Hello, Le 27/11/13, Ulrich Windl <[email protected]> a écrit : > >>> "POISSON Frédéric"<[email protected]> schrieb am > 27.11.2013 > um 10:46 in Nachricht <[email protected]>: > > Hello, > > > > I'm testing the dynlist overlay on OpenLDAP 2.4.38 because i have a static > > group of around 10K uniqueMember. I want to have now a equivalent group with > > > dynlist. > > > > I have configured my overlay dynlist like this : > > dn: olcOverlay={2}dynlist,olcDatabase={1}bdb,cn=config > > objectClass: olcOverlayConfig > > objectClass: olcDynamicList > > olcOverlay: {2}dynlist > > olcDlAttrSet: {0}groupOfURLs memberURL uniqueMember > > > > And my group is quite like OpenLDAP example in documentation : > > > > dn: cn=GeneralisationDyn,ou=Groups,dc=example,dc=com > > objectClass: top > > objectClass: groupOfURLs > > cn: GeneralisationDyn > > memberURL: ldap:///ou=People,dc=example,dc=com??one?(objectClass=person) > > uniqueMember: uid=user1,ou=People,dc=example,dc=com > > uniqueMember: uid=user2,ou=People,dc=example,dc=com > > [...] > > > > My backend is Berkeley DB and i have tune it in order to have quite fast > > responses on searches, and locally on my server (virtualized with a single > > proc), it take that time to return the entries found by memberURL : > > > > real 0m0.272s > > user 0m0.040s > > sys 0m0.023s > > Actually, if you sum sys and user, you get 0.07s. Times 10000 gives 700s. So > the bulk transfer is quite efficient compared to the single transfer. > Also not that the direction of search is different: Once you start from > uniqueMember, and the other time you start from DN (I guess). > > Sorry i don't understand the way you explain that, it is not clear in my mind. Do the dyngroup plugin run the same ldapsearch as presented inside the memberURL ?
If yes : why showing the uniqueMember from dyngroup overlay takes more time than running the equivalent ldapsearch ? If not : How the dyngroup overlay works ? Sorry if my questions are boring... > > > > > > If i run an ldapsearch to see all uniqueMember of my dynamic group it take > > around 8 to 10 seconds to have the output ! > > > > Why a so big difference of response time in a search of entries and a search > > > of uniqueMember inside a dynamic group ? > > Is there some tuning for dynlist plugin ? > > > > Notice also that when i search uniqueMember inside my static group with > > quite same number of uniqueMember) i have less than 0.1 seconds of real > time. > > > > > > Thanks, > > Regards, > > -- > > > > Frederic Poisson > > > Regards, -- Frederic Poisson
