On 07/15/2014 12:48 PM, Isabella Ghiurea wrote: > Hi Gurus, > I'm new to 389 DS reading the RH DS docbefore start implementing, > have Q's trying tohave system with high performance cfg > > Q1: Bellow in black is from RH DS documentation, I was expecting just > creating the indexes in GUI DS console should be suficient , is this > the correct, still need to run the manually script? The GUI will index the attribute - no further steps are necessary > Q2: What are operations to maintain the indexes are any updates > statistics, reorg rebuild need to be run to maintainthe high > performance in DS? Indexes usually do not need any maintenance. > Q3: Access controls what 's average of user rules do you ususually > have per db or user. are there any maintenance jobs to perform, I > believe the more AC rules you have you have the chance to affect login > performance , is this correct? There is no general rule of thumb of what aci's you should set. Its based on what your needs are. By default, if no aci's exist in the database, then all access is denied except for the "Directory Manager" - the directory manager bypasses access control restrictions. The idea is that you start opening up access based on what you need to do. I strongly suggest you read more about access control in the admin guide as it's not a trivial topic.
Now, the login performance is not really impacted by access control rules, but any other type of operation is: search, add, modify, delete, etc. In regards to performance, you want to keep the number of aci's to minimum, but it would still take hundreds of aci's to really start impacting performance. Regards, Mark > -- > ----------------------------------------------------------- > > > 9.3. Applying New Indexes to Existing Databases > > New indexes are not added to existing databases automatically. They > must be added manually, and Directory Server has two methods for > applying new indexes to an existing database: running the > |db2index.pl| script or running a |cn=index,cn=tasks| task. > > > > > Isabella A. Ghiurea > > [email protected] > Canadian Astronomy Data Centre > |http://www.nrc-cnrc.gc.ca/eng/services/hia/data-centre.html > National Research Council of Canada, Herzberg Institute of Astrophysics > 5071 West Saanich Road, Victoria BC V9E 2E7, Canada > Phone: 250 363-3446 fax: 250 363-0045 > > > -- > 389 users mailing list > [email protected] > https://admin.fedoraproject.org/mailman/listinfo/389-users
-- 389 users mailing list [email protected] https://admin.fedoraproject.org/mailman/listinfo/389-users
