Troubleshooting a General Slowness in Scalix 10

[ben.christenson]

Upon upgrading our Scalix system to Scalix 10, a number of our users have begun complaining about "general slowness in the application." Are there any Scalix diagnostics for determining bottlenecks or potential problems? Is there any documentation on suggested methodology for troubleshooting something as broad as "general slowness"? The box is definitely not underpowered, and I am fairly sure that the slowness is Scalix specific as applications I am working with during times when I get complaints are extremely peppy.

[ScalixSupport]

Did you run

omtidyallu -M

after the upgrade?

Is this slowness in SWA or Outlook or both?

Thanks,
Don

[ben.christenson]

I believe that a we did run tidyall after the the upgrade, however I ran it again on Friday just to make sure. Some users have reported performance increases, however the majority of users have not seen a difference. I have now personally observed slowness from the Web (10 minutes to load an Inbox with only 750 messages from outside the network on a good connection), Outlook Connector (3 minutes to load about 500 messages from the local network), and OS X's Mail program using Scalix as an IMAP server (Taking over a minute to synchronize after closing Mail and opening it one minute later).

In a possibly related comment, our fatal log appends an error message similar to the following a couple of times a minute, could this be effecting our speed?

ERROR POP3 interface(POP3 Process ) Mon Mar 27 09:28:23 2006
[OM 29260] PAM unable to resolve symbol: pam_sm_chauthtok
Pid of logging process: 11565


ERROR IMAP Server Da(IMAP Server Pr) Mon Mar 27 09:28:25 2006
[OM 29260] PAM unable to resolve symbol: pam_sm_chauthtok
Pid of logging process: 17082

Can you recommend a next step?

[ScalixSupport]

That error isn't serious even though it looks it :-)

I suspect your pam.d/pop3 file has a line like

Code: Select all

password optional om_ldap

and it doesn't need it. You should also check pam.d/ual.remote , pam.d/smtpd.auth and pam.d/omslapdeng as these are all the files required for client authentication.

If you got this from a technote, can you tell me which one as we need to fix it up.

Cheers

Dave

[ben.christenson]

That looks to have solved the PAM error in the fatal log. I didn't do the initial setup of the machine, so I can't say for sure if this was uncommented by the installer or if he was following instructions from the LDAP Howto. Are there any statistics for about how long loading an Inbox with x messages should take on a properly configured system? Is it just the fact that there are 500+ messages in an Inbox that is causing the slow loads?

[keithc]

I'm also getting the error

[OM 29260] PAM unable to resolve symbol: pam_sm_chauthtok

From a fresh install of the latest (10.0.1) version of the community edition. I'm trying to get Scalix to authenticate against OpenLDAP to enable integration with Samba.

I'm following the instructions in your technote
"Configuring Scalix to Use LDAP Authentication with PAM"

My /var/opt/scalix/sys/ual.remote file contains
auth sufficient om_ldap
auth sufficient om_auth
auth required pam_deny
account required om_auth
password optional om_ldap
password required om_auth
password required om_sasl
session required om_auth


and /var/opt/scalix/sys/om_ldap.conf contains
host=localhost
search=subtree
base=dc=trivas,dc=home
filter=uid=%s

The host OS is OpenSuse 10.0

Any thoughts ?

[ScalixSupport]

Hi Keith,

See my response a couple of posts up. The problem is "password optional om_ldap" which should not be there.

Thanks for indicating where you got this information from as I've been wanting to correct it but nobody could remember where they saw it :-)

Cheers

Dave

[keithc]

Does this imply that using an external ldap service for authentication will not work with Scalix 10?

[ScalixSupport]

Not at all. Using an external ldap source for authentication definitely works with Scalix 10.

The caveat to this is that if you're looking for password changes to go back to the LDAP server, you should look at using the standard pam_ldap module.

Cheers

Dave

[pillarguys]

We are also getting the fatal errors:
ERROR POP3 interface(POP3 Process ) Tue Apr 25 19:06:39 2006
[OM 29260] PAM adding faulty module: /opt/scalix/lib/security/om_sasl.so
Pid of logging process: 4815.

We authenticate to a remoted Fedora Directory Server and in /var/opt/scalix/sys/pam.d

** pop3 has:

auth sufficient om_ldap
auth sufficient om_auth use_first_pass
auth required pam_deny

account required om_auth

password required om_ldap
password required om_auth
password required om_sasl

** ual.remote and ual.local have:

auth sufficient om_ldap
auth sufficient om_auth use_first_pass
auth required pam_deny

account required om_auth

password required om_ldap
password required om_auth
password required om_sasl

session required om_auth

Any further comment?
[

[ScalixSupport]

You need to remove all references to om_sasl.

Cheers

Dave