LDAP-UX Client Services B.05.00 Administrator's Guide

Table 5-4 Benefits and side-effects for caching (continued)
Example Side-EffectBenefitsMap Name
Similar to groups, since
netgroups are used to control
access to resources, modification
of these rights may not appear
until after cache information has
expired. Users may be allowed
or denied login even their rights
should allow / deny access,
NOTE: Beginning with version
5.0 of the product, LDAP-UX
Client Services supports
integrated compat mode to
control which users are visible
on a host, where the user
accounts are referenced by
netgroups specified in the /etc/
passwd file. As a means to
greatly mitigate the performance
impacts of compat-mode field
masking, LDAP-UX has
integrated compat mode support
directly into ldapclientd,
allowing caching of
compat-mode user entries. For
more information, see “Enabling
integrated Compat Mode to
control name services and user
logins” (page 104)
netgroups can be heavily used for
determining network file system access
rights or user login rights. Caching this
information greatly reduces this impact
netgroup
For the positive AutoFS cache,
an alteration of the automount
maps will sometimes not appear
immediately. During this
expiration window, a network
file system may be granted
access, when in fact the
automount map should have
unmounted from a network file
system.
For the negative AutoFS cache,
an alteration of the automount
maps will sometimes not appear
immediately. During this
expiration window, a user
attempting to access a network
file system may be denied access,
when in fact the automount map
should have set up a network file
system mount.
Frequent file system access to a directory
may request automount information
about a network file system. A positive
AutoFS cache greatly reduces LDAP-UX
Client response time while retrieving the
automount data.
Whenever a user attempts to access a
directory that does not exist on the
physical file system, the AutoFS system
is called to determine if that directory is
available via the network through
AutoFS. A negative AutoFS cache is
critical to assure that malfunctioning
applications do not place redundant
bogus requests on the directory server.
automount
NOTE: The ldapclientd -f command will flush all caches. For more information, see the
ldapclientd(1M) manpage.
It is possible to alter the caching lifetime values for each service listed above, in the /etc/opt/
ldapux/ldapclientd.conf file. See below for additional information. It is also possible to
enable or disable a cache using the -E or -D (respectively) options. These options may be useful
in determining the effectiveness of caching or helpful in debugging.
5.17 Client daemon performance 187