>>> Michael Ströder <[email protected]> schrieb am 11.08.2021 um 16:36 in Nachricht <[email protected]>: > HI! > > Frankly I forgot whether I asked this before: > > Let there be ACLs with dn.regex="..", attrs=foo,bar and val.regex=".." > in the <what> clauses. > > Obviously depending on complexity of regex-pattern and length of DNs / > avals the regex checking is more expensive than equality checking of attrs=. > > Can I improve ACL performance by order of <what> clauses or are they > processed in fixed order anyway? If in fixed order, which one?
I don't know what regex library slapd uses, nor do I know whether slapd caches compiled regex, but both could be important. If you know what regex library it is, you could try different regex in a stand-alone testing program to find out what costs most performance. However my guess was that on modern machines regex performance shouldn't matter unless the regex needs some unbounded look-ahead or backtracking. I'd be surprised if any is needed in LDAP ACLs. Maybe you give an example of your regex? Regards, Ulrich > > Ciao, Michael.
