[Date Prev][Date Next] [Chronological] [Thread] [Top]

openldap getting very slow



hello,

I have some problems with my ldap server. it worked perfectly until
monday, march 30 : on every night, I used to extract all entries from
the server, making a diff with some ldif file(s) and ldapmodify with the
"diff ldif file".

there was about 15,000 to 40,000 entries modified each night, and
ldapmodify was running about 20 to 40 minutes (~1,000 entries per minute).

on last monday, the extraction of ldap had some trouble, the extraction
request never ended, and that made the server inaccessible; we had to
restart it. since march 30, the update process (ldapmodify) is
incredibly slow, it takes about several hours (~60 entries per minute),
but the extraction request is "normal" again (about 2 seconds).

we tried to restart from scratch (delete db, re-install openldap (and
update) and start the process again, it is still slower than before
(~400 entries per minute). we cannot figure out why it became so slow,
so we are interested in any advice... we had openldap 2.3.27-8.el5_2.4
installed and tried with the update: openldap 2.3.43-3.el5 (both CentOS
packages).

log of the failed request:
Mar 30 01:10:01 ldap slapd[27383]: conn=1772 fd=16 ACCEPT from
IP=xxx.xxx.xxx.xxx:38263 (IP=0.0.0.0:389)
Mar 30 01:10:01 ldap slapd[27383]: conn=1772 op=0 BIND
dn="cn=Manager,dc=fr" method=128
Mar 30 01:10:01 ldap slapd[27383]: conn=1772 op=0 BIND
dn="cn=Manager,dc=fr" mech=SIMPLE ssf=0
Mar 30 01:10:01 ldap slapd[27383]: conn=1772 op=0 RESULT tag=97 err=0 text=
Mar 30 01:10:01 ldap slapd[27383]: conn=1772 op=1 SRCH base="dc=fr"
scope=2 deref=0 filter="(objectClass=*)"
[and no more traces until openldap restart about noon]

log of a "normal" request:
Mar 16 01:10:01 ldap slapd[23294]: conn=11 fd=15 ACCEPT from
IP=xxx.xxx.xxx.xxx:53535 (IP=0.0.0.0:389)
Mar 16 01:10:01 ldap slapd[23294]: conn=11 op=0 BIND
dn="cn=Manager,dc=fr" method=128
Mar 16 01:10:01 ldap slapd[23294]: conn=11 op=0 BIND
dn="cn=Manager,dc=fr" mech=SIMPLE ssf=0
Mar 16 01:10:01 ldap slapd[23294]: conn=11 op=0 RESULT tag=97 err=0 text=
Mar 16 01:10:01 ldap slapd[23294]: conn=11 op=1 SRCH base="dc=fr"
scope=2 deref=0 filter="(objectClass=*)"
Mar 16 01:10:03 ldap slapd[23294]: conn=11 op=1 SEARCH RESULT tag=101
err=0 nentries=39741 text=
Mar 16 01:10:03 ldap slapd[23294]: conn=11 op=2 UNBIND
Mar 16 01:10:03 ldap slapd[23294]: conn=11 fd=15 closed

thanks for any help,
regards,

-- 
Thomas van Oudenhove - Université de Toulouse
tél: (+33) 5 61 36 60 45
jabberID: thomasvo@im.apinc.org