(ITS#7707) HDB very slow with _lots_ of aliases

[m.innocenti@cineca.it]

Full_Name: Marco Innocenti
Version: 2.4.36
OS: Linux
URL: ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (130.186.19.81)


Hi,
    I do administer a system which hosts a slapd instance (2.4.36) which is used
by one of our customer which use a tree with tens of thousand of aliases.
The backend is HDB.


If I do a search with alias dereferencing set to always using
"ou=1004,ou=studenti,o=uni,dc=uni,dc=it" as a base I do find the record I'm
looking for.


vm:~# time ldapsearch -x -H ldap://localhost:8501 -D 'cn=manager,dc=uni,dc=it'
-W -b ou=1004,ou=studenti,o=uni,dc=uni,dc=it uid=mario.rossi -a always | grep
\#
Enter LDAP Password: 
# extended LDIF
#
# LDAPv3
# base <ou=1004,ou=studenti,o=uni,dc=uni,dc=it> with scope subtree
# filter: uid=mario.rossi
# requesting: ALL
#
# mario.rossi, m, utenti, uni, uni.it
# search result
# numResponses: 2
# numEntries: 1

real	0m1.607s
user	0m0.000s
sys	0m0.000s




If I do the same search on the parent of the previously used base
("ou=studenti,o=uni,dc=uni,dc=it" vs "ou=1004,ou=studenti,o=uni,dc=uni,dc=it") I
do not get any record and no errors are logged.



vm:~# time ldapsearch -x -H ldap://localhost:8501 -D cn=manager,dc=uni,dc=it -W
-b ou=studenti,o=uni,dc=uni,dc=it uid=mario.rossi -a always
Enter LDAP Password: 
# extended LDIF
#
# LDAPv3
# base <ou=studenti,o=uni,dc=uni,dc=it> with scope subtree
# filter: uid=mario.rossi
# requesting: ALL
#

# search result
search: 2
result: 0 Success

# numResponses: 1

real	0m5.301s
user	0m0.004s
sys	0m0.000s