<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<br>
<div class="moz-cite-prefix">On 12/09/2014 05:58 PM, Fong, Trevor
wrote:<br>
</div>
<blockquote cite="mid:D0ACBCC2.67AA5%25trevor.fong@ubc.ca"
type="cite">
<meta http-equiv="Content-Type" content="text/html;
charset=windows-1252">
<div>Hi Mark,</div>
<div><br>
</div>
<div>I’ve afraid adding nsIndexIDListScanLimit
to cn=objectclass,cn=index,cn=userRoot,cn=ldbm
database,cn=plugins,cn=config doesn’t seem to have any effect.
Did this:</div>
<div><br>
</div>
<div>
<p style="margin: 0px; font-size: 11px; font-family: Monaco;">dn<span
style="color: #ff2600">:
</span>cn=objectclass,cn=index,cn=userRoot,cn=ldbm
database,cn=plugins,cn=config</p>
<p style="margin: 0px; font-size: 11px; font-family: Monaco;
color: rgb(146, 146, 146);">
changetype<span style="color: #ff2600">: </span><span
style="color: #dfaf77">modify</span></p>
<p style="margin: 0px; font-size: 11px; font-family: Monaco;
color: rgb(147, 26, 104);">
<span style="color: #929292">add</span><span style="color:
#ff2600">: </span>nsIndexIDListScanLimit</p>
<p style="margin: 0px; font-size: 11px; font-family: Monaco;
color: rgb(3, 38, 204);">
<span style="color: #931a68">nsIndexIDListScanLimit</span><span
style="color: #ff2600">:
</span>limit=-1 type=eq values=inetOrgPerson</p>
</div>
</blockquote>
Hmm that's very strange, try this:<br>
<br>
dn: cn=objectclass,cn=index,cn=userRoot,cn=ldbm
database,cn=plugins,cn=config<br>
changetype: modify<br>
replace: nsIndexIDListScanLimit<br>
nsIndexIDListScanLimit: limit=-1 type=eq values=inetOrgPerson<br>
nsIndexIDListScanLimit: limit=-1 type=eq flags=AND
values=inetOrgPerson<br>
<br>
Also, is userRoot the mapping tree that refers to your "dc=<your
dc>"? I just want to make sure we are updating the correct
objectclass index configuration entry.<br>
<br>
This should get rid of those unindexed searches. Is there anything
in the 389 DS errors log regarding these settings?<br>
<br>
Thanks,<br>
Mark<br>
<br>
<br>
<blockquote cite="mid:D0ACBCC2.67AA5%25trevor.fong@ubc.ca"
type="cite">
<div>
</div>
<div><br>
</div>
<div>CPU was still in the 70’s. Logconv.pl output looks much the
same. Follows. </div>
<div><br>
</div>
<div>Thanks a lot,</div>
<div>Trev</div>
<div><br>
</div>
<div><br>
</div>
<div>
<div>Total Log Lines Analysed: 424930</div>
<div><br>
</div>
<div><br>
</div>
<div>----------- Access Log Output ------------</div>
<div><br>
</div>
<div>Start of Logs: 09/Dec/2014:11:20:00</div>
<div>End of Logs: 09/Dec/2014:14:09:20</div>
<div><br>
</div>
<div>Processed Log Time: 2 Hours, 49 Minutes, 20 Seconds</div>
<div><br>
</div>
<div>Restarts: 0</div>
<div>Total Connections: 3909</div>
<div> - StartTLS Connections: 0</div>
<div> - LDAPS Connections: 3534</div>
<div> - LDAPI Connections: 0</div>
<div>Peak Concurrent Connections: 6</div>
<div>Total Operations: 61321</div>
<div>Total Results: 61321</div>
<div>Overall Performance: 100.0%</div>
<div><br>
</div>
<div>Searches: 58178 (5.73/sec)
(343.57/min)</div>
<div>Modifications: 266 (0.03/sec)
(1.57/min)</div>
<div>Adds: 93 (0.01/sec)
(0.55/min)</div>
<div>Deletes: 0 (0.00/sec)
(0.00/min)</div>
<div>Mod RDNs: 0 (0.00/sec)
(0.00/min)</div>
<div>Compares: 0 (0.00/sec)
(0.00/min)</div>
<div>Binds: 2570 (0.25/sec)
(15.18/min)</div>
<div><br>
</div>
<div>Proxied Auth Operations: 0</div>
<div>Persistent Searches: 0</div>
<div>Internal Operations: 0</div>
<div>Entry Operations: 0</div>
<div>Extended Operations: 214</div>
<div>Abandoned Requests: 0</div>
<div>Smart Referrals Received: 0</div>
<div><br>
</div>
<div>VLV Operations: 0</div>
<div>VLV Unindexed Searches: 0</div>
<div>VLV Unindexed Components: 0</div>
<div>SORT Operations: 1</div>
<div><br>
</div>
<div>Entire Search Base Queries: 0</div>
<div>Paged Searches: 546</div>
<div>Unindexed Searches: 1</div>
<div>Unindexed Components: 545</div>
<div><br>
</div>
<div> Unindexed Search #1 (notes=A)</div>
<div> - Date/Time: 09/Dec/2014:13:19:05</div>
<div> - Connection Number: 348121</div>
<div> - Operation Number: 2</div>
<div> - Etime: 0</div>
<div> - Nentries: 100</div>
<div> - IP Address: 10.7.8.105</div>
<div> - Search Base: ou=employees,dc=<our dc></div>
<div> - Search Scope: 2 (subtree)</div>
<div> - Search Filter:
(&(objectclass=inetorgperson))</div>
<div><br>
</div>
<div> Unindexed Component #1 (notes=U)</div>
<div> - Date/Time: 09/Dec/2014:11:30:16</div>
<div> - Connection Number: 344719</div>
<div> - Operation Number: 101</div>
<div> - Etime: 0</div>
<div> - Nentries: 100</div>
<div> - IP Address: Unknown_Host</div>
<div> - Search Base: ou=employees,dc=<our dc></div>
<div> - Search Scope: 2 (subtree)</div>
<div> - Search Filter:
(&(objectclass=inetorgperson))</div>
<div><br>
</div>
<div> Unindexed Component #2 (notes=U)</div>
<div> - Date/Time: 09/Dec/2014:11:31:47</div>
<div> - Connection Number: 344719</div>
<div> - Operation Number: 105</div>
<div> - Etime: 0</div>
<div> - Nentries: 100</div>
<div> - IP Address: Unknown_Host</div>
<div> - Search Base: ou=employees,dc=<our dc></div>
<div> - Search Scope: 2 (subtree)</div>
<div> - Search Filter:
(&(objectclass=inetorgperson))</div>
<div>…<snip></div>
</div>
<div>
<div> Unindexed Component #545 (notes=U)</div>
<div> - Date/Time: 09/Dec/2014:13:19:21</div>
<div> - Connection Number: 348121</div>
<div> - Operation Number: 9</div>
<div> - Etime: 1</div>
<div> - Nentries: 100</div>
<div> - IP Address: 10.7.8.105</div>
<div> - Search Base: ou=employees,dc=<our dc></div>
<div> - Search Scope: 2 (subtree)</div>
<div> - Search Filter:
(&(objectclass=inetorgperson))</div>
<div><br>
</div>
<div>FDs Taken: 3909</div>
<div>FDs Returned: 3910</div>
<div>Highest FD Taken: 257</div>
<div><br>
</div>
<div>Broken Pipes: 0</div>
<div>Connections Reset By Peer: 0</div>
<div>Resource Unavailable: 0</div>
<div>Max BER Size Exceeded: 0</div>
<div><br>
</div>
<div>Binds: 2570</div>
<div>Unbinds: 1470</div>
<div> - LDAP v2 Binds: 0</div>
<div> - LDAP v3 Binds: 2570</div>
<div> - AUTOBINDs: 0</div>
<div> - SSL Client Binds: 0</div>
<div> - Failed SSL Client Binds: 0</div>
<div> - SASL Binds: 0</div>
<div> - Directory Manager Binds: 1170</div>
<div> - Anonymous Binds: 0</div>
<div> - Other Binds: 1400</div>
<div><br>
</div>
<div><br>
</div>
<div><br>
</div>
<div>----- Connection Latency Details -----</div>
<div><br>
</div>
<div> (in seconds) <=1 2 3 4-5
6-10 11-15 >15</div>
<div> --------------------------------------------------------------------------</div>
<div> (# of connections) 3783 2 2 22 10
2 89</div>
<div><br>
</div>
<div>----- Current Open Connection IDs -----</div>
<div><br>
</div>
<div>Conn Number: 348500 (10.7.127.250)</div>
<div>Conn Number: 348440 (10.7.127.250)</div>
<div><br>
</div>
<div><br>
</div>
<div>----- Errors -----</div>
<div><br>
</div>
<div>err=0 59285 Successful Operations</div>
<div>err=32 1017 No Such Object</div>
<div>err=53 1017 Unwilling To Perform</div>
<div>err=49 2 Invalid Credentials (Bad
Password)</div>
<div><br>
</div>
<div>----- Top 20 Failed Logins ------</div>
<div><br>
</div>
<div>2 uid=elainez,ou=employees,dc=<our dc></div>
<div><br>
</div>
<div>From the IP address(s) :</div>
<div><br>
</div>
<div>2 10.7.8.104</div>
<div><br>
</div>
<div><br>
</div>
<div>----- Total Connection Codes -----</div>
<div><br>
</div>
<div>U1 1470 Cleanly Closed Connections</div>
<div>B1 1089 Bad Ber Tag Encountered</div>
<div><br>
</div>
<div><br>
</div>
<div>----- Top 20 Clients -----</div>
<div><br>
</div>
<div>Number of Clients: 15</div>
<div><br>
</div>
<div>[1] Client: 10.20.220.16</div>
<div> 1170 - Connections</div>
<div> 1170 - U1 (Cleanly Closed Connections)</div>
<div><br>
</div>
<div>[2] Client: 137.82.5.97</div>
<div> 1017 - Connections</div>
<div> 1017 - B1 (Bad Ber Tag Encountered)</div>
<div><br>
</div>
<div>[3] Client: 142.103.218.107</div>
<div> 674 - Connections</div>
<div><br>
</div>
<div>[4] Client: 142.103.218.106</div>
<div> 674 - Connections</div>
<div><br>
</div>
<div>[5] Client: 10.7.127.250</div>
<div> 58 - Connections</div>
<div> 54 - U1 (Cleanly Closed Connections)</div>
<div><br>
</div>
<div>[6] Client: 10.7.0.52</div>
<div> 53 - Connections</div>
<div> 53 - U1 (Cleanly Closed Connections)</div>
<div><br>
</div>
<div>[7] Client: 142.103.106.142</div>
<div> 40 - Connections</div>
<div> 40 - U1 (Cleanly Closed Connections)</div>
<div><br>
</div>
<div>[8] Client: 142.103.106.135</div>
<div> 38 - Connections</div>
<div> 38 - U1 (Cleanly Closed Connections)</div>
<div><br>
</div>
<div>[9] Client: 127.0.0.1</div>
<div> 36 - Connections</div>
<div> 35 - B1 (Bad Ber Tag Encountered)</div>
<div> 1 - U1 (Cleanly Closed Connections)</div>
<div><br>
</div>
<div>[10] Client: 142.103.149.136</div>
<div> 34 - Connections</div>
<div> 33 - B1 (Bad Ber Tag Encountered)</div>
<div> 1 - U1 (Cleanly Closed Connections)</div>
<div><br>
</div>
<div>[11] Client: 142.103.106.143</div>
<div> 33 - Connections</div>
<div> 33 - U1 (Cleanly Closed Connections)</div>
<div><br>
</div>
<div>[12] Client: 142.103.106.145</div>
<div> 31 - Connections</div>
<div> 31 - U1 (Cleanly Closed Connections)</div>
<div><br>
</div>
<div>[13] Client: 142.103.106.141</div>
</div>
<div>
<div> 28 - Connections</div>
<div> 28 - U1 (Cleanly Closed Connections)</div>
<div><br>
</div>
<div>[14] Client: 10.7.8.104</div>
<div> 12 - Connections</div>
<div> 8 - U1 (Cleanly Closed Connections)</div>
<div> 4 - B1 (Bad Ber Tag Encountered)</div>
<div><br>
</div>
<div>[15] Client: 10.7.8.105</div>
<div> 11 - Connections</div>
<div> 11 - U1 (Cleanly Closed Connections)</div>
<div><br>
</div>
<div><br>
</div>
<div><br>
</div>
<div>----- Top 20 Bind DN's -----</div>
<div><br>
</div>
<div>Number of Unique Bind DN's: 11</div>
<div><br>
</div>
<div>1240 cn=directory manager</div>
<div>1017 cn=bill fisher,ou=people,dc=dartware,dc=com</div>
<div>206 uid=<service accoount 1></div>
<div>53 cn=replication manager,cn=config</div>
<div>34 uid=<service account 2></div>
<div>6 uid=rogermo,ou=employees,dc=<our dc></div>
<div>6 uid=elainez,ou=employees,dc=<our dc></div>
<div>2 uid=rwong,ou=employees,dc=<our dc></div>
<div>2 uid=steve0d6,ou=employees,dc=<our dc></div>
<div>2 uid=huynhh,ou=employees,dc=<our dc></div>
<div>2 uid=robg,ou=employees,dc=<our dc></div>
<div><br>
</div>
<div><br>
</div>
<div>----- Top 20 Search Bases -----</div>
<div><br>
</div>
<div>Number of Unique Search Bases: 9</div>
<div><br>
</div>
<div>55737 ou=groups,dc=<our dc></div>
<div>1017 ou=people,dc=dartware,dc=com</div>
<div>766 ou=employees,dc=<our dc></div>
<div>391 ou=people,dc=<our dc></div>
<div>140 cn=mapping tree,cn=config</div>
<div>121 root dse</div>
<div>2 uid=ark826,ou=employees,dc=<our dc></div>
<div>2 uid=emilygib,ou=employees,dc=<our dc></div>
<div>2 uid=kgg39500,ou=employees,dc=<our dc></div>
<div><br>
</div>
<div><br>
</div>
<div>----- Top 20 Search Filters -----</div>
<div><br>
</div>
<div>Number of Unique Search Filters: 31129</div>
<div><br>
</div>
<div>1017 (cn=bill fisher)</div>
<div>546 (&(objectclass=inetorgperson))</div>
<div>124 (objectclass=*)</div>
<div>35 (cn=eldap3*)</div>
<div>35 (cn=eldap5*)</div>
<div>35 (cn=eldap4*)</div>
<div>35 (cn=eldap2*)</div>
<div>5
(&(objectclass=groupofnames)(member=uid=elainez,ou=employees,dc=<our
dc>))</div>
<div>4 (|(cn=elainez)(uid=elainez)(mail=elainez))</div>
<div>4
(&(objectclass=inetorgperson)(ubceducwlloginkey=<login
key 1>))</div>
<div>4 (&(uid=dkavoura))</div>
<div>4 (&(uid=umashank))</div>
<div>4
(&(objectclass=groupofnames)(member=uid=rogermo,ou=employees,dc=<our
dc>))</div>
<div>4 (&(uid=joshb11))</div>
<div>4 (&(uid=joaweg))</div>
<div>4
(&(objectclass=inetorgperson)(ubceducwlloginkey=<login
key 2>))</div>
<div>3
(&(objectclass=groupofnames)(member=uid=dentonel,ou=employees,dc=<our
dc>))</div>
<div>3
(&(objectclass=groupofnames)(member=uid=wexler,ou=employees,dc=<our
dc>))</div>
<div>3
(&(objectclass=groupofnames)(member=uid=marizulu,ou=employees,dc=<our
dc>))</div>
<div>3
(&(objectclass=groupofnames)(member=uid=agurjal,ou=employees,dc=<our
dc>))</div>
<div><br>
</div>
<div><br>
</div>
<div>----- Top 20 Most Frequent etimes -----</div>
<div><br>
</div>
<div>53984 etime=0</div>
<div>7319 etime=1</div>
<div>11 etime=2</div>
<div>4 etime=8</div>
<div>1 etime=142</div>
<div>1 etime=159</div>
<div>1 etime=9</div>
<div><br>
</div>
<div><br>
</div>
<div>----- Top 20 Longest etimes -----</div>
<div><br>
</div>
<div>etime=159 1</div>
<div>etime=142 1</div>
<div>etime=9 1</div>
<div>etime=8 4</div>
<div>etime=2 11</div>
<div>etime=1 7319</div>
<div>etime=0 53984</div>
<div><br>
</div>
<div><br>
</div>
<div>----- Top 20 Largest nentries -----</div>
<div><br>
</div>
<div>nentries=100 544</div>
<div>nentries=36 2</div>
<div>nentries=7 2</div>
<div>nentries=6 6</div>
<div>nentries=5 34</div>
<div>nentries=4 153</div>
<div>nentries=3 1182</div>
<div>nentries=2 4697</div>
<div>nentries=1 41333</div>
<div>nentries=0 10225</div>
<div><br>
</div>
<div><br>
</div>
<div>----- Top 20 Most returned nentries -----</div>
<div><br>
</div>
<div>41333 nentries=1</div>
<div>10225 nentries=0</div>
<div>4697 nentries=2</div>
<div>1182 nentries=3</div>
<div>544 nentries=100</div>
<div>153 nentries=4</div>
<div>34 nentries=5</div>
<div>6 nentries=6</div>
<div>2 nentries=36</div>
<div>2 nentries=7</div>
</div>
<div>
<div><br>
</div>
<div><br>
</div>
<div><br>
</div>
<div>----- Extended Operations -----</div>
<div><br>
</div>
<div>107 2.16.840.1.113730.3.5.12 DS90 Start
Replication Request</div>
<div>107 2.16.840.1.113730.3.5.5 End Replication
Request (incremental update)</div>
<div><br>
</div>
<div><br>
</div>
<div>----- Top 20 Most Requested Attributes -----</div>
<div><br>
</div>
<div>54570 1.1</div>
<div>2498 All Attributes</div>
<div>1126 o</div>
<div>954 description</div>
<div>954 givenName</div>
<div>954 ubcEduCwlPUID</div>
<div>954 uid</div>
<div>954 cn</div>
<div>954 displayName</div>
<div>954 employeeNumber</div>
<div>954 mail</div>
<div>954 nsAccountLock</div>
<div>954 objectClass</div>
<div>954 sn</div>
<div>563 businessCategory</div>
<div>563 employeeType</div>
<div>563 facsimileTelephoneNumber</div>
<div>563 groups</div>
<div>563 homePostalAddress</div>
<div>563 l</div>
<div><br>
</div>
<div><br>
</div>
<div>----- Recommendations -----</div>
<div><br>
</div>
<div> 1. You have unindexed searches, this can be caused from a
search on an unindexed attribute, or your returned results
exceeded the allidsthreshold. Unindexed searches are not
recommended. To refuse unindexed searches, switch
'nsslapd-require-index' to 'on' under your database entry
(e.g. cn=UserRoot,cn=ldbm database,cn=plugins,cn=config).</div>
<div><br>
</div>
<div> 2. You have unindexed components, this can be caused from
a search on an unindexed attribute, or your returned results
exceeded the allidsthreshold. Unindexed components are not
recommended. To refuse unindexed searches, switch
'nsslapd-require-index' to 'on' under your database entry
(e.g. cn=UserRoot,cn=ldbm database,cn=plugins,cn=config).</div>
<div><br>
</div>
<div> 3. You have a significant difference between binds and
unbinds. You may want to investigate this difference.</div>
<div><br>
</div>
<div> 4. You have a high number of Directory Manager binds.
The Directory Manager account should only be used under
certain circumstances. Avoid using this account for client
applications.</div>
<div><br>
</div>
<div>Cleaning up temp files...</div>
<div>Done.</div>
</div>
<div><br>
</div>
<div><br>
</div>
<div><br>
</div>
<span id="OLK_SRC_BODY_SECTION">
<div style="font-family:Calibri; font-size:11pt;
text-align:left; color:black; BORDER-BOTTOM: medium none;
BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT:
0in; PADDING-RIGHT: 0in; BORDER-TOP: #b5c4df 1pt solid;
BORDER-RIGHT: medium none; PADDING-TOP: 3pt">
<span style="font-weight:bold">From: </span>Mark Reynolds
<<a moz-do-not-send="true"
href="mailto:mareynol@redhat.com">mareynol@redhat.com</a>><br>
<span style="font-weight:bold">Reply-To: </span>"<a
moz-do-not-send="true" href="mailto:mreynolds@redhat.com">mreynolds@redhat.com</a>"
<<a moz-do-not-send="true"
href="mailto:mreynolds@redhat.com">mreynolds@redhat.com</a>><br>
<span style="font-weight:bold">Date: </span>Tuesday, December
9, 2014 at 9:33 AM<br>
<span style="font-weight:bold">To: </span>Trevor Fong <<a
moz-do-not-send="true" href="mailto:trevor.fong@ubc.ca">trevor.fong@ubc.ca</a>>,
"<a moz-do-not-send="true" href="mailto:mreynolds@redhat.com">mreynolds@redhat.com</a>"
<<a moz-do-not-send="true"
href="mailto:mreynolds@redhat.com">mreynolds@redhat.com</a>>,
"<a moz-do-not-send="true"
href="mailto:389-users@lists.fedoraproject.org">389-users@lists.fedoraproject.org</a>"
<<a moz-do-not-send="true"
href="mailto:389-users@lists.fedoraproject.org">389-users@lists.fedoraproject.org</a>><br>
<span style="font-weight:bold">Subject: </span>Re:
[389-users] 389-ds and Multi CPU's<br>
</div>
<div><br>
</div>
<div>
<div bgcolor="#FFFFFF" text="#000000"><br>
<div class="moz-cite-prefix">On 12/09/2014 12:14 PM, Fong,
Trevor wrote:<br>
</div>
<blockquote cite="mid:D0AC6323.67685%25trevor.fong@ubc.ca"
type="cite">
<div>Hi Mark,</div>
<div><br>
</div>
<div>Oops – sorry about the Mike thing! I sit beside a
Mike :p</div>
</blockquote>
<code>No worries :-)<br>
<br>
So your high CPU is most likely coming from your unindexed
searches.<br>
<br>
The version you are on should support the new per index
idlistscanlimit, so try this:<br>
<br>
Note, this this is just an example, your objectclass entry
might have a different DN (userRoot might be something
else in your deployment)<br>
<br>
ldapmodify ...<br>
dn: cn=objectclass,cn=index,cn=userRoot,cn=ldbm
database,cn=plugins,cn=config<br>
changetype: modify<br>
replace: nsIndexIDListScanLimit<br>
nsIndexIDListScanLimit: limit=-1 type=eq
values=inetOrgPerson<br>
<br>
Depending on your results we might tweak the
nsIndexIDListScanLimit value again. This change should
take effect immediately - no need to restart.<br>
<br>
Let me know how it goes.<br>
<br>
Thanks,<br>
Mark</code><code><br>
<br>
</code>
<blockquote cite="mid:D0AC6323.67685%25trevor.fong@ubc.ca"
type="cite">
<div><br>
</div>
<div>Oh – no notes in that search, but there are notes in
the preceding and subsequent searches. It looks like it
returns the first 100 results then searches for
groupOfNames for each of those users, and then repeats
until all 30,000 users is done:</div>
<div><br>
</div>
<div>
<div>08/Dec/2014:07:08:04 -0800] conn=130261 fd=64
slot=64 SSL connection from <ip addr 1> to
<ip addr 2></div>
<div>[08/Dec/2014:07:08:04 -0800] conn=130261 SSL
256-bit AES</div>
<div>[08/Dec/2014:07:08:04 -0800] conn=130261 op=0 BIND
dn="<service account>" method=128 version=3</div>
<div>[08/Dec/2014:07:08:04 -0800] conn=130261 op=0
RESULT err=0 tag=97 nentries=0 etime=0 dn="<service
account>"</div>
<div>[08/Dec/2014:07:08:04 -0800] conn=130261 op=1 SRCH
base="" scope=0 filter="(objectClass=*)"
attrs="supportedControl"</div>
<div>[08/Dec/2014:07:08:04 -0800] conn=130261 op=1
RESULT err=0 tag=101 nentries=1 etime=0</div>
<div>[08/Dec/2014:07:08:04 -0800] conn=130261 op=2 SRCH
base="ou=EMPLOYEES,dc=<our dc>" scope=2
filter="(&(objectClass=inetOrgPerson))"
attrs="businessCategory carLicense cn departmentNumber
description destinationIndicator displayName
distinguishedName employeeNumber employeeType
facsimileTelephoneNumber givenName groups homePhone
homePostalAddress initials internationalISDNNumber l
mail manager mobile o objectClass o ou pager
physicalDeliveryOfficeName postOfficeBox postalAddress
postalCode preferredDeliveryMethod preferredLanguage
registeredAddress roomNumber secretary seeAlso sn st
street telephoneNumber teletexTerminalIdentifier
telexNumber title ubcEduCwlPUID uid nsAccountLock
passwordRetryCount"</div>
<div>[08/Dec/2014:07:08:04 -0800] conn=130261 op=2 SORT
cn (*)</div>
<div>[08/Dec/2014:07:08:04 -0800] conn=130261 op=2
RESULT err=0 tag=101 nentries=100 etime=0 notes=P,A</div>
<div>
<div>[08/Dec/2014:07:08:04 -0800] conn=130262 fd=83
slot=83 SSL connection from <ip addr 1> to
<ip addr 2></div>
<div>[08/Dec/2014:07:08:04 -0800] conn=130262 SSL
256-bit AES</div>
<div>[08/Dec/2014:07:08:04 -0800] conn=130262 op=0
BIND dn="<service account>" method=128
version=3</div>
<div>[08/Dec/2014:07:08:04 -0800] conn=130262 op=0
RESULT err=0 tag=97 nentries=0 etime=0
dn="<service account>"</div>
<div>[08/Dec/2014:07:08:04 -0800] conn=130262 op=1
SRCH base="ou=GROUPS,dc=<our dc>" scope=2
filter="(&(objectClass=groupOfNames)(member=uid=<login_x>,ou=EMPLOYEES,dc=<our
dc>))" attrs="1.1"</div>
<div>[08/Dec/2014:07:08:04 -0800] conn=130262 op=1
RESULT err=0 tag=101 nentries=5 etime=0</div>
</div>
<div>… <snip></div>
</div>
<div>
<div>[08/Dec/2014:07:08:05 -0800] conn=130262 op=100
SRCH base="ou=GROUPS,dc=<our dc>" scope=2
filter="(&(objectClass=groupOfNames)(member=uid=<login_x+100>,ou=EMPLOYEES,dc=<our
dc>))" attrs="1.1"</div>
<div>[08/Dec/2014:07:08:05 -0800] conn=130262 op=100
RESULT err=0 tag=101 nentries=3 etime=0</div>
</div>
<div>
<div>[08/Dec/2014:07:08:05 -0800] conn=130261 op=3 SRCH
base="ou=EMPLOYEES,dc=<our dc>" scope=2
filter="(&(objectClass=inetOrgPerson))"
attrs="businessCategory carLicense cn departmentNumber
description destinationIndicator displayName
distinguishedName employeeNumber employeeType
facsimileTelephoneNumber givenName groups homePhone
homePostalAddress initials internationalISDNNumber l
mail manager mobile o objectClass o ou pager
physicalDeliveryOfficeName postOfficeBox postalAddress
postalCode preferredDeliveryMethod preferredLanguage
registeredAddress roomNumber secretary seeAlso sn st
street telephoneNumber teletexTerminalIdentifier
telexNumber title ubcEduCwlPUID uid nsAccountLock
passwordRetryCount"</div>
</div>
<div>… <snip></div>
<div>
<div>[08/Dec/2014:07:08:05 -0800] conn=130261 op=3
RESULT err=0 tag=101 nentries=100 etime=0 notes=U,P</div>
<div><br>
</div>
</div>
<div>Oh cool – I didn’t know about logconv.pl! Output
follows.</div>
<div><br>
</div>
<div>Thanks again,</div>
<div>Trev</div>
<div><br>
</div>
<div><br>
</div>
<div><br>
</div>
<div>
<div>Total Log Lines Analysed: 799338</div>
<div><br>
</div>
<div><br>
</div>
<div>----------- Access Log Output ------------</div>
<div><br>
</div>
<div>Start of Logs: 08/Dec/2014:05:56:33</div>
<div>End of Logs: 08/Dec/2014:10:31:46</div>
<div><br>
</div>
<div>Processed Log Time: 4 Hours, 35 Minutes, 13
Seconds</div>
<div><br>
</div>
<div>Restarts: 0</div>
<div>Total Connections: 87873</div>
<div> - StartTLS Connections: 0</div>
<div> - LDAPS Connections: 87265</div>
<div> - LDAPI Connections: 0</div>
<div>Peak Concurrent Connections: 34</div>
<div>Total Operations: 227313</div>
<div>Total Results: 227314</div>
<div>Overall Performance: 100.0%</div>
<div><br>
</div>
<div>Searches: 109051
(6.60/sec) (396.24/min)</div>
<div>Modifications: 28121
(1.70/sec) (102.18/min)</div>
<div>Adds: 69
(0.00/sec) (0.25/min)</div>
<div>Deletes: 0
(0.00/sec) (0.00/min)</div>
<div>Mod RDNs: 0
(0.00/sec) (0.00/min)</div>
<div>Compares: 0
(0.00/sec) (0.00/min)</div>
<div>Binds: 85702
(5.19/sec) (311.40/min)</div>
<div><br>
</div>
<div>Proxied Auth Operations: 0</div>
<div>Persistent Searches: 0</div>
<div>Internal Operations: 0</div>
<div>Entry Operations: 0</div>
<div>Extended Operations: 4370</div>
<div>Abandoned Requests: 0</div>
<div>Smart Referrals Received: 0</div>
<div><br>
</div>
<div>VLV Operations: 0</div>
<div>VLV Unindexed Searches: 0</div>
<div>VLV Unindexed Components: 0</div>
<div>SORT Operations: 3</div>
<div><br>
</div>
<div>Entire Search Base Queries: 0</div>
<div>Paged Searches: 505</div>
<div>Unindexed Searches: 2</div>
<div>Unindexed Components: 502</div>
<div><br>
</div>
<div> Unindexed Search #1 (notes=A)</div>
<div> - Date/Time: 08/Dec/2014:10:30:12</div>
<div> - Connection Number: 215422</div>
<div> - Operation Number: 2</div>
<div> - Etime: 1</div>
<div> - Nentries: 100</div>
<div> - IP Address: 10.7.8.105</div>
<div> - Search Base: ou=employees,dc=<our
dc></div>
<div> - Search Scope: 2 (subtree)</div>
<div> - Search Filter:
(&(objectclass=inetorgperson))</div>
<div><br>
</div>
<div> Unindexed Search #2 (notes=A)</div>
<div> - Date/Time: 08/Dec/2014:07:08:04</div>
<div> - Connection Number: 130261</div>
<div> - Operation Number: 2</div>
<div> - Etime: 0</div>
<div> - Nentries: 100</div>
<div> - IP Address: 10.7.8.105</div>
<div> - Search Base: ou=employees,dc=<our
dc></div>
<div> - Search Scope: 2 (subtree)</div>
<div> - Search Filter:
(&(objectclass=inetorgperson))</div>
<div><br>
</div>
<div> Unindexed Component #1 (notes=U)</div>
<div> - Date/Time: 08/Dec/2014:05:56:45</div>
<div> - Connection Number: 129083</div>
<div> - Operation Number: 117</div>
<div> - Etime: 0</div>
<div> - Nentries: 100</div>
<div> - IP Address: Unknown_Host</div>
<div> - Search Base: ou=employees,dc=<our
dc></div>
<div> - Search Scope: 2 (subtree)</div>
<div> - Search Filter:
(&(objectclass=inetorgperson))</div>
<div><br>
</div>
<div> Unindexed Component #2 (notes=U)</div>
<div> - Date/Time: 08/Dec/2014:05:57:10</div>
<div> - Connection Number: 129083</div>
<div> - Operation Number: 122</div>
<div> - Etime: 0</div>
<div> - Nentries: 100</div>
<div> - IP Address: Unknown_Host</div>
<div> - Search Base: ou=employees,dc=<our
dc></div>
<div> - Search Scope: 2 (subtree)</div>
<div> - Search Filter:
(&(objectclass=inetorgperson))</div>
</div>
<div>…<snip></div>
<div>
<div> Unindexed Component #502 (notes=U)</div>
<div> - Date/Time: 08/Dec/2014:10:30:47</div>
<div> - Connection Number: 215422</div>
<div> - Operation Number: 3</div>
<div> - Etime: 0</div>
<div> - Nentries: 100</div>
<div> - IP Address: 10.7.8.105</div>
<div> - Search Base: ou=employees,dc=<our
dc></div>
<div> - Search Scope: 2 (subtree)</div>
<div> - Search Filter:
(&(objectclass=inetorgperson))</div>
<div><br>
</div>
<div>FDs Taken: 87873</div>
<div>FDs Returned: 87863</div>
<div>Highest FD Taken: 275</div>
<div><br>
</div>
<div>Broken Pipes: 0</div>
<div>Connections Reset By Peer: 0</div>
<div>Resource Unavailable: 0</div>
<div>Max BER Size Exceeded: 0</div>
<div><br>
</div>
<div>Binds: 85702</div>
<div>Unbinds: 83924</div>
<div> - LDAP v2 Binds: 0</div>
<div> - LDAP v3 Binds: 85702</div>
<div> - AUTOBINDs: 0</div>
<div> - SSL Client Binds: 0</div>
<div> - Failed SSL Client Binds: 0</div>
<div> - SASL Binds: 0</div>
<div> - Directory Manager Binds: 0</div>
<div> - Anonymous Binds: 0</div>
<div> - Other Binds: 85702</div>
<div><br>
</div>
<div><br>
</div>
<div><br>
</div>
<div>----- Connection Latency Details -----</div>
<div><br>
</div>
<div> (in seconds) <=1 2 3
4-5 6-10 11-15 >15</div>
<div> --------------------------------------------------------------------------</div>
<div> (# of connections) 87553 169 27 18
5 2 89</div>
<div><br>
</div>
<div>----- Current Open Connection IDs -----</div>
<div><br>
</div>
<div>Conn Number: 201302 (10.7.127.250)</div>
<div>Conn Number: 217063 (10.7.8.105)</div>
<div>Conn Number: 217064 (10.7.8.105)</div>
<div>Conn Number: 217061 (10.7.8.105)</div>
<div>Conn Number: 132242 (10.7.0.52)</div>
<div>Conn Number: 196007 (10.7.127.250)</div>
<div>Conn Number: 196107 (10.7.127.250)</div>
<div>Conn Number: 215425 (10.7.8.105)</div>
<div>Conn Number: 217060 (10.7.8.105)</div>
<div>Conn Number: 215422 (10.7.8.105)</div>
<div>Conn Number: 207139 (10.7.127.250)</div>
<div>Conn Number: 217062 (10.7.8.105)</div>
<div><br>
</div>
<div><br>
</div>
<div>----- Errors -----</div>
<div><br>
</div>
<div>err=0 224008 Successful
Operations</div>
<div>err=32 1652 No Such Object</div>
<div>err=53 1652 Unwilling To Perform</div>
<div>err=49 1 Invalid Credentials
(Bad Password)</div>
<div>err=65 1 Objectclass
Violation</div>
<div><br>
</div>
<div>----- Top 20 Failed Logins ------</div>
<div><br>
</div>
<div>1 uid=ehannah,ou=employees,dc=<our
dc></div>
<div><br>
</div>
<div>From the IP address(s) :</div>
<div><br>
</div>
<div>1 10.7.127.250</div>
<div><br>
</div>
<div><br>
</div>
<div>----- Total Connection Codes -----</div>
<div><br>
</div>
<div>U1 83924 Cleanly Closed Connections</div>
<div>B1 1749 Bad Ber Tag Encountered</div>
<div><br>
</div>
<div><br>
</div>
<div>----- Top 20 Clients -----</div>
<div><br>
</div>
<div>Number of Clients: 13</div>
<div><br>
</div>
<div>[1] Client: 10.7.8.105</div>
<div> 83638 - Connections</div>
<div> 83631 - U1 (Cleanly Closed Connections)</div>
<div><br>
</div>
<div>[2] Client: 137.82.5.97</div>
<div> 1652 - Connections</div>
<div> 1652 - B1 (Bad Ber Tag Encountered)</div>
<div><br>
</div>
<div>[3] Client: 142.103.218.107</div>
<div> 1095 - Connections</div>
<div><br>
</div>
<div>[4] Client: 142.103.218.106</div>
<div> 1094 - Connections</div>
<div><br>
</div>
<div>[5] Client: 10.7.127.250</div>
<div> 112 - Connections</div>
<div> 106 - U1 (Cleanly Closed Connections)</div>
<div> 1 - B1 (Bad Ber Tag Encountered)</div>
<div><br>
</div>
<div>[6] Client: 127.0.0.1</div>
<div> 57 - Connections</div>
<div> 55 - B1 (Bad Ber Tag Encountered)</div>
<div> 2 - U1 (Cleanly Closed Connections)</div>
<div><br>
</div>
<div>[7] Client: 142.103.149.136</div>
<div> 55 - Connections</div>
<div> 41 - B1 (Bad Ber Tag Encountered)</div>
<div> 14 - U1 (Cleanly Closed Connections)</div>
<div><br>
</div>
<div>[8] Client: 10.7.0.52</div>
<div> 51 - Connections</div>
<div> 50 - U1 (Cleanly Closed Connections)</div>
<div><br>
</div>
<div>[9] Client: 142.103.106.141</div>
<div> 29 - Connections</div>
<div> 29 - U1 (Cleanly Closed Connections)</div>
<div><br>
</div>
<div>[10] Client: 142.103.106.143</div>
<div> 28 - Connections</div>
</div>
<div>
<div> 28 - U1 (Cleanly Closed Connections)</div>
<div><br>
</div>
<div>[11] Client: 142.103.106.145</div>
<div> 23 - Connections</div>
<div> 23 - U1 (Cleanly Closed Connections)</div>
<div><br>
</div>
<div>[12] Client: 142.103.106.135</div>
<div> 23 - Connections</div>
<div> 23 - U1 (Cleanly Closed Connections)</div>
<div><br>
</div>
<div>[13] Client: 142.103.106.142</div>
<div> 16 - Connections</div>
<div> 16 - U1 (Cleanly Closed Connections)</div>
<div><br>
</div>
<div><br>
</div>
<div><br>
</div>
<div>----- Top 20 Bind DN's -----</div>
<div><br>
</div>
<div>Number of Unique Bind DN's: 18</div>
<div><br>
</div>
<div>83795 uid=eldap-svciiq,ou=service
accounts,ou=eldap,ou=services,dc=id,dc=ubc,dc=ca</div>
<div>1652 cn=bill
fisher,ou=people,dc=dartware,dc=com</div>
<div>112 cn=directory manager</div>
<div>55 uid=eldap-svcvpnsync,ou=service
accounts,ou=eldap,ou=services,dc=id,dc=ubc,dc=ca</div>
<div>51 cn=replication manager,cn=config</div>
<div>6 uid=alexnam,ou=employees,dc=<our
dc></div>
<div>4
uid=priyanth,ou=employees,dc=<our dc></div>
<div>4
uid=arsuther,ou=employees,dc=<our dc></div>
<div>4 uid=huynhh,ou=employees,dc=<our
dc></div>
<div>3 uid=ehannah,ou=employees,dc=<our
dc></div>
<div>2
uid=andyfehr,ou=employees,dc=<our dc></div>
<div>2
uid=bullfrog,ou=employees,dc=<our dc></div>
<div>2
uid=eddiefok,ou=employees,dc=<our dc></div>
<div>2 uid=elyoung,ou=employees,dc=<our
dc></div>
<div>2 uid=elainez,ou=employees,dc=<our
dc></div>
<div>2 uid=flokam,ou=employees,dc=<our
dc></div>
<div>2
uid=mailvaga,ou=employees,dc=<our dc></div>
<div>2 uid=sjones,ou=employees,dc=<our
dc></div>
<div><br>
</div>
<div><br>
</div>
<div>----- Top 20 Search Bases -----</div>
<div><br>
</div>
<div>Number of Unique Search Bases: 27876</div>
<div><br>
</div>
<div>78174 ou=groups,dc=<our dc></div>
<div>1652 ou=people,dc=dartware,dc=com</div>
<div>676 ou=employees,dc=<our dc></div>
<div>312 ou=people,dc=<our dc></div>
<div>220 cn=mapping tree,cn=config</div>
<div>124 root dse</div>
<div>13
cn=idm-status-activeemployees,ou=idm,ou=role,ou=groups,dc=<our
dc></div>
<div>3
uid=jbartnik,ou=employees,dc=<our dc></div>
<div>2
uid=rodsprus,ou=employees,dc=<our dc></div>
<div>2
uid=zanottic,ou=employees,dc=<our dc></div>
<div>2 uid=ttucker,ou=employees,dc=<our
dc></div>
<div>2
uid=dbilczuk,ou=employees,dc=<our dc></div>
<div>2
uid=phys2012,ou=employees,dc=<our dc></div>
<div>2 uid=ydeng,ou=employees,dc=<our
dc></div>
<div>2
uid=natcrang,ou=employees,dc=<our dc></div>
<div>2
uid=lillaroy,ou=employees,dc=<our dc></div>
<div>2 uid=wpr8847,ou=employees,dc=<our
dc></div>
<div>1 uid=ap8040,ou=employees,dc=<our
dc></div>
<div>1 uid=asr5,ou=employees,dc=<our
dc></div>
<div>1
uid=belzberg,ou=employees,dc=<our dc></div>
<div><br>
</div>
<div><br>
</div>
<div>----- Top 20 Search Filters -----</div>
<div><br>
</div>
<div>Number of Unique Search Filters: 30968</div>
<div><br>
</div>
<div>28016 (objectclass=*)</div>
<div>1652 (cn=bill fisher)</div>
<div>504 (&(objectclass=inetorgperson))</div>
<div>55 (cn=eldap3*)</div>
<div>55 (cn=eldap5*)</div>
<div>55 (cn=eldap4*)</div>
<div>55 (cn=eldap2*)</div>
<div>6
(&(objectclass=groupofnames)(member=uid=alexnam,ou=employees,dc=<our
dc>))</div>
<div>5
(&(objectclass=groupofnames)(member=uid=ehannah,ou=employees,dc=<our
dc>))</div>
<div>5
(&(objectclass=groupofnames)(member=uid=priyanth,ou=employees,dc=<our
dc>))</div>
<div>5
(&(objectclass=groupofnames)(member=uid=arsuther,ou=employees,dc=<our
dc>))</div>
<div>4
(&(objectclass=groupofnames)(member=uid=ydeng,ou=employees,dc=<our
dc>))</div>
<div>4
(&(objectclass=inetorgperson)(ubceducwlloginkey=<login
key 1>))</div>
<div>4
(&(objectclass=groupofnames)(member=uid=elyoung,ou=employees,dc=<our
dc>))</div>
<div>4
(&(objectclass=groupofnames)(member=uid=zanottic,ou=employees,dc=<our
dc>))</div>
<div>4 (&(uid=devlin11))</div>
<div>4
(&(objectclass=groupofnames)(member=uid=huynhh,ou=employees,dc=<our
dc>))</div>
<div>4
(&(objectclass=inetorgperson)(ubceducwlloginkey=<login
key 2>))</div>
<div>4
(&(objectclass=groupofnames)(member=uid=lillaroy,ou=employees,dc=<our
dc>))</div>
<div>4
(&(objectclass=groupofnames)(member=uid=rodsprus,ou=employees,dc=<our
dc>))</div>
<div><br>
</div>
<div><br>
</div>
<div>----- Top 20 Most Frequent etimes -----</div>
<div><br>
</div>
<div>219090 etime=0</div>
<div>8202 etime=1</div>
<div>20 etime=2</div>
<div>1 etime=147</div>
<div>1 etime=135</div>
<div><br>
</div>
<div><br>
</div>
<div>----- Top 20 Longest etimes -----</div>
<div><br>
</div>
<div>etime=147 1</div>
<div>etime=135 1</div>
<div>etime=2 20</div>
<div>etime=1 8202</div>
<div>etime=0 219090</div>
<div><br>
</div>
<div><br>
</div>
<div>----- Top 20 Largest nentries -----</div>
<div><br>
</div>
<div>nentries=100 502</div>
<div>nentries=34 1</div>
<div>nentries=27 1</div>
<div>nentries=26 1</div>
<div>nentries=7 3</div>
<div>nentries=6 9</div>
<div>nentries=5 85</div>
<div>nentries=4 334</div>
</div>
<div>
<div>nentries=3 1957</div>
<div>nentries=2 6701</div>
<div>nentries=1 85038</div>
<div>nentries=0 14420</div>
<div><br>
</div>
<div><br>
</div>
<div>----- Top 20 Most returned nentries -----</div>
<div><br>
</div>
<div>85038 nentries=1</div>
<div>14420 nentries=0</div>
<div>6701 nentries=2</div>
<div>1957 nentries=3</div>
<div>502 nentries=100</div>
<div>334 nentries=4</div>
<div>85 nentries=5</div>
<div>9 nentries=6</div>
<div>3 nentries=7</div>
<div>1 nentries=26</div>
<div>1 nentries=27</div>
<div>1 nentries=34</div>
<div><br>
</div>
<div><br>
</div>
<div><br>
</div>
<div>----- Extended Operations -----</div>
<div><br>
</div>
<div>2185 2.16.840.1.113730.3.5.12 DS90 Start
Replication Request</div>
<div>2185 2.16.840.1.113730.3.5.5 End
Replication Request (incremental update)</div>
<div><br>
</div>
<div><br>
</div>
<div>----- Top 20 Most Requested Attributes -----</div>
<div><br>
</div>
<div>78174 1.1</div>
<div>56799 o</div>
<div>28712 description</div>
<div>28712 cn</div>
<div>28712 nsAccountLock</div>
<div>28711 givenName</div>
<div>28711 ubcEduCwlPUID</div>
<div>28711 uid</div>
<div>28711 displayName</div>
<div>28711 employeeNumber</div>
<div>28711 mail</div>
<div>28711 objectClass</div>
<div>28711 sn</div>
<div>28400 ou</div>
<div>28400 passwordRetryCount</div>
<div>28400 distinguishedName</div>
<div>28399 businessCategory</div>
<div>28399 employeeType</div>
<div>28399 facsimileTelephoneNumber</div>
<div>28399 groups</div>
<div><br>
</div>
<div><br>
</div>
<div>----- Recommendations -----</div>
<div><br>
</div>
<div> 1. You have unindexed searches, this can be
caused from a search on an unindexed attribute, or
your returned results exceeded the allidsthreshold.
Unindexed searches are not recommended. To refuse
unindexed searches, switch 'nsslapd-require-index' to
'on' under your database entry (e.g.
cn=UserRoot,cn=ldbm database,cn=plugins,cn=config).</div>
<div><br>
</div>
<div> 2. You have unindexed components, this can be
caused from a search on an unindexed attribute, or
your returned results exceeded the allidsthreshold.
Unindexed components are not recommended. To refuse
unindexed searches, switch 'nsslapd-require-index' to
'on' under your database entry (e.g.
cn=UserRoot,cn=ldbm database,cn=plugins,cn=config).</div>
<div><br>
</div>
<div>Cleaning up temp files...</div>
<div>Done.</div>
</div>
<div><br>
</div>
<div><br>
</div>
<div><br>
</div>
<div><br>
</div>
<div><br>
</div>
<div><br>
</div>
<div><br>
</div>
<span id="OLK_SRC_BODY_SECTION">
<div style="font-family:Calibri; font-size:11pt;
text-align:left; color:black; BORDER-BOTTOM: medium
none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in;
PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP:
#b5c4df 1pt solid; BORDER-RIGHT: medium none;
PADDING-TOP: 3pt">
<span style="font-weight:bold">From: </span>Mark
Reynolds <<a moz-do-not-send="true"
href="mailto:mareynol@redhat.com">mareynol@redhat.com</a>><br>
<span style="font-weight:bold">Reply-To: </span>"<a
moz-do-not-send="true"
href="mailto:mreynolds@redhat.com">mreynolds@redhat.com</a>"
<<a moz-do-not-send="true"
href="mailto:mreynolds@redhat.com">mreynolds@redhat.com</a>><br>
<span style="font-weight:bold">Date: </span>Tuesday,
December 9, 2014 at 7:25 AM<br>
<span style="font-weight:bold">To: </span>"<a
moz-do-not-send="true"
href="mailto:389-users@lists.fedoraproject.org">389-users@lists.fedoraproject.org</a>"
<<a moz-do-not-send="true"
href="mailto:389-users@lists.fedoraproject.org">389-users@lists.fedoraproject.org</a>>,
Trevor Fong <<a moz-do-not-send="true"
href="mailto:trevor.fong@ubc.ca">trevor.fong@ubc.ca</a>><br>
<span style="font-weight:bold">Subject: </span>Re:
[389-users] 389-ds and Multi CPU's<br>
</div>
<div><br>
</div>
<div>
<div bgcolor="#FFFFFF" text="#000000"><br>
<div class="moz-cite-prefix">On 12/08/2014 05:43 PM,
Fong, Trevor wrote:<br>
</div>
<blockquote
cite="mid:D0AB5CC7.672E5%25trevor.fong@ubc.ca"
type="cite">
<div>Hi Mike,</div>
</blockquote>
It's Mark :-) I get that a lot for some reason.<br>
<blockquote
cite="mid:D0AB5CC7.672E5%25trevor.fong@ubc.ca"
type="cite">
<div><br>
</div>
<div>Thanks for the reply. The typical result of
the result is:</div>
<div><br>
</div>
<div>
<div>[08/Dec/2014:07:08:04 -0800] conn=130262
op=1 RESULT err=0 tag=101 nentries=5 etime=0</div>
</div>
</blockquote>
Yeah this looks fine.<br>
<blockquote
cite="mid:D0AB5CC7.672E5%25trevor.fong@ubc.ca"
type="cite">
<div>
<div><br>
</div>
<div>There are no notes=A/notes=U in the
results.</div>
</div>
</blockquote>
Do you mean in the entire access log, or just for
that search?<br>
<br>
Can you run logconv.pl and post the results?
"logconv.pl -V <access logs>"<br>
<br>
Thanks Trevor,<br>
Mark<br>
<blockquote
cite="mid:D0AB5CC7.672E5%25trevor.fong@ubc.ca"
type="cite">
<div>
<div>Objectclass and member are both indexed.</div>
<div>There were 30,000-odd searches on
conn=130262, which took 34 mins.</div>
<div><br>
</div>
<div>Thanks,</div>
<div>Trev</div>
<div> </div>
<div><br>
</div>
<div><br>
</div>
<div><br>
</div>
</div>
<div><br>
</div>
<div><br>
</div>
<span id="OLK_SRC_BODY_SECTION">
<div style="font-family:Calibri; font-size:11pt;
text-align:left; color:black; BORDER-BOTTOM:
medium none; BORDER-LEFT: medium none;
PADDING-BOTTOM: 0in; PADDING-LEFT: 0in;
PADDING-RIGHT: 0in; BORDER-TOP: #b5c4df 1pt
solid; BORDER-RIGHT: medium none; PADDING-TOP:
3pt">
<span style="font-weight:bold">From: </span>Mark
Reynolds <<a moz-do-not-send="true"
href="mailto:mareynol@redhat.com">mareynol@redhat.com</a>><br>
<span style="font-weight:bold">Reply-To: </span>"<a
moz-do-not-send="true"
href="mailto:mreynolds@redhat.com">mreynolds@redhat.com</a>"
<<a moz-do-not-send="true"
href="mailto:mreynolds@redhat.com">mreynolds@redhat.com</a>><br>
<span style="font-weight:bold">Date: </span>Monday,
December 8, 2014 at 11:29 AM<br>
<span style="font-weight:bold">To: </span>"<a
moz-do-not-send="true"
href="mailto:389-users@lists.fedoraproject.org">389-users@lists.fedoraproject.org</a>"
<<a moz-do-not-send="true"
href="mailto:389-users@lists.fedoraproject.org">389-users@lists.fedoraproject.org</a>>,
Trevor Fong <<a moz-do-not-send="true"
href="mailto:trevor.fong@ubc.ca">trevor.fong@ubc.ca</a>><br>
<span style="font-weight:bold">Subject: </span>Re:
[389-users] 389-ds and Multi CPU's<br>
</div>
<div><br>
</div>
<div>
<div bgcolor="#FFFFFF" text="#000000"><br>
<div class="moz-cite-prefix">On 12/08/2014
02:08 PM, Fong, Trevor wrote:<br>
</div>
<blockquote
cite="mid:D0AB3742.6714F%25trevor.fong@ubc.ca"
type="cite">
<div>Hi Everyone,</div>
<div><br>
</div>
<div>We’ve inherited a 389-ds system
(1.2.11.15-48.el6_6) that is running on
a VM provisioned with a single CPU. We
have been experiencing high CPU with a
client that connects with a single
connection, and then runs large amounts
of queries of the form:</div>
<div><br>
</div>
<div>SRCH base="ou=GROUPS,dc=<our
dc>" scope=2
filter="(&(objectClass=groupOfNames)(member=uid=<loginname>,ou=EMPLOYEES,<our
dc>))" attrs=“1.1"</div>
</blockquote>
Trevor,<br>
<br>
From the access log, what is the result of
this search? etime? It there a
notes=U/notes=A in the result? It could be
an unindexed search which would cause the
high CPU.
<br>
<br>
Thanks,<br>
Mark<br>
<blockquote
cite="mid:D0AB3742.6714F%25trevor.fong@ubc.ca"
type="cite">
<div><br>
</div>
<div>We’re wondering if adding extra CPU’s
to the vm will make things better. The
original engineer noted that at the time
of implementation, he had come across
some notes that indicated that the
underlying process was single threaded
and adding extra CPU’s would not make
any improvement; in fact, on heavily
loaded vm infrastructure like ours, may
make things worse as the the vm would
have to wait for the CPU to become
available. Is this still true?</div>
<div><br>
</div>
<div>Thanks a lot,</div>
<div>Trev</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">--
389 users mailing list
<a moz-do-not-send="true" class="moz-txt-link-abbreviated" href="mailto:389-users@lists.fedoraproject.org">389-users@lists.fedoraproject.org</a><a moz-do-not-send="true" class="moz-txt-link-freetext" href="https://admin.fedoraproject.org/mailman/listinfo/389-users">https://admin.fedoraproject.org/mailman/listinfo/389-users</a></pre>
</blockquote>
<br>
</div>
</div>
</span><br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">--
389 users mailing list
<a moz-do-not-send="true" class="moz-txt-link-abbreviated" href="mailto:389-users@lists.fedoraproject.org">389-users@lists.fedoraproject.org</a><a moz-do-not-send="true" class="moz-txt-link-freetext" href="https://admin.fedoraproject.org/mailman/listinfo/389-users">https://admin.fedoraproject.org/mailman/listinfo/389-users</a></pre>
</blockquote>
<br>
</div>
</div>
</span></blockquote>
<br>
</div>
</div>
</span>
</blockquote>
<br>
</body>
</html>