On 09/14/2015 09:42 AM, ghiureai wrote:
Please keep replies on-list.
HI Rich,
here is some details and Q from developers which designed the DS tree
, has performance issues, any input from you much appreciate it:
The slow query problem seems to be related to the acis. Please send the
following question to your redhat collaborator.
"We have the following LDAP structure:
A->B(one)->C(few thousand)
B has macro acis that refer to the C nodes.
By "node" do you mean a host/machine, or a subtree in the DIT?
The ldapsearch command to list the cn of all C nodes is more than an
order of magnitude slower when B is used as the base compared to when A
is used as the base node (1-2s vs 10-20s or more). This is counter
intuitive as A has other children besides B. Performance is much better
when the macro acis are removed. Are macro acis cached when A is used as
the base? Is this normal or we are doing something wrong? Is there a
solution to this?"
Don't know, but yes, it looks as though the performance is related to
macro ACI handling.
Please file a bug/ticket with 389.
Thanks,
Isabella
On 09/11/2015 08:35 AM, Rich Megginson wrote:
> On 09/11/2015 08:50 AM, ghiureai wrote:
>> Fast query:
>>
>> ldapsearch -x -h xxx -b "ou=ds,dc=cb,dc=net" -W
>> -D "uid=axxx,ou=Users,ou=ds,dc=cb,dc=net"
>> "(objectclass=groupofuniquenames)" "cn" | sort -u | wc
>>
>>
>> Slow query:
>> ldapsearch -x -h xxx-b
>> "ou=groups,ou=ds,dc=cb,dc=net" -W -D
>> "uid=axxx,ou=Users,ou=ds,dc=cb,dc=net"
>> "(objectclass=groupofuniquenames)" "cn" | sort -u | wc
> What version of 389? rpm -q 389-ds-base
>
> What is the time difference between the fast query and the slow query
> (e.g. time ldapsearch -x -h xxx ... for both queries)
>
> What does the access log say? For example, provide the excerpts from
> the access log for both queries showing the connection through the
> unbind/disconnect.
>
> Is there anything in the errors log during the time of the slow search?
>
>>
>>
>>
>> On 09/10/2015 03:00 PM, ghiureai wrote:
>>> Hi Gurus,
>>> we are seening some performance issues when running ldapsearch with
>>> tree ou=Groups, ou=ds , dc=abc, dc=net takes longer than when looking
>>> for same user but from one level up of tree up aka :ou=ds,
>>> dc=abc,dc=net, the difference in time very high , any idea why we
>>> seeing
>>> this ?
>>> Also we are seeing time exec diff when running from same levele of DS(
>>> under ou=ds) but different ou's ?
>>>
>>> Isabella