On 07/15/2014 12:48 PM, Isabella Ghiurea wrote:
I'm new to 389 DS reading the RH DS docbefore start implementing,
have Q's trying tohave system with high performance cfg
Q1: Bellow in black is from RH DS documentation, I was expecting just
creating the indexes in GUI DS console should be suficient , is this
the correct, still need to run the manually script?
The GUI will index the
attribute - no further steps are necessary
Q2: What are operations to maintain the indexes are any updates
statistics, reorg rebuild need to be run to maintainthe high
performance in DS?
Indexes usually do not need any maintenance.
Q3: Access controls what 's average of user rules do you
have per db or user. are there any maintenance jobs to perform, I
believe the more AC rules you have you have the chance to affect login
performance , is this correct?
There is no general rule of thumb of what aci's
you should set. Its
based on what your needs are. By default, if no aci's exist in the
database, then all access is denied except for the "Directory Manager" -
the directory manager bypasses access control restrictions. The idea is
that you start opening up access based on what you need to do. I
strongly suggest you read more about access control in the admin guide
as it's not a trivial topic.
Now, the login performance is not really impacted by access control
rules, but any other type of operation is: search, add, modify, delete,
In regards to performance, you want to keep the number of aci's to
minimum, but it would still take hundreds of aci's to really start
9.3. Applying New Indexes to Existing Databases
New indexes are not added to existing databases automatically. They
must be added manually, and Directory Server has two methods for
applying new indexes to an existing database: running the
|db2index.pl| script or running a |cn=index,cn=tasks| task.
Isabella A. Ghiurea
Canadian Astronomy Data Centre
National Research Council of Canada, Herzberg Institute of Astrophysics
5071 West Saanich Road, Victoria BC V9E 2E7, Canada
Phone: 250 363-3446 fax: 250 363-0045
389 users mailing list