 users to be displayed on the page we print
> > > > the
> > > > > > first
> > > > > > > > > 100
> > > > > > > > > > > entries then quit.  If we want users 100-200 we would
> > ignore
> > > > > > the first
> > > > > > > > > > > hundred entries and print the second hundred, and so
> > on.
> > > > > > > > > > > 
> > > > > > > > > > > Hope the above idea has merit and its possible for you
> > to
> > > > implement
> > > > > > > > > at
> > > > > > > > > > > some stage.
> > > > > > > > > > 
> > > > > > > > > > Actually, that is what the module already does. The main
> > page
> > > > does
> > > > > > an
> > > > > > > > > > LDAP search for matching users, and then checks the number
> > > > of results
> > > > > > > > > available.
> > > > > > > > > > If this is higher than the maximum set on the Module Config
> > > > page,
> > > > > > it
> > > > > > > > > just
> > > > > > > > > > displays the search form without fetching the full user
> > list.
> > > > > > > > > > 
> > > > > > > > > > Of course, for this to be useful I assume that the LDAP
> > server
> > > > > > doesn't
> > > > > > > > > > fetch users from it's database until actually asked to..
> > > > > > > > > > 
> > > > > > > > > >  - Jamie
> > > > > > > > > > 
> > > > > > > > > 
> > > > > > > > > If it does things in the sequential manner then I am not
> > sure
> > > > why
> > > > > > it is
> > > > > > > > > so slow for me.  There is nothing wrong with the performance
> > > > of the
> > > > > > ldap
> > > > > > > > > server.  I can do an ldapsearch from a client machine and
> > dump
> > > > the
> > > > > > whole
> > > > > > > > > list of users into a text file in less than a second.  Going
> > > > into
> > > > > > the
> > > > > > > > > first ldap users and groups screen with the list of users
> > takes
> > > > >
> > > > > > 10
> > > > > > > > > secs even with the amount of users to display set to 0. I
> > am
> > > > not
> > > > > > sure
> > > > > > > > > where the bottleneck in performance is?
> > > > > > > > 
> > > > > > > > I took another look at the code for this module, and it seems
> > that
> > > > > > even
> > > > > > > > though Webmin just calls the Net::LDAP module's search function,
> > > > this
> > > > > > > > takes a long time to respond on large LDAP databases even though
> > > > no
> > > > > > > > actual results are requested!
> > > > > > > > 
> > > > > > > > However, I managed to find another way to reduce the search
> > size,
> > > > by
> > > > > > > > specifying a maximum result size to the LDAP server. This will
> > > > go into
> > > > > > > > the next (1.330) Webmin release.
> > > > > > > > 
> > > > > > > >  - Jamie
> > > > > > > 
> > > > > > > Hi Jamie,
> > > > > > > 
> > > > > > > I noticed that you had added the fix above to the 1.328 version.
> > > > I
> > > > > > > downloaded it and tested it.  It displays the initial list of
> > > > > > > users/groups immediately if it exceeds the limit for the page.
> > Thanks
> > > > > > > for your work on that - it will improve things a lot in our setup.
> > > > > > 
> > > > > > Hi Jamie,
> > > > > > 
> > > > > > I have installed 1.330 and the initial list of users displays quickly
> > > > as
> > > > > > for the earlier test version but I noticed that when clicking on
> > create
> > > > > > a new ldap user or opening an existing one, the screen takes a
> > fair
> > > > > > while to display (15-20 secs).  Not sure why that should be so
> > slow?
> > > > -
> > > > > > in the first case it only needs to look up the next available uid.
> > > > > > Bringing up an existing user might be a bit slower but the ldap
> > search
> > > > > > should be pretty quick.
> > > > > 
> > > > > I'll have to look into this .. do you have a large number of groups
> > too?
> > > > > 
> > > > >  - Jamie
> > > > 
> > > > We have about 1500 users.  We don't have a large number of groups but
> > a
> > > > few groups have lots of members ie. 1000+.
> > > 
> > > Ok, I found another bug in the code that can cause a slowdown - it tries
> > > to scan all users in LDAP to get a free UID, and to find uses shells.
> > The
> > > former is un-needed for editing existing users, and the latter can be
> > disabled
> > > on the Module Config page.
> > > 
> > > Let me know if you'd like a beta version of the fixed module to try out..
> > > 
> > >  - Jamie
> > > 
> > 
> > Thanks, a beta version would be great.
> 
> The 1.333 development version of Webmin from http://www.webmin.com/devel.html
> includes this fix. Just make sure that on the Module Config page, you have
> 'System users' unchecked for the 'Build list of shells from' setting.
> 
>  - Jamie

I just downloaded and tested the 1.334 version.  Editing an existing
user is now pretty quick.  It still takes quite a while to bring up the
new user screen.  I suppose the performance of that all comes down to
the algorithm used to find the next available uid. Did a google and
found the library below has a function to get the next free uid.  Not
sure how well that performs but it might be worth looking at the code.

http://www.pingworks.de/upload/pics/ldaputils.html#OTHER_METHODS

Murray

Re: [webmin-l] LDAP Users and Groups module performance

[Jamie C. <jca...@we...>]

On 11/Mar/2007 17:25 Murray Trainer wrote ..
> On Fri, 2007-03-09 at 09:43 -0800, Jamie Cameron wrote:
> > On 8/Mar/2007 15:37 Murray Trainer wrote ..
> > > On Thu, 2007-03-08 at 13:00 -0800, Jamie Cameron wrote:
> > > > On 7/Mar/2007 23:16 Murray Trainer wrote ..
> > > > > On Mon, 2007-02-26 at 15:19 +0900, Murray Trainer wrote:
> > > > > > On Sun, 2007-01-21 at 22:27 -0800, Jamie Cameron wrote:
> > > > > > > On 21/Jan/2007 16:11 Murray Trainer wrote ..
> > > > > > > > On Fri, 2007-01-19 at 00:23 -0800, Jamie Cameron wrote:
> > > > > > > > > On 18/Jan/2007 22:46 Murray Trainer wrote ..
> > > > > > > > > > Hi Jamie
> > > > > > > > > > 
> > > > > > > > > > We now have over 1000 users we manage with the LDAP Users
> > > module.
> > > > > > > > I
> > > > > > > > > > have noticed lately that it is becoming very slow bringing
> > > up
> > > > > the
> > > > > > > > > > initial screen.  I can imagine things only getting worse
> > > as the
> > > > > > > > > > directory gets larger.  I haven't checked the queries
> My
> > > guess
> > > > > is that
> > > > > > > > > > the module tries to search the LDAP directory for the
> whole
> > > list
> > > > > of
> > > > > > > > > > users, then after realising there are too many, it then
> says
> > > > > there
> > > > > > > > are
> > > > > > > > > > too many to display and fails.  Even if I set the maximum
> > > number
> > > > > of
> > > > > > > > > > users or groups to display to 0 or 1 it still takes a
> fair
> > > few
> > > > > seconds
> > > > > > > > > > to display the opening screen.  
> > > > > > > > > > 
> > > > > > > > > > The recommed method is to process each LDAP user entry
> one
> > > at
> > > > > a time
> > > > > > > > as
> > > > > > > > > > they are returned. The module would stop when it reached
> > > the
> > > > > limit
> > > > > > > > of
> > > > > > > > > > users for that page which could be a configuration value.
> > > The
> > > > > module
> > > > > > > > > > appears to be using the NET::LDAP library.  I had a look
> > > at the
> > > > > > > > > > documentation below and they recommend processing each
> entry
> > > > > as it
> > > > > > > > is
> > > > > > > > > > returned:  
> > > > > > > > > > 
> > > > > > > > > > http://search.cpan.org/~gbarr/perl-ldap-0.33/lib/Net/LDAP/FAQ.pod#USING_THE_CALLBACK_SUBROUTINE_APPROACH
> > > > > > > > > > 
> > > > > > > > > > If we want 100 users to be displayed on the page we print
> > > the
> > > > > first
> > > > > > > > 100
> > > > > > > > > > entries then quit.  If we want users 100-200 we would
> ignore
> > > > > the first
> > > > > > > > > > hundred entries and print the second hundred, and so
> on.
> > > > > > > > > > 
> > > > > > > > > > Hope the above idea has merit and its possible for you
> to
> > > implement
> > > > > > > > at
> > > > > > > > > > some stage.
> > > > > > > > > 
> > > > > > > > > Actually, that is what the module already does. The main
> page
> > > does
> > > > > an
> > > > > > > > > LDAP search for matching users, and then checks the number
> > > of results
> > > > > > > > available.
> > > > > > > > > If this is higher than the maximum set on the Module Config
> > > page,
> > > > > it
> > > > > > > > just
> > > > > > > > > displays the search form without fetching the full user
> list.
> > > > > > > > > 
> > > > > > > > > Of course, for this to be useful I assume that the LDAP
> server
> > > > > doesn't
> > > > > > > > > fetch users from it's database until actually asked to..
> > > > > > > > > 
> > > > > > > > >  - Jamie
> > > > > > > > > 
> > > > > > > > 
> > > > > > > > If it does things in the sequential manner then I am not
> sure
> > > why
> > > > > it is
> > > > > > > > so slow for me.  There is nothing wrong with the performance
> > > of the
> > > > > ldap
> > > > > > > > server.  I can do an ldapsearch from a client machine and
> dump
> > > the
> > > > > whole
> > > > > > > > list of users into a text file in less than a second.  Going
> > > into
> > > > > the
> > > > > > > > first ldap users and groups screen with the list of users
> takes
> > > >
> > > > > 10
> > > > > > > > secs even with the amount of users to display set to 0. I
> am
> > > not
> > > > > sure
> > > > > > > > where the bottleneck in performance is?
> > > > > > > 
> > > > > > > I took another look at the code for this module, and it seems
> that
> > > > > even
> > > > > > > though Webmin just calls the Net::LDAP module's search function,
> > > this
> > > > > > > takes a long time to respond on large LDAP databases even though
> > > no
> > > > > > > actual results are requested!
> > > > > > > 
> > > > > > > However, I managed to find another way to reduce the search
> size,
> > > by
> > > > > > > specifying a maximum result size to the LDAP server. This will
> > > go into
> > > > > > > the next (1.330) Webmin release.
> > > > > > > 
> > > > > > >  - Jamie
> > > > > > 
> > > > > > Hi Jamie,
> > > > > > 
> > > > > > I noticed that you had added the fix above to the 1.328 version.
> > > I
> > > > > > downloaded it and tested it.  It displays the initial list of
> > > > > > users/groups immediately if it exceeds the limit for the page.
> Thanks
> > > > > > for your work on that - it will improve things a lot in our setup.
> > > > > 
> > > > > Hi Jamie,
> > > > > 
> > > > > I have installed 1.330 and the initial list of users displays quickly
> > > as
> > > > > for the earlier test version but I noticed that when clicking on
> create
> > > > > a new ldap user or opening an existing one, the screen takes a
> fair
> > > > > while to display (15-20 secs).  Not sure why that should be so
> slow?
> > > -
> > > > > in the first case it only needs to look up the next available uid.
> > > > > Bringing up an existing user might be a bit slower but the ldap
> search
> > > > > should be pretty quick.
> > > > 
> > > > I'll have to look into this .. do you have a large number of groups
> too?
> > > > 
> > > >  - Jamie
> > > 
> > > We have about 1500 users.  We don't have a large number of groups but
> a
> > > few groups have lots of members ie. 1000+.
> > 
> > Ok, I found another bug in the code that can cause a slowdown - it tries
> > to scan all users in LDAP to get a free UID, and to find uses shells.
> The
> > former is un-needed for editing existing users, and the latter can be
> disabled
> > on the Module Config page.
> > 
> > Let me know if you'd like a beta version of the fixed module to try out..
> > 
> >  - Jamie
> > 
> 
> Thanks, a beta version would be great.

The 1.333 development version of Webmin from http://www.webmin.com/devel.html
includes this fix. Just make sure that on the Module Config page, you have
'System users' unchecked for the 'Build list of shells from' setting.

 - Jamie

Re: [webmin-l] LDAP Users and Groups module performance

[Murray T. <mtr...@ce...>]

On Fri, 2007-03-09 at 09:43 -0800, Jamie Cameron wrote:
> On 8/Mar/2007 15:37 Murray Trainer wrote ..
> > On Thu, 2007-03-08 at 13:00 -0800, Jamie Cameron wrote:
> > > On 7/Mar/2007 23:16 Murray Trainer wrote ..
> > > > On Mon, 2007-02-26 at 15:19 +0900, Murray Trainer wrote:
> > > > > On Sun, 2007-01-21 at 22:27 -0800, Jamie Cameron wrote:
> > > > > > On 21/Jan/2007 16:11 Murray Trainer wrote ..
> > > > > > > On Fri, 2007-01-19 at 00:23 -0800, Jamie Cameron wrote:
> > > > > > > > On 18/Jan/2007 22:46 Murray Trainer wrote ..
> > > > > > > > > Hi Jamie
> > > > > > > > > 
> > > > > > > > > We now have over 1000 users we manage with the LDAP Users
> > module.
> > > > > > > I
> > > > > > > > > have noticed lately that it is becoming very slow bringing
> > up
> > > > the
> > > > > > > > > initial screen.  I can imagine things only getting worse
> > as the
> > > > > > > > > directory gets larger.  I haven't checked the queries My
> > guess
> > > > is that
> > > > > > > > > the module tries to search the LDAP directory for the whole
> > list
> > > > of
> > > > > > > > > users, then after realising there are too many, it then says
> > > > there
> > > > > > > are
> > > > > > > > > too many to display and fails.  Even if I set the maximum
> > number
> > > > of
> > > > > > > > > users or groups to display to 0 or 1 it still takes a fair
> > few
> > > > seconds
> > > > > > > > > to display the opening screen.  
> > > > > > > > > 
> > > > > > > > > The recommed method is to process each LDAP user entry one
> > at
> > > > a time
> > > > > > > as
> > > > > > > > > they are returned. The module would stop when it reached
> > the
> > > > limit
> > > > > > > of
> > > > > > > > > users for that page which could be a configuration value.
> > The
> > > > module
> > > > > > > > > appears to be using the NET::LDAP library.  I had a look
> > at the
> > > > > > > > > documentation below and they recommend processing each entry
> > > > as it
> > > > > > > is
> > > > > > > > > returned:  
> > > > > > > > > 
> > > > > > > > > http://search.cpan.org/~gbarr/perl-ldap-0.33/lib/Net/LDAP/FAQ.pod#USING_THE_CALLBACK_SUBROUTINE_APPROACH
> > > > > > > > > 
> > > > > > > > > If we want 100 users to be displayed on the page we print
> > the
> > > > first
> > > > > > > 100
> > > > > > > > > entries then quit.  If we want users 100-200 we would ignore
> > > > the first
> > > > > > > > > hundred entries and print the second hundred, and so on.
> > > > > > > > > 
> > > > > > > > > Hope the above idea has merit and its possible for you to
> > implement
> > > > > > > at
> > > > > > > > > some stage.
> > > > > > > > 
> > > > > > > > Actually, that is what the module already does. The main page
> > does
> > > > an
> > > > > > > > LDAP search for matching users, and then checks the number
> > of results
> > > > > > > available.
> > > > > > > > If this is higher than the maximum set on the Module Config
> > page,
> > > > it
> > > > > > > just
> > > > > > > > displays the search form without fetching the full user list.
> > > > > > > > 
> > > > > > > > Of course, for this to be useful I assume that the LDAP server
> > > > doesn't
> > > > > > > > fetch users from it's database until actually asked to..
> > > > > > > > 
> > > > > > > >  - Jamie
> > > > > > > > 
> > > > > > > 
> > > > > > > If it does things in the sequential manner then I am not sure
> > why
> > > > it is
> > > > > > > so slow for me.  There is nothing wrong with the performance
> > of the
> > > > ldap
> > > > > > > server.  I can do an ldapsearch from a client machine and dump
> > the
> > > > whole
> > > > > > > list of users into a text file in less than a second.  Going
> > into
> > > > the
> > > > > > > first ldap users and groups screen with the list of users takes
> > >
> > > > 10
> > > > > > > secs even with the amount of users to display set to 0. I am
> > not
> > > > sure
> > > > > > > where the bottleneck in performance is?
> > > > > > 
> > > > > > I took another look at the code for this module, and it seems that
> > > > even
> > > > > > though Webmin just calls the Net::LDAP module's search function,
> > this
> > > > > > takes a long time to respond on large LDAP databases even though
> > no
> > > > > > actual results are requested!
> > > > > > 
> > > > > > However, I managed to find another way to reduce the search size,
> > by
> > > > > > specifying a maximum result size to the LDAP server. This will
> > go into
> > > > > > the next (1.330) Webmin release.
> > > > > > 
> > > > > >  - Jamie
> > > > > 
> > > > > Hi Jamie,
> > > > > 
> > > > > I noticed that you had added the fix above to the 1.328 version.
> > I
> > > > > downloaded it and tested it.  It displays the initial list of
> > > > > users/groups immediately if it exceeds the limit for the page.  Thanks
> > > > > for your work on that - it will improve things a lot in our setup.
> > > > 
> > > > Hi Jamie,
> > > > 
> > > > I have installed 1.330 and the initial list of users displays quickly
> > as
> > > > for the earlier test version but I noticed that when clicking on create
> > > > a new ldap user or opening an existing one, the screen takes a fair
> > > > while to display (15-20 secs).  Not sure why that should be so slow?
> > -
> > > > in the first case it only needs to look up the next available uid.
> > > > Bringing up an existing user might be a bit slower but the ldap search
> > > > should be pretty quick.
> > > 
> > > I'll have to look into this .. do you have a large number of groups too?
> > > 
> > >  - Jamie
> > 
> > We have about 1500 users.  We don't have a large number of groups but a
> > few groups have lots of members ie. 1000+.
> 
> Ok, I found another bug in the code that can cause a slowdown - it tries
> to scan all users in LDAP to get a free UID, and to find uses shells. The
> former is un-needed for editing existing users, and the latter can be disabled
> on the Module Config page.
> 
> Let me know if you'd like a beta version of the fixed module to try out..
> 
>  - Jamie
> 

Thanks, a beta version would be great.

Regards

Murray

[webmin-l] USermin Monitor

[Grant P. <gp...@th...>]

Hi all,

Anyone else have USermin and Apache monitors that show red even though =
to processes are running? Module configs are correct AFAIKS.

-Grant

Re: [webmin-l] LDAP Users and Groups module performance

[Jamie C. <jca...@we...>]

On 8/Mar/2007 15:37 Murray Trainer wrote ..
> On Thu, 2007-03-08 at 13:00 -0800, Jamie Cameron wrote:
> > On 7/Mar/2007 23:16 Murray Trainer wrote ..
> > > On Mon, 2007-02-26 at 15:19 +0900, Murray Trainer wrote:
> > > > On Sun, 2007-01-21 at 22:27 -0800, Jamie Cameron wrote:
> > > > > On 21/Jan/2007 16:11 Murray Trainer wrote ..
> > > > > > On Fri, 2007-01-19 at 00:23 -0800, Jamie Cameron wrote:
> > > > > > > On 18/Jan/2007 22:46 Murray Trainer wrote ..
> > > > > > > > Hi Jamie
> > > > > > > > 
> > > > > > > > We now have over 1000 users we manage with the LDAP Users
> module.
> > > > > > I
> > > > > > > > have noticed lately that it is becoming very slow bringing
> up
> > > the
> > > > > > > > initial screen.  I can imagine things only getting worse
> as the
> > > > > > > > directory gets larger.  I haven't checked the queries My
> guess
> > > is that
> > > > > > > > the module tries to search the LDAP directory for the whole
> list
> > > of
> > > > > > > > users, then after realising there are too many, it then says
> > > there
> > > > > > are
> > > > > > > > too many to display and fails.  Even if I set the maximum
> number
> > > of
> > > > > > > > users or groups to display to 0 or 1 it still takes a fair
> few
> > > seconds
> > > > > > > > to display the opening screen.  
> > > > > > > > 
> > > > > > > > The recommed method is to process each LDAP user entry one
> at
> > > a time
> > > > > > as
> > > > > > > > they are returned. The module would stop when it reached
> the
> > > limit
> > > > > > of
> > > > > > > > users for that page which could be a configuration value.
> The
> > > module
> > > > > > > > appears to be using the NET::LDAP library.  I had a look
> at the
> > > > > > > > documentation below and they recommend processing each entry
> > > as it
> > > > > > is
> > > > > > > > returned:  
> > > > > > > > 
> > > > > > > > http://search.cpan.org/~gbarr/perl-ldap-0.33/lib/Net/LDAP/FAQ.pod#USING_THE_CALLBACK_SUBROUTINE_APPROACH
> > > > > > > > 
> > > > > > > > If we want 100 users to be displayed on the page we print
> the
> > > first
> > > > > > 100
> > > > > > > > entries then quit.  If we want users 100-200 we would ignore
> > > the first
> > > > > > > > hundred entries and print the second hundred, and so on.
> > > > > > > > 
> > > > > > > > Hope the above idea has merit and its possible for you to
> implement
> > > > > > at
> > > > > > > > some stage.
> > > > > > > 
> > > > > > > Actually, that is what the module already does. The main page
> does
> > > an
> > > > > > > LDAP search for matching users, and then checks the number
> of results
> > > > > > available.
> > > > > > > If this is higher than the maximum set on the Module Config
> page,
> > > it
> > > > > > just
> > > > > > > displays the search form without fetching the full user list.
> > > > > > > 
> > > > > > > Of course, for this to be useful I assume that the LDAP server
> > > doesn't
> > > > > > > fetch users from it's database until actually asked to..
> > > > > > > 
> > > > > > >  - Jamie
> > > > > > > 
> > > > > > 
> > > > > > If it does things in the sequential manner then I am not sure
> why
> > > it is
> > > > > > so slow for me.  There is nothing wrong with the performance
> of the
> > > ldap
> > > > > > server.  I can do an ldapsearch from a client machine and dump
> the
> > > whole
> > > > > > list of users into a text file in less than a second.  Going
> into
> > > the
> > > > > > first ldap users and groups screen with the list of users takes
> >
> > > 10
> > > > > > secs even with the amount of users to display set to 0. I am
> not
> > > sure
> > > > > > where the bottleneck in performance is?
> > > > > 
> > > > > I took another look at the code for this module, and it seems that
> > > even
> > > > > though Webmin just calls the Net::LDAP module's search function,
> this
> > > > > takes a long time to respond on large LDAP databases even though
> no
> > > > > actual results are requested!
> > > > > 
> > > > > However, I managed to find another way to reduce the search size,
> by
> > > > > specifying a maximum result size to the LDAP server. This will
> go into
> > > > > the next (1.330) Webmin release.
> > > > > 
> > > > >  - Jamie
> > > > 
> > > > Hi Jamie,
> > > > 
> > > > I noticed that you had added the fix above to the 1.328 version.
> I
> > > > downloaded it and tested it.  It displays the initial list of
> > > > users/groups immediately if it exceeds the limit for the page.  Thanks
> > > > for your work on that - it will improve things a lot in our setup.
> > > 
> > > Hi Jamie,
> > > 
> > > I have installed 1.330 and the initial list of users displays quickly
> as
> > > for the earlier test version but I noticed that when clicking on create
> > > a new ldap user or opening an existing one, the screen takes a fair
> > > while to display (15-20 secs).  Not sure why that should be so slow?
> -
> > > in the first case it only needs to look up the next available uid.
> > > Bringing up an existing user might be a bit slower but the ldap search
> > > should be pretty quick.
> > 
> > I'll have to look into this .. do you have a large number of groups too?
> > 
> >  - Jamie
> 
> We have about 1500 users.  We don't have a large number of groups but a
> few groups have lots of members ie. 1000+.

Ok, I found another bug in the code that can cause a slowdown - it tries
to scan all users in LDAP to get a free UID, and to find uses shells. The
former is un-needed for editing existing users, and the latter can be disabled
on the Module Config page.

Let me know if you'd like a beta version of the fixed module to try out..

 - Jamie

[webmin-l] migration advise

[<ax...@ax...>]

Hi all webminners

I have a small task to do any maybe someone can provde some advise.
I have 4 name servers hosting over 1000 domains. All run webmin and I have
users managing their domains via webmin on the master server.
I now have built a 5th server and want to migrate all webmin users to this
server.
Each user is only allowed to access the server from a certain IP and each user
only has access to their own domains which they manage.
1. Has anyone experienced migrating users to another webmin server and all
settings have been retained?
2. I have to change the master record for all domains to the new server, is
there a quick way of doing this for over 1000 domains via webmin?


I know there is an option in webmin bind management "convert to slave", but to
do this for  over 1000 domains is crazy.
Any advise is appreciated.

Thanks

Re: [webmin-l] LDAP Users and Groups module performance

[Murray T. <mtr...@ce...>]

On Thu, 2007-03-08 at 13:00 -0800, Jamie Cameron wrote:
> On 7/Mar/2007 23:16 Murray Trainer wrote ..
> > On Mon, 2007-02-26 at 15:19 +0900, Murray Trainer wrote:
> > > On Sun, 2007-01-21 at 22:27 -0800, Jamie Cameron wrote:
> > > > On 21/Jan/2007 16:11 Murray Trainer wrote ..
> > > > > On Fri, 2007-01-19 at 00:23 -0800, Jamie Cameron wrote:
> > > > > > On 18/Jan/2007 22:46 Murray Trainer wrote ..
> > > > > > > Hi Jamie
> > > > > > > 
> > > > > > > We now have over 1000 users we manage with the LDAP Users module.
> > > > > I
> > > > > > > have noticed lately that it is becoming very slow bringing up
> > the
> > > > > > > initial screen.  I can imagine things only getting worse as the
> > > > > > > directory gets larger.  I haven't checked the queries My guess
> > is that
> > > > > > > the module tries to search the LDAP directory for the whole list
> > of
> > > > > > > users, then after realising there are too many, it then says
> > there
> > > > > are
> > > > > > > too many to display and fails.  Even if I set the maximum number
> > of
> > > > > > > users or groups to display to 0 or 1 it still takes a fair few
> > seconds
> > > > > > > to display the opening screen.  
> > > > > > > 
> > > > > > > The recommed method is to process each LDAP user entry one at
> > a time
> > > > > as
> > > > > > > they are returned. The module would stop when it reached the
> > limit
> > > > > of
> > > > > > > users for that page which could be a configuration value.  The
> > module
> > > > > > > appears to be using the NET::LDAP library.  I had a look at the
> > > > > > > documentation below and they recommend processing each entry
> > as it
> > > > > is
> > > > > > > returned:  
> > > > > > > 
> > > > > > > http://search.cpan.org/~gbarr/perl-ldap-0.33/lib/Net/LDAP/FAQ.pod#USING_THE_CALLBACK_SUBROUTINE_APPROACH
> > > > > > > 
> > > > > > > If we want 100 users to be displayed on the page we print the
> > first
> > > > > 100
> > > > > > > entries then quit.  If we want users 100-200 we would ignore
> > the first
> > > > > > > hundred entries and print the second hundred, and so on.
> > > > > > > 
> > > > > > > Hope the above idea has merit and its possible for you to implement
> > > > > at
> > > > > > > some stage.
> > > > > > 
> > > > > > Actually, that is what the module already does. The main page does
> > an
> > > > > > LDAP search for matching users, and then checks the number of results
> > > > > available.
> > > > > > If this is higher than the maximum set on the Module Config page,
> > it
> > > > > just
> > > > > > displays the search form without fetching the full user list.
> > > > > > 
> > > > > > Of course, for this to be useful I assume that the LDAP server
> > doesn't
> > > > > > fetch users from it's database until actually asked to..
> > > > > > 
> > > > > >  - Jamie
> > > > > > 
> > > > > 
> > > > > If it does things in the sequential manner then I am not sure why
> > it is
> > > > > so slow for me.  There is nothing wrong with the performance of the
> > ldap
> > > > > server.  I can do an ldapsearch from a client machine and dump the
> > whole
> > > > > list of users into a text file in less than a second.  Going into
> > the
> > > > > first ldap users and groups screen with the list of users takes >
> > 10
> > > > > secs even with the amount of users to display set to 0. I am not
> > sure
> > > > > where the bottleneck in performance is?
> > > > 
> > > > I took another look at the code for this module, and it seems that
> > even
> > > > though Webmin just calls the Net::LDAP module's search function, this
> > > > takes a long time to respond on large LDAP databases even though no
> > > > actual results are requested!
> > > > 
> > > > However, I managed to find another way to reduce the search size, by
> > > > specifying a maximum result size to the LDAP server. This will go into
> > > > the next (1.330) Webmin release.
> > > > 
> > > >  - Jamie
> > > 
> > > Hi Jamie,
> > > 
> > > I noticed that you had added the fix above to the 1.328 version.  I
> > > downloaded it and tested it.  It displays the initial list of
> > > users/groups immediately if it exceeds the limit for the page.  Thanks
> > > for your work on that - it will improve things a lot in our setup.
> > 
> > Hi Jamie,
> > 
> > I have installed 1.330 and the initial list of users displays quickly as
> > for the earlier test version but I noticed that when clicking on create
> > a new ldap user or opening an existing one, the screen takes a fair
> > while to display (15-20 secs).  Not sure why that should be so slow? -
> > in the first case it only needs to look up the next available uid.
> > Bringing up an existing user might be a bit slower but the ldap search
> > should be pretty quick.
> 
> I'll have to look into this .. do you have a large number of groups too?
> 
>  - Jamie

We have about 1500 users.  We don't have a large number of groups but a
few groups have lots of members ie. 1000+.

Murray

Re: [webmin-l] I use shell module, but I can't change to a directory that contains space.

[Jamie C. <jca...@we...>]

On 8/Mar/2007 05:06 Stepan Yakovenko wrote ..
<blockquote type="cite">
Hello, I've got a trouble, it is in subject.<br /><br />Here is a log of what I did:<br /><br /><pre><strong>&gt; ls</strong><br />Andre, Maurice<br />Argerich, Marta<br />Azarkhin, Rodion<br />Bach, Johann Sebastian<br />Glass, Philip<br />Grieg, Edvard<br /><br />Vedel Artemiy<br />Verdi, Giuseppe<br />Vivaldi, Antonio<br />Wagner, Richard<br /><strong>&gt; cd &quot;Glass, Philip&quot;</strong><br />&quot;Glass,: No such file or directory<br /><strong>&gt; cd Glass,\ Philip</strong><br />Glass,\: Invalid argument<br /><br /><strong>&gt; cd Glass, Philip</strong><br />Glass,: No such file or directory<br /><strong>&gt; cd &quot;Glass, Philip&quot;</strong><br />&quot;Glass,: No such file or directory<br /><strong>&gt; ls Gl*</strong><br />image<br />info<br />sound<br /><strong>&gt; echo Gl*<br /></strong><br />Glass, Philip<br /><strong>&gt; cd `echo Gl*`</strong><br />`echo: No such file or directory</pre><br />How can I change to a directory that contains space? I am runn
 ing lastest version of webmin (1.33).<br />
</blockquote><p>Thanks for pointing this out .. there is a bug in Webmin that prevents this form working. I'll fix it in the next release..</p><p> - Jamie<br /><br />
</p>

Re: [webmin-l] LDAP Users and Groups module performance

[Jamie C. <jca...@we...>]

On 7/Mar/2007 23:16 Murray Trainer wrote ..
> On Mon, 2007-02-26 at 15:19 +0900, Murray Trainer wrote:
> > On Sun, 2007-01-21 at 22:27 -0800, Jamie Cameron wrote:
> > > On 21/Jan/2007 16:11 Murray Trainer wrote ..
> > > > On Fri, 2007-01-19 at 00:23 -0800, Jamie Cameron wrote:
> > > > > On 18/Jan/2007 22:46 Murray Trainer wrote ..
> > > > > > Hi Jamie
> > > > > > 
> > > > > > We now have over 1000 users we manage with the LDAP Users module.
> > > > I
> > > > > > have noticed lately that it is becoming very slow bringing up
> the
> > > > > > initial screen.  I can imagine things only getting worse as the
> > > > > > directory gets larger.  I haven't checked the queries My guess
> is that
> > > > > > the module tries to search the LDAP directory for the whole list
> of
> > > > > > users, then after realising there are too many, it then says
> there
> > > > are
> > > > > > too many to display and fails.  Even if I set the maximum number
> of
> > > > > > users or groups to display to 0 or 1 it still takes a fair few
> seconds
> > > > > > to display the opening screen.  
> > > > > > 
> > > > > > The recommed method is to process each LDAP user entry one at
> a time
> > > > as
> > > > > > they are returned. The module would stop when it reached the
> limit
> > > > of
> > > > > > users for that page which could be a configuration value.  The
> module
> > > > > > appears to be using the NET::LDAP library.  I had a look at the
> > > > > > documentation below and they recommend processing each entry
> as it
> > > > is
> > > > > > returned:  
> > > > > > 
> > > > > > http://search.cpan.org/~gbarr/perl-ldap-0.33/lib/Net/LDAP/FAQ.pod#USING_THE_CALLBACK_SUBROUTINE_APPROACH
> > > > > > 
> > > > > > If we want 100 users to be displayed on the page we print the
> first
> > > > 100
> > > > > > entries then quit.  If we want users 100-200 we would ignore
> the first
> > > > > > hundred entries and print the second hundred, and so on.
> > > > > > 
> > > > > > Hope the above idea has merit and its possible for you to implement
> > > > at
> > > > > > some stage.
> > > > > 
> > > > > Actually, that is what the module already does. The main page does
> an
> > > > > LDAP search for matching users, and then checks the number of results
> > > > available.
> > > > > If this is higher than the maximum set on the Module Config page,
> it
> > > > just
> > > > > displays the search form without fetching the full user list.
> > > > > 
> > > > > Of course, for this to be useful I assume that the LDAP server
> doesn't
> > > > > fetch users from it's database until actually asked to..
> > > > > 
> > > > >  - Jamie
> > > > > 
> > > > 
> > > > If it does things in the sequential manner then I am not sure why
> it is
> > > > so slow for me.  There is nothing wrong with the performance of the
> ldap
> > > > server.  I can do an ldapsearch from a client machine and dump the
> whole
> > > > list of users into a text file in less than a second.  Going into
> the
> > > > first ldap users and groups screen with the list of users takes >
> 10
> > > > secs even with the amount of users to display set to 0. I am not
> sure
> > > > where the bottleneck in performance is?
> > > 
> > > I took another look at the code for this module, and it seems that
> even
> > > though Webmin just calls the Net::LDAP module's search function, this
> > > takes a long time to respond on large LDAP databases even though no
> > > actual results are requested!
> > > 
> > > However, I managed to find another way to reduce the search size, by
> > > specifying a maximum result size to the LDAP server. This will go into
> > > the next (1.330) Webmin release.
> > > 
> > >  - Jamie
> > 
> > Hi Jamie,
> > 
> > I noticed that you had added the fix above to the 1.328 version.  I
> > downloaded it and tested it.  It displays the initial list of
> > users/groups immediately if it exceeds the limit for the page.  Thanks
> > for your work on that - it will improve things a lot in our setup.
> 
> Hi Jamie,
> 
> I have installed 1.330 and the initial list of users displays quickly as
> for the earlier test version but I noticed that when clicking on create
> a new ldap user or opening an existing one, the screen takes a fair
> while to display (15-20 secs).  Not sure why that should be so slow? -
> in the first case it only needs to look up the next available uid.
> Bringing up an existing user might be a bit slower but the ldap search
> should be pretty quick.

I'll have to look into this .. do you have a large number of groups too?

 - Jamie

[webmin-l] I use shell module, but I can't change to a directory that contains space.

[Stepan Y. <sti...@gm...>]

Hello, I've got a trouble, it is in subject.

Here is a log of what I did:

*> ls*
Andre, Maurice
Argerich, Marta
Azarkhin, Rodion
Bach, Johann Sebastian
Glass, Philip
Grieg, Edvard
Vedel Artemiy
Verdi, Giuseppe
Vivaldi, Antonio
Wagner, Richard
*> cd "Glass, Philip"*
"Glass,: No such file or directory
*> cd Glass,\ Philip*
Glass,\: Invalid argument
*> cd Glass, Philip*
Glass,: No such file or directory
*> cd "Glass, Philip"*
"Glass,: No such file or directory
*> ls Gl**
image
info
sound
*> echo Gl**
Glass, Philip
*> cd `echo Gl*`*
`echo: No such file or directory


How can I change to a directory that contains space? I am running lastest
version of webmin (1.33).

Thank you.

Re: [webmin-l] SSL cert warning on webmin running under ssl

[Obantec S. <su...@ob...>]

----- Original Message ----- 
From: "Jamie Cameron" <jca...@we...>
To: "Webmin users list" <web...@li...>
Sent: Tuesday, March 06, 2007 5:41 PM
Subject: Re: [webmin-l] SSL cert warning on webmin running under ssl


> On 6/Mar/2007 01:41 Obantec Support wrote ..
>> Hi
>>
>> i have switched to SSL on webmin 3.10 (yes will U/G soon)
>> is there away to stop the SSL cert warning each time i connect. i used
>> webmin to create to ssl cert file.
>
> Only if you purchase a real cert from a CA like Thawte or Verisign..
>
> - Jamie
>
> -------------------------------------------------------------------------
> Take Surveys. Earn Cash. Influence the Future of IT
> Join SourceForge.net's Techsay panel and you'll get the chance to share 
> your
> opinions on IT & business topics through brief surveys-and earn cash
> http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
> -
> Forwarded by the Webmin mailing list at 
> web...@li...
> To remove yourself from this list, go to
> http://lists.sourceforge.net/lists/listinfo/webadmin-list
>
>
Thanks Jamie

i might get a wild card cert as i could put usermin on SSL and couple of 
other web interfaces.

Mark

Re: [webmin-l] LDAP Users and Groups module performance

[Murray T. <mtr...@ce...>]

On Mon, 2007-02-26 at 15:19 +0900, Murray Trainer wrote:
> On Sun, 2007-01-21 at 22:27 -0800, Jamie Cameron wrote:
> > On 21/Jan/2007 16:11 Murray Trainer wrote ..
> > > On Fri, 2007-01-19 at 00:23 -0800, Jamie Cameron wrote:
> > > > On 18/Jan/2007 22:46 Murray Trainer wrote ..
> > > > > Hi Jamie
> > > > > 
> > > > > We now have over 1000 users we manage with the LDAP Users module. 
> > > I
> > > > > have noticed lately that it is becoming very slow bringing up the
> > > > > initial screen.  I can imagine things only getting worse as the
> > > > > directory gets larger.  I haven't checked the queries My guess is that
> > > > > the module tries to search the LDAP directory for the whole list of
> > > > > users, then after realising there are too many, it then says there
> > > are
> > > > > too many to display and fails.  Even if I set the maximum number of
> > > > > users or groups to display to 0 or 1 it still takes a fair few seconds
> > > > > to display the opening screen.  
> > > > > 
> > > > > The recommed method is to process each LDAP user entry one at a time
> > > as
> > > > > they are returned. The module would stop when it reached the limit
> > > of
> > > > > users for that page which could be a configuration value.  The module
> > > > > appears to be using the NET::LDAP library.  I had a look at the
> > > > > documentation below and they recommend processing each entry as it
> > > is
> > > > > returned:  
> > > > > 
> > > > > http://search.cpan.org/~gbarr/perl-ldap-0.33/lib/Net/LDAP/FAQ.pod#USING_THE_CALLBACK_SUBROUTINE_APPROACH
> > > > > 
> > > > > If we want 100 users to be displayed on the page we print the first
> > > 100
> > > > > entries then quit.  If we want users 100-200 we would ignore the first
> > > > > hundred entries and print the second hundred, and so on.
> > > > > 
> > > > > Hope the above idea has merit and its possible for you to implement
> > > at
> > > > > some stage.
> > > > 
> > > > Actually, that is what the module already does. The main page does an
> > > > LDAP search for matching users, and then checks the number of results
> > > available.
> > > > If this is higher than the maximum set on the Module Config page, it
> > > just
> > > > displays the search form without fetching the full user list.
> > > > 
> > > > Of course, for this to be useful I assume that the LDAP server doesn't
> > > > fetch users from it's database until actually asked to..
> > > > 
> > > >  - Jamie
> > > > 
> > > 
> > > If it does things in the sequential manner then I am not sure why it is
> > > so slow for me.  There is nothing wrong with the performance of the ldap
> > > server.  I can do an ldapsearch from a client machine and dump the whole
> > > list of users into a text file in less than a second.  Going into the
> > > first ldap users and groups screen with the list of users takes > 10
> > > secs even with the amount of users to display set to 0. I am not sure
> > > where the bottleneck in performance is?
> > 
> > I took another look at the code for this module, and it seems that even
> > though Webmin just calls the Net::LDAP module's search function, this
> > takes a long time to respond on large LDAP databases even though no
> > actual results are requested!
> > 
> > However, I managed to find another way to reduce the search size, by
> > specifying a maximum result size to the LDAP server. This will go into
> > the next (1.330) Webmin release.
> > 
> >  - Jamie
> 
> Hi Jamie,
> 
> I noticed that you had added the fix above to the 1.328 version.  I
> downloaded it and tested it.  It displays the initial list of
> users/groups immediately if it exceeds the limit for the page.  Thanks
> for your work on that - it will improve things a lot in our setup.

Hi Jamie,

I have installed 1.330 and the initial list of users displays quickly as
for the earlier test version but I noticed that when clicking on create
a new ldap user or opening an existing one, the screen takes a fair
while to display (15-20 secs).  Not sure why that should be so slow? -
in the first case it only needs to look up the next available uid.
Bringing up an existing user might be a bit slower but the ldap search
should be pretty quick.

Murray

Re: [webmin-l] Open Country's OCM Webmin Plus

[Jamie C. <jca...@we...>]

On 6/Mar/2007 09:07 Jamie Cameron wrote ..
> On 6/Mar/2007 03:00 David Anderson wrote ..
> > Is this project still being worked on? There seems to have been no
> > activity on the SourceForge site.
> 
> Unfortunately not, as OpenCountry is going out of business :-(

Sorry, I was incorrect: Open Country is changing its business model
to a licensor of source code, and they are reviewing the request to authorize
the incorporation the Bacula code into Webmin. Such a decision won't be
made for a few weeks however..

 - Jamie

Re: [webmin-l] Can not instal ProFTP using Webmin link

[Ganefo S. <su...@ga...>]

>>>> On 5/Mar/2007 01:06 Ganefo Support wrote ..
>>>>
>>>>> Please help,
>>>>>
>>>>> When I click this link:
>>>>> The ProFTPd package can be automatically installed by Webmin. Click
>>>>> here
>>>>> to have it downloaded and installed using YUM.
>>>>>
>>>>> then I got this message, but the ProFTP not installed. I am using
>>>>> Webmin
>>>>> 1.330. Any idea to fix this problem?
>>>>>
>>>>> ---------------------------------------------------------------------------------------------
>>>>> Installing package(s) with command yum -y install proftpd ..
>>>>>
>>>>> Loading "installonlyn" plugin
>>>>> Setting up Install Process
>>>>> Setting up repositories
>>>>> Reading repository metadata in from local files
>>>>> Parsing package install arguments
>>>>> Nothing to do
>>>>> .. install complete.
>>>>>
>>>>
>>>> The problem here is that your distro doesn't include a package for
>>>> ProFTPd, so
>>>> Webmin can't install it automatically. You'll need to find an RPM for
>>>> it (perhaps
>>>> on the proftpd website) and install that instead..
>>>>
>>>>  - Jamie
>>>>
>>> Actually this is the way yum responds when the package is already
>>> installed.
>>>
>> According to the link description, webmin will do it for me: downloaded
>> then install the ProFTP, right?
> You are correect, but yum is telling you that the ProFTP is already
> installed on your computer, so it doesn't install it again. Check your
> services and see if its listed.
>>
On the "System-Bootup and Shutdown" there is no ProFTP. I am using FC5 Linux.
So, I install ProFTPd manually. Now, its works. Thanks.

Re: [webmin-l] SSL cert warning on webmin running under ssl

[Kris D. <kd...@vi...>]

da...@so... wrote:
> Hi,
> There are two options that I know of, but neither are desireable.
> 
> 1. YOu can buy a certificate for each box you have webmin running. 
> Expensive and unnecessary.
> 
> 2. You can turn the flag off or choose to install the blank certificate 
> in your browser. The security implacations in that are overwhelming. 
> Additionally,  if you install the blank certificate Firefox won't let you 
> access.

You could also just create self-signed certs for each server - this is 
pretty easy.

If you feel like making the effort, you can also create your own local 
CA (Certificate Authority), and create certs for each machine.  Import 
the master cert into your browser as a trusted authority, and then any 
cert you sign with that master should be trusted as well.  I've done 
this several times.

> Most of us live with it as a feel good security by-product.

I prefer to eliminate the error messages by fixing what it's complaining 
about.  <g>

-kgd

Re: [webmin-l] SSL cert warning on webmin running under ssl

[<da...@so...>]

Hi,
There are two options that I know of, but neither are desireable.

1. YOu can buy a certificate for each box you have webmin running. 
Expensive and unnecessary.

2. You can turn the flag off or choose to install the blank certificate 
in your browser. The security implacations in that are overwhelming. 
Additionally,  if you install the blank certificate Firefox won't let you 
access.

Most of us live with it as a feel good security by-product.

Dan


From:           	"Obantec Support" <su...@ob...>
To:             	<web...@li...>
Date sent:      	Tue, 6 Mar 2007 09:41:21 -0000
Subject:        	[webmin-l] SSL cert warning on webmin running under ssl
Send reply to:  	Webmin users list <web...@li...>
	<mailto:web...@li...?subject=unsubscribe>
	<mailto:web...@li...?subject=subscribe>

[ Double-click this line for list subscription options ] 

Hi

i have switched to SSL on webmin 3.10 (yes will U/G soon)
is there away to stop the SSL cert warning each time i connect. i 
used 
webmin to create to ssl cert file.

Mark
--
Obantec Support
www.obantec.net
0845 458 3121
WebHosting and Domains
Nominet UK Member & IPStag Holder
CentralNic Accredited Reseller 


-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to 
share your
opinions on IT & business topics through brief surveys-and earn 
cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge
&CID=DEVDEV
-
Forwarded by the Webmin mailing list at webadmin-
li...@li...
To remove yourself from this list, go to
http://lists.sourceforge.net/lists/listinfo/webadmin-list
******************************************************************************
***
Domains by SolvNet
http://solvnetdomains.com

Be a domain reseller and make cash
http://domainmiddleman.com

Domain name registration and hosting solutions.

http://solvnethosting.com

Re: [webmin-l] SSL cert warning on webmin running under ssl

[Jamie C. <jca...@we...>]

On 6/Mar/2007 01:41 Obantec Support wrote ..
> Hi
> 
> i have switched to SSL on webmin 3.10 (yes will U/G soon)
> is there away to stop the SSL cert warning each time i connect. i used
> webmin to create to ssl cert file.

Only if you purchase a real cert from a CA like Thawte or Verisign..

 - Jamie

Re: [webmin-l] Open Country's OCM Webmin Plus

[David A. <dm...@pe...>]

Jamie,

Tuesday, March 6, 2007, 5:07:59 PM, you wrote:

JC> On 6/Mar/2007 03:00 David Anderson wrote ..
>> Is this project still being worked on? There seems to have been no
>> activity on the SourceForge site.

JC> Unfortunately not, as OpenCountry is going out of business :-(

That is really very sad. I hope it doesn't affect you too much.

>> Alternatively, is there any chance of the Bacula code being ported
>> to Webmin?

JC> I am investigating this actually .. it would certainly be nice.

I certainly would. That is the only reason I moved from standard
Webmin. A great product - thank you!

JC>  - Jamie

-- 
Best regards,
 David                            mailto:dm...@pe...