> > i´m maintaining a openldap-infrastructure with 1 master and 7 slaves > > (slurpd-replication). The bdb-database have about 1 million entrys (2 > > GB). Every morning we make a "provisioning" with new or deleted entrys > > (a perl skript, that adds one entry after the other). > > This takes about 3-5 hours (2000-5000 entrys) of replication. During > > this time, the read-operations on the slaves are very bad, so that our > > radius-servers have timeouts and users cannot authenticate. > Write operations of 2 to 5 k should only take a few minutes, thus your > overall performance should be optimised.
Agree. We have a DSA that is on 'low-end' hardware - 2x1GHz/2GbRAM/2-SCSI-drives - and adding 2000 objects takes just over a minute, and that is with indexing of attributes, etc... I'd make sure your DB_CONFIG settings are sane. > Depending on the OpenLDAP version and hardware, there are some > configuration parameters to tune database, memory and overall > performance.
