Solaris8 user-account lookup question

["Giovanni Navarrette" <gio@uslink.net>]

Hey everyone:

Got a quick easy one for ya. I'm using Openldap-v2.1.4 on a Solaris8
machine, doing user authentication (replacing /etc/passwd and /etc/shadow).
I've got my users imported into the database, all works ok. I'm trying to
finger a particular login, and its taking about 12/15 seconds to return the
response. I thought I got the indices right, but I'm guessing with this
performance that I missed something.

Here's what a debug shows:
-
Sep 17 16:05:32 ldapsrv-1 slapd[1060]: [ID 293980 local4.debug] daemon:
conn=5 fd=13 connection from IP=127.0.0.1:32967 (IP=0.0.0.0:389) accepted.
Sep 17 16:05:32 ldapsrv-1 slapd[1060]: [ID 347666 local4.debug] conn=5 op=0
BIND dn="cn=solaris,ou=sysadmins,dc=usl,dc=net" method=128
Sep 17 16:05:32 ldapsrv-1 slapd[1060]: [ID 217296 local4.debug] conn=5 op=0
RESULT tag=97 err=0 text=
Sep 17 16:05:32 ldapsrv-1 slapd[1060]: [ID 902418 local4.debug] conn=5 op=1
SRCH base="" scope=0 filter="(objectClass=*)"
Sep 17 16:05:32 ldapsrv-1 slapd[1060]: [ID 217296 local4.debug] conn=5 op=1
RESULT tag=101 err=0 text=
Sep 17 16:05:32 ldapsrv-1 slapd[1060]: [ID 902418 local4.debug] conn=5 op=2
SRCH base="" scope=0 filter="(objectClass=*)"
Sep 17 16:05:32 ldapsrv-1 slapd[1060]: [ID 217296 local4.debug] conn=5 op=2
RESULT tag=101 err=0 text=
Sep 17 16:05:32 ldapsrv-1 slapd[1060]: [ID 902418 local4.debug] conn=5 op=3
SRCH base="ou=People,dc=usl,dc=net" scope=2
filter="(objectClass=posixAccount)"
Sep 17 16:05:44 ldapsrv-1 slapd[1060]: [ID 362707 local4.debug] conn=5 op=3
SEARCH RESULT tag=101 err=0 nentries=14468 text=
Sep 17 16:05:44 ldapsrv-1 slapd[1060]: [ID 338319 local4.debug] conn=5 op=4
UNBIND
Sep 17 16:05:44 ldapsrv-1 slapd[1060]: [ID 850449 local4.debug] conn=5 fd=13
closed
-

Here's what my indicies look like in my cfg:
-
#---Indices (indexes) to maintain for database speed
#--user database
index   default                                 pres,eq
index   uid,userPassword                        pres,eq
index   cn,gecos,loginshell,uidNumber           pres,eq
index   objectClass                             eq
-

Do I need to add posixAccount as an index? Is there more I need to index? Or
is 12/15 seconds about right for a database query with roughly 15000 entries
in it? Thanks for ya time everyone. Gl hf, :)

-
-------------------------------------------------------
Giovanni Navarrette
USLink Internet Systems Administrator
e-Mail -- gio@uslink.net