On Tue, 8 Nov 2011, GOLLSCHEWSKY, Tim wrote:
I've re-run my tests, with and without the symlink to /dev/shm:
No symlink:
Time Size of cache.ldb
With ldap_rfc2307bis_initgroup_filter 6.43s 7553024
WithOUT ldap_rfc2307bis_initgroup_filter 43.95s 15974400
With symlink:
Time Size of cache.ldb
With ldap_rfc2307bis_initgroup_filter 4.86s 7528448
WithOUT ldap_rfc2307bis_initgroup_filter 26.82s 15962112
So the symlink does provide some improvement. But 26 seconds is still not
acceptable for an ssh login time.
Sure. Just for info, picking on a user I know to be in a lot of groups (92)
against AD with a reasonable amount of nested groups and no cache, id takes
5-10 seconds (varying with load on ldap servers I guess), and final cache.ldb
size is 13627392 so not far off yours. That was tested with 1.6.1.
jh