ACI is slowing down searches

[Dieter Kluenter <dieter@dkluenter.de>]

Hi,
my test environment on a single host:
two severs each with 20,000 entries under ou=benchmark subtree
Authentication by gssapi

OpenLDAP-2.2alpa
dabase hdb
entries in the subtree "ou=benchmark,o=kluenter" have fowllowing aci

openLDAPaci:1.3.6.1.4.1.14658.3.1#entry#grant;r,w,s,c;[all]#group#cn=Administratoren,o=kluenter

OpenLDAP-2.1.19
database bdb

entries in the subtree "ou=benchmark,o=avci,c=de" are controlled by
following acl
access to dn.subtree="ou=benchmark,o=avci,c=de"
       by group="cn=Administratoren,o=avci,c=de" write

OpenLDAP-2.2alpha
search on aci controlled subtree
time ldapsearch -h marin.avci.de:4899 -b "ou=benchmark,o=kluenter"
uid=13457 mail

real    0m0.879s
user    0m0.050s
sys     0m0.030s

OpenLDAP-2.1.19
search on acl controlled subtree
time ldapsearch -h marin.avci.de:389 -b "ou=benchmark,o=avci,c=de" uid=13457 mail

real    0m0.164s
user    0m0.040s
sys     0m0.030s

The time values are randomly picked from the results of 1,000 searches
each (2 searches per sec).
Can anybody confirm the measured results?

-Dieter


-- 
Dieter Kluenter  | Systemberatung
Tel:040.64861967 | Fax: 040.64891521
mailto: dkluenter(at)dkluenter.de
http://www.avci.de