Re: Solaris8 user-account lookup question

[Igor Brezac <igor@ipass.net>]

Indexes will not help you because finger will sequentially search
through the whole user database.  It searches uid and gecos fields.
Use 'finger -m username' for uid (username) only search.

Hope this helps.

-Igor

On Tue, 17 Sep 2002, Giovanni Navarrette wrote:

> Hey everyone:
>
> Got a quick easy one for ya. I'm using Openldap-v2.1.4 on a Solaris8
> machine, doing user authentication (replacing /etc/passwd and /etc/shadow).
> I've got my users imported into the database, all works ok. I'm trying to
> finger a particular login, and its taking about 12/15 seconds to return the
> response. I thought I got the indices right, but I'm guessing with this
> performance that I missed something.
>
> Here's what a debug shows:
> -
> Sep 17 16:05:32 ldapsrv-1 slapd[1060]: [ID 293980 local4.debug] daemon:
> conn=5 fd=13 connection from IP=127.0.0.1:32967 (IP=0.0.0.0:389) accepted.
> Sep 17 16:05:32 ldapsrv-1 slapd[1060]: [ID 347666 local4.debug] conn=5 op=0
> BIND dn="cn=solaris,ou=sysadmins,dc=usl,dc=net" method=128
> Sep 17 16:05:32 ldapsrv-1 slapd[1060]: [ID 217296 local4.debug] conn=5 op=0
> RESULT tag=97 err=0 text=
> Sep 17 16:05:32 ldapsrv-1 slapd[1060]: [ID 902418 local4.debug] conn=5 op=1
> SRCH base="" scope=0 filter="(objectClass=*)"
> Sep 17 16:05:32 ldapsrv-1 slapd[1060]: [ID 217296 local4.debug] conn=5 op=1
> RESULT tag=101 err=0 text=
> Sep 17 16:05:32 ldapsrv-1 slapd[1060]: [ID 902418 local4.debug] conn=5 op=2
> SRCH base="" scope=0 filter="(objectClass=*)"
> Sep 17 16:05:32 ldapsrv-1 slapd[1060]: [ID 217296 local4.debug] conn=5 op=2
> RESULT tag=101 err=0 text=
> Sep 17 16:05:32 ldapsrv-1 slapd[1060]: [ID 902418 local4.debug] conn=5 op=3
> SRCH base="ou=People,dc=usl,dc=net" scope=2
> filter="(objectClass=posixAccount)"
> Sep 17 16:05:44 ldapsrv-1 slapd[1060]: [ID 362707 local4.debug] conn=5 op=3
> SEARCH RESULT tag=101 err=0 nentries=14468 text=
> Sep 17 16:05:44 ldapsrv-1 slapd[1060]: [ID 338319 local4.debug] conn=5 op=4
> UNBIND
> Sep 17 16:05:44 ldapsrv-1 slapd[1060]: [ID 850449 local4.debug] conn=5 fd=13
> closed
> -
>
> Here's what my indicies look like in my cfg:
> -
> #---Indices (indexes) to maintain for database speed
> #--user database
> index   default                                 pres,eq
> index   uid,userPassword                        pres,eq
> index   cn,gecos,loginshell,uidNumber           pres,eq
> index   objectClass                             eq
> -
>
> Do I need to add posixAccount as an index? Is there more I need to index? Or
> is 12/15 seconds about right for a database query with roughly 15000 entries
> in it? Thanks for ya time everyone. Gl hf, :)
>
> -
> -------------------------------------------------------
> Giovanni Navarrette
> USLink Internet Systems Administrator
> e-Mail -- gio@uslink.net
>
>
>
>
>

-- 
Igor