[389-devel] Please review: [Ticket #3] acl cache overflown problem

[Nadia Rincon Turpin]

Hi,

The bug and corresponding patch that are linked below refer to the following problem, that
was discussed on the mailing list a couple of years ago: 
http://lists.fedoraproject.org/pipermail/389-devel/2009-March/001020.html
https://fedorahosted.org/389/ticket/3

https://fedorahosted.org/389/attachment/ticket/3/0001-Ticket-3-acl-cache-...


A short description: we noticed that some queries (ldapsearch) to our directory caused a
drop in performance, and our log file was filled with the following message:
acl_TestRights - cache overflown

We noticed that increasing the value ACLPB_MAX_SELECTED_ACLS from 200 to 2000 solved the
problem for us. The purpose of the patch is to make this value configurable.

Note: while I was trying to fix this problem, I also noticed that aclQueue was not freed
anywhere, so I took the freedom to add the following line, assuming that it is right to
free it on shutdown - but maybe I am wrong?
slapi_ch_free((void**)&aclQueue);

Regards,
Nadia R. Turpin