[389-devel] Please review: [Ticket #3] acl cache overflown problem

[Nadia Rincon Turpin]

Hi,

The bug and corresponding patch that are linked below refer to the following problem, that was discussed on the mailing list a couple of years ago:  http://lists.fedoraproject.org/pipermail/389-devel/2009-March/001020.html
https://fedorahosted.org/389/ticket/3

https://fedorahosted.org/389/attachment/ticket/3/0001-Ticket-3-acl-cache-overflown-problem.patch


A short description: we noticed that some queries (ldapsearch) to our directory caused a drop in performance, and our log file was filled with the following message: acl_TestRights - cache overflown

We noticed that increasing the value ACLPB_MAX_SELECTED_ACLS from 200 to 2000 solved the problem for us. The purpose of the patch is to make this value configurable.

Note: while I was trying to fix this problem, I also noticed that aclQueue was not freed anywhere, so I took the freedom to add the following line, assuming that it is right to free it on shutdown - but maybe I am wrong?
slapi_ch_free((void**)&aclQueue);

Regards,
Nadia R. Turpin

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.fedoraproject.org/pipermail/389-devel/attachments/20111228/65e08a22/attachment.html>