[389-users] 389-DS poor performance retrieving groups

[German Parente]

----- Original Message -----
> From: "Mark Reynolds" <mareynol at redhat.com>
> To: "General discussion list for the 389 Directory server project." <389-users at lists.fedoraproject.org>
> Sent: Tuesday, August 4, 2015 6:04:17 PM
> Subject: Re: [389-users] 389-DS poor performance retrieving groups
> 
> 
> 
> On 08/04/2015 11:57 AM, ghiureai wrote:
> 
> 
> 
> We are seeing poor performance from LDAP retrieving 2500-4500 entries compare
> with one of our regular RDBMS , here is bellow the result for a ldapsearch.
> We are questioning if for general cn=(.*..) search string , LDAP has to run a
> round trip for each subset result entry ?
> 
> What cfg needs tuned to see some performance improvements beside cache mem
> size ?
> There isn't any, besides indexing, and by default cn is indexed for substring
> searches.
> 
> Can you provide the output from the access log during one of these searches?
> 

Seems that by default, substring indexing is done on lenght 3. So, probably the keys with lenght 2 will provoke this search to be unindexed.

> 
> 
> 
> ldapsearch -x -s one -H -b 'ou=Groups,ou=ds,dc=cxxx,dc=net' -W -D
> 'uid=xx,ou=Users,ou=ds,dc=cxxxr,dc=net' 'cn=*MT*' 'cn, nsaccountlock'
> # search result
> search: 2
> result: 0 Success
> 
> # numResponses: 2608
> # numEntries: 2607
> 
> real 0m19.284s
> user 0m0.040s
> sys 0m0.052s
> 
> 
> --
> 389 users mailing list 389-users at lists.fedoraproject.org
> https://admin.fedoraproject.org/mailman/listinfo/389-users
> 
> 
> --
> 389 users mailing list
> 389-users at lists.fedoraproject.org
> https://admin.fedoraproject.org/mailman/listinfo/389-users