[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: ACI is slowing down searches

--On Wednesday, September 10, 2003 4:51 PM +0200 Dieter Kluenter <dieter@dkluenter.de> wrote:

my test environment on a single host:
two severs each with 20,000 entries under ou=benchmark subtree
Authentication by gssapi

dabase hdb
entries in the subtree "ou=benchmark,o=kluenter" have fowllowing aci


database bdb

entries in the subtree "ou=benchmark,o=avci,c=de" are controlled by
following acl
access to dn.subtree="ou=benchmark,o=avci,c=de"
       by group="cn=Administratoren,o=avci,c=de" write

search on aci controlled subtree
time ldapsearch -h marin.avci.de:4899 -b "ou=benchmark,o=kluenter"
uid=13457 mail

real    0m0.879s
user    0m0.050s
sys     0m0.030s

search on acl controlled subtree
time ldapsearch -h marin.avci.de:389 -b "ou=benchmark,o=avci,c=de"
uid=13457 mail

real    0m0.164s
user    0m0.040s
sys     0m0.030s

The time values are randomly picked from the results of 1,000 searches
each (2 searches per sec).
Can anybody confirm the measured results?



I noticed a definite slowdown in search speed using hdb vs. bdb in my 2.2 alpha testing as well. I've chatted with Howard about it, and he has some ideas on how to increase the lookup speed. I expect that later 2.2 releases will have better performance.


Quanah Gibson-Mount
Principal Software Developer
ITSS/TSS/Computing Systems
Stanford University
GnuPG Public Key: http://www.stanford.edu/~quanah/pgp.html