Re: performance problem

["Alan Sparks" <asparks@doublesparks.net>]

I'm assuming you're using something like pam_ldap/nss_ldap to do whatever
authenticating you're talking about...
did you load the database after you added the index lines, or at least run
slapindex after?
FWIW, I also index eq on gidnumber and uidnumber.
-Alan

Brian Leung said:
> hi all,
> my object design like:
>
> dn: uid=a0003,ou=dialup,o=testing
> objectClass: top
> objectClass: person
> objectClass: organizationalPerson
> objectClass: inetOrgPerson
> objectClass: inetLocalMailRecipient
> objectClass: radiusprofile
> objectClass: posixAccount
> objectClass: PureFTPdUser
> cn: a0003
> sn: a0003
> ou: dialup
> uid: a0003
> uidNumber: 1001
> gidNumber: 1001
> homeDirectory: /home/a0003
> description: PPP_UXPW
> loginShell: /sbin/nologin
> userPassword: tttttttttttttttttttt
> FTPQuotaMBytes: 6
> FTPuid: 1001
> FTPStatus: enabled
>
> And, i already add
>
> index default eq
> index uid,cn,sn
>
> to the slapd.conf. but the performance is still bad.
>
> Brian
>
> Alan Sparks ¼g¤J¡G
>
>> Generally sounds like an index problem (as in, you don't have any or
>> not the right ones).  Better check that first.  You don't say on what
>> attribute you're authenticating or with what... but assuming it's on
>> uid, there needs to be an index on it or it will be very slow.  You'll
>> probably need a few more indexes on commonly-used things too, like
>> uidnumber. -Alan
>>
>> Brian Leung said:
>> > hi all,
>> >
>> > in my testing box, there are about 100000 object in the openldap
>> server.
>> >
>> > when one use try to authenticate through the ldap, i monitor that
>> 100% cpu usage
>> > to reach. how can i increase the performance? Increasing the cache
>> size?
>> >
>> > Thank you
>> >
>> > Brian
>>
>> ===========
>> Alan Sparks, UNIX/Linux Systems Administrator
>> <asparks@doublesparks.net>


===========
Alan Sparks, UNIX/Linux Systems Administrator    <asparks@doublesparks.net>