Hi I recieved some help from a customers Edirectory expert Tuning the VDI3 LDAP queries to E-directory. Apperantly the default setup in VDI3 is a type of "catch all" setup. VDI3 fires off allincusive queries asking for the username in umpteen different places. We found that we really only neded to query E-directory for COMMON NAME or "cn=" at this customers site . That shorten the query time from about 20 seconds to less than a second.

So If you know the structure of the LDAP database and where the usernames are stored , you dont need to fire off the all-inclusive query that VDI3 sends by default. The VDI 3 admin guide has section on how to
customize the LDAP querys sent.
//Lars


Jeffrey Ramsay wrote:
Hello,

I'm not sure if this is the right forum for questions regarding VDI3 but
I need some help and would appreciate any information you have. I have
vdi 3 installed but my ldap queries (DS6.3) are extremely slow -- i
tried setting a vlv search index but no luck -- the error I'm receiving is:

[13/Jul/2009:09:41:49 -0400] - WARNING<20805> - Backend Database -
conn=85 op=72 msgId=73 -  search is not indexed
base='o=utica.edu,dc=utica,dc=edu'
filter='(&(objectClass=person)(|(cn=*ramsay*)(uid=*ramsay*)))' scope='sub'

User record:

dn: uid=jramsay,ou=people,o=utica.edu,dc=utica,dc=edu

VLV record:

dn: cn=VDI_User_Search,cn=utica,cn=ldbm database,cn=plugins,cn=config
changetype: add
objectClass: top
objectClass: vlvSearch
cn: VDI_User_Search
vlvbase: o=utica.edu,dc=utica,dc=edu
vlvscope: 2
vlvfilter: (&(objectClass=person)(|(cn=*)(uid=*)))
aci: (targetattr="*")(version 3.0; acl "VLV for Anonymous"; allow
(read,search,compare) userdn="ldap:///anyone";;)

dn: cn=VDA_Sort_1,cn=VDI_User_Search,cn=utica,cn=ldbm
database,cn=plugins,cn=config
changetype: add
objectClass: top
objectClass: vlvIndex
cn: VDA_Sort_1
vlvSort: cn uid mail uniqueMember memberOf

Thanks,
-Jeff


_______________________________________________
SunRay-Users mailing list
[email protected]
http://www.filibeto.org/mailman/listinfo/sunray-users

Reply via email to