This amount of users needs a lot of tuning and i think installing a program like NSCD is or should be part of that tuning. I personaly run SuSE on a web-servers and have NSCD turned of. The reason is that i only read difficulties of NSCD and every pogram adds a security risc.
Am I the only one for which NSCD creates problems with slow nameservers? As in: - Issue the command: "ping www.somestrangedomainname.com" - my DNS has to lookup the address from a far/slow DNS and doesn't reply before timeout - ping replies host unknown - NSCD caches the host unknown error - another ping returns error again for some time - "/etc/rc.d/nscd stop" (sorry for the RedHat-ism :) - "ping www.somestrangedomainname.com" - this times it's OK. I can easily imagine a lot of people that just installed linux being lost, and rebooting their machine to see "if it works this way". And the worst part is, it does work after the reboot... Someone should have a talk with the glib/nsdc people ;-) Ciao, Roberto.