Subject: Re: LDAP with TLS is taking more time in Postgresql 11.5
To: Mani Sankar <manisankar01695@gmail.com>, pgsql-general@postgresql.org,
 pgsql-performance@postgresql.org
References: 
 <CAEtVwW3Bygo1iYxOPYbFSjBPqA1_RU8iJMTdML609h0Gy4JN7Q@mail.gmail.com>
From: Adrian Klaver <adrian.klaver@aklaver.com>
Message-ID: <319e70c3-cd99-8bf9-260d-49064ba402c5@aklaver.com>
Date: Mon, 24 Feb 2020 12:58:20 -0800
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101
 Thunderbird/68.5.0
MIME-Version: 1.0
In-Reply-To: 
 <CAEtVwW3Bygo1iYxOPYbFSjBPqA1_RU8iJMTdML609h0Gy4JN7Q@mail.gmail.com>
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Language: en-US
Content-Transfer-Encoding: 7bit
Precedence: bulk

On 2/24/20 11:50 AM, Mani Sankar wrote:
> Hi All,
> 
> We have recently upgraded our postgres servers from 9.4 version to 11.5 
> version. Post upgrade we are see delay in authentication.
> 
> Issue is when we are using ldaptls=1 the authentication takes 1 second 
> or greater than that. But if I disable ldaptls it's getting 
> authenticated within milliseconds.
> 
> But in 9.4 even if I enable ldaptls it's getting authenticated within 
> milliseconds any idea why we are facing the issue?

This is going to need a good deal more information:

1) OS the server is running on and did the OS or OS version change with 
the upgrade?

2) How was the server installed from packages(if so from where?) or from 
source?

3) The configuration for LDAP in pg_hba.conf.

4) Pertinent information from the Postgres log.

5) Pertinent information from the system log.

> 
> Regards,
> Mani.
> 


-- 
Adrian Klaver
adrian.klaver@aklaver.com