From: Jon Roberts <[EMAIL PROTECTED]>
Date: Mon, 24 Sep 2007 19:33:36 -0600
Jimi wrote:
> We use Open Ldap with bdb, and after a import of about 15000 test users,
> searching for users doesn't seem possible anymore. About 2 hours ago I
> started a simple search for uid=a* (as a filter) that still hasn't
> finished.
I didn't see this mentioned in any responses. From man slap.conf:
index_substr_if_minlen <integer>
Specify the minimum length for subinitial and subfinal
indices. An attribute value must have at least this many characters in
order to be processed by the indexing functions. The default is 2.
As I understand, if your indices are not configure to use a granularity
that would find something like "(uid=a*)" when they are created, the
search falls back to a brute force algorithm which results in a *long*
search and tons of logging.
That's true, except you don't know what log level he's using so you can't
really comment on that. Also if all of the entries are in the entry cache,
OpenLDAP 2.3 can easily search and perform the filter comparisons on 350,000
entries per second (with a 2.4GHz AMD64 processor and ECC DDR400 memory, even
faster for non-ECC DRAM) so it's not really a tragic loss if this index
parameter isn't tuned. (OpenLDAP 2.4 raises that to 500,000 entries per second
on the same hardware, by the way.)
--
-- Howard Chu
Chief Architect, Symas Corp. http://www.symas.com
Director, Highland Sun http://highlandsun.com/hyc/
Chief Architect, OpenLDAP http://www.openldap.org/project/
---
You are currently subscribed to [EMAIL PROTECTED] as: [EMAIL PROTECTED]
To unsubscribe send email to [EMAIL PROTECTED] with the word UNSUBSCRIBE as the
SUBJECT of the message.
