Re: [389-users] ACL processing

2014-02-28 Thread Ludwig Krispenz
On 02/28/2014 01:31 AM, Rich Megginson wrote: On 02/27/2014 05:06 PM, Russell Beall wrote: Thanks again for your comments on this. I tried an alternate approach in which I deleted a number of relevant indexes that theoretically should be needed all across the ACIs. I was shocked to find

Re: [389-users] Synchronizing with Active Directory

2014-02-28 Thread Rich Megginson
On 02/28/2014 12:46 PM, Riss Nicolas wrote: Hi, We are making some test in order to synchronize 389 Directory with an Active Directory. We don’t install pass sync because we need only to synchronize password from the 389 Directory instance. Everything works well, but when we analyze the

Re: [389-users] ACL processing

2014-02-28 Thread Russell Beall
Yes. Many rules are groupdn based, sometimes with multiple rules where the dn must be in some groups but not in others. And some of the groups have 50,000-100,000+ members. Breaking out the groupdn checks into something very simple did not change the performance at all. Changing all the