[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: slow search speed in samba [solved]

Problem solved now.
There was too many various acl rules in slapd.conf.
With one rule like
access to *
	by cn=admin,... write
	by cn=samba,... write
	by users none
	by * auth
the speed is very good (about 0.5 sec / 500 entries).

But... Is using of many acls is so slow?...

Dmitry Chernyak wrote:

I have a directory with about 500 entries with objectClass'es person,(posix/shaadow/samba)Account (i.e., 500 users) and about 100 entries of other objectClasses.

When I run ldapsearch with filter


and search one attribute (say, cn), it takes about 8-12 seconds to complete. In general, all search filters takes the similar time, depending number of returned entries. When I retrieve all attributes (about 25 lines) it takes about 1.5 - 2 minutes.

Unfortunatenly, mentioned search filter is that, which samba 3.x runs for retrieving accounts list for rigths assignment (say, in trusted server mode for Win2k domain). The complete list becames retrieved after many minutes of waiting and a number of retries...

I have pres,eq indexes on objectClass & uid.
I tested that with slapd 2.1.26-1/bdb and slapd 2.0.27-4/ldbm backend on Debian Woody and there was not drammatic difference in speed.

Can anybody tell me is such speed normal? How can I improve performance?
Maybe there is some "advanced" in-memory caching technology?

Dmitry Chernyak.