Re: performance problems with nss pam ldap

[Terry Davis <tdavis@birddog.com>]

Hello,

I am still seeing a major performance problem when doing some queries on 
my group information which is stored in ou=Groups,dc=domain,dc=com.  To 
be more specific, I am doing apache auth with pam which is using
nss which is getting its information from ldap.  (phew)

The normal auth (username and password) seems to be fine.  I have been 
using that with my imap server for a long time now.  I just now am 
starting to use groups which is rather slow.

I went ahead and created some indexes.  I am not seeing a difference. 
Here is what I did:
Put this stuff into my slapd.conf:
   index default pres,eq
   index   objectClass,uid
   index   cn,memberUid,uidNumber,gidNumber   eq

Restarted the server in read-only mode by adding this to my slapd.conf:
   readonly       on

I ran this command:
   slapindex

This created some dbb files for me in my ldbm directory.

Did I miss anything?  Also, how often or should I reindex?
It appears as if www.openldap.org is down.  

Thank you!


Roel van Meer wrote:

> Terry Davis wrote:
>
> > haha, and if I have none.
> >
> > ok, go ahead, smack me.
>
> I'd rather you give some feedback on the howto if you can spare the
> time. I'm trying to get the project going again, but i need some
> input for that.
>
> Regards,
>
> rolek
>
> > > Terry Davis wrote:
> > >
> > > > Hello!  I am seeing some big performance hits when I attempt to do group
> > > > auth against my ldap server.   When I do normal auth, without any group
> > > > queries, it is very fast.
> > > > I have user information in:
> > > > ou=People,dc=birddog,dc=com
> > > >
> > > > and group information in :
> > > > ou=Groups,dc=birddog,dc=com
> > > >
> > > > What can I do to debug this?
> > > >
> > > > I can make any of my config files available.   Thank you!
> > > This may be caused by not having the right indexes in slapd.conf.
> > >
> > > Regards,
> > >
> > > rolek
> > >
> > > --
> > > 1A First Alternative rolek@alt001.com    www.alt001.com
> > > Linvision BV         rolek@linvision.com (www|devel).linvision.com
> > > --
>
> --
> 1A First Alternative rolek@alt001.com    www.alt001.com
> Linvision BV         rolek@linvision.com (www|devel).linvision.com
> --


--
Terry Davis
Systems Administrator
BirdDog Solutions, Inc.
(402) 829-6059
www.birddog.com