Re: pam_ldap slow

[Paul Jakma <paul@clubi.ie>]

On Wed, 9 May 2001, Matthew Gregg wrote:

> Running slapd in debug mode, this filter appears to be run for group validation/membership:
> conn=0 op=2 SRCH base="dc=musc,dc=edu" scope=2
> filter="(&(objectClass=posixGroup)(|(memberUid=root)
> (uniqueMember=uid=testuser,ou=People,dc=musc,dc=edu)))"

Hi Matthew,

on the client run nscd and configure it with reasonable positive
cache times.  And on the server add an 'equal' index for
attribute memberUid.

regards,
-- 
Paul Jakma	paul@clubi.ie	paul@jakma.org
PGP5 key: http://www.clubi.ie/jakma/publickey.txt
-------------------------------------------
Fortune:
In seeking the unattainable, simplicity only gets in the way.
		-- Epigrams in Programming, ACM SIGPLAN Sept. 1982