Viewing Documentation/5721
Full headers

Major security issue: yes  no

Notes:
Fixed in HEAD Fixed in RE24
Notification:

Date: Thu, 2 Oct 2008 20:23:42 GMT
From: quanah@zimbra.com
To: openldap-its@OpenLDAP.org
Subject: Expansion on dncachesize behavior

Full_Name: Quanah Gibson-Mount
Version: 24/HEAD
OS: NA
URL: ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (75.111.29.239)


The behavior of the dncachesize setting when it is not ideal (2x) is not
documented.

Howard notes:

The DN cache is allowed to temporarily grow beyond the configured size.  It does
this if many entries are locked when it tries to do a purge, because that means
they're legitimately in use.  Also the dn cache never purges entries that have
cached children, so depending on the shape of the DIT, it could have lots over
the defined limit.

This would be useful to note in the slapd-bdb & slapd-hdb man pages.

Reply 1

From: Gavin Henry <openldap-its@OpenLDAP.org>
To: quanah@zimbra.com
Subject: Re: Expansion on dncachesize behavior (ITS#5721)
Date: Tue Jan 27 21:22:55 2009
CC: openldap-its@openldap.org

slapd-hdb.5 is just a symlink to slapd-bdb.5 Quanah, so only one place to
update.

Thanks.