On 07/15/2014 12:48 PM, Isabella Ghiurea wrote:
 Hi Gurus,
I'm new to 389 DS  reading the  RH DS doc before start implementing, have Q's trying to have system with high performance cfg

Q1: Bellow in black is  from RH DS documentation, I was expecting just creating the indexes in GUI DS console should be suficient , is this the correct, still need to run the manually script?
The GUI will index the attribute - no further steps are necessary
Q2: What are operations to maintain the indexes are any updates statistics, reorg rebuild need to be run to maintain the  high performance in DS?
Indexes usually do not need any maintenance.
Q3: Access controls  what 's average of user rules do you ususually have per db or user. are there any maintenance jobs to perform, I believe the more AC rules you have you have the chance to affect login performance , is this correct?
There is no general rule of thumb of what aci's you should set.  Its based on what your needs are.  By default, if no aci's exist in the database, then all access is denied except for the "Directory Manager" - the directory manager bypasses access control restrictions.  The idea is that you start opening up access based on what you need to do.  I strongly suggest you read more about access control in the admin guide as it's not a trivial topic.

Now, the login performance is not really impacted by access control rules, but any other type of operation is:  search, add, modify, delete, etc
.

In regards to performance, you want to keep the number of aci's to minimum, but it would still take hundreds of aci's to really start impacting performance.

Regards,
Mark

-- 
-----------------------------------------------------------

9.3. Applying New Indexes to Existing Databases

New indexes are not added to existing databases automatically. They must be added manually, and Directory Server has two methods for applying new indexes to an existing database: running the db2index.pl script or running a cn=index,cn=tasks task.




Isabella A. Ghiurea 

Isabella.Ghiurea@nrc-cnrc.gc.ca
Canadian Astronomy Data Centre |http://www.nrc-cnrc.gc.ca/eng/services/hia/data-centre.html 
National Research Council of Canada, Herzberg Institute of Astrophysics 
5071 West Saanich Road, Victoria BC V9E 2E7, Canada
Phone: 250 363-3446 fax: 250 363-0045


--
389 users mailing list
389-users@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users