On 06/06/2016 07:23 PM, Martin Basti wrote:
On 03.06.2016 13:38, Stanislav Laznicka wrote:
The attached patch implements solution to
https://fedorahosted.org/freeipa/ticket/5914. The patch is rather
hacky as nsslapd-db-locks requires to be modified when DS is not
running although I accept proposals for better solution.
LGTM and works for me, but I want ack from thierry because of the value
* value set by this patch is 100K, it is okay or should be rather 50K
as is mentioned in the ticket
* should be upgrade for this change, or should be this done only for
new installations? (patch solves new installations only and I don't
think that we should change it by upgrade, users may have already
This value also depends of the data. For example adding groups with 10K
members spikes the dblock consumption up to 40K because of membership
computation during the update.
The size of the entries can also contribute if for example we have
several entries per page or they are too large and fit on several pages.
IMHO we should support out of the box groups with 10K, so
'nsslapd-db-locks: 50000' looks good to me.
However it could be documented why it can consum so much lock and how to
Manage your subscription for the Freeipa-devel mailing list:
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code