[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: really slow queries



Try indexing the dn attribute ...
slapd.conf : index dn sub
We had a very similar problem and found that without this index the server
did a very inefficient linear search.  If this does not help you may want to
add indexes for your search criteria.

----- Original Message -----
From: "Andy De Petter" <adepette@krameria.net>
To: <jacksonm@ssh.com>; <openldap-software@OpenLDAP.org>
Sent: Thursday, November 23, 2000 9:46 AM
Subject: RE: really slow queries


>
> Hmm, we don't use any ACL's at all at this time :(
>
> -Andy
>
> > -----Original Message-----
> > From: owner-openldap-software@OpenLDAP.org
> > [mailto:owner-openldap-software@OpenLDAP.org]On Behalf Of Mike Jackson
> > Sent: Thursday, November 23, 2000 2:24 PM
> > To: Andy De Petter; openldap-software@OpenLDAP.org
> > Subject: Re: really slow queries
> >
> >
> > On Thu, 23 Nov 2000, Andy De Petter wrote:
> > >
> > > We started doing some other tests, and it seems that one simple query
> > > (searchfilter like '(sn=mysn)') takes upto 15 seconds !!!!
> >
> > This could possibly caused by having too many ACL's, which is
> > possibly caused by
> > less than optimal directory design. Try these tests with ACL's
> > enabled, and
> > with free access and compare the results. Try commenting out
> > certain ACL's, to
> > find out which ones give the most performance increase. Of course, it
will
> > always be faster with no ACL's, but the results could give you
> > some other clue
> > specific to your setup. It could also be caused by the way you
> > are indexing or
> > not indexing the database. I believe OpenLDAP reads the tree in
> > alphabetical
> > order, so it would also probably optimize read speed on very
> > large directories
> > if you named the most read sections of the tree with an ou
> > beginning with an
> > earlier letter than the less frequently read sections. For
> > example, you could
> > use:
> >
> > ou=people
> > ou=users
> >
> > instead of:
> >
> > ou=accounts
> > ou=people
> >
> > if you read people information more frequently than account information.
> >
> > Regards,
> > Mike
> >
>
>
>