[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: pam_ldap slow

On Wed, 9 May 2001, Matthew Gregg wrote:

> Running slapd in debug mode, this filter appears to be run for group validation/membership:
> conn=0 op=2 SRCH base="dc=musc,dc=edu" scope=2
> filter="(&(objectClass=posixGroup)(|(memberUid=root)
> (uniqueMember=uid=testuser,ou=People,dc=musc,dc=edu)))"

Hi Matthew,

on the client run nscd and configure it with reasonable positive
cache times.  And on the server add an 'equal' index for
attribute memberUid.

Paul Jakma	paul@clubi.ie	paul@jakma.org
PGP5 key: http://www.clubi.ie/jakma/publickey.txt
In seeking the unattainable, simplicity only gets in the way.
		-- Epigrams in Programming, ACM SIGPLAN Sept. 1982